This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1GCQZHTBlp-KKzEnTegcEn0qZAs.roa File: 1GCQZHTBlp-KKzEnTegcEn0qZAs.roa (raw, json) Hash identifier: zn6XprqtHY0AoveTGNJXq2/9R8ISoERPpIr+TuV/IqA= Subject key identifier: D4:60:90:64:74:C1:96:9F:8A:2B:31:27:4D:E8:1C:12:7D:2A:64:0B Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BDB692EB594D61B9605CA7C7582D95FD8 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1GCQZHTBlp-KKzEnTegcEn0qZAs.roa Signing time: Tue 20 Jan 2026 12:37:42 +0000 ROA not before: Tue 20 Jan 2026 12:37:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 45.137.85.0/24 maxlen: 24 45.142.30.0/24 maxlen: 24 84.21.191.0/24 maxlen: 24 103.114.40.0/24 maxlen: 24 195.66.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:69:2e:b5:94:d6:1b:96:05:ca:7c:75:82:d9:5f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 20 12:37:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d460906474c1969f8a2b31274de81c127d2a640b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:b4:eb:4a:66:3b:f7:c9:c7:e7:74:d2:d3: c1:ae:b0:5d:c1:7d:62:63:da:b3:d6:89:84:d0:14: 7e:71:fb:55:80:f5:a0:77:2c:86:8a:34:42:79:bd: 80:b8:9e:3d:dc:8c:ea:7c:35:a9:50:83:9a:82:72: 74:c8:ed:13:5f:a6:4d:63:f9:51:ff:93:4f:16:89: fd:8d:fb:a8:61:1c:19:08:13:b2:38:bc:2d:0d:6e: fd:f0:24:b2:5c:30:98:70:6d:70:ca:bc:fb:ec:72: d9:66:8e:c0:65:cc:8b:8d:60:e1:03:e1:db:c6:ca: ba:52:91:27:0d:6f:50:b2:cf:c3:3b:6d:51:97:95: ee:d6:83:79:59:46:78:12:20:18:2b:6d:b0:7c:94: a1:98:1a:d9:84:5c:07:1c:94:7c:4e:47:cd:48:a1: 85:7b:65:6b:62:6e:7d:58:70:b5:e1:21:09:d2:fe: d5:00:b9:af:12:34:48:67:e5:05:ba:bb:d9:58:88: 60:fe:99:c2:17:49:6f:71:d4:3b:0d:07:1c:a2:9b: d1:66:2b:0f:77:0c:af:bc:02:0e:26:c3:0c:ef:7a: 7e:7e:3b:10:27:9b:0f:d9:ad:42:6c:c3:89:77:20: 0b:66:a6:1c:5b:ff:68:c8:f2:bc:45:bb:07:b4:64: 39:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:60:90:64:74:C1:96:9F:8A:2B:31:27:4D:E8:1C:12:7D:2A:64:0B X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1GCQZHTBlp-KKzEnTegcEn0qZAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.85.0/24 45.142.30.0/24 84.21.191.0/24 103.114.40.0/24 195.66.24.0/24 Signature Algorithm: sha256WithRSAEncryption 51:c1:f1:20:be:ff:ca:2f:1d:66:ca:a1:32:4d:84:49:30:05: 8e:cf:a8:e6:2e:2a:50:23:cc:04:f2:60:b9:c1:0a:41:73:54: 60:10:d4:6d:2d:de:74:77:ff:ac:7f:18:69:e3:0c:a7:4f:d9: 0b:84:eb:76:dd:e3:71:0b:37:4c:5e:8d:91:d6:c8:c2:72:b6: e3:42:88:2f:23:2f:9e:5d:1f:84:f8:00:9a:5a:db:a7:6f:eb: a3:0c:0a:f6:eb:e8:3e:73:fe:a1:1e:57:dd:e2:9d:6b:56:44: 67:5f:2f:f0:2b:84:f3:e4:ec:71:b1:c3:e7:4b:de:71:30:2f: da:92:d7:99:cb:3a:56:8f:8d:03:6e:25:c9:fd:85:36:0a:f0: 32:71:86:be:46:de:a5:8c:7b:5d:af:6e:82:2d:1d:0e:60:3b: d8:a3:7d:43:a8:f3:0b:3d:5e:5d:5f:fd:b9:b5:8d:8d:6e:72: 0e:53:29:e9:fc:e2:23:07:26:51:93:0c:ab:ed:c2:7a:8f:08: dc:18:9e:3a:de:3e:36:a1:da:80:a8:6f:1f:f4:3f:6a:ed:2e: 6d:c4:a7:6b:68:c8:86:1d:22:52:ab:da:aa:7d:71:d3:fb:9d: 87:ef:c6:3b:87:d6:14:57:25:41:be:30:d3:7b:a8:9d:46:7b: d8:3c:34:72 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvbaS61lNYblgXKfHWC2V/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTIwMTIzNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDYwOTA2NDc0YzE5NjlmOGEyYjMxMjc0ZGU4MWMxMjdkMmE2NDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUq060pmO/fJx+d00tPBrrBdwX1i Y9qz1omE0BR+cftVgPWgdyyGijRCeb2AuJ493IzqfDWpUIOagnJ0yO0TX6ZNY/lR /5NPFon9jfuoYRwZCBOyOLwtDW798CSyXDCYcG1wyrz77HLZZo7AZcyLjWDhA+Hb xsq6UpEnDW9Qss/DO21Rl5Xu1oN5WUZ4EiAYK22wfJShmBrZhFwHHJR8TkfNSKGF e2VrYm59WHC14SEJ0v7VALmvEjRIZ+UFurvZWIhg/pnCF0lvcdQ7DQccopvRZisP dwyvvAIOJsMM73p+fjsQJ5sP2a1CbMOJdyALZqYcW/9oyPK8RbsHtGQ5TQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNRgkGR0wZafiisxJ03oHBJ9KmQLMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMUdDUVpIVEJscC1LS3pFblRlZ2NFbjBxWkFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYlVAwQA LY4eAwQAVBW/AwQAZ3IoAwQAw0IYMA0GCSqGSIb3DQEBCwUAA4IBAQBRwfEgvv/K Lx1myqEyTYRJMAWOz6jmLipQI8wE8mC5wQpBc1RgENRtLd50d/+sfxhp4wynT9kL hOt23eNxCzdMXo2R1sjCcrbjQogvIy+eXR+E+ACaWtunb+ujDAr26+g+c/6hHlfd 4p1rVkRnXy/wK4Tz5OxxscPnS95xMC/akteZyzpWj40DbiXJ/YU2CvAycYa+Rt6l jHtdr26CLR0OYDvYo31DqPMLPV5dX/25tY2NbnIOUynp/OIjByZRkwyr7cJ6jwjc GJ463j42odqAqG8f9D9q7S5txKdraMiGHSJSq9qqfXHT+52H78Y7h9YUVyVBvjDT e6idRnvYPDRy -----END CERTIFICATE-----Generated at Thu Jan 22 21:36:41 2026 by rpki-client