This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/g4kMsI7mDD8Zz9b-7Splu6_9U2Q.roa File: g4kMsI7mDD8Zz9b-7Splu6_9U2Q.roa (raw, json) Hash identifier: uqeYCAovLAjiwKwZva7wOJzBJ3ICRJEBjm9gy8NhZYc= Subject key identifier: 83:89:0C:B0:8E:E6:0C:3F:19:CF:D6:FE:ED:2A:65:BB:AF:FD:53:64 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECFDCD6EBB3385BEE1C7BA51FC26A3 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/g4kMsI7mDD8Zz9b-7Splu6_9U2Q.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9069 IP address blocks: 83.212.64.0/22 maxlen: 22 195.130.96.0/20 maxlen: 20 195.251.64.0/19 maxlen: 19 2001:648:2330::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fd:cd:6e:bb:33:85:be:e1:c7:ba:51:fc:26:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83890cb08ee60c3f19cfd6feed2a65bbaffd5364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:7b:9f:12:f8:73:c2:5a:af:75:8b:06:aa: eb:b2:fc:83:a8:54:e6:c0:1b:c3:9c:57:8b:18:62: a8:b9:d4:1c:12:7e:36:f8:54:ec:75:c9:ba:48:63: 5c:73:78:67:cd:c6:07:28:5c:fe:9d:fc:28:fa:44: b5:b6:87:61:3d:71:3a:46:7b:d2:d0:17:77:2e:f4: c8:7a:99:0e:6a:35:39:b0:b0:96:b3:b5:e2:6e:9b: 14:f4:9d:49:f3:d3:c7:11:ba:2f:00:1f:8e:13:3f: 5b:81:c6:f4:82:da:e0:2e:d8:81:46:42:b2:6d:a4: 47:d6:71:81:59:a7:0b:9f:0b:b5:c6:7a:d1:da:a2: 45:0d:96:78:8d:cb:22:49:04:d9:a1:e2:3c:75:8f: 53:b8:a6:ca:f0:50:73:85:87:f5:16:c7:68:08:97: 6e:f2:c0:9b:49:19:7b:a8:eb:d0:8c:ac:cb:aa:28: c5:fc:96:2d:aa:1f:f9:da:80:39:cb:1a:e4:40:1d: 6e:22:30:74:a9:02:b9:f6:8b:de:a5:52:10:da:1d: 92:ca:f2:35:e6:bb:45:f3:8e:f7:59:8c:bf:24:72: 46:22:4c:74:dc:41:61:70:5f:7c:2b:fb:d1:d5:f7: 31:6d:d0:e1:59:8a:ec:5e:5b:8d:c3:c3:82:93:ee: d3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:89:0C:B0:8E:E6:0C:3F:19:CF:D6:FE:ED:2A:65:BB:AF:FD:53:64 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/g4kMsI7mDD8Zz9b-7Splu6_9U2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.212.64.0/22 195.130.96.0/20 195.251.64.0/19 IPv6: 2001:648:2330::/48 Signature Algorithm: sha256WithRSAEncryption 1a:f7:a4:47:c4:5c:48:45:bf:b8:9b:ef:b5:7c:33:c0:66:8c: 37:02:89:c9:cb:f9:d3:2f:ed:7b:11:43:5c:c6:78:62:36:ca: 2e:3c:f2:64:73:e0:1e:fc:d7:e5:75:95:6e:17:46:70:be:62: 14:56:e2:5c:52:61:51:03:87:7f:a7:f4:14:cd:a4:2d:a5:f1: ca:9f:3b:c2:61:23:e2:c7:02:34:71:0e:26:b5:22:39:80:43: af:b1:45:64:17:22:fd:26:8d:3a:08:ec:e4:4d:c9:8a:90:b0: 1b:ea:e6:3e:01:07:7f:9c:de:da:0c:83:af:48:7d:b2:79:61: 33:d5:68:7b:8d:36:38:d9:62:9a:67:ab:c4:aa:90:e4:1c:59: 5d:ee:65:c6:e9:55:0d:02:fd:c0:de:3e:44:e9:41:f1:ec:25: 2e:38:c5:65:da:92:ec:7e:b7:25:ea:ee:98:7d:d8:b4:6a:83: 19:8c:df:8c:5a:2a:ad:40:70:00:ff:5d:d6:ef:15:fa:95:e3: 39:2f:0e:e1:32:fe:64:78:44:d4:75:03:de:8d:30:fa:e4:38: 3d:f8:92:7c:7a:a8:b8:f6:f8:c4:6c:23:9f:c2:52:b4:96:0f: e9:b0:bf:45:d3:22:01:71:8b:66:25:98:d5:51:eb:83:32:50: 5c:bf:d7:39 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt87P3Nbrszhb7hx7pR/CajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzg5MGNiMDhlZTYwYzNmMTljZmQ2ZmVlZDJhNjViYmFmZmQ1MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSV7nxL4c8Jar3WLBqrrsvyDqFTm wBvDnFeLGGKoudQcEn42+FTsdcm6SGNcc3hnzcYHKFz+nfwo+kS1todhPXE6RnvS 0Bd3LvTIepkOajU5sLCWs7XibpsU9J1J89PHEbovAB+OEz9bgcb0gtrgLtiBRkKy baRH1nGBWacLnwu1xnrR2qJFDZZ4jcsiSQTZoeI8dY9TuKbK8FBzhYf1FsdoCJdu 8sCbSRl7qOvQjKzLqijF/JYtqh/52oA5yxrkQB1uIjB0qQK59ovepVIQ2h2SyvI1 5rtF8473WYy/JHJGIkx03EFhcF98K/vR1fcxbdDhWYrsXluNw8OCk+7T4wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFIOJDLCO5gw/Gc/W/u0qZbuv/VNkMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvZzRrTXNJN21ERDhaejliLTdTcGx1Nl85VTJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCU9RAAwQE w4JgAwQFw/tAMA8EAgACMAkDBwAgAQZIIzAwDQYJKoZIhvcNAQELBQADggEBABr3 pEfEXEhFv7ib77V8M8BmjDcCicnL+dMv7XsRQ1zGeGI2yi488mRz4B781+V1lW4X RnC+YhRW4lxSYVEDh3+n9BTNpC2l8cqfO8JhI+LHAjRxDia1IjmAQ6+xRWQXIv0m jToI7ORNyYqQsBvq5j4BB3+c3toMg69IfbJ5YTPVaHuNNjjZYppnq8SqkOQcWV3u ZcbpVQ0C/cDePkTpQfHsJS44xWXakux+tyXq7ph92LRqgxmM34xaKq1AcAD/Xdbv FfqV4zkvDuEy/mR4RNR1A96NMPrkOD34knx6qLj2+MRsI5/CUrSWD+mwv0XTIgFx i2YlmNVR64MyUFy/1zk= -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:01 2026 by rpki-client