This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/gnDuj3azpU1wiHZUf0f93N7QjnA.roa File: gnDuj3azpU1wiHZUf0f93N7QjnA.roa (raw, json) Hash identifier: E6mUU2oB8TEHtnH3EsNLe+0P+s9OunlKpVDohgw7f1Q= Subject key identifier: 82:70:EE:8F:76:B3:A5:4D:70:88:76:54:7F:47:FD:DC:DE:D0:8E:70 Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6AA10470693E612A6E79582E013C4 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/gnDuj3azpU1wiHZUf0f93N7QjnA.roa Signing time: Fri 02 Jan 2026 12:20:10 +0000 ROA not before: Fri 02 Jan 2026 12:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206119 IP address blocks: 80.91.92.0/22 maxlen: 24 82.129.32.0/22 maxlen: 24 82.138.108.0/22 maxlen: 24 82.138.120.0/21 maxlen: 24 212.20.136.0/21 maxlen: 24 212.20.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:aa:10:47:06:93:e6:12:a6:e7:95:82:e0:13:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8270ee8f76b3a54d708876547f47fddcded08e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:19:45:a2:61:b2:33:e7:34:34:41:33:03: c2:7f:6a:ee:01:43:c6:48:74:cb:09:c0:07:6f:f4: f6:59:42:01:67:63:ea:ff:82:9b:bc:53:4f:fe:02: 1d:be:b5:db:95:aa:98:75:e1:f2:e1:bb:85:57:dd: 59:91:06:b8:6f:6c:b6:97:b1:17:f9:ee:5f:0e:11: 21:23:06:3b:db:4f:21:73:6f:cb:c1:57:b2:ae:04: 90:a5:42:28:25:20:1f:fc:05:41:94:1c:29:52:6c: 0a:31:79:fb:98:2a:83:59:52:3b:40:51:c1:08:9e: 26:6c:0c:c1:1b:db:d7:a9:99:4b:e3:ff:10:1b:01: 42:f7:55:b8:62:8e:ad:de:69:29:68:6a:15:6b:4d: 5d:de:2e:9a:c2:64:7b:2f:f1:81:97:21:14:46:21: ea:6a:5b:fa:8d:12:04:60:64:c6:65:6e:7d:8a:bb: db:a6:54:ae:3a:a0:48:31:18:a5:7c:eb:13:3b:52: 89:41:8e:1a:4e:5a:1d:75:f2:5f:04:29:30:18:54: 31:05:fe:90:7c:f0:d2:df:5c:e9:b6:6f:2f:54:8d: 1c:ef:69:74:e6:58:14:da:ba:9f:16:1a:cc:ac:b3: 28:81:9b:21:d3:1e:b4:01:77:47:b1:e1:16:f7:81: 14:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:70:EE:8F:76:B3:A5:4D:70:88:76:54:7F:47:FD:DC:DE:D0:8E:70 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/gnDuj3azpU1wiHZUf0f93N7QjnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.92.0/22 82.129.32.0/22 82.138.108.0/22 82.138.120.0/21 212.20.136.0-212.20.147.255 Signature Algorithm: sha256WithRSAEncryption 82:8b:2a:9a:ee:99:53:72:e7:94:a9:9d:a7:9f:21:9f:f1:65: 0e:c2:3d:7d:cd:de:12:d8:3e:2e:ec:ac:00:55:03:a3:3f:54: 32:06:ec:82:87:49:2e:18:46:a1:2b:e4:0e:57:b4:ad:f0:bb: 2a:71:5e:de:45:29:ad:0b:b8:b2:57:a6:2d:d1:f7:7c:b6:c1: a5:21:9c:92:1a:8e:86:db:d3:07:fb:1c:23:f1:95:b6:1a:1e: d0:95:a0:a8:55:48:62:6c:73:46:0c:91:a3:50:3e:3c:7b:65: 96:85:58:60:3d:d4:29:25:7e:c1:a5:bf:c7:f6:4e:0f:e3:2b: 50:97:67:78:43:4e:7e:d3:53:f0:0e:40:6b:8d:2e:1c:e5:e5: 58:11:f4:e1:93:4f:2e:8a:fa:2d:fa:da:0c:f3:01:62:60:0c: 4b:7b:fa:0d:4a:bb:05:85:07:88:84:8d:fe:46:ba:0e:35:7d: ef:93:23:8d:39:ad:06:d8:7b:f9:13:fb:d2:7f:a3:9c:4b:f0: cd:a6:10:22:e2:dd:b8:70:24:ae:10:dd:42:ef:a9:54:a5:a3: 80:48:69:00:90:e1:75:aa:b4:22:a4:dd:d8:18:67:96:8a:e0: a5:6d:ec:d0:df:42:88:5f:a8:4d:d0:5b:0b:00:0c:ad:3b:e2: 58:51:6f:f9 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt+pqoQRwaT5hKm55WC4BPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjcwZWU4Zjc2YjNhNTRkNzA4ODc2NTQ3ZjQ3ZmRkY2RlZDA4ZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOAZRaJhsjPnNDRBMwPCf2ruAUPG SHTLCcAHb/T2WUIBZ2Pq/4KbvFNP/gIdvrXblaqYdeHy4buFV91ZkQa4b2y2l7EX +e5fDhEhIwY7208hc2/LwVeyrgSQpUIoJSAf/AVBlBwpUmwKMXn7mCqDWVI7QFHB CJ4mbAzBG9vXqZlL4/8QGwFC91W4Yo6t3mkpaGoVa01d3i6awmR7L/GBlyEURiHq alv6jRIEYGTGZW59irvbplSuOqBIMRilfOsTO1KJQY4aTloddfJfBCkwGFQxBf6Q fPDS31zptm8vVI0c72l05lgU2rqfFhrMrLMogZsh0x60AXdHseEW94EUqQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFIJw7o92s6VNcIh2VH9H/dze0I5wMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvZ25EdWozYXpwVTF3aUhaVWYwZjkzTjdRam5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCUFtcAwQC UoEgAwQCUopsAwQDUop4MAwDBAPUFIgDBALUFJAwDQYJKoZIhvcNAQELBQADggEB AIKLKprumVNy55SpnaefIZ/xZQ7CPX3N3hLYPi7srABVA6M/VDIG7IKHSS4YRqEr 5A5XtK3wuypxXt5FKa0LuLJXpi3R93y2waUhnJIajobb0wf7HCPxlbYaHtCVoKhV SGJsc0YMkaNQPjx7ZZaFWGA91CklfsGlv8f2Tg/jK1CXZ3hDTn7TU/AOQGuNLhzl 5VgR9OGTTy6K+i362gzzAWJgDEt7+g1KuwWFB4iEjf5Gug41fe+TI405rQbYe/kT +9J/o5xL8M2mECLi3bhwJK4Q3ULvqVSlo4BIaQCQ4XWqtCKk3dgYZ5aK4KVt7NDf QohfqE3QWwsADK074lhRb/k= -----END CERTIFICATE-----Generated at Wed Jan 21 22:05:00 2026 by rpki-client