This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/gk6Oi_1ZEpbTJNkrcfzivPseRk4.roa File: gk6Oi_1ZEpbTJNkrcfzivPseRk4.roa (raw, json) Hash identifier: MTngT7ag+SmUmwcOQxAC0+9glcY1SoAbKgViBkJyexI= Subject key identifier: 82:4E:8E:8B:FD:59:12:96:D3:24:D9:2B:71:FC:E2:BC:FB:1E:46:4E Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2 Certificate serial: 019B7D5C98AD375569CC2018BF4F35AFC721 Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/gk6Oi_1ZEpbTJNkrcfzivPseRk4.roa Signing time: Fri 02 Jan 2026 06:19:38 +0000 ROA not before: Fri 02 Jan 2026 06:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47952 IP address blocks: 45.130.13.0/24 maxlen: 24 45.130.14.0/24 maxlen: 24 45.130.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:98:ad:37:55:69:cc:20:18:bf:4f:35:af:c7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=824e8e8bfd591296d324d92b71fce2bcfb1e464e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:fe:31:9e:f0:ef:96:b4:4e:24:17:83:97: c5:68:57:62:2e:99:f5:0e:fd:0d:10:89:fa:7a:f9: 64:d3:04:a3:c9:64:30:5c:2b:bc:64:3b:ff:13:98: a1:b0:43:39:83:ae:35:2a:c0:99:0b:39:72:4a:d1: f8:d3:39:bd:52:7f:83:75:9e:22:d4:36:65:b4:d9: a9:42:f3:4d:1b:f6:06:9d:12:7c:57:e8:22:0d:c5: 5a:d7:37:a1:72:aa:4c:97:c1:37:d1:93:83:16:1e: 95:c9:1f:c6:77:81:7e:fd:5e:ff:8a:df:d5:84:2f: 90:7d:64:62:25:22:d3:23:8e:b0:cd:ae:d4:f4:7b: ba:be:af:18:89:43:60:b5:74:5d:78:94:45:84:db: ce:ad:3e:72:e0:87:31:40:e0:6e:e4:f7:72:fa:33: f5:1e:ea:b9:1e:01:3b:e8:6d:8e:60:2e:68:87:72: 40:8e:b5:7b:36:2d:28:62:3f:c3:e9:2f:59:2c:eb: 2e:4e:6e:ab:16:ba:47:d4:b2:14:f3:75:3e:8c:83: e9:5e:6f:d2:c5:61:fe:4b:fc:45:18:34:35:b4:50: 0f:49:ad:de:93:6d:d6:e9:e6:83:f3:ce:06:c2:26: 22:b3:42:98:f2:30:f2:5d:42:4d:ae:51:db:8b:2e: 83:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4E:8E:8B:FD:59:12:96:D3:24:D9:2B:71:FC:E2:BC:FB:1E:46:4E X509v3 Authority Key Identifier: keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/gk6Oi_1ZEpbTJNkrcfzivPseRk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.13.0-45.130.15.255 Signature Algorithm: sha256WithRSAEncryption 07:8b:2d:6c:c3:34:c7:b6:15:17:95:4d:c6:86:a9:7f:94:fc: 10:3f:05:20:52:16:6e:50:f1:cf:ea:fc:54:00:86:c0:1c:3f: e8:5f:6a:09:57:07:71:81:18:c0:3f:0a:45:17:8b:52:32:e6: f9:96:3b:82:3d:cc:34:a1:86:9c:27:22:f3:54:92:ad:63:95: 7f:e8:dc:8b:9c:ef:1e:6b:6f:47:c5:54:7c:bb:8e:cc:01:3e: b9:b5:0b:e8:a5:13:c6:6a:2c:8f:57:e0:9f:51:fa:96:97:20: 82:ef:2c:51:53:03:96:67:f8:f6:93:3b:82:54:be:04:fd:02: a3:f2:d4:b2:b8:36:45:f3:02:bc:ee:00:04:03:c7:e3:de:e6: eb:cd:fd:83:e2:42:61:55:46:1b:ea:dc:89:aa:e1:e8:ec:04: 8f:f1:f2:bb:51:bd:11:a6:bd:63:04:53:48:c6:6f:47:24:bb: e7:9f:07:37:03:e5:5c:37:9e:37:09:ea:fd:c9:01:8e:af:cd: 34:a0:7a:b0:fa:06:05:30:d3:6a:f9:eb:5a:08:95:69:dc:93: 23:1d:68:51:98:4b:30:2c:65:50:9b:56:01:03:9a:40:0c:95: 7d:2b:4b:54:53:47:f0:39:01:89:f0:cc:78:d8:ef:ca:b2:80: 18:1f:02:f3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XJitN1VpzCAYv081r8chMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOWM3MGY3Y2UzODMxYjhmMmNjZTg5ZGIxNGEyN2RkYWEw ZTk5YzIwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjRlOGU4YmZkNTkxMjk2ZDMyNGQ5MmI3MWZjZTJiY2ZiMWU0NjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/L+MZ7w75a0TiQXg5fFaFdiLpn1 Dv0NEIn6evlk0wSjyWQwXCu8ZDv/E5ihsEM5g641KsCZCzlyStH40zm9Un+DdZ4i 1DZltNmpQvNNG/YGnRJ8V+giDcVa1zehcqpMl8E30ZODFh6VyR/Gd4F+/V7/it/V hC+QfWRiJSLTI46wza7U9Hu6vq8YiUNgtXRdeJRFhNvOrT5y4IcxQOBu5Pdy+jP1 Huq5HgE76G2OYC5oh3JAjrV7Ni0oYj/D6S9ZLOsuTm6rFrpH1LIU83U+jIPpXm/S xWH+S/xFGDQ1tFAPSa3ek23W6eaD884GwiYis0KY8jDyXUJNrlHbiy6DZwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIJOjov9WRKW0yTZK3H84rz7HkZOMB8GA1UdIwQY MBaAFLOccPfOODG48szonbFKJ92qDpnCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczV4dzk4NDRNYmp5ek9pZHNVb24zYW9PbWNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lOTE4MTMtOTI3ZS00N2E1LWI3MDIt ZGU1Mzc4NDYxZmVlLzEvZ2s2T2lfMVpFcGJUSk5rcmNmeml2UHNlUms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lOTE4MTMtOTI3ZS00N2E1LWI3MDItZGU1Mzc4NDYxZmVl LzEvczV4dzk4NDRNYmp5ek9pZHNVb24zYW9PbWNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtgg0D BAQtggAwDQYJKoZIhvcNAQELBQADggEBAAeLLWzDNMe2FReVTcaGqX+U/BA/BSBS Fm5Q8c/q/FQAhsAcP+hfaglXB3GBGMA/CkUXi1Iy5vmWO4I9zDShhpwnIvNUkq1j lX/o3Iuc7x5rb0fFVHy7jswBPrm1C+ilE8ZqLI9X4J9R+paXIILvLFFTA5Zn+PaT O4JUvgT9AqPy1LK4NkXzArzuAAQDx+Pe5uvN/YPiQmFVRhvq3Imq4ejsBI/x8rtR vRGmvWMEU0jGb0cku+efBzcD5Vw3njcJ6v3JAY6vzTSgerD6BgUw02r561oIlWnc kyMdaFGYSzAsZVCbVgEDmkAMlX0rS1RTR/A5AYnwzHjY78qygBgfAvM= -----END CERTIFICATE-----Generated at Sat Jan 3 18:33:35 2026 by rpki-client