This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/gnLcldm5nEk7VUfZ3ZCZ9CuTP_s.roa File: gnLcldm5nEk7VUfZ3ZCZ9CuTP_s.roa (raw, json) Hash identifier: 9M0Ppv6WalIMgDZY/MAuUrb6XlVw4bEOTKI1qKmwlD4= Subject key identifier: 82:72:DC:95:D9:B9:9C:49:3B:55:47:D9:DD:90:99:F4:2B:93:3F:FB Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Certificate serial: 019B7F15CE10675F7020001755F0D1063D4C Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/gnLcldm5nEk7VUfZ3ZCZ9CuTP_s.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49285 IP address blocks: 141.138.64.0/21 maxlen: 21 188.93.80.0/21 maxlen: 21 188.93.80.0/22 maxlen: 22 188.93.80.0/24 maxlen: 24 188.93.84.0/22 maxlen: 22 188.93.87.0/24 maxlen: 24 2a03:3600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ce:10:67:5f:70:20:00:17:55:f0:d1:06:3d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8272dc95d9b99c493b5547d9dd9099f42b933ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:97:ae:ce:4f:70:54:1a:8c:cb:e5:ae:39: c8:70:a0:4b:12:7f:45:49:71:75:ca:ac:e7:d4:37: e3:d0:59:b8:57:5d:78:4f:c6:f6:91:1c:33:25:11: 0c:ca:fb:cf:c2:07:6f:f8:5c:8d:55:80:8a:c7:0a: 4b:5e:c1:e1:2d:08:9c:09:20:7c:9b:d0:e0:9f:43: 8a:e6:e1:60:8b:dc:17:61:fe:7c:37:31:80:3f:b5: 52:33:7c:e7:f3:d3:39:b2:65:6d:e8:13:7b:9c:0e: 56:79:c4:10:d2:9b:7b:e8:5b:6b:78:de:29:26:f7: ae:de:aa:65:e5:7a:e5:f4:3c:09:49:ca:1c:2b:e4: 2f:0e:a8:83:18:d3:97:23:0a:b5:14:69:c3:85:1c: 5a:3e:a5:a2:bd:f1:8c:54:4e:a7:67:ff:7a:53:7e: be:ff:6d:ff:be:5b:55:ec:55:27:47:f1:45:ca:56: a3:57:50:67:42:61:47:cf:60:d3:be:74:6a:92:fb: f9:f1:d5:2d:c8:61:52:f5:85:0a:46:ed:6b:d7:19: eb:98:d5:3c:fb:56:53:51:cb:1c:85:1e:27:0b:5c: 53:c2:b6:92:a2:53:29:c1:bc:a3:20:01:0d:9d:dd: 66:a7:2a:c8:43:cc:46:0c:ed:14:e8:cb:8c:45:e5: d3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:72:DC:95:D9:B9:9C:49:3B:55:47:D9:DD:90:99:F4:2B:93:3F:FB X509v3 Authority Key Identifier: keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/gnLcldm5nEk7VUfZ3ZCZ9CuTP_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.138.64.0/21 188.93.80.0/21 IPv6: 2a03:3600::/32 Signature Algorithm: sha256WithRSAEncryption 72:2d:a5:b6:44:48:6c:b0:7b:ce:a4:a1:5d:d6:7c:25:c8:85: a0:8a:e0:ab:56:f3:53:86:73:a9:34:c9:5c:1b:04:ba:fb:59: 0d:9b:83:91:fa:10:46:3d:f7:7f:aa:0c:ac:93:85:d1:82:dc: 97:cc:96:6f:71:e7:c5:5a:71:d3:09:8d:d4:14:1e:25:37:66: 10:e8:df:a7:2b:1f:ec:82:e0:31:42:cf:42:41:72:d5:b8:ba: 69:a0:b9:5b:04:cc:6a:af:ea:9e:03:4f:ab:19:9e:61:b4:73: cf:6a:4b:78:ea:ea:30:b9:3e:32:22:db:06:05:6c:bd:73:0e: d5:9c:2c:de:8c:36:19:9b:8b:82:49:44:72:b4:36:37:30:69: 05:2b:e7:86:f8:ba:13:1f:35:b5:21:0c:b9:f8:0b:e3:61:4c: be:a6:d2:61:39:3b:43:bb:c0:85:96:40:06:4e:a0:7a:62:27: e1:e3:e8:e4:00:88:62:76:0c:4a:c7:37:64:f4:db:40:77:d4: 50:bf:4a:25:8a:42:b4:69:d1:02:25:4a:99:a4:86:75:2c:4f: a2:63:9b:ef:06:8d:77:a7:c3:36:52:03:14:6d:ed:90:6b:0a: 8e:b6:ef:6c:ce:eb:b6:b6:6d:17:05:11:a2:14:8d:1d:25:1a: 6d:49:1e:ee -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/Fc4QZ19wIAAXVfDRBj1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGFkYWZiMWYzMWY5ODg5YWE0NzM1NzkyYjZlM2RiNDY5 MzFiYjkwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjcyZGM5NWQ5Yjk5YzQ5M2I1NTQ3ZDlkZDkwOTlmNDJiOTMzZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBuXrs5PcFQajMvlrjnIcKBLEn9F SXF1yqzn1Dfj0Fm4V114T8b2kRwzJREMyvvPwgdv+FyNVYCKxwpLXsHhLQicCSB8 m9Dgn0OK5uFgi9wXYf58NzGAP7VSM3zn89M5smVt6BN7nA5WecQQ0pt76FtreN4p Jveu3qpl5Xrl9DwJScocK+QvDqiDGNOXIwq1FGnDhRxaPqWivfGMVE6nZ/96U36+ /23/vltV7FUnR/FFylajV1BnQmFHz2DTvnRqkvv58dUtyGFS9YUKRu1r1xnrmNU8 +1ZTUcschR4nC1xTwraSolMpwbyjIAENnd1mpyrIQ8xGDO0U6MuMReXTYQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIJy3JXZuZxJO1VH2d2QmfQrkz/7MB8GA1UdIwQY MBaAFMmK2vsfMfmImqRzV5K249tGkxu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYt M2IxMDNkNWE2OTBhLzEvZ25MY2xkbTVuRWs3VlVmWjNaQ1o5Q3VUUF9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYtM2IxMDNkNWE2OTBh LzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDjYpAAwQD vF1QMA0EAgACMAcDBQAqAzYAMA0GCSqGSIb3DQEBCwUAA4IBAQByLaW2REhssHvO pKFd1nwlyIWgiuCrVvNThnOpNMlcGwS6+1kNm4OR+hBGPfd/qgysk4XRgtyXzJZv cefFWnHTCY3UFB4lN2YQ6N+nKx/sguAxQs9CQXLVuLppoLlbBMxqr+qeA0+rGZ5h tHPPakt46uowuT4yItsGBWy9cw7VnCzejDYZm4uCSURytDY3MGkFK+eG+LoTHzW1 IQy5+AvjYUy+ptJhOTtDu8CFlkAGTqB6Yifh4+jkAIhidgxKxzdk9NtAd9RQv0ol ikK0adECJUqZpIZ1LE+iY5vvBo13p8M2UgMUbe2QawqOtu9szuu2tm0XBRGiFI0d JRptSR7u -----END CERTIFICATE-----Generated at Sun Jan 11 03:36:20 2026 by rpki-client