This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/gMvc_sE40m271NPynEOBrQzKYWQ.roa File: gMvc_sE40m271NPynEOBrQzKYWQ.roa (raw, json) Hash identifier: OeLSYnjbKMmBS4VGXJ744NmGmYrVy7bxB46xBnCaSmA= Subject key identifier: 80:CB:DC:FE:C1:38:D2:6D:BB:D4:D3:F2:9C:43:81:AD:0C:CA:61:64 Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df Certificate serial: 019B7D5D2AA925E6AC7E7BCB5BA13C7DF8B3 Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/gMvc_sE40m271NPynEOBrQzKYWQ.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33930 IP address blocks: 45.15.212.0/22 maxlen: 22 80.75.152.0/21 maxlen: 21 91.223.207.0/24 maxlen: 24 93.187.40.0/21 maxlen: 21 185.56.204.0/22 maxlen: 22 194.6.240.0/24 maxlen: 24 2a02:668::/36 maxlen: 36 2a02:668:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2a:a9:25:e6:ac:7e:7b:cb:5b:a1:3c:7d:f8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80cbdcfec138d26dbbd4d3f29c4381ad0cca6164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:55:d8:06:2b:f1:b6:0a:b7:92:e3:79:cd:30: 7b:9e:36:70:27:ff:87:1c:ea:d9:f4:26:c1:e2:e4: 75:09:75:a9:49:e8:c3:3d:0b:7b:c2:df:f5:a6:f1: 45:fa:04:b3:cd:3f:ba:4d:1e:57:64:3d:7b:2a:8f: bb:a8:f7:5c:60:e3:30:b5:e4:49:1d:e4:5d:89:7a: 52:9a:9e:71:6a:e7:66:9c:03:74:c7:3c:ba:f1:54: 4a:b3:02:bb:c3:df:fe:14:b5:aa:7b:71:4e:88:25: 0f:1a:16:60:bd:d5:68:fb:f7:52:85:93:2b:39:fa: 46:fd:8d:39:83:52:c1:01:11:f3:0a:26:c0:b8:bf: 7d:d0:f5:e8:ed:92:9a:61:4f:a4:d3:6a:5a:4f:90: b9:93:a6:9c:46:d1:4d:ae:b9:0b:26:72:9f:37:5e: b7:7a:a5:1d:92:01:c5:e1:0d:d2:f7:26:a9:e4:65: 01:71:11:a0:57:dd:85:62:6b:a7:5e:0b:3e:10:44: 0a:23:e6:42:b5:47:87:97:72:b6:d6:6a:e1:9e:93: d2:2b:b2:2c:ec:07:da:0f:ae:5d:63:2a:d4:70:9a: d2:7b:d3:60:c3:ee:0d:9a:c2:06:b7:88:c1:fe:da: 09:fd:a4:b1:54:eb:bf:30:66:26:f0:23:67:88:76: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CB:DC:FE:C1:38:D2:6D:BB:D4:D3:F2:9C:43:81:AD:0C:CA:61:64 X509v3 Authority Key Identifier: keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/gMvc_sE40m271NPynEOBrQzKYWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.212.0/22 80.75.152.0/21 91.223.207.0/24 93.187.40.0/21 185.56.204.0/22 194.6.240.0/24 IPv6: 2a02:668::/36 2a02:668:9000::/36 Signature Algorithm: sha256WithRSAEncryption 95:a8:8a:f7:ff:a5:d6:7e:94:97:f0:34:99:2d:9f:3c:80:cd: 9b:18:c7:59:95:88:83:f1:b4:81:5f:89:b7:e2:b0:31:3d:5d: 65:80:d4:29:41:71:e9:cf:c2:59:7d:97:45:63:86:fc:da:cf: 8a:ed:06:f9:6e:99:18:77:66:5d:d8:c9:17:a3:b0:41:37:c0: 1f:05:1a:52:d8:bb:c3:2d:01:b7:27:dc:ac:bf:50:06:22:9f: 74:03:e7:89:4a:ab:bd:f5:9c:0c:e5:c6:7c:79:20:9d:dc:73: 96:20:4e:51:48:ac:a6:65:db:d9:87:e0:0e:51:5c:72:16:f2: b3:2e:36:ca:63:8b:58:20:cd:af:c7:f6:84:60:d7:18:1b:30: c1:65:cb:9f:0f:04:56:42:56:84:51:af:37:29:c4:c5:4d:dc: f2:d9:65:b3:39:ec:3b:f4:1d:eb:80:dc:e6:b7:0c:f8:a6:57: 20:87:38:e6:f9:36:4c:c1:be:fb:e0:14:4a:f4:8d:b5:75:06: be:0f:46:02:3f:ae:da:a2:b2:a7:74:e5:a5:99:a7:cd:cb:76: e1:d1:b6:6d:ca:4b:73:a3:6d:5a:80:9b:0a:34:93:04:38:3e: 4a:20:c5:5a:25:8f:a6:d0:73:1d:b6:ff:e4:3d:03:bf:90:a0: a1:28:90:28 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt9XSqpJeasfnvLW6E8ffizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzIwZmJjNDhmYTU5YTdkOGRlYTU3OTA4ZjM1MGExYjk3 NDU5ZGYwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGNiZGNmZWMxMzhkMjZkYmJkNGQzZjI5YzQzODFhZDBjY2E2MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFXYBivxtgq3kuN5zTB7njZwJ/+H HOrZ9CbB4uR1CXWpSejDPQt7wt/1pvFF+gSzzT+6TR5XZD17Ko+7qPdcYOMwteRJ HeRdiXpSmp5xaudmnAN0xzy68VRKswK7w9/+FLWqe3FOiCUPGhZgvdVo+/dShZMr OfpG/Y05g1LBARHzCibAuL990PXo7ZKaYU+k02paT5C5k6acRtFNrrkLJnKfN163 eqUdkgHF4Q3S9yap5GUBcRGgV92FYmunXgs+EEQKI+ZCtUeHl3K21mrhnpPSK7Is 7AfaD65dYyrUcJrSe9Ngw+4NmsIGt4jB/toJ/aSxVOu/MGYm8CNniHZczQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFIDL3P7BONJtu9TT8pxDga0MymFkMB8GA1UdIwQY MBaAFMHCD7xI+lmn2N6leQjzUKG5dFnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgt MzAyY2UxYmM5OWMwLzEvZ012Y19zRTQwbTI3MU5QeW5FT0JyUXpLWVdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgtMzAyY2UxYmM5OWMw LzEvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAqBAIAATAkAwQCLQ/UAwQD UEuYAwQAW9/PAwQDXbsoAwQCuTjMAwQAwgbwMBYEAgACMBADBgQqAgZoAAMGBCoC BmiQMA0GCSqGSIb3DQEBCwUAA4IBAQCVqIr3/6XWfpSX8DSZLZ88gM2bGMdZlYiD 8bSBX4m34rAxPV1lgNQpQXHpz8JZfZdFY4b82s+K7Qb5bpkYd2Zd2MkXo7BBN8Af BRpS2LvDLQG3J9ysv1AGIp90A+eJSqu99ZwM5cZ8eSCd3HOWIE5RSKymZdvZh+AO UVxyFvKzLjbKY4tYIM2vx/aEYNcYGzDBZcufDwRWQlaEUa83KcTFTdzy2WWzOew7 9B3rgNzmtwz4plcghzjm+TZMwb774BRK9I21dQa+D0YCP67aorKndOWlmafNy3bh 0bZtyktzo21agJsKNJMEOD5KIMVaJY+m0HMdtv/kPQO/kKChKJAo -----END CERTIFICATE-----Generated at Sat Jan 10 22:50:52 2026 by rpki-client