This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/Gy7ZxbulJ_7Y0tx78zpcZAOHO2I.roa File: Gy7ZxbulJ_7Y0tx78zpcZAOHO2I.roa (raw, json) Hash identifier: 8PQOWmSZ9/1/Et2ot0KAAdAS2aYMSpPnN0AQzm11bWE= Subject key identifier: 1B:2E:D9:C5:BB:A5:27:FE:D8:D2:DC:7B:F3:3A:5C:64:03:87:3B:62 Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060 Certificate serial: 019B7AC890AB91F87B35123A1FEF3F733F38 Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/Gy7ZxbulJ_7Y0tx78zpcZAOHO2I.roa Signing time: Thu 01 Jan 2026 18:18:43 +0000 ROA not before: Thu 01 Jan 2026 18:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25465 IP address blocks: 45.83.96.0/24 maxlen: 24 45.83.97.0/24 maxlen: 24 45.83.98.0/24 maxlen: 32 45.83.99.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:90:ab:91:f8:7b:35:12:3a:1f:ef:3f:73:3f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060 Validity Not Before: Jan 1 18:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b2ed9c5bba527fed8d2dc7bf33a5c6403873b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:88:8d:04:44:c8:81:86:3c:2e:6f:35:57: c8:e4:da:f7:a8:a2:e6:63:e8:f8:c4:86:f1:04:b2: 7c:79:39:6b:86:fc:a6:63:9e:53:4d:db:29:72:18: ef:2a:48:47:5d:2d:db:fb:68:7c:5f:e5:58:35:79: 10:b3:05:87:c6:6c:46:4f:3c:bc:ac:c9:c9:26:dd: bd:f2:e4:88:0c:64:aa:a4:ee:de:f1:c5:1e:5a:fc: e1:ed:b8:ef:d3:9b:09:7f:1e:7f:46:95:31:b3:b2: c0:93:82:43:95:88:f6:3b:8a:65:20:f4:93:e4:a2: 96:01:36:06:33:a8:bc:6d:ba:f4:e6:fb:b4:64:c7: 71:95:90:5c:a8:cb:d6:78:1c:7f:93:4b:fa:f1:2d: 07:28:be:57:1a:29:13:c4:23:90:19:21:e1:7b:f7: 9a:78:07:7c:02:55:32:bc:70:0a:72:17:e1:73:f5: 1f:f2:0b:a0:dd:16:9e:11:cc:21:05:02:66:ca:9e: 54:b9:16:68:a4:ae:4b:66:76:90:37:5f:8c:34:ee: a6:14:7a:d2:ba:4a:1f:80:28:c3:12:d5:25:eb:54: c4:7e:6e:e6:d1:83:24:fc:fb:32:76:93:31:9b:eb: ca:57:e1:9e:12:64:08:91:58:23:6f:cf:c6:dd:b7: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2E:D9:C5:BB:A5:27:FE:D8:D2:DC:7B:F3:3A:5C:64:03:87:3B:62 X509v3 Authority Key Identifier: keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/Gy7ZxbulJ_7Y0tx78zpcZAOHO2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.96.0/22 Signature Algorithm: sha256WithRSAEncryption 94:1e:c6:04:5f:4b:d3:d4:1a:e1:dd:7e:7c:c7:44:a0:35:3b: 30:78:a1:0f:f3:46:f8:df:34:d3:5b:c9:91:7a:90:dc:67:85: f6:9f:f5:36:16:6c:42:f5:d0:18:37:6a:c0:bc:7f:ae:ee:b1: 0f:95:03:27:c1:22:a2:a3:05:17:0d:bd:ca:b3:a2:63:d9:7b: 2c:5e:14:71:1c:67:00:ce:99:ca:11:ed:77:97:ad:24:ab:8c: 16:e8:70:2b:01:ee:bc:06:32:63:40:e9:f1:9c:10:f9:84:6d: 41:c0:59:10:d7:80:67:c8:af:f6:27:37:9f:41:a6:74:d1:a6: e7:f5:1d:37:6d:74:c7:cd:83:09:e0:07:de:d9:b9:5f:65:73: 76:ae:c5:12:34:61:fb:f1:97:63:d4:62:8a:87:19:69:79:b0: c6:88:f4:eb:b7:c8:12:9a:60:c1:b4:d1:d7:5c:cd:e5:3f:65: 77:60:43:d2:97:96:1c:11:f6:28:ed:6e:64:5d:c8:69:a4:f4: ff:bc:b5:b1:bd:c1:79:fd:d9:6a:0c:0a:68:08:49:49:14:82: 0a:1d:c5:3f:d1:7a:1c:97:3b:65:b4:be:3f:fe:6f:df:1f:4d: 3d:08:1e:8d:ca:b5:77:c5:7f:51:f8:b0:a9:bb:f2:12:cc:64: 2c:1c:7d:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJCrkfh7NRI6H+8/cz84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzNmYjNiNzI1MjBiODE2OWEyOTI4ZDUzODJlNDlkNjc1 YWQwNjAwHhcNMjYwMTAxMTgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjJlZDljNWJiYTUyN2ZlZDhkMmRjN2JmMzNhNWM2NDAzODczYjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4OIjQREyIGGPC5vNVfI5Nr3qKLm Y+j4xIbxBLJ8eTlrhvymY55TTdspchjvKkhHXS3b+2h8X+VYNXkQswWHxmxGTzy8 rMnJJt298uSIDGSqpO7e8cUeWvzh7bjv05sJfx5/RpUxs7LAk4JDlYj2O4plIPST 5KKWATYGM6i8bbr05vu0ZMdxlZBcqMvWeBx/k0v68S0HKL5XGikTxCOQGSHhe/ea eAd8AlUyvHAKchfhc/Uf8gug3RaeEcwhBQJmyp5UuRZopK5LZnaQN1+MNO6mFHrS ukofgCjDEtUl61TEfm7m0YMk/PsydpMxm+vKV+GeEmQIkVgjb8/G3becUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBsu2cW7pSf+2NLce/M6XGQDhztiMB8GA1UdIwQY MBaAFBwz+ztyUguBaaKSjVOC5J1nWtBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDct OTUwNDU1ODY4MDJlLzEvR3k3WnhidWxKXzdZMHR4Nzh6cGNaQU9ITzJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDctOTUwNDU1ODY4MDJl LzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVNgMA0G CSqGSIb3DQEBCwUAA4IBAQCUHsYEX0vT1Brh3X58x0SgNTsweKEP80b43zTTW8mR epDcZ4X2n/U2FmxC9dAYN2rAvH+u7rEPlQMnwSKiowUXDb3Ks6Jj2XssXhRxHGcA zpnKEe13l60kq4wW6HArAe68BjJjQOnxnBD5hG1BwFkQ14BnyK/2JzefQaZ00abn 9R03bXTHzYMJ4Afe2blfZXN2rsUSNGH78Zdj1GKKhxlpebDGiPTrt8gSmmDBtNHX XM3lP2V3YEPSl5YcEfYo7W5kXchppPT/vLWxvcF5/dlqDApoCElJFIIKHcU/0Xoc lztltL4//m/fH009CB6NyrV3xX9R+LCpu/ISzGQsHH21 -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:51 2026 by rpki-client