This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/GWcwAEGL8dWNpctIdaHLmJt2F-M.roa File: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (raw, json) Hash identifier: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs= Subject key identifier: 19:67:30:00:41:8B:F1:D5:8D:A5:CB:48:75:A1:CB:98:9B:76:17:E3 Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408 Certificate serial: 019B77C74818EC913C100ABED1B3513527B7 Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/GWcwAEGL8dWNpctIdaHLmJt2F-M.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31394 IP address blocks: 83.137.40.0/21 maxlen: 21 2a00:11d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:48:18:ec:91:3c:10:0a:be:d1:b3:51:35:27:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19673000418bf1d58da5cb4875a1cb989b7617e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:16:a0:17:ce:f7:57:d6:0f:b6:56:ee:75:09: 32:de:6c:43:d7:2a:71:25:5d:22:ee:f6:c3:64:d0: cb:7c:5d:f8:24:06:0b:f4:2b:a7:94:ad:06:09:c7: d5:24:1b:0e:71:eb:0a:ff:7e:4a:7c:88:24:02:b0: be:b2:66:ad:e6:db:69:b8:0e:5b:58:de:de:4e:80: 3f:cf:ca:13:ee:f7:5d:6b:fb:3d:08:bc:5d:f9:71: 3e:f1:07:d5:69:60:cf:0f:94:59:53:d0:fd:c0:96: 8b:f3:a8:b9:11:af:42:2e:b5:48:96:a3:af:8d:91: 37:db:f2:c9:91:d2:c1:c1:23:8c:ba:3a:7e:d3:fc: c1:10:f5:11:80:0d:ba:90:fb:3a:bf:31:ea:08:c0: 38:f7:3a:ac:89:d4:ab:43:0e:a4:3f:24:61:9d:9f: 71:f2:1d:3d:d3:a8:43:4b:14:ed:b7:9c:e4:fd:32: c6:a8:d6:d8:ad:7b:86:48:e6:e5:45:6e:78:66:97: e2:a3:12:f2:e5:73:e4:6e:3e:4f:3b:1d:4e:9b:b0: 64:2e:a1:47:21:28:55:99:9f:27:4f:d4:13:f2:3f: 59:a2:b6:72:8c:8f:81:61:e3:0b:3a:9a:0f:e6:a4: d9:f6:bd:1b:c1:17:08:42:b1:d1:47:4c:98:3a:c8: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:67:30:00:41:8B:F1:D5:8D:A5:CB:48:75:A1:CB:98:9B:76:17:E3 X509v3 Authority Key Identifier: keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/GWcwAEGL8dWNpctIdaHLmJt2F-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.40.0/21 IPv6: 2a00:11d0::/32 Signature Algorithm: sha256WithRSAEncryption 08:7c:19:1e:c2:77:fa:fa:fa:e1:c8:1d:83:db:c4:44:06:8f: 6a:60:16:e4:ad:f0:a5:ca:db:e7:3e:7b:e6:a1:8c:a9:39:f7: 53:aa:9e:59:0a:12:ad:4c:c3:2e:ef:b9:7e:39:2a:11:dc:08: 8d:92:68:28:dd:1a:d2:a1:c0:76:6d:96:2a:84:bc:05:1d:2c: 13:c4:8a:51:5d:27:43:21:d6:df:79:29:28:18:93:fa:67:89: ce:73:06:10:f6:df:55:5e:c3:73:90:a3:6b:2f:a3:d5:30:59: 96:cd:e6:e6:82:5a:de:36:c2:91:71:83:e4:bb:50:35:4e:c7: 60:d9:ff:9c:c8:4b:84:9e:d0:cd:69:a2:82:46:86:c7:8b:55: 7b:f2:7d:29:24:f1:fb:f0:26:b3:f6:6f:eb:a9:49:d7:b6:35: a2:95:cf:f3:ee:93:80:eb:09:73:ec:6f:3f:ed:22:01:fa:f1: da:04:b0:0e:84:49:ca:5e:8c:50:0b:f9:92:f1:fc:5f:82:83: ba:d5:da:17:10:fc:db:f1:1c:7f:a4:13:ad:b9:4f:36:2c:86: c8:34:35:23:8e:db:36:28:ee:55:d7:7c:8e:90:f8:6a:7d:d6: e3:68:08:33:0d:8c:7d:88:70:3f:ad:be:da:d0:be:f7:36:6b: 4a:9f:4a:a0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x0gY7JE8EAq+0bNRNSe3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWRkNmY1M2JjYjQ5ZTRiOWIwNzA2ZGZkMDc0MjU5Yzli OGE0MDgwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTY3MzAwMDQxOGJmMWQ1OGRhNWNiNDg3NWExY2I5ODliNzYxN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hagF873V9YPtlbudQky3mxD1ypx JV0i7vbDZNDLfF34JAYL9CunlK0GCcfVJBsOcesK/35KfIgkArC+smat5ttpuA5b WN7eToA/z8oT7vdda/s9CLxd+XE+8QfVaWDPD5RZU9D9wJaL86i5Ea9CLrVIlqOv jZE32/LJkdLBwSOMujp+0/zBEPURgA26kPs6vzHqCMA49zqsidSrQw6kPyRhnZ9x 8h0906hDSxTtt5zk/TLGqNbYrXuGSOblRW54ZpfioxLy5XPkbj5POx1Om7BkLqFH IShVmZ8nT9QT8j9ZorZyjI+BYeMLOpoP5qTZ9r0bwRcIQrHRR0yYOshHDwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBlnMABBi/HVjaXLSHWhy5ibdhfjMB8GA1UdIwQY MBaAFF7t1vU7y0nkubBwbf0HQlnJuKQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODIt MjE1ZGJjODljMmI5LzEvR1djd0FFR0w4ZFdOcGN0SWRhSExtSnQyRi1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODItMjE1ZGJjODljMmI5 LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDU4koMA0E AgACMAcDBQAqABHQMA0GCSqGSIb3DQEBCwUAA4IBAQAIfBkewnf6+vrhyB2D28RE Bo9qYBbkrfClytvnPnvmoYypOfdTqp5ZChKtTMMu77l+OSoR3AiNkmgo3RrSocB2 bZYqhLwFHSwTxIpRXSdDIdbfeSkoGJP6Z4nOcwYQ9t9VXsNzkKNrL6PVMFmWzebm glreNsKRcYPku1A1Tsdg2f+cyEuEntDNaaKCRobHi1V78n0pJPH78Caz9m/rqUnX tjWilc/z7pOA6wlz7G8/7SIB+vHaBLAOhEnKXoxQC/mS8fxfgoO61doXEPzb8Rx/ pBOtuU82LIbINDUjjts2KO5V13yOkPhqfdbjaAgzDYx9iHA/rb7a0L73NmtKn0qg -----END CERTIFICATE-----Generated at Sun Jan 18 12:07:58 2026 by rpki-client