This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/gaeZyXBV1IwnPASboDxbNOSLTf4.roa File: gaeZyXBV1IwnPASboDxbNOSLTf4.roa (raw, json) Hash identifier: u0H0xtMhK5Bo2UpVynVX+CLC5yeIo+6HBja/ufh9OgU= Subject key identifier: 81:A7:99:C9:70:55:D4:8C:27:3C:04:9B:A0:3C:5B:34:E4:8B:4D:FE Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019BE527D1D2539C4963F0D1539CB04C2438 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/gaeZyXBV1IwnPASboDxbNOSLTf4.roa Signing time: Thu 22 Jan 2026 10:02:30 +0000 ROA not before: Thu 22 Jan 2026 10:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 2.58.124.0/24 maxlen: 24 2.58.125.0/24 maxlen: 24 2.58.126.0/24 maxlen: 24 2.58.127.0/24 maxlen: 24 45.83.182.0/24 maxlen: 24 45.83.183.0/24 maxlen: 24 45.150.110.0/24 maxlen: 24 92.118.126.0/24 maxlen: 24 92.118.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:27:d1:d2:53:9c:49:63:f0:d1:53:9c:b0:4c:24:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 22 10:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81a799c97055d48c273c049ba03c5b34e48b4dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:15:d9:1e:c9:a3:56:f0:7a:11:a8:d3:d6: a4:78:9c:d9:a3:aa:eb:df:d8:82:0d:9f:1e:38:fa: 95:e1:67:07:17:fb:72:45:7e:25:82:8d:99:da:c3: 22:b7:6b:b8:34:f3:bd:04:e3:34:40:04:3b:57:35: 3e:35:52:9d:c5:49:46:9b:b6:3d:f4:f9:9c:a6:e6: 9b:cc:92:f3:e6:da:fe:a9:4c:91:37:96:46:75:b9: 9e:3e:4d:25:b1:52:b3:91:15:a8:8b:a7:42:64:ae: 63:95:f6:11:76:74:c2:15:6e:d6:8b:da:df:ca:22: 00:9e:18:c8:86:df:b9:72:01:00:bf:12:1a:2d:b6: f3:f7:a2:4c:e6:9d:67:0c:25:5c:14:04:ad:79:62: 89:0f:cb:4e:dd:1d:00:9c:b5:4c:f3:10:8e:1c:cb: 2f:8a:fe:94:64:42:18:68:a9:79:77:b9:2d:48:41: 15:7d:41:f1:f7:44:26:01:0a:ec:e8:8a:01:cc:0d: a9:24:f8:13:ca:58:c0:a1:23:fe:82:0f:04:be:81: 39:87:4f:5a:24:98:1c:8a:b5:b4:d7:56:a6:3a:6e: 18:df:07:28:93:f1:f5:92:c7:ad:d2:d9:aa:af:d9: 00:8b:a1:a4:54:c1:34:70:b0:d6:fd:e4:97:ad:50: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A7:99:C9:70:55:D4:8C:27:3C:04:9B:A0:3C:5B:34:E4:8B:4D:FE X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/gaeZyXBV1IwnPASboDxbNOSLTf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.124.0/22 45.83.182.0/23 45.150.110.0/24 92.118.126.0/23 Signature Algorithm: sha256WithRSAEncryption 69:f8:b2:e3:24:0d:80:a4:d4:ae:25:b6:1b:68:15:71:ae:bf: 86:d8:06:ae:da:04:c8:50:36:a9:07:de:f4:80:33:0b:00:cc: 1f:bc:1a:04:ac:c9:b4:a8:c8:5d:5a:1d:7f:55:73:58:a0:df: ff:c9:d2:51:7e:6e:98:e2:f6:b0:1a:19:90:3c:7d:5d:32:f7: bf:09:06:9e:1b:cb:73:27:22:f6:d9:4d:53:02:60:06:0c:9f: db:8e:d3:6c:af:73:92:18:41:53:64:63:88:74:aa:7d:96:48: b8:13:01:cd:fc:a6:6c:74:f6:0e:e9:41:fc:62:07:de:34:6d: 30:fc:d0:a0:53:a8:73:2f:ce:85:a9:4a:ff:75:3c:0d:2d:ce: a7:db:72:2e:e4:28:38:41:4f:1a:f4:68:ec:7e:4c:2d:dc:94: 66:30:a9:e3:0c:bf:9e:f2:a7:9e:f7:8c:27:07:20:13:ae:00: 51:6a:a9:4d:f3:8d:2c:f7:b3:89:b0:1d:85:cc:f4:6e:41:06: 81:1f:d9:15:8c:99:04:68:a0:db:bb:af:d1:21:37:12:2e:3a: b2:52:40:ed:79:38:49:34:b4:54:1f:29:42:36:79:18:ef:0e: d9:e0:77:8c:e6:14:42:2b:32:d5:a0:b3:10:d9:fc:da:38:be: 80:05:93:e0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvlJ9HSU5xJY/DRU5ywTCQ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTIyMTAwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWE3OTljOTcwNTVkNDhjMjczYzA0OWJhMDNjNWIzNGU0OGI0ZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol0V2R7Jo1bwehGo09akeJzZo6rr 39iCDZ8eOPqV4WcHF/tyRX4lgo2Z2sMit2u4NPO9BOM0QAQ7VzU+NVKdxUlGm7Y9 9PmcpuabzJLz5tr+qUyRN5ZGdbmePk0lsVKzkRWoi6dCZK5jlfYRdnTCFW7Wi9rf yiIAnhjIht+5cgEAvxIaLbbz96JM5p1nDCVcFASteWKJD8tO3R0AnLVM8xCOHMsv iv6UZEIYaKl5d7ktSEEVfUHx90QmAQrs6IoBzA2pJPgTyljAoSP+gg8EvoE5h09a JJgcirW011amOm4Y3wcok/H1kset0tmqr9kAi6GkVME0cLDW/eSXrVCg8wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIGnmclwVdSMJzwEm6A8WzTki03+MB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvZ2FlWnlYQlYxSXduUEFTYm9EeGJOT1NMVGY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCAjp8AwQB LVO2AwQALZZuAwQBXHZ+MA0GCSqGSIb3DQEBCwUAA4IBAQBp+LLjJA2ApNSuJbYb aBVxrr+G2Aau2gTIUDapB970gDMLAMwfvBoErMm0qMhdWh1/VXNYoN//ydJRfm6Y 4vawGhmQPH1dMve/CQaeG8tzJyL22U1TAmAGDJ/bjtNsr3OSGEFTZGOIdKp9lki4 EwHN/KZsdPYO6UH8YgfeNG0w/NCgU6hzL86FqUr/dTwNLc6n23Iu5Cg4QU8a9Gjs fkwt3JRmMKnjDL+e8qee94wnByATrgBRaqlN840s97OJsB2FzPRuQQaBH9kVjJkE aKDbu6/RITcSLjqyUkDteThJNLRUHylCNnkY7w7Z4HeM5hRCKzLVoLMQ2fzaOL6A BZPg -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:07 2026 by rpki-client