This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/GNlEKqFh-Tv2hz0SznfgxA4czj8.roa File: GNlEKqFh-Tv2hz0SznfgxA4czj8.roa (raw, json) Hash identifier: 43aHiWheagiqIIyy3ZQAw5+wp/fUUv/1/kOcWYJ6M+c= Subject key identifier: 18:D9:44:2A:A1:61:F9:3B:F6:87:3D:12:CE:77:E0:C4:0E:1C:CE:3F Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33 Certificate serial: 019B7FF1E9CBA0B3979FEA621DE5D32A9D48 Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/GNlEKqFh-Tv2hz0SznfgxA4czj8.roa Signing time: Fri 02 Jan 2026 18:21:58 +0000 ROA not before: Fri 02 Jan 2026 18:21:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44285 IP address blocks: 185.171.54.0/24 maxlen: 24 185.171.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e9:cb:a0:b3:97:9f:ea:62:1d:e5:d3:2a:9d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33 Validity Not Before: Jan 2 18:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18d9442aa161f93bf6873d12ce77e0c40e1cce3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a2:d5:24:54:ef:12:80:65:4b:f4:72:2e:15: cd:bc:9e:4c:90:ca:81:77:7b:29:2b:12:4b:41:85: ed:4c:0e:0f:d2:7a:f3:c4:8f:fd:ac:a8:f4:a2:56: d8:fa:1a:17:d1:a4:0a:7c:15:fb:64:e6:10:d4:a8: 74:81:f3:20:b4:09:17:29:c2:d6:a4:63:56:d8:72: 77:e2:3d:50:10:bc:20:79:aa:c8:2e:8e:18:42:2f: 5d:f0:ae:c8:1d:65:5c:30:e2:fa:a5:28:56:38:15: 54:83:2d:9d:b9:49:d7:c8:db:8d:7c:78:ef:ea:a7: b8:a6:c9:8c:85:29:3f:81:c7:ea:ca:42:98:83:b7: db:e6:6e:6f:55:d0:a0:c1:2f:30:bf:67:43:53:3e: b8:cf:28:32:a5:bc:c1:23:6e:4f:aa:1c:f7:29:fc: b1:6f:b0:52:f7:86:25:78:f3:72:dc:3b:50:3f:e5: 17:52:a8:24:51:91:e0:25:60:39:d2:e8:fb:77:6f: 38:ec:04:f5:96:bb:04:99:a5:bb:4b:e1:db:79:c4: 3d:6d:7b:1b:61:04:b1:4f:f5:99:e9:5d:94:39:b7: 61:2a:63:7e:ca:3f:c3:1c:81:21:ac:35:ac:5c:ee: 26:32:7b:f4:00:a9:82:00:50:47:95:cf:b8:04:11: 72:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D9:44:2A:A1:61:F9:3B:F6:87:3D:12:CE:77:E0:C4:0E:1C:CE:3F X509v3 Authority Key Identifier: keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/GNlEKqFh-Tv2hz0SznfgxA4czj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.54.0/23 Signature Algorithm: sha256WithRSAEncryption 75:57:51:2f:58:f0:a6:bb:65:1c:9e:ab:4e:4e:d8:6b:f6:cb: c2:f2:30:b9:78:a2:43:e9:f1:a7:cf:d1:3a:48:9b:9f:6f:8d: d6:9c:bd:8e:30:bb:f9:64:7c:86:96:c4:fc:07:8d:c4:e0:ed: 6c:8a:cb:c3:bd:ea:87:ec:d7:7a:9a:8b:8a:e2:09:2f:28:83: 63:2f:af:8d:42:a5:f1:f0:ea:a5:a5:9b:1f:6c:3c:a1:c1:5e: 3f:e8:3f:e5:c6:5b:00:d8:0e:7b:d0:26:f0:ae:5b:a8:ff:85: 6a:e8:33:9e:a7:50:2d:31:78:7c:c5:04:d4:26:ac:14:bb:85: 5e:73:d5:72:d3:11:fb:77:f9:5f:ce:5a:56:e6:c1:33:a8:ff: 84:69:25:ab:e8:68:e9:5e:e2:b0:9a:e4:bc:68:e1:d4:cb:c8: 84:46:3a:6c:d3:e4:f4:69:dd:97:8b:8e:ff:17:3c:b4:7d:61: 4c:5a:f0:37:b4:b1:69:78:84:41:72:fb:fb:51:91:d0:67:29: d9:01:23:0f:88:7f:5f:1b:39:6a:c2:fe:d3:08:ba:6a:b2:3d: d9:41:80:99:db:fd:29:1c:e2:77:63:dc:2d:03:0c:cb:61:ae: 1b:31:3d:2d:6c:1c:b3:8b:e2:49:04:6d:15:91:8d:ed:1f:cf: 5e:3b:47:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8enLoLOXn+piHeXTKp1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzY2YjA1OGMwOTY3NTNhMzRhZDYyNWQ1MzI3NWNkMmRi YTViMzMwHhcNMjYwMTAyMTgyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGQ5NDQyYWExNjFmOTNiZjY4NzNkMTJjZTc3ZTBjNDBlMWNjZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKLVJFTvEoBlS/RyLhXNvJ5MkMqB d3spKxJLQYXtTA4P0nrzxI/9rKj0olbY+hoX0aQKfBX7ZOYQ1Kh0gfMgtAkXKcLW pGNW2HJ34j1QELwgearILo4YQi9d8K7IHWVcMOL6pShWOBVUgy2duUnXyNuNfHjv 6qe4psmMhSk/gcfqykKYg7fb5m5vVdCgwS8wv2dDUz64zygypbzBI25Pqhz3Kfyx b7BS94YlePNy3DtQP+UXUqgkUZHgJWA50uj7d2847AT1lrsEmaW7S+HbecQ9bXsb YQSxT/WZ6V2UObdhKmN+yj/DHIEhrDWsXO4mMnv0AKmCAFBHlc+4BBFyZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBjZRCqhYfk79oc9Es534MQOHM4/MB8GA1UdIwQY MBaAFBx2awWMCWdTo0rWJdUydc0tulszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzIt ODE5MTdkZmZkY2Q3LzEvR05sRUtxRmgtVHYyaHowU3puZmd4QTRjemo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzItODE5MTdkZmZkY2Q3 LzEvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuas2MA0G CSqGSIb3DQEBCwUAA4IBAQB1V1EvWPCmu2UcnqtOTthr9svC8jC5eKJD6fGnz9E6 SJufb43WnL2OMLv5ZHyGlsT8B43E4O1sisvDveqH7Nd6mouK4gkvKINjL6+NQqXx 8OqlpZsfbDyhwV4/6D/lxlsA2A570Cbwrluo/4Vq6DOep1AtMXh8xQTUJqwUu4Ve c9Vy0xH7d/lfzlpW5sEzqP+EaSWr6GjpXuKwmuS8aOHUy8iERjps0+T0ad2Xi47/ Fzy0fWFMWvA3tLFpeIRBcvv7UZHQZynZASMPiH9fGzlqwv7TCLpqsj3ZQYCZ2/0p HOJ3Y9wtAwzLYa4bMT0tbByzi+JJBG0VkY3tH89eO0ed -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:31 2026 by rpki-client