This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/gJDl0e6pQoHRD8a2YS52DIYUPzk.roa File: gJDl0e6pQoHRD8a2YS52DIYUPzk.roa (raw, json) Hash identifier: 56yjo07tXuvgM9qB1noCR3pRJ78UgBBtZbYbUMGEhbw= Subject key identifier: 80:90:E5:D1:EE:A9:42:81:D1:0F:C6:B6:61:2E:76:0C:86:14:3F:39 Certificate issuer: /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b Certificate serial: 019B791077C37DBE7C35291ABCDF92C4AA62 Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/gJDl0e6pQoHRD8a2YS52DIYUPzk.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50606 IP address blocks: 109.196.32.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:77:c3:7d:be:7c:35:29:1a:bc:df:92:c4:aa:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8090e5d1eea94281d10fc6b6612e760c86143f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:28:79:a2:13:1a:ba:36:ff:90:f0:38:88: 88:b8:9e:57:9b:02:16:78:68:b7:c4:04:ba:fd:ca: 1f:d5:37:0a:f1:d9:38:ad:74:ce:22:32:e1:9f:5a: 05:b1:2c:5d:f0:8b:e5:08:a2:26:4f:c3:62:37:d2: c6:de:a4:24:de:5b:53:97:f5:85:62:2a:ff:61:65: cb:74:d5:50:83:27:c5:94:37:27:88:ec:3b:5f:e2: ad:d4:18:e4:05:c4:71:97:c6:13:2e:24:fe:e3:31: 84:32:4e:b0:3a:81:ba:96:8a:b8:0d:af:62:58:69: 70:6d:41:f4:44:44:50:a5:ee:ed:5a:0f:58:08:c7: bd:37:8a:09:49:14:a9:0a:33:af:53:b6:6e:06:99: b4:df:1b:4d:5d:1b:79:3c:af:ff:7a:65:5f:bc:5c: 10:c1:8d:ac:de:47:2c:65:fe:55:18:9b:6c:3b:b6: 90:6e:e8:91:ec:d4:0c:fc:49:32:b6:f2:cc:48:e5: 5f:62:7d:83:01:97:67:b1:42:1e:ac:d2:0a:b0:46: 19:9c:d1:47:f4:7a:f6:9f:eb:64:24:aa:0d:c0:41: ea:60:49:a2:5d:bc:6c:0e:6b:34:b3:26:a1:76:5e: b3:02:89:0f:06:68:79:d4:cc:f7:fd:4e:0d:48:b7: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:90:E5:D1:EE:A9:42:81:D1:0F:C6:B6:61:2E:76:0C:86:14:3F:39 X509v3 Authority Key Identifier: keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/gJDl0e6pQoHRD8a2YS52DIYUPzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.196.32.0/20 Signature Algorithm: sha256WithRSAEncryption 91:eb:ab:69:03:f6:1c:f3:c8:4d:bf:42:5a:90:7a:02:f7:fa: c5:27:36:96:8b:af:28:8d:fb:43:23:8f:88:25:d3:cc:f3:c7: ea:b8:f0:bb:8b:ae:73:6c:ef:da:d1:b7:36:61:de:59:72:f5: 06:c3:e1:aa:cc:67:09:bf:ff:d1:3f:62:df:57:fa:ae:d3:2a: f6:47:6e:0a:b5:45:52:6f:20:2e:63:0e:82:eb:7c:59:58:c8: ec:4b:4a:78:fa:38:88:32:42:7e:49:d4:66:79:f9:4c:fb:ad: 2d:d9:7e:30:00:69:7e:65:82:68:d5:f6:39:04:9b:1f:e1:e0: 73:f0:cb:9f:92:43:4f:4c:ef:52:4d:b6:d7:74:37:ad:12:6a: 14:a3:d6:53:45:c9:04:66:40:f8:58:a0:cb:b1:7e:7b:af:00: 82:c3:b9:43:a8:e2:cc:42:b0:39:dc:a3:db:e9:97:8d:f1:d2: 16:b1:d3:df:89:18:db:e7:09:97:6b:83:ef:76:a5:1a:bb:e9: 35:ba:7f:6c:fb:63:c8:20:bb:11:b5:64:27:ba:ba:17:77:c3: 0b:78:ce:ce:5e:54:ba:45:06:19:e0:63:19:70:60:1f:46:96: 6d:6f:ad:2d:71:9a:a0:fa:1b:14:e0:99:00:54:b0:d5:8d:ac: 1a:0e:42:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHfDfb58NSkavN+SxKpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YjMzZTllM2M5MzJmN2E1NDJlYjAyMTA1NmNlOTRiMWU4 YjhmMGIwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDkwZTVkMWVlYTk0MjgxZDEwZmM2YjY2MTJlNzYwYzg2MTQzZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VsoeaITGro2/5DwOIiIuJ5XmwIW eGi3xAS6/cof1TcK8dk4rXTOIjLhn1oFsSxd8IvlCKImT8NiN9LG3qQk3ltTl/WF Yir/YWXLdNVQgyfFlDcniOw7X+Kt1BjkBcRxl8YTLiT+4zGEMk6wOoG6loq4Da9i WGlwbUH0RERQpe7tWg9YCMe9N4oJSRSpCjOvU7ZuBpm03xtNXRt5PK//emVfvFwQ wY2s3kcsZf5VGJtsO7aQbuiR7NQM/EkytvLMSOVfYn2DAZdnsUIerNIKsEYZnNFH 9Hr2n+tkJKoNwEHqYEmiXbxsDms0syahdl6zAokPBmh51Mz3/U4NSLcpEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICQ5dHuqUKB0Q/GtmEudgyGFD85MB8GA1UdIwQY MBaAFOezPp48ky96VC6wIQVs6Usei48LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTdNLW5qeVRMM3BVTHJBaEJXenBTeDZMandzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hNWExNzUtODA5Mi00YzYzLWIwMzgt MmM0NDA2YjQ4OTQxLzEvZ0pEbDBlNnBRb0hSRDhhMllTNTJESVlVUHprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hNWExNzUtODA5Mi00YzYzLWIwMzgtMmM0NDA2YjQ4OTQx LzEvNTdNLW5qeVRMM3BVTHJBaEJXenBTeDZMandzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbcQgMA0G CSqGSIb3DQEBCwUAA4IBAQCR66tpA/Yc88hNv0JakHoC9/rFJzaWi68ojftDI4+I JdPM88fquPC7i65zbO/a0bc2Yd5ZcvUGw+GqzGcJv//RP2LfV/qu0yr2R24KtUVS byAuYw6C63xZWMjsS0p4+jiIMkJ+SdRmeflM+60t2X4wAGl+ZYJo1fY5BJsf4eBz 8MufkkNPTO9STbbXdDetEmoUo9ZTRckEZkD4WKDLsX57rwCCw7lDqOLMQrA53KPb 6ZeN8dIWsdPfiRjb5wmXa4PvdqUau+k1un9s+2PIILsRtWQnuroXd8MLeM7OXlS6 RQYZ4GMZcGAfRpZtb60tcZqg+hsU4JkAVLDVjawaDkI3 -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:12 2026 by rpki-client