This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa File: gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa (raw, json) Hash identifier: cJ8BX4jA9U2tBUDrfO2OTPW3pXUTcKwubUVTAQu92zI= Subject key identifier: 80:0A:22:E4:A7:0A:35:F1:FD:BD:A0:5B:DB:FC:29:9B:F1:70:39:CC Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Certificate serial: 019B7910B2BDDAFC7DF0D83A39F9B47B404B Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208938 IP address blocks: 82.193.86.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b2:bd:da:fc:7d:f0:d8:3a:39:f9:b4:7b:40:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=800a22e4a70a35f1fdbda05bdbfc299bf17039cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:2d:78:c7:cd:6b:fa:c8:9d:75:f5:20:30: b7:fe:0d:28:4d:df:f0:5f:57:a0:96:83:d5:9d:10: 95:41:fb:0d:55:ef:4b:c5:e6:a2:62:a7:f2:73:ad: 36:94:c9:9a:55:a7:64:22:60:a1:f8:45:1b:b7:3d: 77:07:4f:64:e7:87:40:79:99:d9:30:98:64:10:7e: 35:6a:a7:6f:e7:f8:8f:23:c3:e4:85:1e:4b:d6:22: a4:77:80:2a:e8:77:a8:11:08:7f:86:88:f0:c8:aa: 53:3a:60:95:45:70:20:67:15:5e:9f:1e:d2:a3:8c: e3:fe:26:07:7e:51:b9:f2:68:52:0a:be:1c:f9:ce: 66:da:4d:09:f0:5a:80:3d:dd:7c:75:f7:2b:60:0d: af:bc:25:21:e6:b1:87:76:41:0d:ba:0a:c4:04:ce: 6a:91:4d:e0:12:14:69:6b:6b:5e:cd:59:b6:57:4f: f2:09:85:d9:de:ed:70:62:ff:9b:07:a1:bf:a8:1f: 6c:8a:f2:41:72:2d:1b:36:af:09:c6:37:41:5e:d6: 24:bd:71:d4:9e:20:5f:5d:14:bd:f5:f0:cc:05:e4: 73:df:86:03:1a:7a:a1:42:34:81:07:f1:84:e7:2a: f0:fa:62:d9:8c:57:7d:d1:ba:ad:f6:10:9c:7d:58: 01:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0A:22:E4:A7:0A:35:F1:FD:BD:A0:5B:DB:FC:29:9B:F1:70:39:CC X509v3 Authority Key Identifier: keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.193.86.0/24 Signature Algorithm: sha256WithRSAEncryption b8:6c:f0:09:1b:f0:8f:f0:62:1f:ac:db:6d:9b:81:50:e1:1f: 71:36:95:59:c6:ec:a0:6c:f1:03:d9:93:7e:5b:1f:d6:59:69: 4d:76:ec:d6:cb:99:1f:32:b5:ee:12:13:e6:bb:c3:f6:66:0b: 87:22:df:ad:0c:93:82:4a:0f:03:cd:c7:79:af:75:03:47:e8: ac:c3:16:fc:99:ae:07:64:1e:0b:ee:48:9b:f2:e2:7f:6d:4e: f5:78:ba:32:1a:eb:5d:37:c3:d2:d0:81:ce:a5:76:62:e0:78: 58:9f:88:74:71:44:8b:91:33:95:09:c2:32:b8:0a:81:30:b2: 09:7f:de:26:83:5f:ff:80:9d:31:86:6d:d6:d9:f1:f7:f7:f9: d7:f8:6b:2f:1d:07:a4:ca:22:c0:7f:97:36:43:34:d7:73:47: f7:d2:2c:98:d6:bc:e8:ff:f9:c5:ea:e7:30:ef:33:d0:85:8c: c2:e9:2e:9e:52:c4:b2:b2:5f:39:35:b1:cc:bf:42:3e:3a:39: ec:6d:99:5c:d9:ee:d5:37:b7:9a:59:ce:c2:7f:21:a9:88:36: 18:f5:be:f1:db:7b:fc:06:30:73:76:3a:b7:5c:d7:29:c3:12: 72:89:28:7f:bf:de:b0:78:7e:3e:b4:62:22:23:8b:f0:0e:00: 81:e5:d6:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELK92vx98Ng6Ofm0e0BLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz NzQ5ZTIwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDBhMjJlNGE3MGEzNWYxZmRiZGEwNWJkYmZjMjk5YmYxNzAzOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr84teMfNa/rInXX1IDC3/g0oTd/w X1egloPVnRCVQfsNVe9LxeaiYqfyc602lMmaVadkImCh+EUbtz13B09k54dAeZnZ MJhkEH41aqdv5/iPI8PkhR5L1iKkd4Aq6HeoEQh/hojwyKpTOmCVRXAgZxVenx7S o4zj/iYHflG58mhSCr4c+c5m2k0J8FqAPd18dfcrYA2vvCUh5rGHdkENugrEBM5q kU3gEhRpa2tezVm2V0/yCYXZ3u1wYv+bB6G/qB9sivJBci0bNq8JxjdBXtYkvXHU niBfXRS99fDMBeRz34YDGnqhQjSBB/GE5yrw+mLZjFd90bqt9hCcfVgBnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIAKIuSnCjXx/b2gW9v8KZvxcDnMMB8GA1UdIwQY MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt YzVlNmQyM2Y4YjA5LzEvZ0FvaTVLY0tOZkg5dmFCYjJfd3BtX0Z3T2N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5 LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsFWMA0G CSqGSIb3DQEBCwUAA4IBAQC4bPAJG/CP8GIfrNttm4FQ4R9xNpVZxuygbPED2ZN+ Wx/WWWlNduzWy5kfMrXuEhPmu8P2ZguHIt+tDJOCSg8Dzcd5r3UDR+iswxb8ma4H ZB4L7kib8uJ/bU71eLoyGutdN8PS0IHOpXZi4HhYn4h0cUSLkTOVCcIyuAqBMLIJ f94mg1//gJ0xhm3W2fH39/nX+GsvHQekyiLAf5c2QzTXc0f30iyY1rzo//nF6ucw 7zPQhYzC6S6eUsSysl85NbHMv0I+OjnsbZlc2e7VN7eaWc7CfyGpiDYY9b7x23v8 BjBzdjq3XNcpwxJyiSh/v96weH4+tGIiI4vwDgCB5dbU -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:53 2026 by rpki-client