This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/1-gvD7al892cvZ4RIDuyKy9oaP8E.roa File: 1-gvD7al892cvZ4RIDuyKy9oaP8E.roa (raw, json) Hash identifier: 3YuUrQDhY5WtE8QXyn7md8vc7m27H9qU1hbbb54ZWaY= Subject key identifier: FA:0B:C3:ED:A9:7C:F7:67:2F:67:84:48:0E:EC:8A:CB:DA:1A:3F:C1 Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4 Certificate serial: 019B7B356982031DF638ACAA18DBB60E9850 Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/1-gvD7al892cvZ4RIDuyKy9oaP8E.roa Signing time: Thu 01 Jan 2026 20:17:36 +0000 ROA not before: Thu 01 Jan 2026 20:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48702 IP address blocks: 83.137.242.0/24 maxlen: 24 83.137.243.0/24 maxlen: 24 83.137.244.0/24 maxlen: 24 83.137.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:69:82:03:1d:f6:38:ac:aa:18:db:b6:0e:98:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4 Validity Not Before: Jan 1 20:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa0bc3eda97cf7672f6784480eec8acbda1a3fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:57:6b:41:e4:38:1e:ed:13:56:c2:f6:84: 31:68:ba:51:e5:39:c3:ad:a7:d0:44:65:2f:6d:76: 4c:3d:6f:a7:00:0c:08:d6:ec:a6:2c:16:c1:d5:18: 97:ed:64:f0:92:62:31:c6:d2:a4:ee:0d:69:e7:54: 2a:0a:dd:4d:d8:a4:8f:d5:ec:a1:31:6f:6e:94:a1: 0c:c9:4d:68:5f:3f:83:d5:c7:33:ba:6b:fe:58:cb: f0:21:b0:8f:3c:8d:12:eb:a1:06:dd:bd:33:89:cc: 8c:21:cd:a3:ea:54:c6:57:c4:e1:8e:49:f4:0c:26: f1:c6:13:23:03:ce:f0:a1:04:00:66:3b:61:89:96: 78:7e:96:8f:b4:c0:4f:ed:36:3c:06:8d:b5:89:a9: 87:91:04:1f:7c:78:fb:a0:83:eb:b6:37:e6:6c:72: a2:e7:b6:37:1a:0e:b6:26:df:ad:10:50:31:5d:2b: b8:bc:67:59:b3:8a:56:c8:1e:ad:e4:d8:d4:82:bc: 85:5c:eb:68:d3:16:cb:cb:a7:74:9a:1d:8b:03:72: f1:4b:ce:3b:5d:c8:c7:c8:ea:5b:57:bd:76:73:75: 8f:59:d5:09:5d:64:8b:4a:8d:9c:ae:be:1b:02:3c: 5f:b1:43:35:0f:c5:90:36:c6:64:d1:ee:53:c4:45: 7b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0B:C3:ED:A9:7C:F7:67:2F:67:84:48:0E:EC:8A:CB:DA:1A:3F:C1 X509v3 Authority Key Identifier: keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/1-gvD7al892cvZ4RIDuyKy9oaP8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.242.0-83.137.244.255 83.137.247.0/24 Signature Algorithm: sha256WithRSAEncryption 36:a2:2d:0a:1d:70:0c:22:1c:ed:08:a1:61:9c:0a:63:60:97: 5e:08:5c:c9:78:87:bb:b3:30:1e:7f:2b:fc:c5:60:1a:c7:fc: e7:a8:30:58:c6:ad:ff:e1:a0:13:4f:b0:80:c0:80:39:4a:88: 0a:d6:77:2f:6d:81:8e:a3:d7:0f:65:a1:1f:5a:b2:59:b5:a3: b9:7a:7d:b8:8f:54:81:e1:11:c8:de:cb:4d:dd:68:b9:36:70: 41:3b:cb:6e:a7:19:6c:5d:29:6b:54:d4:8f:70:c5:02:87:39: cd:c9:d8:6e:f7:84:da:22:ec:8f:81:c7:51:e4:77:98:8d:fc: e6:ad:3d:32:eb:85:64:53:d0:98:43:96:fc:78:f1:04:42:52: 68:48:af:ea:84:30:d3:54:65:91:95:a5:1c:5d:f0:4c:f3:2b: a3:5a:8e:2c:9d:da:32:66:f4:fc:9c:dd:86:0e:01:e8:4d:2f: 3c:58:28:77:52:15:98:ab:94:c6:71:04:ef:7a:44:eb:8c:60: 02:9f:78:38:0a:4f:17:f1:1e:fe:85:c9:7e:b7:de:49:1f:32: fb:35:83:ef:6c:37:6f:5c:ed:fe:cb:12:82:4a:77:76:1b:21: 82:e9:07:71:ca:12:cc:f4:8c:e6:4e:55:3e:8f:0f:07:00:e8: a2:cb:45:67 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NWmCAx32OKyqGNu2DphQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2 ZjRkYjQwHhcNMjYwMTAxMjAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTBiYzNlZGE5N2NmNzY3MmY2Nzg0NDgwZWVjOGFjYmRhMWEzZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3BXa0HkOB7tE1bC9oQxaLpR5TnD rafQRGUvbXZMPW+nAAwI1uymLBbB1RiX7WTwkmIxxtKk7g1p51QqCt1N2KSP1eyh MW9ulKEMyU1oXz+D1cczumv+WMvwIbCPPI0S66EG3b0zicyMIc2j6lTGV8Thjkn0 DCbxxhMjA87woQQAZjthiZZ4fpaPtMBP7TY8Bo21iamHkQQffHj7oIPrtjfmbHKi 57Y3Gg62Jt+tEFAxXSu4vGdZs4pWyB6t5NjUgryFXOto0xbLy6d0mh2LA3LxS847 XcjHyOpbV712c3WPWdUJXWSLSo2crr4bAjxfsUM1D8WQNsZk0e5TxEV7mwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPoLw+2pfPdnL2eESA7sisvaGj/BMB8GA1UdIwQY MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt MmVlMmI3Mjk1ZGZmLzEvMS1ndkQ3YWw4OTJjdlo0UklEdXlLeTlvYVA4RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDEvNjczYjFkLTZkMTQtNGRmNS05OWFkLTJlZTJiNzI5NWRm Zi8xL1J0bWdwTFY2RHV4OFRsS2hHZHRMSEdWdlRiUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQBU4ny AwQAU4n0AwQAU4n3MA0GCSqGSIb3DQEBCwUAA4IBAQA2oi0KHXAMIhztCKFhnApj YJdeCFzJeIe7szAefyv8xWAax/znqDBYxq3/4aATT7CAwIA5SogK1ncvbYGOo9cP ZaEfWrJZtaO5en24j1SB4RHI3stN3Wi5NnBBO8tupxlsXSlrVNSPcMUChznNydhu 94TaIuyPgcdR5HeYjfzmrT0y64VkU9CYQ5b8ePEEQlJoSK/qhDDTVGWRlaUcXfBM 8yujWo4sndoyZvT8nN2GDgHoTS88WCh3UhWYq5TGcQTvekTrjGACn3g4Ck8X8R7+ hcl+t95JHzL7NYPvbDdvXO3+yxKCSnd2GyGC6QdxyhLM9IzmTlU+jw8HAOiiy0Vn -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:46 2026 by rpki-client