This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/gL9EqHQMs4bG4oMIFAFssgsZoOA.roa File: gL9EqHQMs4bG4oMIFAFssgsZoOA.roa (raw, json) Hash identifier: 3prBqAaTJvJVtGOfAi6JZ5inmYJTvI1RJCOwmGXICQ4= Subject key identifier: 80:BF:44:A8:74:0C:B3:86:C6:E2:83:08:14:01:6C:B2:0B:19:A0:E0 Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Certificate serial: 019B79ECD6A3ACB443D6A59C9D7804A488DC Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/gL9EqHQMs4bG4oMIFAFssgsZoOA.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 194.49.57.0/24 maxlen: 24 194.49.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d6:a3:ac:b4:43:d6:a5:9c:9d:78:04:a4:88:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80bf44a8740cb386c6e2830814016cb20b19a0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:0c:b8:ad:88:08:04:c5:63:d5:3d:ea:81: df:cc:15:65:9d:e7:32:f3:8b:2d:21:0f:70:5e:ab: 3d:f0:68:22:67:11:13:e0:f3:80:2a:95:df:b8:89: 8c:c2:fb:f2:2b:46:4e:1c:1c:4d:6f:4c:4b:f7:76: 05:ab:d7:c9:cf:e7:10:41:f4:89:92:8e:33:f4:f2: 7d:10:1a:05:5d:14:0d:d9:71:be:33:e6:15:5a:a5: f6:af:37:cd:75:b8:39:34:c0:5b:32:72:3e:98:12: e2:9e:05:0c:04:31:92:bc:09:18:23:93:e0:93:af: e9:92:41:9b:ad:73:85:cb:08:9e:d3:01:bc:4f:a1: 4d:80:93:99:cd:f3:6a:6b:05:43:8a:ec:75:82:3f: 77:ae:77:99:21:bb:3d:45:8b:e2:be:ad:b8:af:a1: 66:4f:c9:a1:a9:c0:ed:f1:ee:f8:13:34:fb:7c:dc: 74:e4:b0:5c:a3:58:ff:ab:bc:18:ec:53:f3:9a:17: dd:b2:92:ce:29:46:22:b7:78:d6:2c:30:e6:f6:94: 15:51:c5:a7:f2:bc:71:d1:df:88:90:a5:78:08:e3: 73:70:b6:8a:b4:91:3a:26:5c:98:83:ac:bc:35:46: 22:2c:1e:7a:91:aa:9f:a2:08:fb:c3:ee:92:d5:ed: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BF:44:A8:74:0C:B3:86:C6:E2:83:08:14:01:6C:B2:0B:19:A0:E0 X509v3 Authority Key Identifier: keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/gL9EqHQMs4bG4oMIFAFssgsZoOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.57.0/24 194.49.59.0/24 Signature Algorithm: sha256WithRSAEncryption 26:4a:f2:f4:d6:de:6e:a4:f0:03:9a:7d:46:b7:43:b3:9c:df: 5c:f6:aa:1f:1e:67:de:24:bd:db:e8:2a:3b:d0:58:9d:45:e8: aa:a6:11:d7:68:ac:06:c7:4f:0e:5e:4f:0f:f5:d3:83:3d:eb: a7:22:7a:91:95:6d:8c:05:09:08:19:c8:8e:4c:a9:83:78:bf: b5:54:5c:86:33:97:fa:9e:ff:0f:38:4f:89:f7:88:29:ff:31: b8:b5:8c:65:d6:14:9a:f9:13:2d:81:02:86:b0:82:53:1a:51: 1b:b5:50:6c:47:e2:c2:27:bf:99:05:4c:51:88:8d:cd:c6:79: fc:c8:14:21:28:23:d3:a4:c8:d1:bd:99:d5:e7:e0:6c:1b:c8: eb:16:30:cb:0c:56:06:d7:e5:6d:fd:bc:6d:5d:bf:85:10:27: 67:f4:ef:12:2d:15:f1:76:fb:96:c1:91:92:8d:7e:f2:94:07: 95:ae:5a:60:7e:6e:d1:7d:2f:b2:9b:81:d6:88:49:07:d8:ee: dc:60:df:7f:ce:03:16:f3:a8:23:60:e7:a9:f4:5b:73:0a:6c: ca:6e:42:8c:7f:c1:32:89:5b:71:e6:ff:6e:13:4e:cc:a2:33: 04:70:49:c3:f9:6b:e9:7d:e1:9c:79:90:a6:e6:e2:a0:1b:4f: 00:89:58:e7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57NajrLRD1qWcnXgEpIjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZmEyOTM2OGM4YmU2OWM4ZWRkNWFhMTkzNTU3ZmNiYTJh NTdlYzgwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGJmNDRhODc0MGNiMzg2YzZlMjgzMDgxNDAxNmNiMjBiMTlhMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPEMuK2ICATFY9U96oHfzBVlnecy 84stIQ9wXqs98GgiZxET4POAKpXfuImMwvvyK0ZOHBxNb0xL93YFq9fJz+cQQfSJ ko4z9PJ9EBoFXRQN2XG+M+YVWqX2rzfNdbg5NMBbMnI+mBLingUMBDGSvAkYI5Pg k6/pkkGbrXOFywie0wG8T6FNgJOZzfNqawVDiux1gj93rneZIbs9RYvivq24r6Fm T8mhqcDt8e74EzT7fNx05LBco1j/q7wY7FPzmhfdspLOKUYit3jWLDDm9pQVUcWn 8rxx0d+IkKV4CONzcLaKtJE6JlyYg6y8NUYiLB56kaqfogj7w+6S1e2bZQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIC/RKh0DLOGxuKDCBQBbLILGaDgMB8GA1UdIwQY MBaAFD36KTaMi+acjt1aoZNVf8uipX7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODkt YmQ1OGQwMDIxYTA5LzEvZ0w5RXFIUU1zNGJHNG9NSUZBRnNzZ3Nab09BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODktYmQ1OGQwMDIxYTA5 LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwjE5AwQA wjE7MA0GCSqGSIb3DQEBCwUAA4IBAQAmSvL01t5upPADmn1Gt0OznN9c9qofHmfe JL3b6Co70FidReiqphHXaKwGx08OXk8P9dODPeunInqRlW2MBQkIGciOTKmDeL+1 VFyGM5f6nv8POE+J94gp/zG4tYxl1hSa+RMtgQKGsIJTGlEbtVBsR+LCJ7+ZBUxR iI3Nxnn8yBQhKCPTpMjRvZnV5+BsG8jrFjDLDFYG1+Vt/bxtXb+FECdn9O8SLRXx dvuWwZGSjX7ylAeVrlpgfm7RfS+ym4HWiEkH2O7cYN9/zgMW86gjYOep9FtzCmzK bkKMf8EyiVtx5v9uE07MojMEcEnD+WvpfeGceZCm5uKgG08AiVjn -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:33 2026 by rpki-client