This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa File: 1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa (raw, json) Hash identifier: J9DAvhv9r0Mlaj2FFrH7O2ik+AlszrMRbhAMQDYeWAs= Subject key identifier: F8:3A:4A:69:39:22:29:F1:F3:83:90:F0:A3:63:83:1B:21:23:DC:2F Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab Certificate serial: 019B797F40B80C5F14BD71CB54FD35198171 Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209050 IP address blocks: 5.183.216.0/22 maxlen: 24 2a0e:a600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:40:b8:0c:5f:14:bd:71:cb:54:fd:35:19:81:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f83a4a69392229f1f38390f0a363831b2123dc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:51:c3:87:6b:72:75:a5:10:03:c0:ea:5f:f1: b4:ea:47:7c:b9:59:2a:91:21:26:d2:ec:84:4a:9b: 95:d1:48:65:af:0e:7a:41:39:40:68:cb:40:61:c3: ed:fc:61:27:08:6e:06:f4:73:7e:87:95:5a:7d:b7: 96:5c:51:74:51:e7:be:32:43:fc:72:a9:21:d3:77: 94:d0:b9:0c:75:72:2f:a8:2f:28:81:10:c9:f8:9b: c6:bc:36:2c:74:3f:70:1c:a6:88:18:fe:82:65:42: 68:ba:8c:15:8e:71:01:50:7c:73:f6:f4:5a:74:c2: 7c:c9:d4:99:80:d1:44:68:0e:98:77:4e:d5:50:f9: 50:86:29:e3:bd:31:99:4b:4f:11:10:a4:39:c9:dd: 41:b1:8b:8e:05:3e:a1:fb:8f:b0:b8:0e:03:c4:3d: 2d:87:a4:66:49:72:25:48:ad:ca:f5:c0:8b:2e:98: 42:ce:6b:ba:cf:16:4d:01:3b:7b:cd:1b:08:1b:d9: 89:51:f4:fe:7d:eb:fe:d9:91:a9:4a:29:e3:26:7d: 10:f9:77:07:dc:55:d9:08:35:3a:31:a7:26:a9:5f: 9c:4d:4d:06:83:5f:ee:88:f8:65:bb:c7:fb:d2:76: 26:70:33:3c:92:45:95:08:0f:73:46:ec:51:49:16: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3A:4A:69:39:22:29:F1:F3:83:90:F0:A3:63:83:1B:21:23:DC:2F X509v3 Authority Key Identifier: keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.216.0/22 IPv6: 2a0e:a600::/29 Signature Algorithm: sha256WithRSAEncryption 35:75:6b:10:bb:41:84:8e:c0:19:1a:88:14:b6:3c:1a:ee:64: b8:b7:fd:81:66:3d:6e:e0:81:93:df:cb:40:b5:fd:0b:df:73: a8:14:a1:78:e2:55:cd:75:f4:f7:a8:f2:61:66:a1:26:28:90: a8:26:da:f3:bc:bb:f0:c5:cc:bf:07:4f:c4:30:86:46:66:9e: 7f:01:5d:1a:34:8a:2a:4a:ce:90:67:60:d7:7d:26:0a:bd:bc: 71:a2:c2:8c:8e:aa:49:d0:ba:b9:4d:5b:e3:bf:18:18:09:b8: ff:40:2d:b7:ee:99:bb:68:76:2f:5a:7c:35:e7:22:5e:0a:e6: 93:0c:b8:84:c4:14:af:2f:51:4f:19:f6:a7:6d:cb:f3:05:36: c9:89:ed:0a:fb:36:86:31:ab:ed:85:8b:b8:0a:6a:10:cc:05: ce:11:32:9c:3e:cc:b2:7b:8a:b0:b8:13:80:8d:43:f4:57:5c: 1e:a1:ea:ae:dc:e1:ee:3e:df:46:7f:d0:9f:de:dc:14:0c:42: 46:07:5d:cc:df:a3:95:1e:92:96:c9:98:f5:c2:a7:f3:2e:e3: 78:d8:35:15:13:c6:a1:dd:5e:35:2a:27:be:62:c0:6a:32:74: 22:9f:66:3f:94:53:08:ce:b2:27:3f:4f:b9:7a:85:f9:ce:23: ec:74:df:a0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5f0C4DF8UvXHLVP01GYFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2E2NTQ5ZDI2NGY4OTk4YWU4YThkYmJkNjVhOTY0NTA0 ODk2YWIwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODNhNGE2OTM5MjIyOWYxZjM4MzkwZjBhMzYzODMxYjIxMjNkYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1HDh2tydaUQA8DqX/G06kd8uVkq kSEm0uyESpuV0Uhlrw56QTlAaMtAYcPt/GEnCG4G9HN+h5VafbeWXFF0Uee+MkP8 cqkh03eU0LkMdXIvqC8ogRDJ+JvGvDYsdD9wHKaIGP6CZUJouowVjnEBUHxz9vRa dMJ8ydSZgNFEaA6Yd07VUPlQhinjvTGZS08REKQ5yd1BsYuOBT6h+4+wuA4DxD0t h6RmSXIlSK3K9cCLLphCzmu6zxZNATt7zRsIG9mJUfT+fev+2ZGpSinjJn0Q+XcH 3FXZCDU6MacmqV+cTU0Gg1/uiPhlu8f70nYmcDM8kkWVCA9zRuxRSRbhEQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPg6Smk5Iinx84OQ8KNjgxshI9wvMB8GA1UdIwQY MBaAFBnKZUnSZPiZiuio271lqWRQSJarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEt NWU3MDBkZDZiOWVlLzEvMS1EcEthVGtpS2ZIemc1RHdvMk9ER3lFajNDOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTEvMTk1MDBhLWQ4YTktNGEzMS04OTMxLTVlNzAwZGQ2Yjll ZS8xL0djcGxTZEprLUptSzZLamJ2V1dwWkZCSWxxcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAgW32DAN BAIAAjAHAwUDKg6mADANBgkqhkiG9w0BAQsFAAOCAQEANXVrELtBhI7AGRqIFLY8 Gu5kuLf9gWY9buCBk9/LQLX9C99zqBSheOJVzXX096jyYWahJiiQqCba87y78MXM vwdPxDCGRmaefwFdGjSKKkrOkGdg130mCr28caLCjI6qSdC6uU1b478YGAm4/0At t+6Zu2h2L1p8NeciXgrmkwy4hMQUry9RTxn2p23L8wU2yYntCvs2hjGr7YWLuApq EMwFzhEynD7MsnuKsLgTgI1D9FdcHqHqrtzh7j7fRn/Qn97cFAxCRgddzN+jlR6S lsmY9cKn8y7jeNg1FRPGod1eNSonvmLAajJ0Ip9mP5RTCM6yJz9PuXqF+c4j7HTf oA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:26 2026 by rpki-client