This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/gjckOvmNiIbZmA-TT11ORA--iTU.roa File: gjckOvmNiIbZmA-TT11ORA--iTU.roa (raw, json) Hash identifier: TpmN78WgePeN399lIDAzsZi1InWuYIsnhRRV8YOoTWc= Subject key identifier: 82:37:24:3A:F9:8D:88:86:D9:98:0F:93:4F:5D:4E:44:0F:BE:89:35 Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019B7834547347DDF9AC22147504A33C07CF Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/gjckOvmNiIbZmA-TT11ORA--iTU.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210016 IP address blocks: 46.21.251.0/24 maxlen: 24 212.126.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:54:73:47:dd:f9:ac:22:14:75:04:a3:3c:07:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8237243af98d8886d9980f934f5d4e440fbe8935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:01:c3:14:7d:3f:83:76:b8:49:68:22:a7: 39:ac:4f:d2:18:34:5f:81:72:97:25:d3:a3:53:ed: 99:e7:3c:5f:b2:5e:ff:88:35:a9:c5:1e:d1:a9:5b: 2f:e9:b2:d9:02:84:b2:26:99:c0:77:49:69:75:cf: ed:65:13:41:75:50:aa:36:6c:88:45:36:15:7f:3e: 67:0c:21:41:82:65:e5:25:19:98:69:c9:c3:94:61: b8:48:12:39:c9:4f:c3:a0:c6:23:07:6c:89:2e:91: aa:48:f4:52:a8:ab:0d:ab:d2:80:72:e2:4f:12:8d: 08:18:0c:8c:7e:95:e3:78:e5:f5:ea:ce:e7:33:b0: cc:89:d2:40:28:db:22:aa:af:de:4d:04:a6:25:67: 26:8e:32:20:6e:24:53:09:e3:9f:1b:15:60:57:80: 68:8b:4d:31:45:30:b4:14:58:9b:55:92:d5:22:e1: da:a8:8f:2e:2d:f9:a1:9f:15:e7:94:b8:df:33:d9: 53:ea:50:a8:f4:0f:3f:3b:95:d9:21:a0:c1:64:2d: f8:9b:30:37:65:2e:82:b8:51:ef:81:1c:23:09:27: b9:80:b4:b3:c1:b1:54:4c:8c:99:c6:ac:3a:b8:ac: ad:1a:7d:91:d8:7d:45:c7:60:ec:cb:9d:f6:37:5a: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:37:24:3A:F9:8D:88:86:D9:98:0F:93:4F:5D:4E:44:0F:BE:89:35 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/gjckOvmNiIbZmA-TT11ORA--iTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.21.251.0/24 212.126.116.0/24 Signature Algorithm: sha256WithRSAEncryption 72:c5:40:2a:62:42:93:69:ac:b5:78:da:73:e7:87:39:6c:7c: 1d:8f:45:27:5b:3d:b6:16:bf:b1:aa:91:80:b1:e9:58:54:aa: c2:c8:18:28:87:37:22:2a:d1:c3:c9:f6:8c:69:0d:20:f7:4f: 5e:2b:38:ac:cd:46:22:4a:35:50:45:68:1a:a8:7e:6c:db:74: 98:6c:73:e6:ec:64:d3:2d:35:1d:0d:d0:fb:b8:86:e1:3a:a5: 44:c2:8a:65:50:a0:ca:89:59:bf:eb:f6:c3:fa:4b:b3:f7:a4: 82:05:36:cf:8c:52:a3:44:9c:15:03:65:f5:52:6b:4c:cc:7f: 13:ee:db:7a:31:c3:cf:ec:78:dc:c0:7b:3d:36:24:ce:f5:b0: 54:dc:81:f4:1c:c8:1d:c5:1b:90:7c:b3:a8:7d:59:b1:4e:9e: ae:10:86:85:12:27:46:86:62:27:5f:08:0b:af:f1:1b:14:54: 8f:69:bc:89:ed:98:bc:98:8c:fe:f3:3c:cc:31:dc:b2:ce:ac: f1:d7:d1:c5:b9:ff:1c:e5:6f:5d:be:25:12:8a:33:c1:1a:c8: dd:f7:29:5a:eb:64:25:c1:43:49:24:47:8d:ef:bc:71:69:46: 2c:8b:18:c5:6c:e3:e9:e1:38:cf:f7:10:dd:54:90:d2:53:6d: aa:e1:08:2a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NFRzR935rCIUdQSjPAfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjM3MjQzYWY5OGQ4ODg2ZDk5ODBmOTM0ZjVkNGU0NDBmYmU4OTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmksBwxR9P4N2uEloIqc5rE/SGDRf gXKXJdOjU+2Z5zxfsl7/iDWpxR7RqVsv6bLZAoSyJpnAd0lpdc/tZRNBdVCqNmyI RTYVfz5nDCFBgmXlJRmYacnDlGG4SBI5yU/DoMYjB2yJLpGqSPRSqKsNq9KAcuJP Eo0IGAyMfpXjeOX16s7nM7DMidJAKNsiqq/eTQSmJWcmjjIgbiRTCeOfGxVgV4Bo i00xRTC0FFibVZLVIuHaqI8uLfmhnxXnlLjfM9lT6lCo9A8/O5XZIaDBZC34mzA3 ZS6CuFHvgRwjCSe5gLSzwbFUTIyZxqw6uKytGn2R2H1Fx2Dsy532N1rJRwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFII3JDr5jYiG2ZgPk09dTkQPvok1MB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xL2dqY2tPdm1OaUliWm1BLVRUMTFPUkEtLWlUVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNi ZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAuFfsD BADUfnQwDQYJKoZIhvcNAQELBQADggEBAHLFQCpiQpNprLV42nPnhzlsfB2PRSdb PbYWv7GqkYCx6VhUqsLIGCiHNyIq0cPJ9oxpDSD3T14rOKzNRiJKNVBFaBqofmzb dJhsc+bsZNMtNR0N0Pu4huE6pUTCimVQoMqJWb/r9sP6S7P3pIIFNs+MUqNEnBUD ZfVSa0zMfxPu23oxw8/seNzAez02JM71sFTcgfQcyB3FG5B8s6h9WbFOnq4QhoUS J0aGYidfCAuv8RsUVI9pvIntmLyYjP7zPMwx3LLOrPHX0cW5/xzlb12+JRKKM8Ea yN33KVrrZCXBQ0kkR43vvHFpRiyLGMVs4+nhOM/3EN1UkNJTbarhCCo= -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:19 2026 by rpki-client