This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa File: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (raw, json) Hash identifier: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s= Subject key identifier: 1A:D3:49:D2:59:A8:43:D6:6E:A8:2A:65:DF:E2:78:45:EE:EE:9B:59 Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Certificate serial: 019B7D5CAF32806ED44F5D8E572E1AACA47F Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12670 IP address blocks: 91.234.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:af:32:80:6e:d4:4f:5d:8e:57:2e:1a:ac:a4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ad349d259a843d66ea82a65dfe27845eeee9b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:83:66:02:13:e7:85:d8:eb:f9:8e:c2:df: f5:23:e1:e7:aa:03:69:c9:39:d1:46:95:fa:37:75: d1:21:a9:7a:31:7d:31:26:36:2b:8a:41:1d:5a:b4: dd:ba:58:2c:5d:0a:75:0c:e6:65:79:b2:a7:09:51: a0:19:53:a4:f0:68:0f:06:83:09:bd:05:be:9b:25: 52:ad:db:db:5d:34:27:5f:ec:fc:66:3d:84:43:dd: 5b:e7:13:cf:cd:21:1f:cd:5e:3c:98:d1:4e:2e:e6: 8f:19:4e:2b:fa:17:f5:d6:ab:05:80:76:aa:85:37: 00:3d:c1:c6:bf:a7:77:15:d8:41:9e:66:a6:66:a6: 4f:bc:43:76:b3:b2:98:58:ee:e3:31:6a:95:29:fd: 03:3c:2b:8f:93:0d:49:30:c5:5b:34:15:49:7a:a1: 2e:c7:a0:cc:33:bf:11:aa:7a:a4:ee:b4:c1:f3:dc: 17:2c:0e:de:95:9b:f6:13:c0:79:1f:23:ae:cd:b3: 0b:23:e9:2b:b2:1e:d6:47:4c:dd:b6:d7:e7:4e:58: 2c:f6:a0:c9:af:dc:ea:37:ee:62:3a:34:33:51:6d: 85:cc:57:ab:c9:27:27:f1:c7:75:16:8d:f8:88:c5: 08:38:5c:ef:4a:98:37:40:ff:c3:ca:15:e5:be:80: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D3:49:D2:59:A8:43:D6:6E:A8:2A:65:DF:E2:78:45:EE:EE:9B:59 X509v3 Authority Key Identifier: keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.9.0/24 Signature Algorithm: sha256WithRSAEncryption 16:b6:34:f9:5b:20:8c:61:56:1c:aa:e7:2e:d9:e2:03:45:3b: a2:ea:b4:7b:80:d8:23:a6:a7:d7:71:9f:b6:c8:53:f8:71:4e: 0b:34:e5:ef:e4:1a:82:8b:46:78:90:c1:38:02:03:05:02:af: 4f:7c:a5:02:44:7b:15:e1:f0:23:c0:3b:c6:d2:7f:71:c3:21: 3b:35:a6:51:72:b0:b7:c7:74:8e:c1:ee:81:05:13:4b:53:02: 5e:d8:5f:4d:70:08:4b:99:9b:3d:ff:63:ce:e8:e9:f6:23:41: b7:4a:b5:c3:7a:dc:bb:66:cc:f7:56:6b:0c:30:cc:24:80:e5: 1a:db:9e:9c:93:e3:c1:8d:d9:fc:e9:1e:f6:e0:6b:b8:af:7b: 6f:0b:d0:41:c1:35:32:fc:0f:f3:c9:88:fc:56:cf:3f:32:b8: 5e:09:4f:9b:99:bc:ca:36:42:5b:8d:48:71:d2:6d:89:96:65: 32:97:a8:d0:37:90:4d:9d:7f:ef:c1:0f:c6:1e:0f:48:70:bb: e0:c7:5f:34:f4:8d:0c:ad:34:73:77:e0:d3:4f:fa:35:74:98: 48:f8:1b:15:05:32:29:5b:77:48:c5:c6:09:1f:05:eb:bb:ff: f2:e0:e5:0d:29:0f:a7:01:dd:d9:a0:87:27:0a:16:8d:17:06: 8b:a1:65:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XK8ygG7UT12OVy4arKR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzE4MGM0YmFkM2NmNDI1YTUwNjcyZTFjYjdhOWQyYWM3 OGUyMGMwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWQzNDlkMjU5YTg0M2Q2NmVhODJhNjVkZmUyNzg0NWVlZWU5YjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArImDZgIT54XY6/mOwt/1I+HnqgNp yTnRRpX6N3XRIal6MX0xJjYrikEdWrTdulgsXQp1DOZlebKnCVGgGVOk8GgPBoMJ vQW+myVSrdvbXTQnX+z8Zj2EQ91b5xPPzSEfzV48mNFOLuaPGU4r+hf11qsFgHaq hTcAPcHGv6d3FdhBnmamZqZPvEN2s7KYWO7jMWqVKf0DPCuPkw1JMMVbNBVJeqEu x6DMM78Rqnqk7rTB89wXLA7elZv2E8B5HyOuzbMLI+krsh7WR0zdttfnTlgs9qDJ r9zqN+5iOjQzUW2FzFeryScn8cd1Fo34iMUIOFzvSpg3QP/DyhXlvoCl1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBrTSdJZqEPWbqgqZd/ieEXu7ptZMB8GA1UdIwQY MBaAFM5xgMS6089CWlBnLhy3qdKseOIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQt MDQ2ZDJlMmFkY2Q1LzEvR3ROSjBsbW9ROVp1cUNwbDMtSjRSZTd1bTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQtMDQ2ZDJlMmFkY2Q1 LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+oJMA0G CSqGSIb3DQEBCwUAA4IBAQAWtjT5WyCMYVYcqucu2eIDRTui6rR7gNgjpqfXcZ+2 yFP4cU4LNOXv5BqCi0Z4kME4AgMFAq9PfKUCRHsV4fAjwDvG0n9xwyE7NaZRcrC3 x3SOwe6BBRNLUwJe2F9NcAhLmZs9/2PO6On2I0G3SrXDety7Zsz3VmsMMMwkgOUa 256ck+PBjdn86R724Gu4r3tvC9BBwTUy/A/zyYj8Vs8/MrheCU+bmbzKNkJbjUhx 0m2JlmUyl6jQN5BNnX/vwQ/GHg9IcLvgx1809I0MrTRzd+DTT/o1dJhI+BsVBTIp W3dIxcYJHwXru//y4OUNKQ+nAd3ZoIcnChaNFwaLoWWR -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:34 2026 by rpki-client