This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/Gzc5BxD8yLe_aSYEhdH7qxC53Bk.roa File: Gzc5BxD8yLe_aSYEhdH7qxC53Bk.roa (raw, json) Hash identifier: K0PmYBi2jbuDcvq/ABfyge5LDH1NQzitSjirHjoyzGI= Subject key identifier: 1B:37:39:07:10:FC:C8:B7:BF:69:26:04:85:D1:FB:AB:10:B9:DC:19 Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Certificate serial: 019B8DC2E218309FAFC503F1EC0695F48C46 Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/Gzc5BxD8yLe_aSYEhdH7qxC53Bk.roa Signing time: Mon 05 Jan 2026 10:45:17 +0000 ROA not before: Mon 05 Jan 2026 10:45:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216472 IP address blocks: 89.43.132.0/24 maxlen: 24 89.43.133.0/24 maxlen: 24 89.43.134.0/24 maxlen: 24 89.43.135.0/24 maxlen: 24 128.0.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:c2:e2:18:30:9f:af:c5:03:f1:ec:06:95:f4:8c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Validity Not Before: Jan 5 10:45:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b37390710fcc8b7bf69260485d1fbab10b9dc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:59:70:03:ae:b3:4a:66:25:c3:c4:9e:20: e0:d6:5a:5a:c9:7e:51:d1:1a:97:5f:95:02:f0:c5: ef:6c:3f:0d:ae:f0:b0:02:aa:bb:78:28:c0:b3:74: a1:8f:27:cf:0f:3e:36:7f:16:0a:fc:49:ed:a2:07: 43:79:1e:d3:4d:af:84:38:8c:c4:46:32:42:6b:8a: 06:7c:8d:3a:90:bd:c3:1b:28:ec:94:e9:18:d5:d4: 0b:12:0f:ce:a2:01:cf:34:20:0c:27:0e:fd:91:07: f5:6d:07:44:2c:14:4d:c8:31:1f:ab:91:34:db:90: 16:2d:c3:fc:80:4f:32:bd:d9:a7:26:ba:0a:ab:8b: fb:35:c7:e1:5a:f8:68:e4:3d:96:3e:53:64:3d:ee: 57:e4:f6:5a:69:85:55:01:90:2b:db:38:46:95:07: 23:0c:7f:67:c9:e4:f4:ad:25:33:fd:d9:70:a0:48: 7b:b6:6e:53:e2:3b:56:8b:d6:e8:d1:0f:03:4d:54: 4a:94:b1:67:2c:3a:0c:11:05:c5:81:04:7e:3d:fd: 9a:1d:c6:b2:45:f4:39:c9:1f:ed:67:29:d1:48:ca: 08:4c:38:68:03:16:9c:23:1b:a3:9e:87:44:08:42: 42:8e:1e:64:ce:0d:7f:68:55:1a:73:6e:2e:d1:ff: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:37:39:07:10:FC:C8:B7:BF:69:26:04:85:D1:FB:AB:10:B9:DC:19 X509v3 Authority Key Identifier: keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/Gzc5BxD8yLe_aSYEhdH7qxC53Bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.132.0/22 128.0.7.0/24 Signature Algorithm: sha256WithRSAEncryption 27:66:27:c7:37:ae:b4:48:d7:f4:8e:ea:76:a7:cb:44:f4:14: fb:8e:35:72:be:cc:36:3d:48:ae:bb:ed:58:6c:11:2c:58:9f: 07:81:87:8a:0f:4d:5e:dd:7f:a3:9d:ed:04:d7:52:a0:bc:c7: 65:a2:49:29:a0:e3:4a:65:93:9b:ef:f4:32:31:8e:ee:b6:3e: 25:69:56:bc:7b:f6:ff:d6:07:27:c9:19:62:bf:00:02:8a:8f: 91:45:03:33:fe:46:5a:35:01:fa:6f:a2:98:d0:c8:95:4e:8b: 08:b1:db:be:8d:3c:51:2e:9a:c5:89:71:cb:bd:62:83:61:51: d3:35:e2:79:cf:ab:d7:c0:e8:6e:4c:5c:5a:69:3f:5e:e3:d3: 0a:4a:f8:2d:4f:71:64:8f:50:de:09:09:fc:93:ca:45:c5:a3: 75:49:b9:67:11:a9:b3:88:f2:fd:8a:7f:17:89:f7:ed:2b:30: 11:c1:bb:9d:98:8f:e1:e8:d8:65:f9:78:ac:ec:db:92:f2:ec: 77:22:8b:fa:a1:d5:4a:ec:23:dd:af:9e:e7:79:55:c8:a2:ad: 64:7e:e1:47:8b:f3:f3:f6:fb:ba:33:d9:d3:91:e0:ed:90:55: 57:d7:54:df:25:91:a1:5e:83:44:20:99:a2:24:8d:73:e5:9b: 54:d4:a6:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuNwuIYMJ+vxQPx7AaV9IxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0 YjdkNDcwHhcNMjYwMTA1MTA0NTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjM3MzkwNzEwZmNjOGI3YmY2OTI2MDQ4NWQxZmJhYjEwYjlkYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpxZcAOus0pmJcPEniDg1lpayX5R 0RqXX5UC8MXvbD8NrvCwAqq7eCjAs3ShjyfPDz42fxYK/EntogdDeR7TTa+EOIzE RjJCa4oGfI06kL3DGyjslOkY1dQLEg/OogHPNCAMJw79kQf1bQdELBRNyDEfq5E0 25AWLcP8gE8yvdmnJroKq4v7NcfhWvho5D2WPlNkPe5X5PZaaYVVAZAr2zhGlQcj DH9nyeT0rSUz/dlwoEh7tm5T4jtWi9bo0Q8DTVRKlLFnLDoMEQXFgQR+Pf2aHcay RfQ5yR/tZynRSMoITDhoAxacIxujnodECEJCjh5kzg1/aFUac24u0f//1wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBs3OQcQ/Mi3v2kmBIXR+6sQudwZMB8GA1UdIwQY MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt ODM2Mzg0NzVkOGFiLzEvR3pjNUJ4RDh5TGVfYVNZRWhkSDdxeEM1M0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWSuEAwQA gAAHMA0GCSqGSIb3DQEBCwUAA4IBAQAnZifHN660SNf0jup2p8tE9BT7jjVyvsw2 PUiuu+1YbBEsWJ8HgYeKD01e3X+jne0E11KgvMdlokkpoONKZZOb7/QyMY7utj4l aVa8e/b/1gcnyRlivwACio+RRQMz/kZaNQH6b6KY0MiVTosIsdu+jTxRLprFiXHL vWKDYVHTNeJ5z6vXwOhuTFxaaT9e49MKSvgtT3Fkj1DeCQn8k8pFxaN1SblnEamz iPL9in8XifftKzARwbudmI/h6Nhl+Xis7NuS8ux3Iov6odVK7CPdr57neVXIoq1k fuFHi/Pz9vu6M9nTkeDtkFVX11TfJZGhXoNEIJmiJI1z5ZtU1KYt -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:05 2026 by rpki-client