This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/G_rLb1NHBdbT4ggKLzWbI18udZ4.roa File: G_rLb1NHBdbT4ggKLzWbI18udZ4.roa (raw, json) Hash identifier: 4GIc2uDLUKOt0yM8/St7IKalsIdESkoGix2DNQwzQiI= Subject key identifier: 1B:FA:CB:6F:53:47:05:D6:D3:E2:08:0A:2F:35:9B:23:5F:2E:75:9E Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B7C13594F4BC3F22C2191BB68B749EC61 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/G_rLb1NHBdbT4ggKLzWbI18udZ4.roa Signing time: Fri 02 Jan 2026 00:20:01 +0000 ROA not before: Fri 02 Jan 2026 00:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8452 IP address blocks: 45.85.188.0/24 maxlen: 24 2a0e:4200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:59:4f:4b:c3:f2:2c:21:91:bb:68:b7:49:ec:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bfacb6f534705d6d3e2080a2f359b235f2e759e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:1c:e5:f2:12:2b:29:17:d7:a1:c2:5e:5b: d1:ea:71:0a:66:e5:f0:09:2e:82:3b:19:a7:b0:2e: b2:5b:be:11:0d:db:45:15:a5:b9:e0:37:c2:2f:6f: 22:ca:d2:25:82:72:7e:10:a9:af:0d:43:e0:7e:3d: 53:5c:a4:d0:1a:5f:37:67:31:0a:49:fe:59:52:23: 6a:c9:10:75:e7:de:81:6a:a3:a0:ef:e7:b4:fc:c9: 63:d1:0f:83:d2:1a:07:b3:e1:f8:4b:f4:75:4a:57: 97:cd:72:3e:ff:5a:47:5f:61:3b:39:aa:b5:9e:e5: d8:17:55:0a:48:2d:39:0e:da:f6:43:55:a5:75:e8: 04:6d:24:96:e0:18:81:c9:0b:a8:61:5c:0f:5b:71: f0:db:28:c8:22:51:93:83:53:21:08:6c:0b:21:20: 58:31:3b:7e:cd:9b:3a:7b:6b:42:ba:6d:ee:f2:ea: cf:9c:c9:98:5e:9a:27:01:24:6d:db:81:65:b6:d7: 92:6b:21:b0:23:e7:91:d5:2e:a4:c0:72:bb:8a:9c: 93:31:f8:7b:64:12:a7:63:f0:9f:59:2c:b6:08:ba: 67:24:f1:3f:9a:ef:d5:27:23:9f:cb:c7:1c:17:eb: 97:83:2c:8b:ea:f0:06:b5:8b:98:fa:4e:cd:80:df: dd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FA:CB:6F:53:47:05:D6:D3:E2:08:0A:2F:35:9B:23:5F:2E:75:9E X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/G_rLb1NHBdbT4ggKLzWbI18udZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.188.0/24 IPv6: 2a0e:4200::/32 Signature Algorithm: sha256WithRSAEncryption 01:b9:93:6b:13:49:ab:7a:7c:64:ca:ab:a7:3e:ea:cd:11:5b: f4:d0:85:fa:51:43:2c:97:bc:b1:15:45:26:f3:79:5f:24:1e: 92:8c:97:d8:ca:ac:0f:a2:4d:3c:95:b6:dc:5d:2b:91:2a:e1: 9c:50:bf:b3:3a:ec:7a:3d:fb:d1:26:e7:92:0f:4b:b8:cd:cd: ad:a0:70:ff:6c:63:41:2f:7c:02:6d:43:6e:f2:b7:e4:3c:d0: 7a:dd:14:90:77:c7:67:3c:57:04:a0:41:f3:59:9b:35:01:f0: 10:94:3e:fa:95:4d:8b:91:60:6b:45:9a:2c:6d:c7:77:6f:4a: e7:34:fc:c4:12:ae:e7:e1:ce:0f:ad:fd:b5:2d:ea:9b:b3:29: e8:8c:82:09:56:1f:58:97:98:d7:4c:41:0b:3b:fe:76:12:8b: 3d:9d:77:3e:13:2a:ab:1c:07:ab:61:f2:3f:00:f7:34:0d:bb: 5b:c4:6d:47:76:b0:0d:7b:ca:e8:b7:60:91:92:39:5d:a2:a8: 1e:92:37:4e:3a:ba:1f:a9:d6:f6:f1:6a:8c:3a:74:eb:c9:a7: e0:4f:92:d6:44:3c:be:11:d1:5b:f0:83:80:fe:19:e1:29:6d: c1:ac:82:f3:73:b5:1d:59:22:35:bb:3f:e1:7d:39:45:8d:14: 57:6f:43:d6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8E1lPS8PyLCGRu2i3SexhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmZhY2I2ZjUzNDcwNWQ2ZDNlMjA4MGEyZjM1OWIyMzVmMmU3NTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bkc5fISKykX16HCXlvR6nEKZuXw CS6COxmnsC6yW74RDdtFFaW54DfCL28iytIlgnJ+EKmvDUPgfj1TXKTQGl83ZzEK Sf5ZUiNqyRB1596BaqOg7+e0/Mlj0Q+D0hoHs+H4S/R1SleXzXI+/1pHX2E7Oaq1 nuXYF1UKSC05Dtr2Q1WldegEbSSW4BiByQuoYVwPW3Hw2yjIIlGTg1MhCGwLISBY MTt+zZs6e2tCum3u8urPnMmYXponASRt24FltteSayGwI+eR1S6kwHK7ipyTMfh7 ZBKnY/CfWSy2CLpnJPE/mu/VJyOfy8ccF+uXgyyL6vAGtYuY+k7NgN/dRwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBv6y29TRwXW0+IICi81myNfLnWeMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvR19yTGIxTkhCZGJUNGdnS0x6V2JJMTh1ZFo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVW8MA0E AgACMAcDBQAqDkIAMA0GCSqGSIb3DQEBCwUAA4IBAQABuZNrE0mrenxkyqunPurN EVv00IX6UUMsl7yxFUUm83lfJB6SjJfYyqwPok08lbbcXSuRKuGcUL+zOux6PfvR JueSD0u4zc2toHD/bGNBL3wCbUNu8rfkPNB63RSQd8dnPFcEoEHzWZs1AfAQlD76 lU2LkWBrRZosbcd3b0rnNPzEEq7n4c4Prf21LeqbsynojIIJVh9Yl5jXTEELO/52 Eos9nXc+EyqrHAerYfI/APc0DbtbxG1HdrANe8rot2CRkjldoqgekjdOOrofqdb2 8WqMOnTryafgT5LWRDy+EdFb8IOA/hnhKW3BrILzc7UdWSI1uz/hfTlFjRRXb0PW -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:30 2026 by rpki-client