This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/gG12zQ9GIzWIe8J-nL_3zIACec4.roa File: gG12zQ9GIzWIe8J-nL_3zIACec4.roa (raw, json) Hash identifier: 7EVnJBXzQgBi1RMypgklddOJkUa6XyxYAb4uWOaA9Uk= Subject key identifier: 80:6D:76:CD:0F:46:23:35:88:7B:C2:7E:9C:BF:F7:CC:80:02:79:CE Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc Certificate serial: 019B7A5B0F65126D0FFF27A3E68E1A0A9EB4 Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/gG12zQ9GIzWIe8J-nL_3zIACec4.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 91.232.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0f:65:12:6d:0f:ff:27:a3:e6:8e:1a:0a:9e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=806d76cd0f462335887bc27e9cbff7cc800279ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:eb:e4:d7:03:2b:a4:6b:3a:1e:33:96:51: 78:9b:30:1a:2c:fb:24:55:73:1e:3c:17:fc:fb:92: ac:ad:22:f0:cc:d6:d3:c6:fd:1e:b2:ca:09:73:15: e8:6c:c8:ff:b2:e2:16:64:1c:f7:c3:f2:75:b7:be: c2:58:e8:a0:9b:53:14:1c:6f:95:49:ef:83:34:94: f5:40:a1:52:b5:fc:17:12:50:0a:9b:25:67:a9:13: 4d:e8:ab:95:32:8a:72:c0:8e:d6:e2:50:01:e4:bb: 24:25:b4:a0:ba:46:6a:af:ea:a9:d7:f4:ad:6e:3c: 14:ec:3f:74:62:31:4f:77:83:8b:eb:93:61:67:e0: e0:10:53:d1:6d:22:f9:1d:d9:a8:96:88:53:e0:11: 72:55:46:84:77:81:8c:36:54:40:10:82:88:4f:1b: df:54:38:a0:81:75:aa:f5:17:c8:87:8c:9a:6f:fb: 61:ee:82:be:ac:ba:c1:18:62:cc:98:fd:a5:dc:49: 18:04:b5:b8:a1:e9:61:a9:52:0a:50:20:81:52:5b: 4a:10:5c:50:59:ec:c5:46:48:01:15:45:d9:32:1f: 14:0a:f6:5a:8d:1c:57:f3:fa:68:f4:0b:cf:87:8c: 5b:03:65:66:c2:9f:77:6e:e7:25:cd:b2:25:9a:3a: 1b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6D:76:CD:0F:46:23:35:88:7B:C2:7E:9C:BF:F7:CC:80:02:79:CE X509v3 Authority Key Identifier: keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/gG12zQ9GIzWIe8J-nL_3zIACec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.83.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:0e:9c:60:1c:fb:a3:ef:40:30:3b:7a:fe:80:ce:5f:de:f1: 95:2a:b6:ed:93:c7:95:d7:f7:2c:ea:a3:01:e7:f5:fe:1f:86: ef:a9:8d:1b:4d:23:c9:e4:f3:61:de:0b:4f:df:19:48:79:05: 46:7b:46:38:c9:3e:2e:7e:d9:34:c4:37:da:c9:e5:35:bd:cf: 70:1f:0b:bf:71:a9:c1:44:44:7c:6e:1c:94:52:f2:53:c8:fc: b5:25:7b:81:c3:13:43:74:06:7f:1b:38:9c:38:84:66:e6:d0: 77:9a:fa:b5:8f:43:c9:46:9f:2e:bb:c1:c6:41:a3:a7:26:d1: 19:d0:d9:0b:56:03:2f:2d:53:17:fb:2c:b3:1f:16:7d:71:23: f8:1a:87:f6:94:e6:ec:96:b9:bd:9a:64:be:60:56:89:bc:4f: ed:82:79:2d:73:4d:83:a4:c4:90:78:a8:9e:da:fc:e8:e0:a9: 87:e2:ca:ce:26:b5:d6:0d:c0:f3:7e:53:67:14:33:48:1d:30: 51:ff:86:90:4e:34:08:86:2d:ff:f8:73:45:46:21:3b:b1:6c: b5:80:78:73:f1:6f:69:83:9a:c2:7b:15:a8:98:e3:85:c3:5d: 80:5e:f6:3a:17:26:ca:5c:19:0f:12:97:58:2d:1d:1b:d3:8b: 1f:e0:98:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ww9lEm0P/yej5o4aCp60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWIxY2Q1ZWU1ZWIwM2RmYmY2ZDQyNWQ2OTc5ZThkNTM1 MDE1YmMwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDZkNzZjZDBmNDYyMzM1ODg3YmMyN2U5Y2JmZjdjYzgwMDI3OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+nr5NcDK6RrOh4zllF4mzAaLPsk VXMePBf8+5KsrSLwzNbTxv0essoJcxXobMj/suIWZBz3w/J1t77CWOigm1MUHG+V Se+DNJT1QKFStfwXElAKmyVnqRNN6KuVMopywI7W4lAB5LskJbSgukZqr+qp1/St bjwU7D90YjFPd4OL65NhZ+DgEFPRbSL5HdmolohT4BFyVUaEd4GMNlRAEIKITxvf VDiggXWq9RfIh4yab/th7oK+rLrBGGLMmP2l3EkYBLW4oelhqVIKUCCBUltKEFxQ WezFRkgBFUXZMh8UCvZajRxX8/po9AvPh4xbA2Vmwp93buclzbIlmjobKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIBtds0PRiM1iHvCfpy/98yAAnnOMB8GA1UdIwQY MBaAFFNbHNXuXrA9+/bUJdaXno1TUBW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNjBmYjUtMmZkYS00ZGVmLTk2Zjkt ZTJiOWY2ZGJlMDAwLzEvZ0cxMnpROUdJeldJZThKLW5MXzN6SUFDZWM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iNjBmYjUtMmZkYS00ZGVmLTk2ZjktZTJiOWY2ZGJlMDAw LzEvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+hTMA0G CSqGSIb3DQEBCwUAA4IBAQBKDpxgHPuj70AwO3r+gM5f3vGVKrbtk8eV1/cs6qMB 5/X+H4bvqY0bTSPJ5PNh3gtP3xlIeQVGe0Y4yT4uftk0xDfayeU1vc9wHwu/canB RER8bhyUUvJTyPy1JXuBwxNDdAZ/GzicOIRm5tB3mvq1j0PJRp8uu8HGQaOnJtEZ 0NkLVgMvLVMX+yyzHxZ9cSP4Gof2lObslrm9mmS+YFaJvE/tgnktc02DpMSQeKie 2vzo4KmH4srOJrXWDcDzflNnFDNIHTBR/4aQTjQIhi3/+HNFRiE7sWy1gHhz8W9p g5rCexWomOOFw12AXvY6FybKXBkPEpdYLR0b04sf4JhD -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:43 2026 by rpki-client