This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Dg57u4ys1bTlL8pLuHGvnVFYSNw.roa File: Dg57u4ys1bTlL8pLuHGvnVFYSNw.roa (raw, json) Hash identifier: r/oRyoO8ZH4/jVinfaTnLetdrLoBZnt11pFEZIFP7VY= Subject key identifier: 0E:0E:7B:BB:8C:AC:D5:B4:E5:2F:CA:4B:B8:71:AF:9D:51:58:48:DC Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F1509412F308AA4085547B3576144B4 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Dg57u4ys1bTlL8pLuHGvnVFYSNw.roa Signing time: Fri 02 Jan 2026 14:20:43 +0000 ROA not before: Fri 02 Jan 2026 14:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209411 IP address blocks: 185.114.144.0/23 maxlen: 24 209.16.142.0/23 maxlen: 23 2a0e:ce40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:09:41:2f:30:8a:a4:08:55:47:b3:57:61:44:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e0e7bbb8cacd5b4e52fca4bb871af9d515848dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:82:95:03:bd:a7:97:40:91:2e:4b:ba:54:34: a8:68:ae:3f:f9:fc:87:f0:8e:68:0e:00:e8:d5:df: f7:fd:3f:7e:e9:4b:4e:b1:63:1d:f3:4f:e5:36:6c: be:6a:06:f3:05:c0:39:cb:21:0d:36:2a:31:40:c0: c8:8a:10:b1:53:4e:fa:57:2b:13:9a:1e:a8:c7:7a: a7:7b:ef:e5:60:da:74:9c:94:cb:a1:82:38:3f:98: 13:74:80:16:ba:fe:b1:e9:5f:ce:ea:10:92:33:e9: cd:e0:53:ca:56:06:80:73:82:4e:7e:1f:81:83:e8: 94:b4:64:62:04:7d:cc:6c:d9:10:33:09:bb:95:fc: 51:c8:81:e0:08:f6:9d:b9:22:a7:33:11:48:f8:fc: 58:61:09:be:9d:c9:10:c2:50:87:ee:02:11:2a:b3: d7:2e:e4:24:3d:95:50:1f:8a:07:68:b3:bb:02:2f: f7:a2:00:9f:78:e5:f4:9b:92:e0:7b:fb:6e:e1:db: 4e:f0:40:89:f4:73:71:6e:5e:c6:d8:df:c0:4a:62: 34:83:20:ab:bc:b3:6b:bd:81:67:35:eb:fa:71:f4: f0:df:cb:0a:6d:47:35:58:82:61:b4:6e:bc:0f:80: 17:66:54:cd:c0:24:b6:66:7b:bd:9e:39:1e:63:1c: 79:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0E:7B:BB:8C:AC:D5:B4:E5:2F:CA:4B:B8:71:AF:9D:51:58:48:DC X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Dg57u4ys1bTlL8pLuHGvnVFYSNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.144.0/23 209.16.142.0/23 IPv6: 2a0e:ce40::/29 Signature Algorithm: sha256WithRSAEncryption a0:16:dd:49:95:9f:95:fa:e6:fe:18:a8:2d:86:29:ea:83:92: 3e:a0:b5:21:6c:4a:21:65:d6:39:f7:35:36:4c:69:f4:46:89: d7:7b:33:93:51:4b:1d:83:10:e7:44:79:c3:39:6c:04:ef:53: 5d:21:bd:18:f3:38:e9:13:16:a6:96:d2:71:ea:72:13:b2:2b: 54:aa:ed:c8:b6:87:58:cd:28:2f:b4:4f:91:4d:3b:a7:a7:f9: 6d:7a:df:c4:63:9d:9f:6a:0c:14:cd:2f:cd:ac:f9:20:ac:16: 1a:e7:8f:39:b8:9e:9f:c5:1d:3a:8e:af:a9:cd:53:20:ab:dd: 2f:dd:00:52:d5:8a:cc:f0:3b:30:36:af:c6:cd:0b:10:27:e1: e5:6e:da:73:9a:98:07:57:c7:41:d7:c8:ed:aa:ca:9a:4f:5d: ca:5e:af:5a:a1:15:f0:11:b4:68:ea:ae:e0:bf:25:6f:b1:47: 11:ba:ff:de:34:c6:75:b9:f9:a1:3f:65:51:19:d5:45:8e:a9: 52:27:69:59:1b:29:6d:a6:3a:92:61:e2:d3:f7:eb:29:1f:57: 9b:fa:64:4b:50:98:89:7c:39:15:90:cc:97:a0:ee:50:3d:03: d0:83:b1:d9:fc:62:5d:b4:92:73:44:eb:ff:0e:d3:c9:b3:52: aa:80:b6:c6 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FQlBLzCKpAhVR7NXYUS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTBlN2JiYjhjYWNkNWI0ZTUyZmNhNGJiODcxYWY5ZDUxNTg0OGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4KVA72nl0CRLku6VDSoaK4/+fyH 8I5oDgDo1d/3/T9+6UtOsWMd80/lNmy+agbzBcA5yyENNioxQMDIihCxU076VysT mh6ox3qne+/lYNp0nJTLoYI4P5gTdIAWuv6x6V/O6hCSM+nN4FPKVgaAc4JOfh+B g+iUtGRiBH3MbNkQMwm7lfxRyIHgCPaduSKnMxFI+PxYYQm+nckQwlCH7gIRKrPX LuQkPZVQH4oHaLO7Ai/3ogCfeOX0m5Lge/tu4dtO8ECJ9HNxbl7G2N/ASmI0gyCr vLNrvYFnNev6cfTw38sKbUc1WIJhtG68D4AXZlTNwCS2Znu9njkeYxx55QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFA4Oe7uMrNW05S/KS7hxr51RWEjcMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvRGc1N3U0eXMxYlRsTDhwTHVIR3ZuVkZZU053LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuXKQAwQB 0RCOMA0EAgACMAcDBQMqDs5AMA0GCSqGSIb3DQEBCwUAA4IBAQCgFt1JlZ+V+ub+ GKgthinqg5I+oLUhbEohZdY59zU2TGn0RonXezOTUUsdgxDnRHnDOWwE71NdIb0Y 8zjpExamltJx6nITsitUqu3ItodYzSgvtE+RTTunp/ltet/EY52fagwUzS/NrPkg rBYa5485uJ6fxR06jq+pzVMgq90v3QBS1YrM8DswNq/GzQsQJ+HlbtpzmpgHV8dB 18jtqsqaT13KXq9aoRXwEbRo6q7gvyVvsUcRuv/eNMZ1ufmhP2VRGdVFjqlSJ2lZ GyltpjqSYeLT9+spH1eb+mRLUJiJfDkVkMyXoO5QPQPQg7HZ/GJdtJJzROv/DtPJ s1KqgLbG -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:14 2026 by rpki-client