This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/gL5Giy-rTCvNArfPkKAU-r2CxM0.roa File: gL5Giy-rTCvNArfPkKAU-r2CxM0.roa (raw, json) Hash identifier: jO7bXDuHY7qto41yybcOr3CvCDVLDdC+wp0YyPzuDpg= Subject key identifier: 80:BE:46:8B:2F:AB:4C:2B:CD:02:B7:CF:90:A0:14:FA:BD:82:C4:CD Certificate issuer: /CN=e482fd07e20d406ea4152e492b000e554ebfcc80 Certificate serial: 019B7EA752C50F96268073FB49BF8E003912 Authority key identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/gL5Giy-rTCvNArfPkKAU-r2CxM0.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213483 IP address blocks: 89.31.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:52:c5:0f:96:26:80:73:fb:49:bf:8e:00:39:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e482fd07e20d406ea4152e492b000e554ebfcc80 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80be468b2fab4c2bcd02b7cf90a014fabd82c4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:21:25:da:01:7b:58:18:fc:c8:9f:76:25: 1c:0f:2f:90:bd:ae:9d:8c:98:9c:f6:56:c4:a3:a3: 00:5c:cf:7d:61:ba:c4:f0:9e:8e:49:80:30:cf:6a: 78:e4:b4:45:58:2a:5d:4a:55:d0:4d:9e:db:df:b5: dd:78:70:76:21:70:ca:c8:08:c8:58:92:bc:0e:b0: 18:4e:ef:1b:fb:d3:d1:2c:28:eb:ea:37:94:b4:f9: 39:0a:5f:c7:3c:c1:cc:3d:1f:e2:31:26:17:84:a5: 29:48:b2:80:cb:5d:dc:38:85:61:f0:36:20:b9:6a: d8:e3:65:c0:d9:33:b3:f6:6a:5e:da:d5:fa:b9:d5: 58:46:e7:f8:f5:60:d9:f3:82:ec:2c:0a:7d:fb:fa: 21:7a:d3:a9:ac:49:12:bb:8a:25:28:15:70:b4:bc: 80:54:a3:f3:d9:ae:fc:32:9a:33:46:17:98:99:ec: e1:d5:47:48:1e:00:69:b9:1f:a4:ed:67:96:20:29: 36:6a:07:81:f7:eb:99:37:9f:cd:f2:4d:e1:89:08: f8:0a:54:f4:21:77:28:6d:45:d0:08:5f:aa:97:98: 52:c6:d2:e8:60:b2:d5:6a:f3:a1:d4:63:d9:8c:c3: 62:98:86:2a:e4:5d:b8:db:82:64:56:5e:ca:a5:64: 98:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BE:46:8B:2F:AB:4C:2B:CD:02:B7:CF:90:A0:14:FA:BD:82:C4:CD X509v3 Authority Key Identifier: keyid:E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/gL5Giy-rTCvNArfPkKAU-r2CxM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.246.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:8f:2f:a2:52:0f:48:ea:74:e4:b0:47:b0:79:6e:36:a5:1f: ad:9b:86:7b:ba:3d:c1:8d:a8:3b:9e:9b:68:1d:cb:3e:ff:60: a6:29:60:91:d7:e8:a8:e1:2b:9d:28:a1:98:3c:8b:0b:8a:1f: 20:3c:e6:d6:57:e8:62:72:3f:48:77:2f:83:f5:db:6a:39:c4: 09:95:98:25:52:4c:05:57:76:ab:0e:52:8c:54:77:16:e0:7b: 36:80:05:5b:ae:ea:a3:e7:39:7e:8d:e0:59:34:ff:ef:36:0a: b8:7d:b5:8d:95:b8:72:5a:66:d6:8d:b3:4f:4e:ca:29:03:ae: 08:5a:3e:b4:34:2f:f7:ce:a4:2b:8a:08:98:34:2c:8c:1f:bf: 60:aa:5d:1e:c6:c5:f9:b2:83:76:b0:92:96:c6:7d:3c:06:f6: 54:11:b7:cc:73:37:e6:85:a5:4e:9d:8a:f1:df:4b:55:0d:34: 15:ec:f8:fb:97:ef:29:f9:bb:34:e4:c6:e5:cd:bf:77:51:1a: b3:80:dc:58:17:be:05:f0:ef:d4:43:50:36:45:e1:88:ab:86: 24:f2:f9:93:5d:fa:d0:eb:bd:64:8c:73:45:6a:37:6a:1b:ce: 8c:53:95:34:f2:0e:25:60:08:67:63:e5:3c:43:1a:7b:44:60: aa:99:b5:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1LFD5YmgHP7Sb+OADkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODJmZDA3ZTIwZDQwNmVhNDE1MmU0OTJiMDAwZTU1NGVi ZmNjODAwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGJlNDY4YjJmYWI0YzJiY2QwMmI3Y2Y5MGEwMTRmYWJkODJjNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuEhJdoBe1gY/MifdiUcDy+Qva6d jJic9lbEo6MAXM99YbrE8J6OSYAwz2p45LRFWCpdSlXQTZ7b37XdeHB2IXDKyAjI WJK8DrAYTu8b+9PRLCjr6jeUtPk5Cl/HPMHMPR/iMSYXhKUpSLKAy13cOIVh8DYg uWrY42XA2TOz9mpe2tX6udVYRuf49WDZ84LsLAp9+/ohetOprEkSu4olKBVwtLyA VKPz2a78MpozRheYmezh1UdIHgBpuR+k7WeWICk2ageB9+uZN5/N8k3hiQj4ClT0 IXcobUXQCF+ql5hSxtLoYLLVavOh1GPZjMNimIYq5F2424JkVl7KpWSYiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIC+Rosvq0wrzQK3z5CgFPq9gsTNMB8GA1UdIwQY MBaAFOSC/QfiDUBupBUuSSsADlVOv8yAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUlMOUItSU5RRzZrRlM1Skt3QU9WVTZfeklBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mN2E4N2EtYzE4NC00OTA0LTk0ZTMt MjY4NTk4NmY2ZDAxLzEvZ0w1R2l5LXJUQ3ZOQXJmUGtLQVUtcjJDeE0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9mN2E4N2EtYzE4NC00OTA0LTk0ZTMtMjY4NTk4NmY2ZDAx LzEvNUlMOUItSU5RRzZrRlM1Skt3QU9WVTZfeklBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR/2MA0G CSqGSIb3DQEBCwUAA4IBAQB+jy+iUg9I6nTksEeweW42pR+tm4Z7uj3Bjag7npto Hcs+/2CmKWCR1+io4SudKKGYPIsLih8gPObWV+hicj9Idy+D9dtqOcQJlZglUkwF V3arDlKMVHcW4Hs2gAVbruqj5zl+jeBZNP/vNgq4fbWNlbhyWmbWjbNPTsopA64I Wj60NC/3zqQrigiYNCyMH79gql0exsX5soN2sJKWxn08BvZUEbfMczfmhaVOnYrx 30tVDTQV7Pj7l+8p+bs05Mblzb93URqzgNxYF74F8O/UQ1A2ReGIq4Yk8vmTXfrQ 671kjHNFajdqG86MU5U08g4lYAhnY+U8Qxp7RGCqmbV+ -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:03 2026 by rpki-client