This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/G6LlelllmoaLjy6pGMovpp7eiKE.roa File: G6LlelllmoaLjy6pGMovpp7eiKE.roa (raw, json) Hash identifier: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8= Subject key identifier: 1B:A2:E5:7A:59:65:9A:86:8B:8F:2E:A9:18:CA:2F:A6:9E:DE:88:A1 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E3890C8968E884044BAD2B235E347A7 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/G6LlelllmoaLjy6pGMovpp7eiKE.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21734 IP address blocks: 83.126.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:90:c8:96:8e:88:40:44:ba:d2:b2:35:e3:47:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ba2e57a59659a868b8f2ea918ca2fa69ede88a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:2e:5d:4c:aa:51:3d:5c:3f:00:2f:68:12: 21:5a:c5:93:8f:15:4b:46:e4:2a:55:e4:66:3d:74: 63:6a:9b:fb:52:34:a8:2f:82:c3:1b:ff:96:7d:98: 46:94:04:90:c6:27:ea:23:fd:e4:0e:7c:60:94:66: 65:ee:9d:61:2e:d8:11:dc:05:53:26:76:23:4b:59: 76:11:12:3b:98:91:91:d9:51:ed:f5:a4:66:34:09: ff:bd:a4:31:df:44:8c:c6:d3:ab:7c:55:e3:f9:66: a1:f6:b3:1a:cb:7d:bb:c0:b2:4e:8e:8f:9f:70:aa: 18:9b:a0:67:c6:ba:b8:30:1f:3d:79:20:a7:69:30: 05:71:ca:80:2e:79:05:e1:cc:cf:f8:f7:5a:5f:af: 82:73:cc:80:a9:ff:d4:ab:fa:4d:9a:90:a3:ba:33: ab:ec:78:a2:c0:86:59:77:4c:4e:03:29:bd:fa:2b: 81:06:87:65:3d:ce:0f:fc:08:b7:d6:58:72:8e:63: 46:9a:3d:bb:b9:96:8b:02:ba:a9:19:18:17:c3:ea: a3:cc:bc:4d:6b:2c:c4:d9:e5:e2:e2:d4:53:1d:70: a1:9b:59:b6:7a:1f:20:b4:de:f8:3c:8c:1e:a0:87: a8:b2:98:f2:bc:1d:93:b7:2d:71:73:0d:94:bc:dd: 04:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A2:E5:7A:59:65:9A:86:8B:8F:2E:A9:18:CA:2F:A6:9E:DE:88:A1 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/G6LlelllmoaLjy6pGMovpp7eiKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.126.50.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:43:90:a7:0f:26:b9:b1:a8:c3:85:d5:25:d6:f0:4e:87:c6: c0:28:6d:db:ef:ca:96:60:81:88:21:7e:65:6e:3f:e4:f8:2a: f4:0c:ec:98:8c:0e:fe:54:11:39:81:72:c6:a5:85:af:4f:4a: 88:78:8a:40:91:a3:05:0e:7e:ce:6d:af:42:d1:bb:fc:59:3a: b2:7a:aa:b6:02:94:5e:54:a1:40:87:80:dd:ca:c3:65:1c:ce: 16:44:45:ec:c6:98:88:ba:4f:8a:2c:9f:14:c6:4d:05:f7:38: eb:a9:47:d0:38:c7:c6:b5:d6:77:d3:43:4e:65:b4:17:8f:15: 58:be:6b:f8:f2:78:c9:c3:19:4b:ba:06:20:56:2d:39:f8:25: a1:ee:2a:40:4f:89:02:a1:37:22:ec:32:e0:70:03:b9:f5:9d: 45:20:d9:cb:00:f1:b7:0b:e7:2e:af:64:6e:66:a3:b8:45:44: c6:64:67:47:65:ff:79:34:af:76:41:30:fd:33:27:98:d8:83: 41:ca:bf:09:61:76:8e:f5:f5:ef:9f:51:fa:d7:91:59:a1:1f: 39:0a:29:0b:ed:70:60:61:db:95:23:c7:0b:3d:f5:6d:7a:6c: dd:a8:f3:a8:c2:d2:75:4e:93:1b:56:3c:87:b6:ad:b0:8b:32: 9a:d6:ec:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJDIlo6IQES60rI140enMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmEyZTU3YTU5NjU5YTg2OGI4ZjJlYTkxOGNhMmZhNjllZGU4OGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNkuXUyqUT1cPwAvaBIhWsWTjxVL RuQqVeRmPXRjapv7UjSoL4LDG/+WfZhGlASQxifqI/3kDnxglGZl7p1hLtgR3AVT JnYjS1l2ERI7mJGR2VHt9aRmNAn/vaQx30SMxtOrfFXj+Wah9rMay327wLJOjo+f cKoYm6Bnxrq4MB89eSCnaTAFccqALnkF4czP+PdaX6+Cc8yAqf/Uq/pNmpCjujOr 7HiiwIZZd0xOAym9+iuBBodlPc4P/Ai31lhyjmNGmj27uZaLArqpGRgXw+qjzLxN ayzE2eXi4tRTHXChm1m2eh8gtN74PIweoIeospjyvB2Tty1xcw2UvN0EWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBui5XpZZZqGi48uqRjKL6ae3oihMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvRzZMbGVsbGxtb2FMank2cEdNb3ZwcDdlaUtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU34yMA0G CSqGSIb3DQEBCwUAA4IBAQCfQ5CnDya5sajDhdUl1vBOh8bAKG3b78qWYIGIIX5l bj/k+Cr0DOyYjA7+VBE5gXLGpYWvT0qIeIpAkaMFDn7Oba9C0bv8WTqyeqq2ApRe VKFAh4DdysNlHM4WREXsxpiIuk+KLJ8Uxk0F9zjrqUfQOMfGtdZ300NOZbQXjxVY vmv48njJwxlLugYgVi05+CWh7ipAT4kCoTci7DLgcAO59Z1FINnLAPG3C+cur2Ru ZqO4RUTGZGdHZf95NK92QTD9MyeY2INByr8JYXaO9fXvn1H615FZoR85CikL7XBg YduVI8cLPfVtemzdqPOowtJ1TpMbVjyHtq2wizKa1uwf -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:34 2026 by rpki-client