This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/gRmXeW_g4XWlJoD-3VX4J1-7IpU.roa File: gRmXeW_g4XWlJoD-3VX4J1-7IpU.roa (raw, json) Hash identifier: D7tJT81Ih/7yE0Ex5L+2xy+fHBPkeGvPOLXrDK+WOqg= Subject key identifier: 81:19:97:79:6F:E0:E1:75:A5:26:80:FE:DD:55:F8:27:5F:BB:22:95 Certificate issuer: /CN=4568d0a7204560b6356d837bbf1510d9636df63a Certificate serial: 019B7CECECD0E78526170E3B2A1C07DE690E Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/gRmXeW_g4XWlJoD-3VX4J1-7IpU.roa Signing time: Fri 02 Jan 2026 04:17:40 +0000 ROA not before: Fri 02 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20521 IP address blocks: 37.114.72.0/21 maxlen: 32 78.110.16.0/20 maxlen: 32 80.245.208.0/20 maxlen: 32 95.131.232.0/21 maxlen: 32 185.56.252.0/22 maxlen: 32 195.38.30.0/24 maxlen: 32 217.168.160.0/20 maxlen: 32 2a00:1cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ec:d0:e7:85:26:17:0e:3b:2a:1c:07:de:69:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a Validity Not Before: Jan 2 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=811997796fe0e175a52680fedd55f8275fbb2295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0d:42:1a:25:7c:7c:e4:60:02:ae:d9:f7:7e: 02:e8:08:ef:03:e6:26:d7:da:6d:d7:fb:5a:fd:63: dd:7c:55:c3:5a:5b:5c:d6:16:a4:4c:5f:ef:73:54: 0d:1f:fd:69:97:34:91:7d:a7:93:a0:51:7a:06:3b: 08:d2:3a:cb:2f:1d:9f:3f:dd:bc:93:c0:c5:24:02: 31:d7:cd:4f:91:d4:ab:21:14:51:e3:28:54:94:50: 7f:34:89:2c:3e:da:2c:1e:ff:54:aa:3e:94:66:34: d8:8c:a5:90:d4:77:b5:07:8f:c4:ba:65:38:d8:14: c6:3b:a6:11:71:d9:1f:0f:48:08:49:42:fd:30:c4: 59:43:f9:38:97:6a:7c:bd:af:5b:66:0a:cc:cf:6c: c9:43:cd:00:7f:67:33:ce:0e:be:50:87:1d:82:1a: 5c:e9:70:19:dc:68:8c:97:e5:c1:58:05:81:fe:1e: a5:6a:d9:49:f9:32:79:ad:fb:45:9f:12:13:10:35: 56:c7:e1:6f:47:87:d2:07:fd:3b:ac:f4:5a:fe:95: cf:09:bf:13:01:bb:25:8f:55:66:84:8c:5f:85:3c: b0:a6:62:45:a1:a6:19:79:3c:09:8f:ea:1e:bc:d6: 60:37:3e:c4:8e:98:96:8a:3c:de:28:30:b9:35:df: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:19:97:79:6F:E0:E1:75:A5:26:80:FE:DD:55:F8:27:5F:BB:22:95 X509v3 Authority Key Identifier: keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/gRmXeW_g4XWlJoD-3VX4J1-7IpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.72.0/21 78.110.16.0/20 80.245.208.0/20 95.131.232.0/21 185.56.252.0/22 195.38.30.0/24 217.168.160.0/20 IPv6: 2a00:1cc0::/32 Signature Algorithm: sha256WithRSAEncryption 5d:cf:40:df:60:74:87:c9:bf:09:f3:af:29:9f:87:67:c4:72: 7e:b5:c1:19:49:24:fc:d2:6d:0a:9e:f8:f0:3b:b7:30:b3:1b: b2:87:e9:fe:d6:a5:25:79:a3:0c:82:a2:46:4f:b0:b1:65:3f: 93:64:60:2a:98:99:73:cc:f4:70:26:3f:5f:f4:c5:7d:a7:a6: ba:0f:7c:f8:64:9b:f1:66:4c:4d:7d:f4:47:e4:39:ca:44:6b: a1:9c:68:fb:e7:7f:60:8f:66:c6:d4:f5:5b:7a:40:32:e9:d0: 64:c8:b7:f3:a5:b0:19:1d:cd:ea:24:a8:81:79:e9:80:68:3c: 69:c1:13:40:10:bb:0e:b3:37:5f:7f:e5:9a:3d:af:e6:5f:e0: e6:27:81:3b:d0:8f:7e:ab:f2:a6:d4:d0:99:ed:13:f4:85:46: 4a:c4:3e:c1:d6:19:dd:6d:3d:d2:65:69:d5:1b:fe:ba:8b:fd: 91:66:0d:9f:30:6c:18:da:73:fe:9c:7a:9d:a2:ca:95:45:04: 4a:c2:04:e7:59:54:3b:ed:75:fd:e2:e5:51:e6:9d:84:73:00: 48:43:32:06:bd:fa:be:f9:4d:1a:fa:fb:a8:ac:c6:5d:6d:41: 26:fb:85:f8:d1:32:29:62:c1:ed:3f:7a:09:cd:75:3a:dd:e9: 63:aa:a3:25 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt87OzQ54UmFw47KhwH3mkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NjhkMGE3MjA0NTYwYjYzNTZkODM3YmJmMTUxMGQ5NjM2 ZGY2M2EwHhcNMjYwMTAyMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTE5OTc3OTZmZTBlMTc1YTUyNjgwZmVkZDU1ZjgyNzVmYmIyMjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Q1CGiV8fORgAq7Z934C6AjvA+Ym 19pt1/ta/WPdfFXDWltc1hakTF/vc1QNH/1plzSRfaeToFF6BjsI0jrLLx2fP928 k8DFJAIx181PkdSrIRRR4yhUlFB/NIksPtosHv9Uqj6UZjTYjKWQ1He1B4/EumU4 2BTGO6YRcdkfD0gISUL9MMRZQ/k4l2p8va9bZgrMz2zJQ80Af2czzg6+UIcdghpc 6XAZ3GiMl+XBWAWB/h6latlJ+TJ5rftFnxITEDVWx+FvR4fSB/07rPRa/pXPCb8T Abslj1VmhIxfhTywpmJFoaYZeTwJj+oevNZgNz7EjpiWijzeKDC5Nd+EQwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFIEZl3lv4OF1pSaA/t1V+CdfuyKVMB8GA1UdIwQY MBaAFEVo0KcgRWC2NW2De78VENljbfY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUldqUXB5QkZZTFkxYllON3Z4VVEyV050OWpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMGZiMGItYjk2YS00MzkwLTg2YTgt NmZlMzVhZTU0YTViLzEvZ1JtWGVXX2c0WFdsSm9ELTNWWDRKMS03SXBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iMGZiMGItYjk2YS00MzkwLTg2YTgtNmZlMzVhZTU0YTVi LzEvUldqUXB5QkZZTFkxYllON3Z4VVEyV050OWpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDJXJIAwQE Tm4QAwQEUPXQAwQDX4PoAwQCuTj8AwQAwyYeAwQE2aigMA0EAgACMAcDBQAqABzA MA0GCSqGSIb3DQEBCwUAA4IBAQBdz0DfYHSHyb8J868pn4dnxHJ+tcEZSST80m0K nvjwO7cwsxuyh+n+1qUleaMMgqJGT7CxZT+TZGAqmJlzzPRwJj9f9MV9p6a6D3z4 ZJvxZkxNffRH5DnKRGuhnGj7539gj2bG1PVbekAy6dBkyLfzpbAZHc3qJKiBeemA aDxpwRNAELsOszdff+WaPa/mX+DmJ4E70I9+q/Km1NCZ7RP0hUZKxD7B1hndbT3S ZWnVG/66i/2RZg2fMGwY2nP+nHqdosqVRQRKwgTnWVQ77XX94uVR5p2EcwBIQzIG vfq++U0a+vuorMZdbUEm+4X40TIpYsHtP3oJzXU63eljqqMl -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:54 2026 by rpki-client