This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/gbJe-QJELQjG77ZNjAeXTNXNFEw.roa File: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (raw, json) Hash identifier: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8= Subject key identifier: 81:B2:5E:F9:02:44:2D:08:C6:EF:B6:4D:8C:07:97:4C:D5:CD:14:4C Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87 Certificate serial: 019B7DCAB2DDC2B9490A00A0CB0CD699F759 Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/gbJe-QJELQjG77ZNjAeXTNXNFEw.roa Signing time: Fri 02 Jan 2026 08:19:54 +0000 ROA not before: Fri 02 Jan 2026 08:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25569 IP address blocks: 80.82.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b2:dd:c2:b9:49:0a:00:a0:cb:0c:d6:99:f7:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87 Validity Not Before: Jan 2 08:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81b25ef902442d08c6efb64d8c07974cd5cd144c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:cb:63:bf:df:7f:ca:43:74:0b:09:59:48: 3a:6f:c0:86:f1:98:fc:7e:41:d9:08:3f:16:46:b5: 82:20:b8:22:15:63:25:65:3d:4d:db:f7:fa:0c:77: d4:b6:0d:e4:f2:33:7d:fe:a9:6c:ca:05:e6:2b:55: 1f:8a:f5:18:2d:b7:57:98:9c:15:c5:1f:a9:d1:96: bd:90:f5:1b:22:5f:36:6e:75:53:c8:1c:b0:a6:25: 4d:1c:36:60:5b:c4:c1:25:c3:db:f4:f7:0a:c8:63: 65:03:50:b1:f2:3e:64:c7:77:14:14:5e:b8:05:07: 68:7b:d4:c3:4e:49:8f:b7:4f:f0:8c:17:84:ed:d0: 94:cb:68:38:4b:12:f5:0e:1b:e1:76:2d:04:8f:34: 67:ec:1e:ec:73:5f:46:07:ab:80:f8:c9:be:92:9f: 90:0a:87:d3:31:79:8c:18:3d:dc:5e:19:4e:40:51: c0:d6:e9:aa:2a:d3:56:94:a8:7d:50:dd:65:c4:ab: ec:3a:bd:4f:43:39:2d:32:24:bd:82:48:e3:86:30: d2:90:66:43:19:e9:d9:a3:2c:4c:1c:92:e8:10:0d: c4:2f:c9:29:6d:a0:c3:09:0e:43:a9:31:b7:a1:4d: 37:ed:b0:14:29:59:9a:6d:00:6d:2b:b6:21:93:5a: fe:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B2:5E:F9:02:44:2D:08:C6:EF:B6:4D:8C:07:97:4C:D5:CD:14:4C X509v3 Authority Key Identifier: keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/gbJe-QJELQjG77ZNjAeXTNXNFEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.82.0.0/20 Signature Algorithm: sha256WithRSAEncryption 0e:30:16:a3:69:07:0e:81:c9:21:25:02:89:1a:c8:a5:45:70: 79:94:1e:20:cb:f9:76:0f:cf:c5:9f:dc:4f:b4:e4:ea:04:3f: 7d:c0:60:48:09:7c:f8:93:90:e5:45:56:c5:35:8c:1c:de:9b: ce:b2:f0:60:49:66:d1:90:0e:74:bf:d3:5f:69:66:2a:f3:62: f3:6b:0c:94:f0:48:1c:1d:c9:cb:81:ce:ed:14:f5:e9:7a:d7: 2b:89:78:b9:76:a6:0b:5f:bb:9f:79:65:c3:52:0a:a7:95:0e: 2e:f2:a3:c6:81:c4:66:a6:6b:46:8f:51:ab:40:c9:02:b0:15: 3a:d2:61:9c:c6:8b:f2:de:52:15:9a:6d:e6:80:21:3b:71:7b: a9:3d:8f:1e:58:d6:66:b0:86:df:9c:ef:4d:0a:24:7d:50:2a: cb:6a:91:49:a3:c1:60:a7:03:e1:4d:82:f5:9c:15:3e:f5:9f: ef:32:51:61:c0:4f:9c:4e:80:a6:b4:3c:82:78:57:11:0d:a2: 3a:2c:e6:ac:35:8a:6f:a4:3d:20:d2:68:b9:86:1e:b5:aa:8d: 3a:63:57:26:7f:a8:21:23:f6:98:9a:bd:e9:c9:55:79:a1:62: c6:e3:3a:b3:e4:4a:7b:6a:77:5c:cc:5b:db:0b:b6:6f:f2:60: 40:d8:e2:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yrLdwrlJCgCgywzWmfdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYTZkNmIwODc0NjFmZGVjNmE1YjlkNTJkMjk4MzJkOGYy OTljODcwHhcNMjYwMTAyMDgxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWIyNWVmOTAyNDQyZDA4YzZlZmI2NGQ4YzA3OTc0Y2Q1Y2QxNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw3LY7/ff8pDdAsJWUg6b8CG8Zj8 fkHZCD8WRrWCILgiFWMlZT1N2/f6DHfUtg3k8jN9/qlsygXmK1UfivUYLbdXmJwV xR+p0Za9kPUbIl82bnVTyBywpiVNHDZgW8TBJcPb9PcKyGNlA1Cx8j5kx3cUFF64 BQdoe9TDTkmPt0/wjBeE7dCUy2g4SxL1Dhvhdi0EjzRn7B7sc19GB6uA+Mm+kp+Q CofTMXmMGD3cXhlOQFHA1umqKtNWlKh9UN1lxKvsOr1PQzktMiS9gkjjhjDSkGZD GenZoyxMHJLoEA3EL8kpbaDDCQ5DqTG3oU037bAUKVmabQBtK7Yhk1r+dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIGyXvkCRC0Ixu+2TYwHl0zVzRRMMB8GA1UdIwQY MBaAFKCm1rCHRh/exqW51S0pgy2PKZyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUt MTE0OGZkZTdhZWY3LzEvZ2JKZS1RSkVMUWpHNzdaTmpBZVhUTlhORkV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUtMTE0OGZkZTdhZWY3 LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUFIAMA0G CSqGSIb3DQEBCwUAA4IBAQAOMBajaQcOgckhJQKJGsilRXB5lB4gy/l2D8/Fn9xP tOTqBD99wGBICXz4k5DlRVbFNYwc3pvOsvBgSWbRkA50v9NfaWYq82LzawyU8Egc HcnLgc7tFPXpetcriXi5dqYLX7ufeWXDUgqnlQ4u8qPGgcRmpmtGj1GrQMkCsBU6 0mGcxovy3lIVmm3mgCE7cXupPY8eWNZmsIbfnO9NCiR9UCrLapFJo8FgpwPhTYL1 nBU+9Z/vMlFhwE+cToCmtDyCeFcRDaI6LOasNYpvpD0g0mi5hh61qo06Y1cmf6gh I/aYmr3pyVV5oWLG4zqz5Ep7andczFvbC7Zv8mBA2OJS -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:22 2026 by rpki-client