This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/GnjgrlX5ldq-8V0xMtEgsEXb8K0.roa File: GnjgrlX5ldq-8V0xMtEgsEXb8K0.roa (raw, json) Hash identifier: 7TO2wIfe9IgC+RH76SDWjU1AztJO8iq77EyqtjbsQmw= Subject key identifier: 1A:78:E0:AE:55:F9:95:DA:BE:F1:5D:31:32:D1:20:B0:45:DB:F0:AD Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6A47BBCD6CA613D7E58DD0B6449C4 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/GnjgrlX5ldq-8V0xMtEgsEXb8K0.roa Signing time: Fri 02 Jan 2026 12:20:08 +0000 ROA not before: Fri 02 Jan 2026 12:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34476 IP address blocks: 82.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a4:7b:bc:d6:ca:61:3d:7e:58:dd:0b:64:49:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a78e0ae55f995dabef15d3132d120b045dbf0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:0a:9d:f5:6a:2d:69:ec:00:f5:6a:91:06: 48:e8:21:ce:38:6a:24:bf:1a:3b:e3:79:c5:ab:5d: 67:fe:64:0a:59:61:51:9e:b9:ca:f4:fc:f5:f6:90: fe:a9:35:30:2e:23:bf:e2:91:3b:d7:fe:cb:08:32: 0b:f3:a6:77:ac:74:85:2a:d6:65:de:94:ab:82:da: d2:07:1b:46:c9:4b:25:ff:f6:fb:be:7e:37:c3:00: 48:8e:41:34:d3:fd:9d:ad:e8:9e:db:99:01:32:92: eb:0f:10:b9:5a:39:dd:1b:55:d8:07:6a:70:9a:46: 89:6e:41:49:5b:ed:fe:bc:ac:ba:6f:69:75:d5:36: 46:f6:14:ca:01:8f:9f:08:8f:7e:50:0a:17:aa:89: bd:da:27:fb:be:e1:cb:1b:97:cf:4b:7e:7a:f7:33: 79:87:9d:8b:b5:cb:85:ad:3b:4c:80:fd:dc:e4:89: 65:03:b2:1b:e1:ea:52:54:a1:46:80:8a:87:3a:f6: 3e:df:84:71:0e:ba:47:49:e8:ce:4a:eb:93:2d:19: 96:16:1e:b0:15:97:63:85:fc:de:e7:76:b7:d5:8b: 91:20:e2:a8:a7:44:94:bf:9c:a7:7e:9f:2e:40:05: f5:37:2d:ad:1e:2d:88:bf:16:e6:20:fb:61:1d:51: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:78:E0:AE:55:F9:95:DA:BE:F1:5D:31:32:D1:20:B0:45:DB:F0:AD X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/GnjgrlX5ldq-8V0xMtEgsEXb8K0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.129.12.0/24 Signature Algorithm: sha256WithRSAEncryption a2:45:38:20:c4:71:dc:60:39:2b:12:cd:ec:99:2f:8b:29:31: 27:a9:c4:8e:df:8d:94:9a:b3:d2:af:21:f8:18:f5:ca:de:82: 77:f7:23:96:6b:04:c0:87:96:75:94:ce:83:b3:13:7c:e4:61: e6:96:75:0d:4d:5b:f6:05:e5:48:87:ab:bf:bb:7b:93:0c:9f: cd:d3:ed:8d:59:68:2d:32:41:09:07:4c:50:fa:80:4d:b2:ca: 70:b5:d1:6e:96:0c:30:69:ed:3c:d7:41:1c:89:4c:5c:e4:0a: 58:7c:aa:4c:dc:33:62:9a:25:ba:2c:57:ca:94:bb:72:b5:33: 9f:96:02:b4:2d:73:b7:f5:a9:79:e4:09:86:47:ce:d8:b9:5c: 27:7f:54:40:90:f2:df:2c:f4:93:93:7f:f7:de:29:de:ff:87: 52:b9:af:30:27:e8:ec:3d:b6:a5:c4:21:8e:64:07:15:52:00: 76:ad:6d:66:1a:09:3c:96:76:01:5b:be:53:df:14:63:12:db: 34:e7:e4:04:c3:22:9f:36:01:07:70:49:f8:a6:34:44:09:b8: 16:67:6e:42:0c:00:b3:12:c4:1e:95:33:c4:63:1e:5e:67:01: bf:67:2b:b2:4e:ce:c7:a8:3d:9e:06:9b:80:02:c8:37:cd:9e: 50:02:16:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqR7vNbKYT1+WN0LZEnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTc4ZTBhZTU1Zjk5NWRhYmVmMTVkMzEzMmQxMjBiMDQ1ZGJmMGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRkKnfVqLWnsAPVqkQZI6CHOOGok vxo743nFq11n/mQKWWFRnrnK9Pz19pD+qTUwLiO/4pE71/7LCDIL86Z3rHSFKtZl 3pSrgtrSBxtGyUsl//b7vn43wwBIjkE00/2dreie25kBMpLrDxC5WjndG1XYB2pw mkaJbkFJW+3+vKy6b2l11TZG9hTKAY+fCI9+UAoXqom92if7vuHLG5fPS3569zN5 h52LtcuFrTtMgP3c5IllA7Ib4epSVKFGgIqHOvY+34RxDrpHSejOSuuTLRmWFh6w FZdjhfze53a31YuRIOKop0SUv5ynfp8uQAX1Ny2tHi2IvxbmIPthHVE/AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBp44K5V+ZXavvFdMTLRILBF2/CtMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvR25qZ3JsWDVsZHEtOFYweE10RWdzRVhiOEswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUoEMMA0G CSqGSIb3DQEBCwUAA4IBAQCiRTggxHHcYDkrEs3smS+LKTEnqcSO342UmrPSryH4 GPXK3oJ39yOWawTAh5Z1lM6DsxN85GHmlnUNTVv2BeVIh6u/u3uTDJ/N0+2NWWgt MkEJB0xQ+oBNsspwtdFulgwwae0810EciUxc5ApYfKpM3DNimiW6LFfKlLtytTOf lgK0LXO39al55AmGR87YuVwnf1RAkPLfLPSTk3/33ine/4dSua8wJ+jsPbalxCGO ZAcVUgB2rW1mGgk8lnYBW75T3xRjEts05+QEwyKfNgEHcEn4pjRECbgWZ25CDACz EsQelTPEYx5eZwG/ZyuyTs7HqD2eBpuAAsg3zZ5QAhYz -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:17 2026 by rpki-client