This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/gC3rqU1DQllcWWxpBdLFhPfJBRY.roa File: gC3rqU1DQllcWWxpBdLFhPfJBRY.roa (raw, json) Hash identifier: GquGRvoP/5ANJWdn0l9uPSHphibPvx3UXVQbIIbaOLU= Subject key identifier: 80:2D:EB:A9:4D:43:42:59:5C:59:6C:69:05:D2:C5:84:F7:C9:05:16 Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6A51A1DF4398F5526577D9924E84B Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/gC3rqU1DQllcWWxpBdLFhPfJBRY.roa Signing time: Fri 02 Jan 2026 12:20:08 +0000 ROA not before: Fri 02 Jan 2026 12:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34970 IP address blocks: 80.245.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a5:1a:1d:f4:39:8f:55:26:57:7d:99:24:e8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=802deba94d4342595c596c6905d2c584f7c90516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:42:0d:cc:de:21:3e:9d:2a:4a:de:01:26: 77:ab:d8:8d:3e:98:8e:8a:88:a8:8e:71:3c:69:0d: 40:99:54:dd:24:02:2a:0b:d9:c9:70:ca:a5:86:df: 82:3a:99:21:dc:8e:8c:56:f4:c2:fa:56:42:09:c2: 34:0b:df:1c:13:44:a2:91:db:76:f5:9c:54:ab:19: cb:cc:7c:c5:96:42:d7:8b:5f:58:52:03:58:3e:5a: dd:22:81:c4:d1:76:17:19:3a:03:8c:f4:e6:8e:3e: e6:a3:74:82:cd:09:59:23:c9:bf:77:41:f0:6f:5b: b1:5f:58:1c:29:d7:ee:ea:54:20:a8:4b:05:0a:d8: 9c:1a:f9:28:b9:91:61:df:51:c4:3f:0f:96:ac:c9: 08:65:21:05:a3:51:9b:8a:aa:f3:d5:34:d8:aa:09: 5a:80:f1:63:38:2d:ea:a5:5f:ba:05:75:52:c1:84: 81:fe:74:e0:86:f8:53:e0:eb:26:5c:48:7c:1e:6a: 57:a6:0d:ad:cb:51:ec:01:15:5e:b9:c7:00:e1:72: c9:fb:ee:ad:f6:97:a1:85:ef:dd:3e:87:b5:0c:5e: b6:78:36:85:d4:f3:6d:b0:cb:50:64:8b:a9:c2:27: 11:19:13:ec:96:13:a6:59:fb:27:0a:de:38:4f:d7: 93:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2D:EB:A9:4D:43:42:59:5C:59:6C:69:05:D2:C5:84:F7:C9:05:16 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/gC3rqU1DQllcWWxpBdLFhPfJBRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.245.42.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:e3:2e:c6:9a:2c:dd:88:39:6f:ec:16:0a:c1:c8:0c:d4:2d: d1:04:44:56:ab:f7:39:8b:b5:8a:47:5f:76:14:2c:47:f2:60: f7:f3:49:c7:f6:ed:1a:a7:fa:4a:5e:dd:32:29:e7:de:f5:fa: d8:cc:63:95:0e:a1:85:bd:db:4f:ad:10:43:ee:6c:d1:66:5d: ac:b8:7d:9a:6c:b5:3e:6e:6b:a4:92:b6:fb:72:df:62:18:60: 4c:bb:bb:07:d7:71:cc:d9:7f:b6:f7:bf:04:b4:9f:99:f8:9d: c7:93:96:cc:a9:a2:cf:d9:af:c8:c1:f8:bd:66:17:2c:aa:4a: 35:2c:b0:49:ab:68:95:70:b8:2e:4b:07:a1:e4:bf:6d:d0:73: 16:eb:4e:df:7f:ea:81:35:42:71:90:f3:58:77:28:c0:f2:b7: 58:9b:5e:e4:dd:85:b4:8e:ac:dd:10:40:bc:87:cd:96:51:b7: 94:87:f0:58:70:cd:7c:09:3d:1f:30:8a:51:ea:8c:d5:fa:c9: 0d:87:8c:bb:38:3f:67:99:a6:60:d3:6b:32:80:f0:e7:4a:0f: 2d:39:2f:90:2d:08:9c:db:42:e9:50:62:04:1d:4b:aa:aa:07: 58:cd:10:c2:9d:ec:d5:a3:69:c0:2c:22:66:87:1a:97:47:bd: 2c:d4:86:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqUaHfQ5j1UmV32ZJOhLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDJkZWJhOTRkNDM0MjU5NWM1OTZjNjkwNWQyYzU4NGY3YzkwNTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6tCDczeIT6dKkreASZ3q9iNPpiO ioiojnE8aQ1AmVTdJAIqC9nJcMqlht+COpkh3I6MVvTC+lZCCcI0C98cE0Sikdt2 9ZxUqxnLzHzFlkLXi19YUgNYPlrdIoHE0XYXGToDjPTmjj7mo3SCzQlZI8m/d0Hw b1uxX1gcKdfu6lQgqEsFCticGvkouZFh31HEPw+WrMkIZSEFo1Gbiqrz1TTYqgla gPFjOC3qpV+6BXVSwYSB/nTghvhT4OsmXEh8HmpXpg2ty1HsARVeuccA4XLJ++6t 9pehhe/dPoe1DF62eDaF1PNtsMtQZIupwicRGRPslhOmWfsnCt44T9eTwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIAt66lNQ0JZXFlsaQXSxYT3yQUWMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvZ0MzcnFVMURRbGxjV1d4cEJkTEZoUGZKQlJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUPUqMA0G CSqGSIb3DQEBCwUAA4IBAQAc4y7GmizdiDlv7BYKwcgM1C3RBERWq/c5i7WKR192 FCxH8mD380nH9u0ap/pKXt0yKefe9frYzGOVDqGFvdtPrRBD7mzRZl2suH2abLU+ bmukkrb7ct9iGGBMu7sH13HM2X+2978EtJ+Z+J3Hk5bMqaLP2a/Iwfi9Zhcsqko1 LLBJq2iVcLguSweh5L9t0HMW607ff+qBNUJxkPNYdyjA8rdYm17k3YW0jqzdEEC8 h82WUbeUh/BYcM18CT0fMIpR6ozV+skNh4y7OD9nmaZg02sygPDnSg8tOS+QLQic 20LpUGIEHUuqqgdYzRDCnezVo2nALCJmhxqXR70s1Iaw -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:25 2026 by rpki-client