This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/gW1uhT9HvHgWpqxNHFn9zb_bckI.roa File: gW1uhT9HvHgWpqxNHFn9zb_bckI.roa (raw, json) Hash identifier: yv2SpzaNQSnqQxF5j8oS7CnPtCJZkjwS6Ua4y5pKnjw= Subject key identifier: 81:6D:6E:85:3F:47:BC:78:16:A6:AC:4D:1C:59:FD:CD:BF:DB:72:42 Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6A9E0EB384F37D9FC8C215CBF358B Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/gW1uhT9HvHgWpqxNHFn9zb_bckI.roa Signing time: Fri 02 Jan 2026 12:20:10 +0000 ROA not before: Fri 02 Jan 2026 12:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201032 IP address blocks: 80.91.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a9:e0:eb:38:4f:37:d9:fc:8c:21:5c:bf:35:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=816d6e853f47bc7816a6ac4d1c59fdcdbfdb7242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:52:ae:20:b4:f8:cb:4c:83:30:76:72:5a:00: 96:8b:6e:06:ee:5d:f0:be:ac:6d:b0:fa:c6:f4:90: 40:07:4b:38:45:31:2f:4c:69:95:50:bf:b3:94:65: 32:33:d9:7a:d6:9b:8d:89:3b:4a:9e:ef:e7:65:23: 82:17:2c:fe:9e:9d:0f:66:3c:50:1a:0d:a4:30:fb: 62:17:c6:cd:84:66:7e:04:b2:ed:67:f9:07:d4:f6: f9:e1:8d:c8:de:e2:2d:b7:c5:c9:f4:de:32:d0:5d: fb:33:56:d0:d4:a1:7c:97:17:af:79:99:04:a6:3f: b7:10:b9:de:64:95:74:9d:33:4d:c4:a6:2f:8b:a0: 24:ae:3c:16:6b:b0:b4:56:ac:9f:0c:94:4f:57:a3: f9:0c:b7:ef:fd:4b:b5:29:53:6e:b3:99:46:53:e8: bb:b7:59:61:d1:71:62:d7:ac:f6:88:78:52:aa:8a: 4d:6f:34:05:2f:e5:e5:c3:39:24:82:90:09:98:d6: 5f:b5:ab:31:b7:98:0c:6b:5c:f7:b9:84:f2:a4:87: 22:6c:1f:da:64:bb:1c:63:ee:ac:e7:2c:2b:3b:4e: 76:37:ae:78:bb:ce:1a:a9:7d:14:6d:23:01:9e:f9: ea:91:c9:27:c7:2e:2e:26:7f:b2:bc:31:5e:d2:b8: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6D:6E:85:3F:47:BC:78:16:A6:AC:4D:1C:59:FD:CD:BF:DB:72:42 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/gW1uhT9HvHgWpqxNHFn9zb_bckI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.79.0/24 Signature Algorithm: sha256WithRSAEncryption 26:4b:18:2d:98:2d:a6:e1:51:a4:e2:e3:89:2e:f1:98:f7:10: 5d:48:07:a4:69:41:ff:57:79:94:5f:3d:3c:f0:1d:88:11:9f: d2:5e:a3:d8:b1:d7:9a:65:5c:f0:4c:ba:90:25:aa:5b:72:3b: 8e:cf:b9:67:60:0c:e8:37:62:b7:a2:ba:b6:6b:0a:1c:b6:1a: 59:6d:ca:7c:a9:14:46:31:3f:88:d9:34:9c:12:31:c7:bf:40: c5:08:cb:d5:ad:87:76:ff:62:b1:8a:76:ae:4d:02:02:5c:0d: 49:2b:87:a8:ec:37:9d:51:0a:f4:68:45:d7:c7:33:bc:2c:10: 76:ef:bb:2e:4c:8b:12:d1:7e:ca:13:38:fe:0d:77:68:61:ef: 04:6e:21:b7:b8:84:7f:57:68:76:55:80:59:2d:8a:31:77:f4: 3f:fd:3d:a1:2a:7f:05:52:0b:b3:0e:d9:3a:51:27:62:29:fa: 30:0e:1b:86:6d:e6:01:c3:70:c3:97:81:f7:5b:b2:14:bf:e4: ac:70:81:2b:b1:fc:c8:1b:a2:fa:52:75:72:c2:a7:a1:ea:c4: af:d1:a1:90:94:6c:77:cc:38:af:59:c7:36:81:35:2d:e6:b3: 42:20:e1:81:33:5c:dc:86:59:23:de:c0:e1:e0:b1:9c:dc:2d: 1a:7f:43:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqng6zhPN9n8jCFcvzWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTZkNmU4NTNmNDdiYzc4MTZhNmFjNGQxYzU5ZmRjZGJmZGI3MjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVKuILT4y0yDMHZyWgCWi24G7l3w vqxtsPrG9JBAB0s4RTEvTGmVUL+zlGUyM9l61puNiTtKnu/nZSOCFyz+np0PZjxQ Gg2kMPtiF8bNhGZ+BLLtZ/kH1Pb54Y3I3uItt8XJ9N4y0F37M1bQ1KF8lxeveZkE pj+3ELneZJV0nTNNxKYvi6AkrjwWa7C0VqyfDJRPV6P5DLfv/Uu1KVNus5lGU+i7 t1lh0XFi16z2iHhSqopNbzQFL+XlwzkkgpAJmNZftasxt5gMa1z3uYTypIcibB/a ZLscY+6s5ywrO052N654u84aqX0UbSMBnvnqkcknxy4uJn+yvDFe0rhSNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIFtboU/R7x4FqasTRxZ/c2/23JCMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvZ1cxdWhUOUh2SGdXcHF4TkhGbjl6Yl9iY2tJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFtPMA0G CSqGSIb3DQEBCwUAA4IBAQAmSxgtmC2m4VGk4uOJLvGY9xBdSAekaUH/V3mUXz08 8B2IEZ/SXqPYsdeaZVzwTLqQJapbcjuOz7lnYAzoN2K3orq2awocthpZbcp8qRRG MT+I2TScEjHHv0DFCMvVrYd2/2KxinauTQICXA1JK4eo7DedUQr0aEXXxzO8LBB2 77suTIsS0X7KEzj+DXdoYe8EbiG3uIR/V2h2VYBZLYoxd/Q//T2hKn8FUguzDtk6 USdiKfowDhuGbeYBw3DDl4H3W7IUv+SscIErsfzIG6L6UnVywqeh6sSv0aGQlGx3 zDivWcc2gTUt5rNCIOGBM1zchlkj3sDh4LGc3C0af0MH -----END CERTIFICATE-----Generated at Sun Jan 25 21:33:16 2026 by rpki-client