This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/gpcRZMvvAarNXGnEQk69CRu1kTw.roa File: gpcRZMvvAarNXGnEQk69CRu1kTw.roa (raw, json) Hash identifier: vDgS5AGwOlvvwcg7ps4GbXeY48BReojyPRTXSF9XHHw= Subject key identifier: 82:97:11:64:CB:EF:01:AA:CD:5C:69:C4:42:4E:BD:09:1B:B5:91:3C Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328 Certificate serial: 019B7AC9120BCD65A87772584D11970E2503 Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/gpcRZMvvAarNXGnEQk69CRu1kTw.roa Signing time: Thu 01 Jan 2026 18:19:16 +0000 ROA not before: Thu 01 Jan 2026 18:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 80.89.0.0/24 maxlen: 24 80.89.1.0/24 maxlen: 24 80.89.2.0/24 maxlen: 24 80.89.3.0/24 maxlen: 24 80.89.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:12:0b:cd:65:a8:77:72:58:4d:11:97:0e:25:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328 Validity Not Before: Jan 1 18:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82971164cbef01aacd5c69c4424ebd091bb5913c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:93:c2:22:eb:d7:7d:69:9d:02:64:91:db: 9b:61:16:df:53:14:7d:ce:3b:e9:c9:20:76:b4:43: 19:20:3f:6f:9e:c6:c8:e4:fd:cf:51:0d:52:02:62: fb:13:28:be:76:69:4e:4c:54:1c:4d:77:ef:27:c8: 9b:69:63:e2:f6:34:92:6e:30:50:b8:36:72:f4:0d: 57:0e:04:c5:b0:4c:63:59:cf:ed:f0:47:08:d3:3d: e5:26:90:a1:e3:de:08:18:54:a9:65:1e:9c:a4:38: 8c:57:d2:aa:7c:f1:13:87:00:fe:6b:a6:f8:dd:4a: 66:e1:3d:49:b8:52:ce:07:ba:3e:2e:91:1e:56:fb: dc:12:3a:2c:a3:a0:e0:21:81:03:a6:42:33:7f:90: 50:91:4d:2d:94:79:69:1b:18:32:ea:5f:2e:b8:e3: dc:c0:f4:1e:c2:28:74:bd:ad:bc:7f:86:b1:8e:a6: e4:95:b3:65:71:ae:ba:7c:cb:94:86:0a:e9:91:f7: 86:86:65:4d:4d:f0:6f:ae:7b:68:b3:f2:b1:f3:67: b7:e9:c3:85:0b:27:cf:1c:84:78:92:3f:22:e6:68: f7:53:b3:76:ca:c1:0c:b2:42:28:e8:69:4d:71:2c: ca:4e:b8:ed:07:c9:43:c9:82:29:4b:b1:c1:be:da: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:97:11:64:CB:EF:01:AA:CD:5C:69:C4:42:4E:BD:09:1B:B5:91:3C X509v3 Authority Key Identifier: keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/gpcRZMvvAarNXGnEQk69CRu1kTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.89.0.0/21 Signature Algorithm: sha256WithRSAEncryption b0:93:01:f7:ba:d4:29:aa:f3:9b:bc:ed:39:b4:fc:b3:78:0b: 57:14:59:6d:87:f7:5b:33:de:d3:7f:a6:cf:3f:37:37:79:ab: 78:30:2f:db:fb:08:3c:c1:75:da:42:e3:8f:05:7a:4f:5f:c7: 4b:b5:32:cb:9f:8d:0d:15:34:f8:c7:e4:eb:fd:dd:4a:f5:ae: 5f:45:88:2b:6b:0b:39:1c:83:59:21:b0:85:46:8e:81:85:10: 68:6c:b4:c7:a1:9b:c5:6d:eb:ec:35:d5:53:d2:7b:e8:13:54: 9d:08:77:fc:98:24:09:31:f8:9b:ea:0d:9d:b3:93:9f:ae:cf: c4:06:34:65:e7:c2:5e:f1:47:cc:2a:d3:7d:b1:e9:b6:58:9a: ca:1a:a3:e5:1c:35:ed:5f:ce:b0:43:eb:55:02:83:de:e7:3a: 6b:87:63:f2:0d:e0:97:7f:d8:c2:7c:87:5d:78:be:0f:1a:74: 52:b7:1d:53:d2:d4:dd:29:af:42:36:d8:99:fb:80:26:cd:e4: cc:ae:af:98:17:f0:86:88:a7:38:b1:c1:c0:1e:7e:89:24:dd: d7:36:e5:bc:2e:5f:2a:0b:67:6e:60:34:03:10:fd:2a:b8:56: 5d:49:a5:2e:b7:83:52:82:ea:6e:7b:1b:19:87:f3:87:6e:c7: 86:46:9d:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRILzWWod3JYTRGXDiUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYTM3ZGE5NzBjNDY2NDU3NTgzYmJlMDJiMmEwZTcyZmJk YzYzMjgwHhcNMjYwMTAxMTgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mjk3MTE2NGNiZWYwMWFhY2Q1YzY5YzQ0MjRlYmQwOTFiYjU5MTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpGTwiLr131pnQJkkdubYRbfUxR9 zjvpySB2tEMZID9vnsbI5P3PUQ1SAmL7Eyi+dmlOTFQcTXfvJ8ibaWPi9jSSbjBQ uDZy9A1XDgTFsExjWc/t8EcI0z3lJpCh494IGFSpZR6cpDiMV9KqfPEThwD+a6b4 3Upm4T1JuFLOB7o+LpEeVvvcEjoso6DgIYEDpkIzf5BQkU0tlHlpGxgy6l8uuOPc wPQewih0va28f4axjqbklbNlca66fMuUhgrpkfeGhmVNTfBvrntos/Kx82e36cOF CyfPHIR4kj8i5mj3U7N2ysEMskIo6GlNcSzKTrjtB8lDyYIpS7HBvtovjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIKXEWTL7wGqzVxpxEJOvQkbtZE8MB8GA1UdIwQY MBaAFCyjfalwxGZFdYO74CsqDnL73GMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgt OGNhMjVmNDg4ZWJmLzEvZ3BjUlpNdnZBYXJOWEduRVFrNjlDUnUxa1R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgtOGNhMjVmNDg4ZWJm LzEvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUFkAMA0G CSqGSIb3DQEBCwUAA4IBAQCwkwH3utQpqvObvO05tPyzeAtXFFlth/dbM97Tf6bP Pzc3eat4MC/b+wg8wXXaQuOPBXpPX8dLtTLLn40NFTT4x+Tr/d1K9a5fRYgraws5 HINZIbCFRo6BhRBobLTHoZvFbevsNdVT0nvoE1SdCHf8mCQJMfib6g2ds5Ofrs/E BjRl58Je8UfMKtN9sem2WJrKGqPlHDXtX86wQ+tVAoPe5zprh2PyDeCXf9jCfIdd eL4PGnRStx1T0tTdKa9CNtiZ+4AmzeTMrq+YF/CGiKc4scHAHn6JJN3XNuW8Ll8q C2duYDQDEP0quFZdSaUut4NSgupuexsZh/OHbseGRp0C -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:19 2026 by rpki-client