This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/gd0apcrdYEI4bPnkTNGJSM4gRa4.roa File: gd0apcrdYEI4bPnkTNGJSM4gRa4.roa (raw, json) Hash identifier: p+dDYEXfjkS2FAsmztfw4NEl9rJExwTKxbBp/O3yJJ4= Subject key identifier: 81:DD:1A:A5:CA:DD:60:42:38:6C:F9:E4:4C:D1:89:48:CE:20:45:AE Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Certificate serial: 019B7758D9878AA9C8FD21243CA308E7DA5B Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/gd0apcrdYEI4bPnkTNGJSM4gRa4.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 46.28.48.0/21 maxlen: 24 185.80.220.0/22 maxlen: 24 212.78.64.0/19 maxlen: 24 212.78.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d9:87:8a:a9:c8:fd:21:24:3c:a3:08:e7:da:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81dd1aa5cadd6042386cf9e44cd18948ce2045ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1a:71:68:13:c8:23:c2:70:0a:4d:d4:0f:16: d2:0b:0d:28:22:86:65:16:f6:98:fb:98:35:a3:9d: 2d:5f:36:f9:fc:3b:9f:c7:a5:e7:8c:4d:e7:84:6f: 68:b3:6a:c5:dc:85:36:5c:8b:96:ab:5e:5f:7b:03: 59:b9:d2:7a:06:1e:05:8f:49:7a:59:80:34:ac:96: e2:d9:f0:fb:fe:73:fd:dc:68:7d:62:7b:1f:e3:bc: d8:22:59:ff:81:a9:e1:cf:77:c4:27:16:c3:7b:3b: 75:a2:23:92:9e:b7:49:15:9e:4a:03:2c:9b:0d:3e: f7:e1:17:97:61:80:58:c7:5e:97:87:ae:10:0d:95: ca:17:4b:d1:43:62:76:b1:29:26:13:5f:0b:f6:69: 81:36:bb:8a:83:d7:bd:06:ed:48:b6:04:2d:ad:1d: 6e:0e:93:cb:a3:f4:97:69:bc:9e:d8:6c:9e:5a:b2: 41:01:68:0d:89:1d:2b:df:93:54:74:72:af:7a:de: f6:5a:9b:23:6c:9b:3f:96:d6:73:d2:f4:6f:a5:2b: b3:91:a3:e7:6f:35:07:11:62:b8:8c:d0:89:7c:ce: 9f:1e:1c:3e:35:44:13:9d:87:5a:63:64:42:30:70: 72:f8:ab:4d:de:bc:75:cb:53:3b:2e:b0:88:ab:7e: f6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DD:1A:A5:CA:DD:60:42:38:6C:F9:E4:4C:D1:89:48:CE:20:45:AE X509v3 Authority Key Identifier: keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/gd0apcrdYEI4bPnkTNGJSM4gRa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.48.0/21 185.80.220.0/22 212.78.64.0/19 Signature Algorithm: sha256WithRSAEncryption 63:d8:36:5d:66:c5:0a:a7:9c:e9:6e:85:64:81:3d:d7:2b:b5: a3:b5:2c:1a:73:ac:c2:7a:83:8b:81:a5:13:6e:b5:5e:e6:f9: 82:28:07:e7:e2:4b:e4:e1:fd:a6:eb:32:32:cb:52:27:94:72: 36:a4:a5:9b:d5:cc:65:89:3f:d8:c2:c4:c1:18:cf:9c:60:04: 89:11:0b:67:21:53:be:be:b0:80:d3:38:ab:d5:41:7c:4c:d9: bf:bc:c8:5d:22:50:7e:c7:2e:bd:f8:28:58:7a:8f:d6:84:db: 9b:9e:54:d3:9a:94:58:50:e2:97:eb:77:cf:68:3c:7e:00:b3: 0f:3d:81:66:5e:7f:73:1a:c7:8a:40:bd:0b:95:f3:f3:c9:d8: 7b:6f:15:96:0b:dd:39:8b:fb:56:ef:2d:1e:d2:fc:ce:cf:96: 89:03:f6:43:62:4a:a6:21:cb:5b:5d:13:f5:9e:a7:ba:40:30: 41:5f:a4:9b:68:93:41:cd:ea:9c:ac:7c:f7:5d:c5:8e:fd:4c: 6c:cc:81:bf:8e:22:cf:6b:6c:ec:1b:14:63:ff:ce:c1:55:b7: 27:f8:6f:9f:51:b1:4e:ad:c7:3e:1f:c6:45:b8:4a:45:04:b9: 0e:66:75:a3:1f:ac:c5:cd:e8:63:0c:12:52:00:e1:be:20:9c: c4:08:11:0a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WNmHiqnI/SEkPKMI59pbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzM4MWY1M2YyNWRiYzJhMGVmYWJmODg5ZmNhMzI0MTk5 NThkZDAwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWRkMWFhNWNhZGQ2MDQyMzg2Y2Y5ZTQ0Y2QxODk0OGNlMjA0NWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hpxaBPII8JwCk3UDxbSCw0oIoZl FvaY+5g1o50tXzb5/Dufx6XnjE3nhG9os2rF3IU2XIuWq15fewNZudJ6Bh4Fj0l6 WYA0rJbi2fD7/nP93Gh9Ynsf47zYIln/ganhz3fEJxbDezt1oiOSnrdJFZ5KAyyb DT734ReXYYBYx16Xh64QDZXKF0vRQ2J2sSkmE18L9mmBNruKg9e9Bu1ItgQtrR1u DpPLo/SXabye2GyeWrJBAWgNiR0r35NUdHKvet72WpsjbJs/ltZz0vRvpSuzkaPn bzUHEWK4jNCJfM6fHhw+NUQTnYdaY2RCMHBy+KtN3rx1y1M7LrCIq3723wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIHdGqXK3WBCOGz55EzRiUjOIEWuMB8GA1UdIwQY MBaAFP/DgfU/JdvCoO+r+In8oyQZlY3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDkt NmZlMzQ4MDVhNmM2LzEvZ2QwYXBjcmRZRUk0YlBua1ROR0pTTTRnUmE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDktNmZlMzQ4MDVhNmM2 LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLhwwAwQC uVDcAwQF1E5AMA0GCSqGSIb3DQEBCwUAA4IBAQBj2DZdZsUKp5zpboVkgT3XK7Wj tSwac6zCeoOLgaUTbrVe5vmCKAfn4kvk4f2m6zIyy1InlHI2pKWb1cxliT/YwsTB GM+cYASJEQtnIVO+vrCA0zir1UF8TNm/vMhdIlB+xy69+ChYeo/WhNubnlTTmpRY UOKX63fPaDx+ALMPPYFmXn9zGseKQL0LlfPzydh7bxWWC905i/tW7y0e0vzOz5aJ A/ZDYkqmIctbXRP1nqe6QDBBX6SbaJNBzeqcrHz3XcWO/UxszIG/jiLPa2zsGxRj /87BVbcn+G+fUbFOrcc+H8ZFuEpFBLkOZnWjH6zFzehjDBJSAOG+IJzECBEK -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:39 2026 by rpki-client