This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/geCL9RPAUHreYWx88VAnuY9Du5o.roa File: geCL9RPAUHreYWx88VAnuY9Du5o.roa (raw, json) Hash identifier: KsOAsqATMB5faX+K34f0JpwdheSXfw1xCfbke6T4Rxo= Subject key identifier: 81:E0:8B:F5:13:C0:50:7A:DE:61:6C:7C:F1:50:27:B9:8F:43:BB:9A Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Certificate serial: 019B7C1258FAE14DAAD946418A0740F89603 Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/geCL9RPAUHreYWx88VAnuY9Du5o.roa Signing time: Fri 02 Jan 2026 00:18:55 +0000 ROA not before: Fri 02 Jan 2026 00:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210001 IP address blocks: 93.187.32.0/21 maxlen: 21 185.52.116.0/22 maxlen: 22 185.52.116.0/24 maxlen: 24 2a00:dd00::/32 maxlen: 32 2a00:dd00:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:58:fa:e1:4d:aa:d9:46:41:8a:07:40:f8:96:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Validity Not Before: Jan 2 00:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81e08bf513c0507ade616c7cf15027b98f43bb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:f4:0f:40:5d:d7:3c:4e:99:61:45:9c:b9: 30:d8:6a:4d:f0:fe:16:64:8a:64:34:e1:14:13:e8: a1:d0:a8:5b:be:4d:63:af:33:2d:c7:66:97:ab:82: 5b:fa:70:82:3e:38:6a:79:ca:e2:94:70:2e:de:c9: 57:2b:e0:02:e5:2a:fe:8a:3b:07:4b:a9:62:55:50: 5a:79:4f:6f:0c:aa:6a:37:56:88:0b:5a:51:6f:fb: 79:84:9c:c0:14:e8:da:c3:dd:cc:d5:27:61:1b:fc: 83:96:c4:8a:cc:bc:53:6b:be:6b:64:fc:a4:a4:fe: 3b:5b:c3:f2:7c:3a:62:c4:ed:27:04:02:a8:f2:cf: 86:6f:53:bd:be:9c:df:d3:56:41:99:87:fb:7b:63: 3c:c1:1c:a9:1e:10:e3:82:fe:86:a7:2a:d6:6d:09: 55:9e:47:eb:f8:56:d9:9b:07:d9:53:07:c9:01:f7: b7:ee:94:7c:a8:fa:05:86:2c:33:97:00:bc:4b:d5: b1:d5:9a:99:29:29:35:28:e6:14:c9:8b:5a:4b:f3: b3:9a:65:48:1d:d3:cc:73:63:f9:63:83:43:1e:23: 04:b2:38:69:f4:c5:c3:53:dd:da:90:e9:93:25:30: 12:fe:47:18:65:66:ea:61:40:d2:63:db:be:e3:58: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E0:8B:F5:13:C0:50:7A:DE:61:6C:7C:F1:50:27:B9:8F:43:BB:9A X509v3 Authority Key Identifier: keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/geCL9RPAUHreYWx88VAnuY9Du5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.187.32.0/21 185.52.116.0/22 IPv6: 2a00:dd00::/32 Signature Algorithm: sha256WithRSAEncryption 69:9c:21:26:03:dc:33:db:e5:72:88:d9:5b:8a:96:92:2d:c4: 88:b0:96:ef:fb:0e:c0:6a:e3:06:ff:83:33:9a:49:4f:24:9f: 6b:77:22:d8:83:14:2d:6d:68:37:47:e1:2d:cd:59:ab:9c:22: 98:c4:b6:cb:7a:63:33:7c:75:a3:7f:41:dd:d2:c4:45:ba:47: 78:38:15:f9:d5:c8:f0:65:f2:d8:0e:aa:f9:4f:4e:bc:5a:7a: ce:17:7b:93:c2:54:78:6c:34:3c:7e:af:d3:32:c4:b5:8e:74: 7a:85:d5:b4:f3:59:aa:c9:59:e6:eb:a3:89:22:24:81:a1:ee: 42:f2:99:ab:d3:e3:47:1c:54:83:1a:93:39:fc:d1:39:ce:17: ea:7e:e8:78:d0:33:1b:e7:4e:d7:48:3e:5a:8a:9f:bd:89:eb: be:b1:63:e5:6a:a5:e3:86:df:e3:25:b3:4d:05:4f:13:f7:21: 09:49:d2:9a:65:85:4b:f7:38:54:d2:41:48:c6:d0:02:53:ac: d0:a0:ed:ab:ec:a2:be:16:08:c6:7b:85:67:73:6f:85:fd:70: 54:83:e0:de:27:7f:d4:16:60:95:bc:48:d1:65:a0:3a:ef:b0: ca:28:5e:23:f7:76:60:fd:e7:66:90:7c:07:a9:8f:7d:35:86: 2c:67:99:0d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8Elj64U2q2UZBigdA+JYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0 OWQ3NGQwHhcNMjYwMTAyMDAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWUwOGJmNTEzYzA1MDdhZGU2MTZjN2NmMTUwMjdiOThmNDNiYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUD0D0Bd1zxOmWFFnLkw2GpN8P4W ZIpkNOEUE+ih0Khbvk1jrzMtx2aXq4Jb+nCCPjhqecrilHAu3slXK+AC5Sr+ijsH S6liVVBaeU9vDKpqN1aIC1pRb/t5hJzAFOjaw93M1SdhG/yDlsSKzLxTa75rZPyk pP47W8PyfDpixO0nBAKo8s+Gb1O9vpzf01ZBmYf7e2M8wRypHhDjgv6GpyrWbQlV nkfr+FbZmwfZUwfJAfe37pR8qPoFhiwzlwC8S9Wx1ZqZKSk1KOYUyYtaS/OzmmVI HdPMc2P5Y4NDHiMEsjhp9MXDU93akOmTJTAS/kcYZWbqYUDSY9u+41gAAQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIHgi/UTwFB63mFsfPFQJ7mPQ7uaMB8GA1UdIwQY MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt NjY0ZjA0ZDJhNjhkLzEvZ2VDTDlSUEFVSHJlWVd4ODhWQW51WTlEdTVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXbsgAwQC uTR0MA0EAgACMAcDBQAqAN0AMA0GCSqGSIb3DQEBCwUAA4IBAQBpnCEmA9wz2+Vy iNlbipaSLcSIsJbv+w7AauMG/4MzmklPJJ9rdyLYgxQtbWg3R+EtzVmrnCKYxLbL emMzfHWjf0Hd0sRFukd4OBX51cjwZfLYDqr5T068WnrOF3uTwlR4bDQ8fq/TMsS1 jnR6hdW081mqyVnm66OJIiSBoe5C8pmr0+NHHFSDGpM5/NE5zhfqfuh40DMb507X SD5aip+9ieu+sWPlaqXjht/jJbNNBU8T9yEJSdKaZYVL9zhU0kFIxtACU6zQoO2r 7KK+FgjGe4Vnc2+F/XBUg+DeJ3/UFmCVvEjRZaA677DKKF4j93Zg/edmkHwHqY99 NYYsZ5kN -----END CERTIFICATE-----Generated at Sun Jan 25 18:50:50 2026 by rpki-client