This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/gFBkxLXifB1pizDwpQxGt50lx-w.roa File: gFBkxLXifB1pizDwpQxGt50lx-w.roa (raw, json) Hash identifier: CRzzcHfWnFO/NYye+zBKmrkrfDfUSQ88HqZjIhac8Z8= Subject key identifier: 80:50:64:C4:B5:E2:7C:1D:69:8B:30:F0:A5:0C:46:B7:9D:25:C7:EC Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866 Certificate serial: 019B7CEE41DDC3314711941BF69F352B4FF5 Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/gFBkxLXifB1pizDwpQxGt50lx-w.roa Signing time: Fri 02 Jan 2026 04:19:07 +0000 ROA not before: Fri 02 Jan 2026 04:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48147 IP address blocks: 89.42.136.0/22 maxlen: 24 89.42.136.0/23 maxlen: 24 89.42.136.0/24 maxlen: 24 89.42.137.0/24 maxlen: 24 89.42.138.0/23 maxlen: 24 89.42.138.0/24 maxlen: 24 89.42.139.0/24 maxlen: 24 89.42.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:41:dd:c3:31:47:11:94:1b:f6:9f:35:2b:4f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=805064c4b5e27c1d698b30f0a50c46b79d25c7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:ef:3f:1b:07:92:a0:f8:9e:19:b3:ac:b5: a2:df:86:00:1b:6f:98:c8:d7:d1:bc:8e:f4:fc:e7: 09:7e:3e:02:76:64:36:5d:a8:f8:33:00:19:c7:1a: 48:99:56:8a:4a:fd:18:c7:b3:f1:7b:94:23:a2:49: 46:9b:cd:08:56:c2:f0:dd:34:11:38:3c:ac:e7:a4: c1:01:f4:f4:2b:e8:6b:fe:81:96:b1:8e:fa:be:a3: e7:24:44:8b:18:66:18:3f:26:d1:63:32:b8:bb:f2: 75:d9:f4:f9:5e:2d:82:f9:4c:33:b0:d4:9e:3d:48: ca:f8:3c:90:4f:9c:a8:7e:61:9a:08:da:09:64:9d: 98:d8:91:db:ad:6e:50:9f:68:19:51:84:13:2d:3d: 0e:90:c3:61:63:39:b0:4d:71:65:97:88:d7:a2:dd: fd:9f:b4:2d:08:eb:93:53:ec:a8:5e:ac:6a:c2:67: f7:48:10:bc:b2:7d:5c:d1:2f:0d:d7:98:e5:26:58: 13:0e:48:02:21:01:a9:87:3d:4e:3a:2a:70:6f:8f: 5c:0b:e5:5a:f3:f9:2c:a9:57:93:e8:cd:61:16:b5: 3f:32:f6:d0:71:4e:6f:ae:f3:80:4c:e1:88:ec:c4: 48:51:46:dd:8a:52:00:21:27:0e:97:b6:ae:9a:98: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:50:64:C4:B5:E2:7C:1D:69:8B:30:F0:A5:0C:46:B7:9D:25:C7:EC X509v3 Authority Key Identifier: keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/gFBkxLXifB1pizDwpQxGt50lx-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.136.0/22 89.42.196.0/24 Signature Algorithm: sha256WithRSAEncryption 34:33:cd:23:26:c2:f1:e5:7f:ba:0c:ca:0a:78:1d:5b:e2:88: 7f:5e:6d:45:47:9e:d8:82:ba:03:2a:2c:a7:e0:f3:e5:55:1f: f0:fe:86:1a:45:cb:b2:be:3c:f9:2d:ae:06:4e:fb:0a:36:72: 4e:b7:d2:96:70:6f:d5:22:b7:20:04:77:d3:09:77:6e:15:0f: be:0e:bc:14:91:fb:86:8f:dd:2a:fe:2a:bd:f3:6a:a3:20:00: 17:64:3f:32:fe:b1:fc:43:78:37:64:2e:8f:2e:ec:0f:da:2f: 48:ce:06:e6:f0:1d:09:5f:10:2d:cf:19:02:51:ed:ac:87:95: 69:62:b0:a4:a5:48:ae:de:2f:4f:82:ba:df:41:21:97:e9:11: cd:53:a3:1c:77:5f:9b:a5:de:81:5f:89:0e:77:5c:27:32:53: 2c:d8:ff:5c:95:c3:2f:e1:39:87:dd:5b:4c:9b:40:40:9f:fe: 5d:c8:ad:b5:59:19:92:d1:bf:55:73:a2:80:0d:3c:c8:5b:d0: 97:2a:56:c0:b5:1a:4c:91:e0:ad:41:0b:16:d5:e7:77:57:e0: 26:a0:b5:38:cf:07:6d:5c:93:35:e2:29:c1:9b:3a:59:98:86: cb:f1:34:9e:e4:e6:9e:be:44:8a:d5:01:2e:9f:a6:3d:c6:0e: f8:d9:00:3e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87kHdwzFHEZQb9p81K0/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl Mjc4NjYwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDUwNjRjNGI1ZTI3YzFkNjk4YjMwZjBhNTBjNDZiNzlkMjVjN2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1obvPxsHkqD4nhmzrLWi34YAG2+Y yNfRvI70/OcJfj4CdmQ2Xaj4MwAZxxpImVaKSv0Yx7Pxe5QjoklGm80IVsLw3TQR ODys56TBAfT0K+hr/oGWsY76vqPnJESLGGYYPybRYzK4u/J12fT5Xi2C+UwzsNSe PUjK+DyQT5yofmGaCNoJZJ2Y2JHbrW5Qn2gZUYQTLT0OkMNhYzmwTXFll4jXot39 n7QtCOuTU+yoXqxqwmf3SBC8sn1c0S8N15jlJlgTDkgCIQGphz1OOipwb49cC+Va 8/ksqVeT6M1hFrU/MvbQcU5vrvOATOGI7MRIUUbdilIAIScOl7aumpj14QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIBQZMS14nwdaYsw8KUMRredJcfsMB8GA1UdIwQY MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt Y2U1ZTAxZTcxYzkxLzEvZ0ZCa3hMWGlmQjFwaXpEd3BReEd0NTBseC13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWSqIAwQA WSrEMA0GCSqGSIb3DQEBCwUAA4IBAQA0M80jJsLx5X+6DMoKeB1b4oh/Xm1FR57Y groDKiyn4PPlVR/w/oYaRcuyvjz5La4GTvsKNnJOt9KWcG/VIrcgBHfTCXduFQ++ DrwUkfuGj90q/iq982qjIAAXZD8y/rH8Q3g3ZC6PLuwP2i9Izgbm8B0JXxAtzxkC Ue2sh5VpYrCkpUiu3i9PgrrfQSGX6RHNU6Mcd1+bpd6BX4kOd1wnMlMs2P9clcMv 4TmH3VtMm0BAn/5dyK21WRmS0b9Vc6KADTzIW9CXKlbAtRpMkeCtQQsW1ed3V+Am oLU4zwdtXJM14inBmzpZmIbL8TSe5OaevkSK1QEun6Y9xg742QA+ -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:34 2026 by rpki-client