This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa File: gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa (raw, json) Hash identifier: EdEmewULenr5hBiIM0aL0Nom8Wp5BQw1JYCWC8ExBCI= Subject key identifier: 80:99:88:FF:97:D8:4B:C2:73:C8:D3:63:38:90:5D:5F:51:C3:8D:30 Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Certificate serial: 019B797E5B0EC8160FF33D99EBB5B4ABDAFA Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa Signing time: Thu 01 Jan 2026 12:18:02 +0000 ROA not before: Thu 01 Jan 2026 12:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213893 IP address blocks: 195.62.48.0/23 maxlen: 23 195.62.48.0/24 maxlen: 24 195.62.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5b:0e:c8:16:0f:f3:3d:99:eb:b5:b4:ab:da:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Validity Not Before: Jan 1 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=809988ff97d84bc273c8d36338905d5f51c38d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:71:b9:67:62:87:6d:f1:cf:b3:e9:96:30: 92:e3:98:2f:02:7d:d0:77:5f:8b:0b:02:d5:37:d0: 5a:50:1b:92:f4:fa:9f:6b:7f:8a:14:05:62:c6:c1: 50:ef:82:c6:3e:fc:65:c6:93:4a:3f:38:5b:84:ce: 8b:d2:99:eb:75:c5:d4:24:50:40:3f:91:7c:e7:0e: bb:9c:2a:50:01:44:e7:cc:80:23:de:d2:c5:2b:26: a4:bc:27:8a:04:a2:02:e1:dc:f9:1b:09:f5:b0:1c: 4d:e9:a8:6c:02:5e:c2:67:40:02:81:9e:40:3b:59: d8:cc:b6:ff:db:fe:e0:61:42:95:d6:82:94:3f:32: 8e:b2:eb:2f:2f:15:e1:3f:b6:0e:8f:1e:bd:2c:b3: e0:a4:a1:ca:46:70:5e:9e:c9:84:87:05:fd:4a:b0: 44:05:15:9b:64:d5:9c:3e:71:dc:24:0c:fa:88:69: e4:af:b2:7a:21:52:db:29:b5:a5:98:a6:cf:ae:bd: 6b:63:b9:58:fc:c3:57:4c:2d:9e:91:40:da:aa:9c: f2:19:a8:4c:e6:90:4d:63:85:4a:db:6f:d7:3f:39: 75:58:8a:ba:72:a5:d3:f9:96:e7:ef:d6:f5:e5:f4: bc:ba:fa:b4:b1:62:60:a6:e2:99:c6:8d:6f:34:9e: a2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:99:88:FF:97:D8:4B:C2:73:C8:D3:63:38:90:5D:5F:51:C3:8D:30 X509v3 Authority Key Identifier: keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/gJmI_5fYS8JzyNNjOJBdX1HDjTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.62.48.0/23 Signature Algorithm: sha256WithRSAEncryption 77:1b:28:c8:a9:84:d0:26:71:17:d1:d9:f5:f0:95:65:d5:cf: f6:8b:ba:1c:80:b8:23:5e:f5:37:bd:49:73:2b:b6:39:79:2e: f3:76:e4:00:7f:57:ae:d7:13:23:49:55:0b:88:81:5c:88:4b: e8:06:0c:b7:d5:10:45:fb:3b:5f:0e:57:01:46:5e:8f:34:af: 8d:75:13:27:52:e9:1a:0a:27:da:12:1c:82:e4:c9:dd:a8:e9: fc:63:8e:66:27:eb:f2:2c:e1:84:18:45:00:9e:69:e4:10:1c: 22:5b:bd:24:60:a5:e6:4f:1e:31:18:67:aa:f3:37:50:8c:ce: 8c:7f:5d:29:eb:3a:f8:ac:c3:08:64:00:c1:6e:d4:75:57:9e: 77:96:02:38:49:fe:d0:74:57:a3:e4:3d:de:c3:b4:af:78:03: 96:de:95:c3:c0:24:23:fd:5e:ba:12:fe:3b:19:af:4a:8f:fd: 69:83:67:d4:ae:17:6f:63:4d:40:dd:cf:90:de:9b:94:fd:3a: 3d:11:96:d6:ef:aa:71:2f:ad:8d:36:34:40:6d:d3:ea:dd:20: 6e:bf:01:6a:3d:43:d5:e2:b2:b0:ff:16:75:65:74:86:06:85: 63:f6:7f:c0:8c:8f:f4:1c:f3:97:96:db:b3:26:32:99:93:ed: d7:4e:df:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5flsOyBYP8z2Z67W0q9r6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1Y2VjYmY4NjUxYTU2MjRmMjI4MWRjMzU2YTc3Y2QzNGJk NWJhOTYwHhcNMjYwMTAxMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDk5ODhmZjk3ZDg0YmMyNzNjOGQzNjMzODkwNWQ1ZjUxYzM4ZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHBxuWdih23xz7PpljCS45gvAn3Q d1+LCwLVN9BaUBuS9Pqfa3+KFAVixsFQ74LGPvxlxpNKPzhbhM6L0pnrdcXUJFBA P5F85w67nCpQAUTnzIAj3tLFKyakvCeKBKIC4dz5Gwn1sBxN6ahsAl7CZ0ACgZ5A O1nYzLb/2/7gYUKV1oKUPzKOsusvLxXhP7YOjx69LLPgpKHKRnBensmEhwX9SrBE BRWbZNWcPnHcJAz6iGnkr7J6IVLbKbWlmKbPrr1rY7lY/MNXTC2ekUDaqpzyGahM 5pBNY4VK22/XPzl1WIq6cqXT+Zbn79b15fS8uvq0sWJgpuKZxo1vNJ6iewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICZiP+X2EvCc8jTYziQXV9Rw40wMB8GA1UdIwQY MBaAFDXOy/hlGlYk8igdw1anfNNL1bqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEt NjFhNmQ3MmFjNDljLzEvZ0ptSV81ZllTOEp6eU5Oak9KQmRYMUhEalRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEtNjFhNmQ3MmFjNDlj LzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwz4wMA0G CSqGSIb3DQEBCwUAA4IBAQB3GyjIqYTQJnEX0dn18JVl1c/2i7ocgLgjXvU3vUlz K7Y5eS7zduQAf1eu1xMjSVULiIFciEvoBgy31RBF+ztfDlcBRl6PNK+NdRMnUuka CifaEhyC5MndqOn8Y45mJ+vyLOGEGEUAnmnkEBwiW70kYKXmTx4xGGeq8zdQjM6M f10p6zr4rMMIZADBbtR1V553lgI4Sf7QdFej5D3ew7SveAOW3pXDwCQj/V66Ev47 Ga9Kj/1pg2fUrhdvY01A3c+Q3puU/To9EZbW76pxL62NNjRAbdPq3SBuvwFqPUPV 4rKw/xZ1ZXSGBoVj9n/AjI/0HPOXltuzJjKZk+3XTt9J -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:26 2026 by rpki-client