This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GyslsRABfAiX2O5OctW_QC2CqZQ.roa File: GyslsRABfAiX2O5OctW_QC2CqZQ.roa (raw, json) Hash identifier: YFAj2xuF5R7Z1faOIFGvCkhzjfnYXjNAfc1x4jT7oMM= Subject key identifier: 1B:2B:25:B1:10:01:7C:08:97:D8:EE:4E:72:D5:BF:40:2D:82:A9:94 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA770E7CD3C93078B9DFECB208E43C2 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GyslsRABfAiX2O5OctW_QC2CqZQ.roa Signing time: Fri 02 Jan 2026 12:21:01 +0000 ROA not before: Fri 02 Jan 2026 12:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38951 IP address blocks: 46.252.160.0/20 maxlen: 20 77.241.32.0/20 maxlen: 20 87.237.112.0/21 maxlen: 21 93.185.176.0/20 maxlen: 20 109.205.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:70:e7:cd:3c:93:07:8b:9d:fe:cb:20:8e:43:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b2b25b110017c0897d8ee4e72d5bf402d82a994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:71:01:2c:e1:ef:af:24:4d:63:ea:36:e9:6f: 0a:c1:03:a4:2b:8e:97:b8:1e:df:cd:43:a8:c4:01: dc:ed:10:47:c3:a6:b9:e1:bc:43:4c:ff:df:0f:29: 42:fc:d3:27:1d:93:e8:6a:86:0d:51:31:86:2f:11: 06:1f:71:c0:8a:21:06:6c:48:df:c2:88:8a:40:5f: 07:96:6e:39:51:0a:26:9d:6d:4c:9b:2e:cb:2c:1d: fb:e0:3b:27:57:7b:c9:53:cb:44:6c:ea:5c:78:d5: e4:3a:d6:60:09:f0:c1:d4:f9:95:d2:29:18:b8:44: ac:da:e2:0c:17:dc:5f:9c:6b:03:60:00:74:82:f8: 88:18:37:66:3e:6c:65:8e:df:43:e4:9f:57:12:9c: 7d:b1:57:15:ed:86:52:f6:9a:f2:d1:1b:ce:95:86: 89:b2:8c:59:05:be:76:cb:83:1e:b2:ce:bc:3e:3e: 23:d0:b7:6c:15:96:89:40:e1:29:ea:28:7e:ca:e7: 42:cf:b2:48:61:27:b2:40:9c:0c:4e:cd:cf:7c:77: c4:fa:7c:86:01:5e:00:fe:dd:f9:25:5d:80:3f:69: 92:e7:20:92:cd:16:ca:1e:54:95:09:93:59:5f:15: 5a:30:90:86:cc:f5:05:f1:c6:aa:20:c4:0c:e8:98: 43:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2B:25:B1:10:01:7C:08:97:D8:EE:4E:72:D5:BF:40:2D:82:A9:94 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GyslsRABfAiX2O5OctW_QC2CqZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.252.160.0/20 77.241.32.0/20 87.237.112.0/21 93.185.176.0/20 109.205.248.0/21 Signature Algorithm: sha256WithRSAEncryption 81:3e:d9:1a:3d:01:d0:45:ef:36:83:1d:f0:7f:af:b4:31:3d: 54:7b:d9:bc:3c:d4:70:fb:2b:a2:51:c3:04:bf:e2:f9:ce:e2: 7e:bf:bb:15:b0:e8:6b:6d:c3:3b:76:2c:6e:f1:82:49:f8:95: 15:9f:d3:f2:30:6d:9a:8a:da:31:37:59:d3:68:7d:a7:70:61: 54:83:a4:59:0a:56:21:36:76:37:4b:ab:d1:d8:14:4a:1a:d6: ab:28:67:14:27:61:55:cf:5a:9a:c8:11:c5:4a:75:e8:ec:09: 53:c2:90:68:7b:2e:56:7b:6c:6e:af:cd:1f:ea:ab:03:1f:43: 18:76:95:f5:ba:4b:96:44:68:7a:92:7f:56:86:3c:a9:f6:75: 66:8a:d2:74:f2:4b:68:02:f1:9c:4b:8d:77:9e:41:8b:c7:6e: 4e:41:c8:13:0b:7a:48:e3:fe:7c:b5:50:e2:34:28:45:8f:52: 6b:53:0a:02:20:d6:58:c9:30:cf:44:43:71:d5:84:89:b2:19: a8:ae:ec:b3:88:57:c0:00:b9:3f:8d:ff:7a:0d:ab:c6:02:93: 08:51:be:46:ef:9d:0b:d0:57:52:7e:1c:8f:7b:58:cd:7e:58: 93:27:7d:a1:1c:3e:d7:e9:f3:8e:1a:24:84:10:58:c6:91:7a: 30:08:76:3d -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+p3DnzTyTB4ud/ssgjkPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjJiMjViMTEwMDE3YzA4OTdkOGVlNGU3MmQ1YmY0MDJkODJhOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHEBLOHvryRNY+o26W8KwQOkK46X uB7fzUOoxAHc7RBHw6a54bxDTP/fDylC/NMnHZPoaoYNUTGGLxEGH3HAiiEGbEjf woiKQF8Hlm45UQomnW1Mmy7LLB374DsnV3vJU8tEbOpceNXkOtZgCfDB1PmV0ikY uESs2uIMF9xfnGsDYAB0gviIGDdmPmxljt9D5J9XEpx9sVcV7YZS9pry0RvOlYaJ soxZBb52y4Mess68Pj4j0LdsFZaJQOEp6ih+yudCz7JIYSeyQJwMTs3PfHfE+nyG AV4A/t35JV2AP2mS5yCSzRbKHlSVCZNZXxVaMJCGzPUF8caqIMQM6JhD1QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBsrJbEQAXwIl9juTnLVv0AtgqmUMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvR3lzbHNSQUJmQWlYMk81T2N0V19RQzJDcVpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQELvygAwQE TfEgAwQDV+1wAwQEXbmwAwQDbc34MA0GCSqGSIb3DQEBCwUAA4IBAQCBPtkaPQHQ Re82gx3wf6+0MT1Ue9m8PNRw+yuiUcMEv+L5zuJ+v7sVsOhrbcM7dixu8YJJ+JUV n9PyMG2aitoxN1nTaH2ncGFUg6RZClYhNnY3S6vR2BRKGtarKGcUJ2FVz1qayBHF SnXo7AlTwpBoey5We2xur80f6qsDH0MYdpX1ukuWRGh6kn9Whjyp9nVmitJ08kto AvGcS413nkGLx25OQcgTC3pI4/58tVDiNChFj1JrUwoCINZYyTDPRENx1YSJshmo ruyziFfAALk/jf96DavGApMIUb5G750L0FdSfhyPe1jNfliTJ32hHD7X6fOOGiSE EFjGkXowCHY9 -----END CERTIFICATE-----Generated at Mon Jan 26 01:39:58 2026 by rpki-client