This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/g7z6s3RS4iJok2SbmbjvS5hhDIk.roa File: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (raw, json) Hash identifier: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg= Subject key identifier: 83:BC:FA:B3:74:52:E2:22:68:93:64:9B:99:B8:EF:4B:98:61:0C:89 Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 019B7758EB0721572C997D48D38150E4B8C1 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/g7z6s3RS4iJok2SbmbjvS5hhDIk.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205933 IP address blocks: 185.147.64.0/24 maxlen: 24 185.147.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:eb:07:21:57:2c:99:7d:48:d3:81:50:e4:b8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83bcfab37452e2226893649b99b8ef4b98610c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f7:04:c9:dc:a6:d7:62:a3:f3:ea:ba:17:f3: 56:77:52:4e:46:55:98:df:ba:08:8b:48:aa:38:a6: 85:66:82:20:85:dc:24:c5:0b:64:c5:b6:0d:18:bc: 3f:24:6d:f8:ed:0c:3e:4a:4d:13:00:ee:c2:7f:47: 23:1e:8d:8a:47:9f:80:42:af:80:55:a0:a9:72:cc: 87:b4:b7:b8:79:4c:35:47:47:fb:97:88:aa:64:da: 3d:cf:b2:dd:73:f9:94:b7:ab:bc:5e:33:60:02:9e: 88:22:7b:fb:51:89:7a:c3:77:fa:f5:ab:ad:dc:4b: 08:e8:4e:1d:2d:82:31:d0:62:8a:c4:23:1e:75:b0: b6:fb:76:2f:25:4c:96:77:af:cb:1f:16:56:c3:b8: dd:bf:b8:3c:d4:74:bc:73:ae:b2:f3:59:60:31:19: fc:a1:0a:ff:88:7a:e3:86:76:32:bd:40:da:79:b6: bc:c3:2f:6b:56:bc:44:c7:b7:67:46:62:e3:b1:58: 1d:e0:9b:ce:b4:dd:eb:fc:a4:ef:83:a5:bb:b1:1a: 6e:33:4a:81:bf:ce:06:72:01:7a:61:a0:d5:86:e1: 8f:14:76:2e:ca:c1:f6:16:00:c3:6a:7a:15:27:47: 37:be:f7:36:31:0e:7e:e0:21:dc:c1:b9:86:18:5a: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BC:FA:B3:74:52:E2:22:68:93:64:9B:99:B8:EF:4B:98:61:0C:89 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/g7z6s3RS4iJok2SbmbjvS5hhDIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.64.0/24 185.147.66.0/24 Signature Algorithm: sha256WithRSAEncryption 96:88:bd:41:4a:50:e3:75:5e:92:a2:1b:1a:05:44:14:6c:b3: bc:23:2a:1b:4d:ab:1b:bf:33:8e:bd:79:1e:60:e9:93:4f:77: ac:af:2c:e2:cc:2d:cc:00:72:84:44:34:c0:e7:83:e2:4d:51: 81:a2:27:b6:11:9a:32:77:1f:10:0d:06:7b:ec:30:3d:ec:60: c5:4d:74:ef:c6:8f:44:84:52:48:27:88:e4:c9:6c:86:7c:76: 7f:fe:26:c7:ab:93:e5:dd:b0:93:02:0d:35:51:bb:d1:55:67: 8e:76:c6:52:c8:54:1e:0f:02:88:c1:e4:2c:60:48:cd:91:f2: a4:e8:a2:39:df:dc:0c:d8:18:67:d5:d0:87:fe:f9:f8:6f:e7: 03:d4:51:32:d0:ab:0b:da:9f:ae:62:73:b5:af:bd:0c:af:15: 41:3b:d8:9b:2e:60:35:c6:9c:74:61:e4:aa:dc:25:53:45:c4: f3:7d:e4:9d:be:68:74:e0:82:e7:fc:bc:af:61:29:a0:5e:87: d0:94:43:11:15:49:0d:f9:df:50:76:d3:1d:3b:25:a1:e9:b7: 8c:24:b4:84:7f:a7:c0:2f:7a:84:d6:39:7e:5e:1b:97:8c:bc: 03:cf:79:ec:81:fe:0a:af:70:c7:c7:5a:c2:0a:95:af:58:03: 6a:dd:9f:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WOsHIVcsmX1I04FQ5LjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2JjZmFiMzc0NTJlMjIyNjg5MzY0OWI5OWI4ZWY0Yjk4NjEwYzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vcEydym12Kj8+q6F/NWd1JORlWY 37oIi0iqOKaFZoIghdwkxQtkxbYNGLw/JG347Qw+Sk0TAO7Cf0cjHo2KR5+AQq+A VaCpcsyHtLe4eUw1R0f7l4iqZNo9z7Ldc/mUt6u8XjNgAp6IInv7UYl6w3f69aut 3EsI6E4dLYIx0GKKxCMedbC2+3YvJUyWd6/LHxZWw7jdv7g81HS8c66y81lgMRn8 oQr/iHrjhnYyvUDaeba8wy9rVrxEx7dnRmLjsVgd4JvOtN3r/KTvg6W7sRpuM0qB v84GcgF6YaDVhuGPFHYuysH2FgDDanoVJ0c3vvc2MQ5+4CHcwbmGGFrhcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIO8+rN0UuIiaJNkm5m470uYYQyJMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvZzd6NnMzUlM0aUpvazJTYm1ianZTNWhoRElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZNAAwQA uZNCMA0GCSqGSIb3DQEBCwUAA4IBAQCWiL1BSlDjdV6SohsaBUQUbLO8IyobTasb vzOOvXkeYOmTT3esryzizC3MAHKERDTA54PiTVGBoie2EZoydx8QDQZ77DA97GDF TXTvxo9EhFJIJ4jkyWyGfHZ//ibHq5Pl3bCTAg01UbvRVWeOdsZSyFQeDwKIweQs YEjNkfKk6KI539wM2Bhn1dCH/vn4b+cD1FEy0KsL2p+uYnO1r70MrxVBO9ibLmA1 xpx0YeSq3CVTRcTzfeSdvmh04ILn/LyvYSmgXofQlEMRFUkN+d9QdtMdOyWh6beM JLSEf6fAL3qE1jl+XhuXjLwDz3nsgf4Kr3DHx1rCCpWvWANq3Z92 -----END CERTIFICATE-----Generated at Sun Jan 11 06:37:18 2026 by rpki-client