This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Gy7rPstBneZVStNIwtVW8bT_cmE.roa File: Gy7rPstBneZVStNIwtVW8bT_cmE.roa (raw, json) Hash identifier: MmelsWxoNqTpCWyfYCNxWjj4yP2JZzrbHiivlCAjdLk= Subject key identifier: 1B:2E:EB:3E:CB:41:9D:E6:55:4A:D3:48:C2:D5:56:F1:B4:FF:72:61 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79115499700AB10021576BC5E4D8D0CF Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Gy7rPstBneZVStNIwtVW8bT_cmE.roa Signing time: Thu 01 Jan 2026 10:18:57 +0000 ROA not before: Thu 01 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212558 IP address blocks: 104.222.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:54:99:70:0a:b1:00:21:57:6b:c5:e4:d8:d0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b2eeb3ecb419de6554ad348c2d556f1b4ff7261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:03:55:7b:5b:fe:e0:4a:c2:f7:e8:af:5e:f5: 5e:b5:4b:8d:98:a9:ee:bd:d3:66:d6:e5:5a:c8:01: 93:92:7f:5d:8c:77:4a:84:de:7e:63:1c:4b:5a:89: 14:c8:3f:8c:6a:4f:6d:a2:49:93:c0:2b:cb:90:1f: 76:de:05:37:86:03:54:f2:54:fc:b2:3b:f3:f3:05: 79:e2:65:34:10:7e:f5:d6:ec:be:95:79:46:d1:42: ee:94:52:b4:58:64:22:0f:cc:f0:ca:c5:22:e0:8f: 9e:6a:d5:48:c4:61:a5:13:84:e0:13:40:4c:fd:ce: 62:c5:80:55:43:13:50:84:3a:f7:a1:0e:48:57:51: bc:33:52:26:3b:67:6f:b4:4c:df:e7:99:f9:99:dd: 0b:fb:fa:54:0e:d9:63:fc:5d:48:ca:63:0e:b9:c7: 52:c8:c3:e9:1a:ec:e8:47:eb:33:71:0b:1d:bd:fd: 5d:de:13:c0:a3:7f:e3:c8:04:c0:2b:06:1a:4a:d7: 9e:aa:a8:90:43:b5:43:46:1f:7e:80:4c:1a:4f:c4: b0:63:c6:cc:a6:e6:7a:37:82:0f:fa:57:54:55:f2: bb:18:a0:fd:4b:cf:5a:03:54:e9:a0:76:4f:8a:0b: 6f:75:21:07:17:3b:bd:f7:10:40:aa:f6:d0:4d:84: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2E:EB:3E:CB:41:9D:E6:55:4A:D3:48:C2:D5:56:F1:B4:FF:72:61 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Gy7rPstBneZVStNIwtVW8bT_cmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.222.178.0/24 Signature Algorithm: sha256WithRSAEncryption 77:e6:ef:a7:cd:62:de:0d:c5:0f:7b:54:a5:f7:e0:d6:78:c6: 25:47:e0:c7:58:ee:22:4e:cd:d3:68:00:62:92:1e:6b:ad:a6: 98:f8:a0:c7:91:9f:3f:90:11:96:46:b0:91:30:11:67:5c:85: 67:82:5a:ab:0b:10:84:99:8c:01:60:4d:bc:db:05:41:34:8d: 33:d4:a8:f7:36:a0:5c:ac:d7:a8:fa:d8:63:1b:23:ea:35:1f: 0f:21:a2:14:24:f0:63:62:37:03:11:08:65:14:2e:48:23:30: ad:56:09:86:83:4e:eb:05:5c:fe:f6:1e:8c:c2:77:65:b6:62: a5:ae:0f:14:ea:2f:05:1a:b5:a7:69:55:a8:f7:3e:00:0f:54: f8:47:06:bb:76:b3:71:27:ba:17:b2:8a:49:a5:cf:61:b3:4a: 64:11:7e:9e:32:c7:17:ab:70:b4:58:f0:0a:14:6d:41:c5:a9: c1:c0:63:12:ed:b6:e1:df:e0:02:5f:74:cd:19:13:d3:bc:a1: 85:50:63:6b:96:33:5c:d4:24:1f:10:1e:ef:2b:cf:4c:6c:b3: e3:65:35:b1:df:fc:8a:15:02:d6:9d:93:94:2c:dc:29:1a:65: f8:52:e1:7b:2d:d4:f5:1c:5a:4a:57:c5:46:f4:fa:a9:2c:d3: 7f:9c:4f:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EVSZcAqxACFXa8Xk2NDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjJlZWIzZWNiNDE5ZGU2NTU0YWQzNDhjMmQ1NTZmMWI0ZmY3MjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQNVe1v+4ErC9+ivXvVetUuNmKnu vdNm1uVayAGTkn9djHdKhN5+YxxLWokUyD+Mak9tokmTwCvLkB923gU3hgNU8lT8 sjvz8wV54mU0EH711uy+lXlG0ULulFK0WGQiD8zwysUi4I+eatVIxGGlE4TgE0BM /c5ixYBVQxNQhDr3oQ5IV1G8M1ImO2dvtEzf55n5md0L+/pUDtlj/F1IymMOucdS yMPpGuzoR+szcQsdvf1d3hPAo3/jyATAKwYaSteeqqiQQ7VDRh9+gEwaT8SwY8bM puZ6N4IP+ldUVfK7GKD9S89aA1TpoHZPigtvdSEHFzu99xBAqvbQTYRGqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBsu6z7LQZ3mVUrTSMLVVvG0/3JhMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvR3k3clBzdEJuZVpWU3ROSXd0Vlc4YlRfY21FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaN6yMA0G CSqGSIb3DQEBCwUAA4IBAQB35u+nzWLeDcUPe1Sl9+DWeMYlR+DHWO4iTs3TaABi kh5rraaY+KDHkZ8/kBGWRrCRMBFnXIVnglqrCxCEmYwBYE282wVBNI0z1Kj3NqBc rNeo+thjGyPqNR8PIaIUJPBjYjcDEQhlFC5IIzCtVgmGg07rBVz+9h6MwndltmKl rg8U6i8FGrWnaVWo9z4AD1T4Rwa7drNxJ7oXsopJpc9hs0pkEX6eMscXq3C0WPAK FG1BxanBwGMS7bbh3+ACX3TNGRPTvKGFUGNrljNc1CQfEB7vK89MbLPjZTWx3/yK FQLWnZOULNwpGmX4UuF7LdT1HFpKV8VG9PqpLNN/nE+R -----END CERTIFICATE-----Generated at Fri Jan 2 02:38:58 2026 by rpki-client