This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/G978p2Z4fjPEzTOjuXppglSIr4s.roa File: G978p2Z4fjPEzTOjuXppglSIr4s.roa (raw, json) Hash identifier: Nz/5Sv/BTu9yF7BMhupkYJxi7TJYJJ/JoGGvUftlZv8= Subject key identifier: 1B:DE:FC:A7:66:78:7E:33:C4:CD:33:A3:B9:7A:69:82:54:88:AF:8B Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B79105786AE349F15B9BB7C2BFED4BBAE Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/G978p2Z4fjPEzTOjuXppglSIr4s.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 185.227.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:57:86:ae:34:9f:15:b9:bb:7c:2b:fe:d4:bb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bdefca766787e33c4cd33a3b97a69825488af8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:7b:ed:d3:28:74:9d:0b:f4:97:e6:d7:dd: f7:0f:16:c5:68:c1:da:6d:6d:be:39:2b:00:f6:36: 08:c3:54:8f:de:c5:e1:ee:23:e3:8a:ab:6d:46:54: d4:e7:be:a8:d0:7c:7e:4a:d7:0a:40:a1:83:7b:f1: 1a:16:43:a6:5f:85:cf:74:20:5f:b8:49:35:fb:a5: 79:99:3c:88:79:db:3c:44:52:cf:6a:d9:df:5f:b4: 31:24:ec:b1:c5:57:b9:5c:e5:c6:a5:50:92:91:f4: 59:d4:68:ea:55:33:34:13:33:9e:f3:23:cd:83:af: e6:56:a8:b6:be:0d:4b:3e:6c:e7:e0:bc:19:14:bb: 2c:c3:55:ea:2a:ac:34:b9:af:69:bc:85:b7:c5:e4: 19:08:50:d1:92:6d:12:a0:4f:b3:ea:0c:cb:84:c1: 47:da:12:84:d8:94:58:a5:9a:96:da:6c:31:3b:c7: d8:7d:9c:aa:37:0e:8a:f2:1d:f9:c7:56:66:a8:e6: 72:d2:aa:ff:47:71:75:e8:06:71:22:89:bd:d2:c4: 82:16:c7:7c:56:21:04:3e:7f:8c:9b:9b:ef:b1:07: 5d:fe:d7:e2:3d:72:f3:ef:9d:e2:af:70:88:9b:6b: c3:1e:ff:06:c6:7a:54:35:66:65:2a:52:f7:eb:6e: 4a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DE:FC:A7:66:78:7E:33:C4:CD:33:A3:B9:7A:69:82:54:88:AF:8B X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/G978p2Z4fjPEzTOjuXppglSIr4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.7.0/24 Signature Algorithm: sha256WithRSAEncryption 48:b4:52:dc:6b:ef:91:8f:1b:91:be:06:86:5e:92:fe:58:8a: 6f:44:4c:db:b8:5a:b6:b6:bb:f2:5f:4b:3b:c1:53:01:ec:7f: d0:b3:1e:2f:5c:2f:78:4a:73:71:ff:e4:53:00:7d:3c:23:90: 89:b8:e2:e6:95:a0:2e:9a:a2:5f:fe:22:70:16:c3:6c:83:e6: dd:37:21:4b:8d:8e:9f:83:8d:a0:61:4c:dd:0b:79:07:e5:60: 23:c9:61:6c:37:fe:13:5f:ad:17:6d:e2:e4:49:f9:90:6e:c3: a1:5d:d0:d3:23:de:ba:7f:c7:23:28:da:95:8e:1b:02:e6:c0: 6b:54:bd:15:f7:52:a1:ea:6c:39:ad:c6:d8:b9:5d:b5:bd:20: 91:85:04:92:2a:26:75:4f:c4:0c:e8:fd:84:f4:19:0a:7e:67: c5:63:a1:67:c9:00:73:53:3c:8a:e3:87:1d:5a:52:3e:ef:b9: 97:30:60:6b:47:ba:d3:b8:5c:f7:42:92:be:f6:30:85:59:3d: 06:2b:14:19:33:14:bc:d1:cf:9c:66:1a:c8:86:78:35:74:80: 05:e2:3e:7d:76:7a:e3:9d:d2:f3:05:22:9e:31:be:7d:e5:f0: 97:73:01:1b:ef:e7:f2:93:20:a8:9a:97:ba:a2:e7:ea:bb:b5: 8e:9b:8f:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFeGrjSfFbm7fCv+1LuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmRlZmNhNzY2Nzg3ZTMzYzRjZDMzYTNiOTdhNjk4MjU0ODhhZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTJ77dModJ0L9Jfm1933DxbFaMHa bW2+OSsA9jYIw1SP3sXh7iPjiqttRlTU576o0Hx+StcKQKGDe/EaFkOmX4XPdCBf uEk1+6V5mTyIeds8RFLPatnfX7QxJOyxxVe5XOXGpVCSkfRZ1GjqVTM0EzOe8yPN g6/mVqi2vg1LPmzn4LwZFLssw1XqKqw0ua9pvIW3xeQZCFDRkm0SoE+z6gzLhMFH 2hKE2JRYpZqW2mwxO8fYfZyqNw6K8h35x1ZmqOZy0qr/R3F16AZxIom90sSCFsd8 ViEEPn+Mm5vvsQdd/tfiPXLz753ir3CIm2vDHv8GxnpUNWZlKlL3625KRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBve/KdmeH4zxM0zo7l6aYJUiK+LMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvRzk3OHAyWjRmalBFelRPanVYcHBnbFNJcjRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueMHMA0G CSqGSIb3DQEBCwUAA4IBAQBItFLca++RjxuRvgaGXpL+WIpvREzbuFq2trvyX0s7 wVMB7H/Qsx4vXC94SnNx/+RTAH08I5CJuOLmlaAumqJf/iJwFsNsg+bdNyFLjY6f g42gYUzdC3kH5WAjyWFsN/4TX60XbeLkSfmQbsOhXdDTI966f8cjKNqVjhsC5sBr VL0V91Kh6mw5rcbYuV21vSCRhQSSKiZ1T8QM6P2E9BkKfmfFY6FnyQBzUzyK44cd WlI+77mXMGBrR7rTuFz3QpK+9jCFWT0GKxQZMxS80c+cZhrIhng1dIAF4j59dnrj ndLzBSKeMb595fCXcwEb7+fykyCompe6oufqu7WOm498 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:13 2026 by rpki-client