This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/gAbatwVqafpDL9WTtIX0TlfDD98.roa File: gAbatwVqafpDL9WTtIX0TlfDD98.roa (raw, json) Hash identifier: JDzbm14+9mpQN3vnbFMcnevA6T8g7/UNXI8LqyzblhQ= Subject key identifier: 80:06:DA:B7:05:6A:69:FA:43:2F:D5:93:B4:85:F4:4E:57:C3:0F:DF Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019B7BA355760899A833D23FBFDFEAFA5DD2 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/gAbatwVqafpDL9WTtIX0TlfDD98.roa Signing time: Thu 01 Jan 2026 22:17:40 +0000 ROA not before: Thu 01 Jan 2026 22:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16589 IP address blocks: 159.197.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:55:76:08:99:a8:33:d2:3f:bf:df:ea:fa:5d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jan 1 22:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8006dab7056a69fa432fd593b485f44e57c30fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:75:35:2a:25:33:02:84:50:91:b7:7c:95: 2c:8d:bb:39:1d:3f:b5:61:8c:10:d1:8a:03:dd:a2: 3e:bf:c1:94:38:1f:5f:ad:1d:7c:d1:15:80:6d:dd: 6b:9a:eb:bb:9a:bc:e7:34:65:8b:82:c2:35:bd:0a: be:9c:c2:74:d9:28:4f:8c:64:7b:2b:5d:27:3c:e1: b8:0e:b3:25:6f:d3:3d:da:ca:1e:bd:6a:1d:a5:58: 6f:8b:1f:13:e2:42:aa:6f:73:eb:bf:12:e3:db:d5: 70:45:76:9f:cf:09:7b:9f:fc:0a:c8:8a:97:88:cc: 8a:5b:08:9a:e7:b5:32:b5:e4:d2:a3:86:72:3d:b1: 6b:6f:b1:ae:66:c2:79:b7:6d:84:2f:91:a9:59:d3: 21:f5:e0:23:6b:55:b1:0d:3f:43:eb:68:02:4e:28: 2d:f5:1f:80:c0:ed:f2:36:b2:89:03:55:ea:ca:e9: fb:0f:18:10:99:c1:df:06:01:37:98:ac:1d:61:a9: fd:be:63:fc:54:b0:2e:55:87:ae:94:f1:36:4d:b1: f0:db:81:d3:83:fb:30:c1:df:33:d3:ac:07:35:18: 97:81:73:4c:95:dc:09:7a:35:34:3a:ba:0d:e5:ee: 71:c5:63:75:c8:36:7b:21:c7:34:42:ec:f3:5f:97: 0c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:06:DA:B7:05:6A:69:FA:43:2F:D5:93:B4:85:F4:4E:57:C3:0F:DF X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/gAbatwVqafpDL9WTtIX0TlfDD98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.197.224.0/19 Signature Algorithm: sha256WithRSAEncryption a2:a7:d7:0b:bb:da:9a:ea:77:01:ee:2b:de:c0:41:73:53:61: 68:c2:75:83:d0:09:26:83:84:12:76:2f:82:e8:66:bc:d0:3c: 96:43:a2:75:05:d2:ef:6f:f0:55:6b:dc:f2:bc:4d:3e:ac:e3: e5:55:41:05:05:f5:ba:54:30:cc:9a:87:a3:4e:d0:51:42:d5: bd:c6:08:66:28:b6:73:cd:fc:d1:f4:c1:39:3c:b9:f1:f1:94: 71:f8:74:5e:27:d8:ad:96:f7:14:b1:5c:a2:e2:99:ce:27:44: 30:51:c6:ee:8c:72:bf:f0:9c:3a:1d:e2:de:76:59:99:a0:d5: 5a:8b:6d:80:fb:a0:fc:61:30:28:6f:ce:ef:8b:39:69:22:2a: f1:05:a2:58:09:4e:fc:7f:9b:b0:cd:99:8e:24:29:1f:b0:5a: 63:d5:2a:61:99:72:53:f3:83:2f:4c:62:f2:a8:b9:b9:0f:97: a2:a4:94:a0:60:7a:27:44:83:e3:0a:a0:60:74:bf:62:e1:cc: 1f:c4:eb:57:87:39:ed:25:2d:7d:fb:9a:73:a2:b0:52:b2:ba: 7d:02:b8:23:68:6d:78:91:ff:ed:cb:3a:72:24:7f:35:ce:50: 8e:5c:af:71:0f:2a:7e:cc:27:ae:6a:81:5c:53:58:7a:13:66: 0e:9a:fa:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o1V2CJmoM9I/v9/q+l3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwMTAxMjIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDA2ZGFiNzA1NmE2OWZhNDMyZmQ1OTNiNDg1ZjQ0ZTU3YzMwZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vR1NSolMwKEUJG3fJUsjbs5HT+1 YYwQ0YoD3aI+v8GUOB9frR180RWAbd1rmuu7mrznNGWLgsI1vQq+nMJ02ShPjGR7 K10nPOG4DrMlb9M92soevWodpVhvix8T4kKqb3PrvxLj29VwRXafzwl7n/wKyIqX iMyKWwia57UyteTSo4ZyPbFrb7GuZsJ5t22EL5GpWdMh9eAja1WxDT9D62gCTigt 9R+AwO3yNrKJA1Xqyun7DxgQmcHfBgE3mKwdYan9vmP8VLAuVYeulPE2TbHw24HT g/swwd8z06wHNRiXgXNMldwJejU0OroN5e5xxWN1yDZ7Icc0QuzzX5cMiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIAG2rcFamn6Qy/Vk7SF9E5Xww/fMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvZ0FiYXR3VnFhZnBETDlXVHRJWDBUbGZERDk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFn8XgMA0G CSqGSIb3DQEBCwUAA4IBAQCip9cLu9qa6ncB7ivewEFzU2FownWD0Akmg4QSdi+C 6Ga80DyWQ6J1BdLvb/BVa9zyvE0+rOPlVUEFBfW6VDDMmoejTtBRQtW9xghmKLZz zfzR9ME5PLnx8ZRx+HReJ9itlvcUsVyi4pnOJ0QwUcbujHK/8Jw6HeLedlmZoNVa i22A+6D8YTAob87vizlpIirxBaJYCU78f5uwzZmOJCkfsFpj1SphmXJT84MvTGLy qLm5D5eipJSgYHonRIPjCqBgdL9i4cwfxOtXhzntJS19+5pzorBSsrp9ArgjaG14 kf/tyzpyJH81zlCOXK9xDyp+zCeuaoFcU1h6E2YOmvro -----END CERTIFICATE-----Generated at Tue Jan 20 15:33:50 2026 by rpki-client