This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/gdZbcfQhj6CVyMJsPQMT1BZmtdM.roa File: gdZbcfQhj6CVyMJsPQMT1BZmtdM.roa (raw, json) Hash identifier: X/T0yNnwui4YvzGKyxtkJ10/UIQIZbvCIKZsavRhgn8= Subject key identifier: 81:D6:5B:71:F4:21:8F:A0:95:C8:C2:6C:3D:03:13:D4:16:66:B5:D3 Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c Certificate serial: 019B77C69D0AD21EC37D83119B4A102339D4 Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/gdZbcfQhj6CVyMJsPQMT1BZmtdM.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.109.126.0/24 maxlen: 24 195.22.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9d:0a:d2:1e:c3:7d:83:11:9b:4a:10:23:39:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81d65b71f4218fa095c8c26c3d0313d41666b5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:cf:70:a2:0d:b2:3b:d0:5a:50:b5:7f:b4: 61:67:83:c4:98:c8:dc:ea:3b:26:f4:38:3e:10:f0: 3b:90:da:bb:1a:44:ec:e3:a6:07:d8:b6:68:74:92: 5b:b2:e2:40:62:94:01:90:87:18:44:b5:70:0d:e5: 89:84:15:dd:14:76:09:8e:9e:54:5d:30:e6:48:b7: 1f:81:5b:73:25:63:60:f2:bb:4b:c9:fb:11:b4:a9: 31:ee:a9:88:80:43:e9:07:d2:28:48:04:ef:be:eb: b8:f9:e3:84:5a:dd:7c:70:25:c5:89:11:c7:3b:08: da:c9:04:21:64:8f:fa:7f:b7:af:92:f9:63:ec:be: 3f:1d:01:02:17:e2:63:e7:51:0a:79:83:6e:8d:e6: 87:ba:4d:46:9e:cd:74:13:d4:36:2d:a8:68:f0:3e: b5:5f:67:b1:a4:13:2f:a2:c6:0f:36:cf:1f:cc:cb: 21:a8:a6:f4:25:35:c9:3b:2b:76:1c:5f:ea:34:94: be:5b:cc:29:d6:5f:b6:c1:59:0e:91:1a:b6:7b:bd: 94:67:d0:ac:22:dd:09:74:cd:7e:32:1a:ad:da:ce: cb:b7:1e:02:52:c4:a0:5e:2d:80:11:f3:98:9f:68: bd:9e:9e:e3:13:4d:e2:bd:5b:97:b2:f6:39:b2:05: ac:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D6:5B:71:F4:21:8F:A0:95:C8:C2:6C:3D:03:13:D4:16:66:B5:D3 X509v3 Authority Key Identifier: keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/gdZbcfQhj6CVyMJsPQMT1BZmtdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.126.0/24 195.22.138.0/23 Signature Algorithm: sha256WithRSAEncryption 45:22:9b:a9:ee:ee:ed:fd:c4:88:50:a0:76:ae:f0:9f:69:06: 0b:72:26:13:04:53:a8:f3:1a:79:0d:74:63:79:39:1a:3c:96: ff:d7:2a:4e:bf:2b:a5:1a:93:02:94:29:17:7a:59:38:f4:4f: 01:90:b2:62:03:68:45:02:f0:c9:2d:33:f1:ba:6f:26:51:af: a6:38:0c:04:a8:de:f9:64:94:be:3e:48:ef:98:29:fe:70:48: aa:90:e8:f8:ba:a6:7b:25:88:c1:70:bb:bf:85:98:99:14:a3: 98:92:79:3a:dd:bf:a7:5d:4b:7a:69:32:3a:ff:48:54:c7:fc: 16:77:ad:65:cb:ce:fe:17:5e:33:17:39:93:7b:63:49:bd:22: 99:12:54:6b:83:3c:98:55:92:33:6e:00:42:c4:2a:a4:13:f4: 7d:39:df:9f:2c:49:4c:c1:36:32:d9:9c:69:c7:f8:c4:61:e3: 2b:e2:18:27:4f:8d:ea:62:64:08:a0:9b:14:11:47:34:cb:4d: 73:32:1c:81:63:57:09:4d:b3:e4:c4:52:83:ba:a5:82:47:a4: 27:e0:e8:6a:57:e2:04:75:a6:3e:7b:35:b2:c1:69:02:a5:33: 0d:5e:55:a8:df:62:c4:0e:26:d6:d5:2c:4b:cf:6a:20:df:db: 7c:c2:10:ee -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xp0K0h7DfYMRm0oQIznUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDM5MTRhNDhlNWRhZTVhNzU2YjFlM2I4ZmJlNDM3ZWUw ZDhiMGMwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWQ2NWI3MWY0MjE4ZmEwOTVjOGMyNmMzZDAzMTNkNDE2NjZiNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9fPcKINsjvQWlC1f7RhZ4PEmMjc 6jsm9Dg+EPA7kNq7GkTs46YH2LZodJJbsuJAYpQBkIcYRLVwDeWJhBXdFHYJjp5U XTDmSLcfgVtzJWNg8rtLyfsRtKkx7qmIgEPpB9IoSATvvuu4+eOEWt18cCXFiRHH OwjayQQhZI/6f7evkvlj7L4/HQECF+Jj51EKeYNujeaHuk1Gns10E9Q2Laho8D61 X2expBMvosYPNs8fzMshqKb0JTXJOyt2HF/qNJS+W8wp1l+2wVkOkRq2e72UZ9Cs It0JdM1+Mhqt2s7Ltx4CUsSgXi2AEfOYn2i9np7jE03ivVuXsvY5sgWs4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIHWW3H0IY+glcjCbD0DE9QWZrXTMB8GA1UdIwQY MBaAFLRDkUpI5drlp1ax47j75DfuDYsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAt MzE0ZWY3NDZkOGE2LzEvZ2RaYmNmUWhqNkNWeU1Kc1BRTVQxQlptdGRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAtMzE0ZWY3NDZkOGE2 LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwW1+AwQB wxaKMA0GCSqGSIb3DQEBCwUAA4IBAQBFIpup7u7t/cSIUKB2rvCfaQYLciYTBFOo 8xp5DXRjeTkaPJb/1ypOvyulGpMClCkXelk49E8BkLJiA2hFAvDJLTPxum8mUa+m OAwEqN75ZJS+PkjvmCn+cEiqkOj4uqZ7JYjBcLu/hZiZFKOYknk63b+nXUt6aTI6 /0hUx/wWd61ly87+F14zFzmTe2NJvSKZElRrgzyYVZIzbgBCxCqkE/R9Od+fLElM wTYy2Zxpx/jEYeMr4hgnT43qYmQIoJsUEUc0y01zMhyBY1cJTbPkxFKDuqWCR6Qn 4OhqV+IEdaY+ezWywWkCpTMNXlWo32LEDibW1SxLz2og39t8whDu -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:40 2026 by rpki-client