This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa File: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (raw, json) Hash identifier: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o= Subject key identifier: D4:64:B0:3F:44:C9:27:AE:70:65:DD:CF:BE:07:3C:BF:F9:01:6E:5A Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019B7834F96488533F811AE383EE767F9A6F Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212430 IP address blocks: 87.238.227.0/24 maxlen: 24 109.69.217.16/28 maxlen: 32 109.69.221.192/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f9:64:88:53:3f:81:1a:e3:83:ee:76:7f:9a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d464b03f44c927ae7065ddcfbe073cbff9016e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:ec:d6:0f:b8:26:50:18:6a:2a:7e:48:6c: 52:07:de:11:97:50:ee:e0:78:37:29:af:fd:4b:90: c6:e2:91:33:62:c6:70:e8:64:11:6d:db:5c:69:37: 05:52:d9:d3:11:28:64:90:64:21:b9:12:02:fe:94: 1a:72:4d:a2:f9:69:d3:cf:81:be:6d:0c:cf:91:d4: 79:d5:7b:bc:74:a7:e7:03:10:53:e8:36:5b:ed:db: 22:3d:b4:81:94:62:e0:3a:5d:c1:d5:08:8c:69:83: 90:af:95:9a:a4:8d:23:a0:41:87:3a:1e:93:92:b5: 3d:f0:60:d4:76:bf:64:96:4c:50:ff:78:4a:bf:c7: 03:ce:8c:f9:cb:0d:93:97:4a:b7:8a:01:fa:cb:54: 2a:36:3b:59:ce:1a:67:75:61:37:45:ad:fb:52:1f: 0b:50:f4:d0:77:68:8c:06:6c:5f:37:30:87:eb:dc: b3:46:90:30:ec:26:fd:dd:90:bb:49:03:95:cc:76: 42:bf:f6:0f:48:e8:7a:a1:87:92:6b:ff:84:11:1a: d6:7e:e7:70:bd:76:3c:38:9e:7f:dd:c6:fa:79:89: 80:28:31:17:1b:4a:2b:c7:7c:73:55:15:e4:71:33: 38:48:2f:16:f8:d4:fd:f5:82:26:1d:81:d0:28:03: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:64:B0:3F:44:C9:27:AE:70:65:DD:CF:BE:07:3C:BF:F9:01:6E:5A X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.238.227.0/24 109.69.217.16/28 109.69.221.192/28 Signature Algorithm: sha256WithRSAEncryption bd:42:b7:eb:48:af:82:8d:13:be:0c:58:2a:4e:ce:02:78:0e: c4:dc:fb:98:0c:31:88:7a:c0:d9:e1:a3:c5:13:a3:13:2a:a1: b1:e1:58:e3:84:b8:1c:74:1f:f1:6a:95:2b:a2:38:af:81:7f: 97:23:d2:8c:2d:cf:25:e5:c3:1b:d2:52:c7:7b:35:19:d5:77: 5e:8f:34:90:38:6a:18:50:c1:af:d2:21:1a:9e:ab:b2:23:19: 90:10:9e:c1:9b:a6:ae:ee:42:6c:7d:09:f1:1f:b8:25:4f:98: 8b:1e:f2:b3:b4:42:8a:02:13:8d:62:97:e2:fe:d6:b3:56:6a: ad:83:c4:35:9d:7a:41:6b:d6:6a:36:6f:51:1c:0f:1a:bd:b6: ab:2f:d8:9a:a2:a1:d4:f5:b0:65:8e:67:46:e6:6d:7a:c5:61: 1a:a5:31:cd:b6:d5:9f:1c:0c:7c:fd:d8:2b:61:7b:7b:cd:bd: 0c:14:ca:7a:68:74:0a:3e:b3:e7:b5:e7:2a:49:25:11:9f:b5: 6e:11:65:e9:89:16:d8:48:36:09:ba:4e:eb:f8:f5:fd:a9:de: 0a:9f:4e:d3:eb:4b:df:82:60:aa:73:27:16:02:59:34:af:61: f4:cc:db:42:4f:3c:71:4a:22:5a:fe:5c:26:3a:6b:87:c1:e4: 54:38:a0:cf -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4NPlkiFM/gRrjg+52f5pvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDY0YjAzZjQ0YzkyN2FlNzA2NWRkY2ZiZTA3M2NiZmY5MDE2ZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucvs1g+4JlAYaip+SGxSB94Rl1Du 4Hg3Ka/9S5DG4pEzYsZw6GQRbdtcaTcFUtnTEShkkGQhuRIC/pQack2i+WnTz4G+ bQzPkdR51Xu8dKfnAxBT6DZb7dsiPbSBlGLgOl3B1QiMaYOQr5WapI0joEGHOh6T krU98GDUdr9klkxQ/3hKv8cDzoz5yw2Tl0q3igH6y1QqNjtZzhpndWE3Ra37Uh8L UPTQd2iMBmxfNzCH69yzRpAw7Cb93ZC7SQOVzHZCv/YPSOh6oYeSa/+EERrWfudw vXY8OJ5/3cb6eYmAKDEXG0orx3xzVRXkcTM4SC8W+NT99YImHYHQKAPuSQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNRksD9EySeucGXdz74HPL/5AW5aMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvMUdTd1AwVEpKNjV3WmQzUHZnYzh2X2tCYmxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAV+7jAwUE bUXZEAMFBG1F3cAwDQYJKoZIhvcNAQELBQADggEBAL1Ct+tIr4KNE74MWCpOzgJ4 DsTc+5gMMYh6wNnho8UToxMqobHhWOOEuBx0H/FqlSuiOK+Bf5cj0owtzyXlwxvS Usd7NRnVd16PNJA4ahhQwa/SIRqeq7IjGZAQnsGbpq7uQmx9CfEfuCVPmIse8rO0 QooCE41il+L+1rNWaq2DxDWdekFr1mo2b1EcDxq9tqsv2JqiodT1sGWOZ0bmbXrF YRqlMc221Z8cDHz92Cthe3vNvQwUynpodAo+s+e15ypJJRGftW4RZemJFthINgm6 Tuv49f2p3gqfTtPrS9+CYKpzJxYCWTSvYfTM20JPPHFKIlr+XCY6a4fB5FQ4oM8= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:40 2026 by rpki-client