This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/GG89hAoixp0ZJE8Ef-5VuRyD-Wg.roa File: GG89hAoixp0ZJE8Ef-5VuRyD-Wg.roa (raw, json) Hash identifier: fpAmvEh19YQT+8W5VCcnDo3VDNg2kVBnOH7P5uACyqA= Subject key identifier: 18:6F:3D:84:0A:22:C6:9D:19:24:4F:04:7F:EE:55:B9:1C:83:F9:68 Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3 Certificate serial: 019B7FF189B2298F7ADCFCD0B060EE36A0E7 Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/GG89hAoixp0ZJE8Ef-5VuRyD-Wg.roa Signing time: Fri 02 Jan 2026 18:21:34 +0000 ROA not before: Fri 02 Jan 2026 18:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59780 IP address blocks: 147.78.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:89:b2:29:8f:7a:dc:fc:d0:b0:60:ee:36:a0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3 Validity Not Before: Jan 2 18:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=186f3d840a22c69d19244f047fee55b91c83f968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:3d:af:9c:95:46:dd:3d:89:b7:bd:f9:dc: cd:cb:0b:e7:48:52:f8:ac:97:9e:c0:2a:19:13:35: ba:76:c8:8e:8f:22:de:4d:60:77:20:c7:a7:43:62: 48:77:10:da:6f:fc:61:72:9f:74:9f:46:7c:b5:1e: 69:94:e4:65:3e:11:83:a9:0a:1c:62:67:59:06:29: 40:37:54:12:72:9e:59:8f:6e:d0:9a:ad:6f:f8:5c: 3b:f9:bd:7e:31:42:a9:f1:a5:e3:c5:53:ba:92:17: fd:ae:f6:6c:2e:7f:d6:ab:72:45:df:b4:a5:c4:e2: 44:45:dc:2c:5c:a2:59:b4:cc:0e:50:b4:2a:af:e1: ac:13:ee:e1:25:cd:0b:63:6b:98:44:2f:b0:a4:81: 2b:d1:ed:b0:c0:b8:31:9e:b9:c7:bc:a3:0c:f5:28: af:b9:b7:3f:94:14:72:7e:22:61:82:d1:1e:0f:28: 9e:64:a5:8f:ad:99:1d:ce:18:9c:80:14:da:63:d4: cf:a6:43:91:0c:f7:2f:ba:2a:8b:97:07:e0:64:4e: 5d:2e:ed:bf:81:a6:88:f3:e0:32:cf:4a:7c:ae:63: 42:a2:b4:72:22:d0:06:a2:fb:31:79:49:67:df:e9: 67:4f:4f:18:d4:78:8a:1f:c0:81:99:4b:65:35:bf: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6F:3D:84:0A:22:C6:9D:19:24:4F:04:7F:EE:55:B9:1C:83:F9:68 X509v3 Authority Key Identifier: keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/GG89hAoixp0ZJE8Ef-5VuRyD-Wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.208.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:02:38:12:42:8f:30:12:dd:04:a5:8b:28:33:2c:b1:9e:f4: 9d:79:60:ce:cd:e2:75:9c:ca:dd:a2:07:cc:a9:dd:ce:60:00: 18:07:92:82:e8:c3:41:42:86:e0:4c:f2:32:51:60:b5:29:e2: 67:76:e8:ab:50:f2:a5:60:45:05:9f:a3:57:2e:22:fc:1b:64: 36:83:40:30:fb:26:f1:73:60:85:c1:d3:6d:8c:f5:b2:11:e8: a8:59:4c:8c:fa:9a:ae:21:36:a4:e9:c1:0c:9d:d0:9d:2d:fa: ef:aa:1f:2f:95:bc:58:64:38:7a:9d:9f:ef:32:38:f5:a2:b2: 0a:b5:51:a3:3c:33:bd:d8:7c:e3:cf:a8:3e:20:e8:49:e2:01: 74:ae:de:be:d1:5f:ba:3d:b1:bb:1e:e9:79:17:08:a2:fe:23: f3:37:3f:3e:51:f8:ae:65:3c:63:fe:31:99:c9:fb:ad:fb:f0: 3c:9b:62:58:3d:29:1c:40:af:5e:df:1e:fe:81:9e:42:a6:55: 28:a8:52:c6:f1:01:e3:e1:d8:85:b6:23:15:eb:e8:f5:6f:d7: f6:93:24:f3:3c:7d:f7:4d:3d:65:fd:9c:f1:98:bc:6c:33:74: cd:a3:90:a5:9b:e5:d5:f9:76:a0:6d:e7:24:e5:02:8b:86:3a: 03:e5:7f:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8YmyKY963PzQsGDuNqDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmM2RlODgyYzI2MTlkNjgwZjJkN2ZlNjAwYjkwMTZkYTI4 N2E4ZDMwHhcNMjYwMTAyMTgyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODZmM2Q4NDBhMjJjNjlkMTkyNDRmMDQ3ZmVlNTViOTFjODNmOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/k9r5yVRt09ibe9+dzNywvnSFL4 rJeewCoZEzW6dsiOjyLeTWB3IMenQ2JIdxDab/xhcp90n0Z8tR5plORlPhGDqQoc YmdZBilAN1QScp5Zj27Qmq1v+Fw7+b1+MUKp8aXjxVO6khf9rvZsLn/Wq3JF37Sl xOJERdwsXKJZtMwOULQqr+GsE+7hJc0LY2uYRC+wpIEr0e2wwLgxnrnHvKMM9Siv ubc/lBRyfiJhgtEeDyieZKWPrZkdzhicgBTaY9TPpkORDPcvuiqLlwfgZE5dLu2/ gaaI8+Ayz0p8rmNCorRyItAGovsxeUln3+lnT08Y1HiKH8CBmUtlNb8zMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBhvPYQKIsadGSRPBH/uVbkcg/loMB8GA1UdIwQY MBaAFL896ILCYZ1oDy1/5gC5AW2ih6jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODIt MDNiZjZjZjczZmYxLzEvR0c4OWhBb2l4cDBaSkU4RWYtNVZ1UnlELVdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODItMDNiZjZjZjczZmYx LzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk07QMA0G CSqGSIb3DQEBCwUAA4IBAQCcAjgSQo8wEt0EpYsoMyyxnvSdeWDOzeJ1nMrdogfM qd3OYAAYB5KC6MNBQobgTPIyUWC1KeJnduirUPKlYEUFn6NXLiL8G2Q2g0Aw+ybx c2CFwdNtjPWyEeioWUyM+pquITak6cEMndCdLfrvqh8vlbxYZDh6nZ/vMjj1orIK tVGjPDO92Hzjz6g+IOhJ4gF0rt6+0V+6PbG7Hul5Fwii/iPzNz8+UfiuZTxj/jGZ yfut+/A8m2JYPSkcQK9e3x7+gZ5CplUoqFLG8QHj4diFtiMV6+j1b9f2kyTzPH33 TT1l/ZzxmLxsM3TNo5Clm+XV+Xagbeck5QKLhjoD5X/V -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:42 2026 by rpki-client