This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/gXjXRAudejpISpM7AMXoYnkEzWE.roa File: gXjXRAudejpISpM7AMXoYnkEzWE.roa (raw, json) Hash identifier: xP+l+X63e5wpSk358qKPtRUqLC7IdUkmyq8Z3HG079Q= Subject key identifier: 81:78:D7:44:0B:9D:7A:3A:48:4A:93:3B:00:C5:E8:62:79:04:CD:61 Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Certificate serial: 019B77C72704BF8E41DB0C66DF7C9336F5D9 Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/gXjXRAudejpISpM7AMXoYnkEzWE.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197427 IP address blocks: 195.150.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:27:04:bf:8e:41:db:0c:66:df:7c:93:36:f5:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8178d7440b9d7a3a484a933b00c5e8627904cd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:57:a2:be:ee:2a:38:eb:17:35:a6:67:6b:3b: 0b:49:dd:99:14:3b:0d:1b:51:59:e0:75:2c:0a:bc: 68:bb:48:8e:53:49:8a:40:26:8d:e6:e3:51:7d:28: 65:44:e2:7b:53:27:73:37:77:02:0d:e8:90:f0:bc: c1:26:4e:3a:44:da:15:05:6b:89:9a:a3:48:3f:68: 1b:3a:67:b3:b5:66:ec:5c:73:93:f1:b5:de:0c:dc: 2a:bc:3f:f0:76:e7:91:ec:83:9c:10:46:ba:10:bc: 72:ec:de:1d:96:6e:ee:65:3b:e7:58:9b:4b:c3:eb: 3d:ae:d8:45:8f:c6:ee:82:3f:ed:8e:19:77:8c:df: 1d:59:5a:86:9a:0b:03:3b:20:b7:7f:c3:97:63:9c: 52:5d:9d:e5:eb:76:65:15:e1:93:2b:30:38:96:a2: 84:e6:2e:2c:69:c5:c4:6e:56:bc:dd:5b:c5:b5:73: 1e:c7:50:71:81:bb:7d:14:e7:66:0d:34:bd:3a:8a: c3:ee:20:3d:80:c4:07:b6:7f:b2:be:fa:1b:69:35: 81:58:5d:e3:5d:4e:40:9e:c9:f5:19:82:05:97:22: 6c:35:fe:17:c5:4d:f6:53:c2:ed:8c:4b:c7:5f:ef: f0:af:6f:e2:a6:db:41:e5:44:29:49:18:aa:a1:a0: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:78:D7:44:0B:9D:7A:3A:48:4A:93:3B:00:C5:E8:62:79:04:CD:61 X509v3 Authority Key Identifier: keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/gXjXRAudejpISpM7AMXoYnkEzWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.150.9.0/24 Signature Algorithm: sha256WithRSAEncryption 14:96:b6:42:5f:27:53:57:64:5a:bf:02:e1:ed:27:79:29:18: 3b:d3:45:39:41:6e:c0:0f:85:61:2c:82:6d:17:74:b6:71:02: 75:1f:fc:a4:ee:45:2e:19:87:a4:d7:ce:24:7d:31:b7:60:79: 15:1e:ad:e7:72:7c:81:ae:d4:12:8a:09:66:94:42:60:9f:70: 40:5f:b4:b7:7f:f6:0c:e4:ee:1c:35:14:30:2b:4e:bd:ed:57: ef:37:9f:6e:55:82:0d:a0:9d:bc:02:55:19:3e:5f:9f:10:c0: c7:d6:d7:d6:65:3c:d9:dc:42:b4:a1:27:62:f3:58:d5:c5:7c: ec:d5:79:8c:87:3e:45:1c:e8:06:89:62:31:0f:be:58:df:44: 22:41:3c:6a:5d:86:81:c2:3d:ba:92:53:c5:d9:25:f9:50:10: 55:5c:1f:7a:f4:8d:7e:ca:af:a2:18:98:86:f7:30:c3:f3:63: 0b:b0:14:5c:6b:1e:70:c7:b0:37:7f:55:40:70:c2:e7:c1:ff: 97:e2:9e:eb:7c:e0:9e:d0:2d:54:50:53:d7:44:b2:c5:cc:0e: 35:46:cc:3e:4f:f4:3e:5f:c2:b9:61:b0:a9:8f:ea:ac:3e:24: d1:0d:63:05:98:55:da:a2:08:a8:2c:68:fe:a7:1d:c5:99:85: bb:be:d2:c7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xycEv45B2wxm33yTNvXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4 ODE4MDQwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTc4ZDc0NDBiOWQ3YTNhNDg0YTkzM2IwMGM1ZTg2Mjc5MDRjZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41eivu4qOOsXNaZnazsLSd2ZFDsN G1FZ4HUsCrxou0iOU0mKQCaN5uNRfShlROJ7UydzN3cCDeiQ8LzBJk46RNoVBWuJ mqNIP2gbOmeztWbsXHOT8bXeDNwqvD/wdueR7IOcEEa6ELxy7N4dlm7uZTvnWJtL w+s9rthFj8bugj/tjhl3jN8dWVqGmgsDOyC3f8OXY5xSXZ3l63ZlFeGTKzA4lqKE 5i4sacXEbla83VvFtXMex1Bxgbt9FOdmDTS9OorD7iA9gMQHtn+yvvobaTWBWF3j XU5Ansn1GYIFlyJsNf4XxU32U8LtjEvHX+/wr2/ipttB5UQpSRiqoaD3nQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIF410QLnXo6SEqTOwDF6GJ5BM1hMB8GA1UdIwQY MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx LTE2Y2Q4ZjRmYjRiOS8xL2dYalhSQXVkZWpwSVNwTTdBTVhvWW5rRXpXRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUxLTE2Y2Q4ZjRmYjRi OS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDlgkw DQYJKoZIhvcNAQELBQADggEBABSWtkJfJ1NXZFq/AuHtJ3kpGDvTRTlBbsAPhWEs gm0XdLZxAnUf/KTuRS4Zh6TXziR9MbdgeRUeredyfIGu1BKKCWaUQmCfcEBftLd/ 9gzk7hw1FDArTr3tV+83n25Vgg2gnbwCVRk+X58QwMfW19ZlPNncQrShJ2LzWNXF fOzVeYyHPkUc6AaJYjEPvljfRCJBPGpdhoHCPbqSU8XZJflQEFVcH3r0jX7Kr6IY mIb3MMPzYwuwFFxrHnDHsDd/VUBwwufB/5finut84J7QLVRQU9dEssXMDjVGzD5P 9D5fwrlhsKmP6qw+JNENYwWYVdqiCKgsaP6nHcWZhbu+0sc= -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:35 2026 by rpki-client