This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/psgf7ZsN7gToGzu4aqLkImZWNTo.roa File: psgf7ZsN7gToGzu4aqLkImZWNTo.roa (raw, json) Hash identifier: 7jQtshTsNic0E/qEdJlLd27lsBrWLsspWzKYlXyxvP8= Subject key identifier: A6:C8:1F:ED:9B:0D:EE:04:E8:1B:3B:B8:6A:A2:E4:22:66:56:35:3A Certificate issuer: /CN=00105478defd513b7d8822a7d9204f875ed547d8 Certificate serial: 019B78A21293878886EC3FCA84D6E02DE905 Authority key identifier: 00:10:54:78:DE:FD:51:3B:7D:88:22:A7:D9:20:4F:87:5E:D5:47:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/psgf7ZsN7gToGzu4aqLkImZWNTo.roa Signing time: Thu 01 Jan 2026 08:17:26 +0000 ROA not before: Thu 01 Jan 2026 08:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34909 IP address blocks: 91.238.106.0/24 maxlen: 24 185.190.96.0/22 maxlen: 22 185.190.96.0/23 maxlen: 23 185.190.98.0/24 maxlen: 24 185.190.99.0/24 maxlen: 24 2a0a:7c0::/29 maxlen: 29 2a0a:7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.crl rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.mft rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:12:93:87:88:86:ec:3f:ca:84:d6:e0:2d:e9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00105478defd513b7d8822a7d9204f875ed547d8 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6c81fed9b0dee04e81b3bb86aa2e4226656353a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:30:05:bd:c1:2d:5b:19:d1:4d:80:e8:2b: c5:8a:54:0c:04:87:48:f0:c1:9e:d6:fb:5e:af:68: 7a:28:dc:0d:df:f5:91:d7:dc:2a:ce:9d:c1:a8:26: 9d:61:d4:d5:38:95:fe:1a:17:db:d2:db:86:59:92: 06:da:66:9d:f5:e5:b7:9a:e8:21:ce:dd:76:92:41: ac:bd:e3:45:15:2f:f0:01:75:7a:ae:7c:e5:da:9f: 4e:2f:da:c7:09:46:c0:b6:d7:1c:1c:3b:f9:74:58: b4:5e:75:af:74:f5:bc:9e:e7:3b:a6:2a:9e:38:c8: 58:cb:f2:ed:c9:0e:df:d5:3b:18:f1:17:48:7d:ae: 6d:a6:8c:a9:91:31:77:28:fb:8f:02:6d:17:e4:b9: 29:03:71:0f:7a:47:da:bd:85:6b:55:68:f8:8c:9f: 53:1f:44:ca:64:99:75:1e:0b:2e:f2:ff:4c:9e:8f: bf:35:b4:2c:f2:15:54:5c:14:cd:93:0c:41:46:11: b4:39:91:7a:ab:b4:48:58:68:8b:6a:b1:f0:7c:07: 15:a0:5f:b2:b1:f4:d6:e6:f6:a6:bc:7d:18:86:ea: f9:d2:56:99:a0:a4:40:fe:4a:8b:cb:15:cf:bd:fa: eb:0a:fc:c2:a6:24:87:bc:7f:90:04:f1:ba:59:4f: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C8:1F:ED:9B:0D:EE:04:E8:1B:3B:B8:6A:A2:E4:22:66:56:35:3A X509v3 Authority Key Identifier: keyid:00:10:54:78:DE:FD:51:3B:7D:88:22:A7:D9:20:4F:87:5E:D5:47:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/psgf7ZsN7gToGzu4aqLkImZWNTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.106.0/24 185.190.96.0/22 IPv6: 2a0a:7c0::/29 Signature Algorithm: sha256WithRSAEncryption bf:7b:09:b4:31:fc:35:d2:df:5d:27:23:e7:d2:9e:58:8c:39: da:3b:b8:80:76:fb:7b:4f:ca:a4:90:ae:7e:64:13:47:fc:c2: 30:2f:97:ab:96:ea:f5:d9:13:b5:bc:d9:de:af:4c:1a:43:70: 6c:11:66:f5:0f:93:93:d4:38:bc:5d:6b:66:2e:1c:1c:e5:6c: 74:cf:eb:f9:62:f7:7b:18:1f:84:fd:f7:2b:dc:00:e8:26:55: 07:af:fd:52:45:95:a6:b2:eb:39:2b:40:9c:98:0f:70:71:d4: bd:31:d9:75:19:e3:fc:5f:c8:a8:79:e2:2c:cb:58:0f:5f:3f: 95:0c:7b:ee:d0:f5:12:17:03:18:0b:9b:29:68:02:65:28:38: b0:4d:9f:a5:b3:f0:54:0b:68:69:ef:87:d7:b9:ed:9d:89:11: b5:9f:eb:78:43:c4:05:87:c5:6b:08:ff:53:11:62:ac:83:e7: f8:60:88:a6:d5:9a:46:2b:43:37:ea:4b:83:4d:6b:3b:89:37: d0:a6:8c:c8:09:ae:ae:89:c9:53:ee:f6:27:c5:b9:81:4b:9b: 68:99:67:79:f8:a4:46:68:7a:0e:db:80:03:3c:c8:b7:da:db: 39:ec:ce:9a:9d:b4:88:8b:32:4a:3e:6c:97:4a:39:f7:55:6b: eb:7b:d4:86 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4ohKTh4iG7D/KhNbgLekFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMTA1NDc4ZGVmZDUxM2I3ZDg4MjJhN2Q5MjA0Zjg3NWVk NTQ3ZDgwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmM4MWZlZDliMGRlZTA0ZTgxYjNiYjg2YWEyZTQyMjY2NTYzNTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt04wBb3BLVsZ0U2A6CvFilQMBIdI 8MGe1vter2h6KNwN3/WR19wqzp3BqCadYdTVOJX+Ghfb0tuGWZIG2mad9eW3mugh zt12kkGsveNFFS/wAXV6rnzl2p9OL9rHCUbAttccHDv5dFi0XnWvdPW8nuc7piqe OMhYy/LtyQ7f1TsY8RdIfa5tpoypkTF3KPuPAm0X5LkpA3EPekfavYVrVWj4jJ9T H0TKZJl1Hgsu8v9Mno+/NbQs8hVUXBTNkwxBRhG0OZF6q7RIWGiLarHwfAcVoF+y sfTW5vamvH0Yhur50laZoKRA/kqLyxXPvfrrCvzCpiSHvH+QBPG6WU8wcQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKbIH+2bDe4E6Bs7uGqi5CJmVjU6MB8GA1UdIwQY MBaAFAAQVHje/VE7fYgip9kgT4de1UfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUJCVWVONzlVVHQ5aUNLbjJTQlBoMTdWUjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wYzRhZDEtNDM5YS00ZTYxLWE4YjYt M2ZkZDYxZjY4NTJmLzEvcHNnZjdac043Z1RvR3p1NGFxTGtJbVpXTlRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wYzRhZDEtNDM5YS00ZTYxLWE4YjYtM2ZkZDYxZjY4NTJm LzEvQUJCVWVONzlVVHQ5aUNLbjJTQlBoMTdWUjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+5qAwQC ub5gMA0EAgACMAcDBQMqCgfAMA0GCSqGSIb3DQEBCwUAA4IBAQC/ewm0Mfw10t9d JyPn0p5YjDnaO7iAdvt7T8qkkK5+ZBNH/MIwL5erlur12RO1vNner0waQ3BsEWb1 D5OT1Di8XWtmLhwc5Wx0z+v5Yvd7GB+E/fcr3ADoJlUHr/1SRZWmsus5K0CcmA9w cdS9Mdl1GeP8X8ioeeIsy1gPXz+VDHvu0PUSFwMYC5spaAJlKDiwTZ+ls/BUC2hp 74fXue2diRG1n+t4Q8QFh8VrCP9TEWKsg+f4YIim1ZpGK0M36kuDTWs7iTfQpozI Ca6uiclT7vYnxbmBS5tomWd5+KRGaHoO24ADPMi32ts57M6anbSIizJKPmyXSjn3 VWvre9SG -----END CERTIFICATE-----Generated at Tue Feb 10 07:29:12 2026 by rpki-client