This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/gaATxSq9HGX7yQm--_dWZbOgZT0.roa File: gaATxSq9HGX7yQm--_dWZbOgZT0.roa (raw, json) Hash identifier: Qix9w4DVsLBDeru6CjO9qF+q42J9rHLmd1kVGLn1F3E= Subject key identifier: 81:A0:13:C5:2A:BD:1C:65:FB:C9:09:BE:FB:F7:56:65:B3:A0:65:3D Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019B7DCB1115FB13AB11F194DFFD1FB9C562 Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/gaATxSq9HGX7yQm--_dWZbOgZT0.roa Signing time: Fri 02 Jan 2026 08:20:18 +0000 ROA not before: Fri 02 Jan 2026 08:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42910 IP address blocks: 185.78.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:11:15:fb:13:ab:11:f1:94:df:fd:1f:b9:c5:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Jan 2 08:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81a013c52abd1c65fbc909befbf75665b3a0653d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:f3:ff:8a:48:67:3f:7e:f0:33:da:91:0a: 89:b7:6d:0f:37:bc:5d:4d:20:f0:34:ec:cb:0b:ed: bd:c1:81:14:b9:09:d4:26:2b:23:48:3a:a7:fb:56: ab:4c:09:1b:8b:30:d9:42:a3:21:dd:e3:54:43:08: ec:c0:99:db:fd:d1:4a:be:f4:53:8c:c8:a5:aa:61: c5:df:1a:e3:93:eb:6b:de:db:6d:be:db:49:e0:46: 80:a9:1d:ab:e8:79:ed:de:d3:c7:37:9a:65:24:c8: 88:ee:c3:bc:32:3a:71:44:41:d1:9c:39:e4:d8:45: 40:92:08:b2:77:75:4f:ab:aa:f8:f6:59:c7:02:c8: e4:df:a5:d0:89:77:18:18:5e:f3:9b:8b:1b:ec:1d: 47:2c:20:ce:72:85:51:85:9c:b0:f8:82:99:db:87: 89:71:d1:45:1c:81:45:d6:a0:3c:ab:6a:15:e1:cc: 81:5e:53:e2:a1:e5:2f:57:cb:05:2a:3f:bd:a0:8e: 21:e6:68:b3:a2:8f:87:41:6b:51:b7:48:4e:32:d9: df:47:96:76:dd:15:fe:75:96:4c:ba:e4:ba:5b:e1: d0:e6:a8:d2:b1:1d:e9:12:e5:bb:79:40:70:3d:5c: e7:d4:a9:b3:57:38:eb:50:b0:c4:59:03:f9:ea:df: 83:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A0:13:C5:2A:BD:1C:65:FB:C9:09:BE:FB:F7:56:65:B3:A0:65:3D X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/gaATxSq9HGX7yQm--_dWZbOgZT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.86.0/24 Signature Algorithm: sha256WithRSAEncryption 66:ac:e1:41:91:98:98:09:23:aa:35:7e:49:7d:a0:97:dc:b5: 08:a6:e0:96:bb:7d:f2:7b:02:f8:eb:3c:5e:21:c7:67:13:41: 32:3b:e7:98:11:03:02:83:4c:c0:44:ba:a5:c3:6c:11:9c:fd: e6:16:57:9c:1b:f7:ac:a0:cf:1d:0c:50:88:04:86:93:64:82: ec:83:a6:df:4a:8b:b7:c5:e4:df:85:fb:a0:b2:30:3d:46:f3: 56:c5:8f:c0:99:e2:6b:d4:d6:10:4b:60:03:df:3d:be:b8:a0: 9b:eb:54:c1:14:60:30:91:c3:06:6d:5d:61:0d:e9:e9:8c:44: 54:87:2a:b0:d1:9b:ae:30:9a:b3:1a:73:7f:b5:7c:61:41:de: c4:62:be:26:09:6c:1f:53:d6:15:99:fe:52:60:1b:04:3b:75: 66:17:e1:bc:8c:f2:a1:30:b8:f4:f8:41:92:33:06:cc:50:93: 87:b3:dd:9f:f0:ef:f8:45:d2:91:7d:df:86:16:7c:bf:2a:37: a9:05:be:20:51:c5:9d:ec:5e:7c:47:f9:09:e7:80:3c:f5:cd: 3c:9b:c5:9f:57:dd:06:22:ff:85:f7:da:2c:81:87:9f:23:c8: 20:6d:18:37:69:2a:07:96:cf:0b:18:32:5c:3d:c2:2d:b8:83: 99:37:9f:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxEV+xOrEfGU3/0fucViMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjYwMTAyMDgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWEwMTNjNTJhYmQxYzY1ZmJjOTA5YmVmYmY3NTY2NWIzYTA2NTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc3z/4pIZz9+8DPakQqJt20PN7xd TSDwNOzLC+29wYEUuQnUJisjSDqn+1arTAkbizDZQqMh3eNUQwjswJnb/dFKvvRT jMilqmHF3xrjk+tr3tttvttJ4EaAqR2r6Hnt3tPHN5plJMiI7sO8MjpxREHRnDnk 2EVAkgiyd3VPq6r49lnHAsjk36XQiXcYGF7zm4sb7B1HLCDOcoVRhZyw+IKZ24eJ cdFFHIFF1qA8q2oV4cyBXlPioeUvV8sFKj+9oI4h5mizoo+HQWtRt0hOMtnfR5Z2 3RX+dZZMuuS6W+HQ5qjSsR3pEuW7eUBwPVzn1KmzVzjrULDEWQP56t+D0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIGgE8UqvRxl+8kJvvv3VmWzoGU9MB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvZ2FBVHhTcTlIR1g3eVFtLS1fZFdaYk9nWlQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuU5WMA0G CSqGSIb3DQEBCwUAA4IBAQBmrOFBkZiYCSOqNX5JfaCX3LUIpuCWu33yewL46zxe IcdnE0EyO+eYEQMCg0zARLqlw2wRnP3mFlecG/esoM8dDFCIBIaTZILsg6bfSou3 xeTfhfugsjA9RvNWxY/AmeJr1NYQS2AD3z2+uKCb61TBFGAwkcMGbV1hDenpjERU hyqw0ZuuMJqzGnN/tXxhQd7EYr4mCWwfU9YVmf5SYBsEO3VmF+G8jPKhMLj0+EGS MwbMUJOHs92f8O/4RdKRfd+GFny/KjepBb4gUcWd7F58R/kJ54A89c08m8WfV90G Iv+F99osgYefI8ggbRg3aSoHls8LGDJcPcItuIOZN5+7 -----END CERTIFICATE-----Generated at Wed Jan 21 19:00:18 2026 by rpki-client