This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GmoWBFdZxgpgR02IJOtNWXU60Fg.roa File: GmoWBFdZxgpgR02IJOtNWXU60Fg.roa (raw, json) Hash identifier: JAxT+56ClLIWR3r+vCv75YuOZRohTPeo2TN6vnnL43w= Subject key identifier: 1A:6A:16:04:57:59:C6:0A:60:47:4D:88:24:EB:4D:59:75:3A:D0:58 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B77C75FEF71E144F4A857B67CB36A186A Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GmoWBFdZxgpgR02IJOtNWXU60Fg.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 89.187.9.0/24 maxlen: 24 89.187.24.0/24 maxlen: 24 89.187.26.0/24 maxlen: 24 89.187.27.0/24 maxlen: 24 89.187.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5f:ef:71:e1:44:f4:a8:57:b6:7c:b3:6a:18:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a6a16045759c60a60474d8824eb4d59753ad058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:d6:91:e5:fc:6b:b7:ba:eb:a0:82:44:b6: db:48:eb:a5:d5:68:bd:85:62:6a:fc:bb:dc:cb:64: ee:5a:bf:91:ec:6e:a3:8c:c1:2e:da:9a:8d:f6:fc: 37:d7:b6:37:04:ed:2d:74:d3:dd:30:5a:be:3a:1b: 6e:ca:72:07:da:c8:36:de:cc:7c:40:a8:8c:b7:89: 4b:0a:06:7f:bd:80:da:77:76:c5:88:40:0d:81:c6: 14:7c:44:e6:0e:90:56:d1:ac:4d:46:b1:6d:d1:d0: f9:5f:f7:03:0e:1a:99:c4:82:79:c1:bb:2e:00:89: 26:d3:33:f8:50:39:46:05:95:ee:2c:76:40:8b:e4: e9:4d:cb:0b:c1:79:6d:39:cd:87:38:72:26:13:41: 8e:62:c6:34:4b:d0:e6:64:15:b6:30:ed:ef:ad:66: d5:27:b5:42:f7:fb:bc:9e:e9:30:57:d4:52:89:90: 56:ca:81:e1:47:78:3c:4e:08:d5:f5:f0:61:26:4e: b6:fe:8d:2b:a5:65:a6:aa:6d:82:73:77:6c:c7:66: fc:28:0e:12:5a:5c:53:e7:db:ad:9f:08:db:b4:3b: 3f:90:02:91:99:4a:d8:51:4f:13:8a:86:41:bb:ea: 05:4a:dd:1c:5b:b8:f1:15:39:ba:bc:25:a2:9b:1f: d1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6A:16:04:57:59:C6:0A:60:47:4D:88:24:EB:4D:59:75:3A:D0:58 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/GmoWBFdZxgpgR02IJOtNWXU60Fg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.9.0/24 89.187.24.0/24 89.187.26.0/23 89.187.31.0/24 Signature Algorithm: sha256WithRSAEncryption 90:68:75:77:b1:62:4a:74:56:fd:b9:01:a3:b4:14:09:4e:39: fd:33:1f:20:59:3c:41:b5:4d:a9:68:95:a4:4e:7a:02:2d:38: 03:23:ff:96:42:50:57:76:d5:b8:81:03:c8:8d:98:5d:fc:3d: 80:0a:ab:e2:0f:44:72:9b:48:b6:44:30:bf:1b:0c:7f:75:b6: 0e:9b:e7:b1:2f:09:d2:93:1c:68:b5:8a:a3:ce:8c:07:41:14: 91:0f:fd:f5:d8:0f:fc:6e:76:06:0c:d8:24:98:63:dd:8f:48: 8c:30:a7:24:d5:ec:c4:93:dd:41:7a:33:a5:c9:ce:d6:9f:6a: 7e:02:d6:31:64:4d:b4:79:28:23:fd:81:4f:53:dc:19:e6:e6: 9c:64:be:7b:96:90:5c:bb:e5:9f:86:c4:1f:af:c3:78:ef:de: 9e:7a:fb:98:09:ed:19:6f:4f:61:a3:53:dc:1e:f8:44:64:3e: b8:a2:5b:bd:1a:52:5d:84:5c:60:a2:b6:e5:cf:8c:db:7c:64: 88:b1:a0:70:f6:ba:5b:ff:1e:58:9e:7d:7b:51:22:7d:31:c0: f4:9a:20:8d:28:05:d6:63:27:27:31:32:a6:38:9e:31:cf:c9: e1:1b:4e:72:a7:48:37:cb:6f:df:c5:e1:f5:b3:83:8a:41:da: 93:0b:8e:bd -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3x1/vceFE9KhXtnyzahhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTZhMTYwNDU3NTljNjBhNjA0NzRkODgyNGViNGQ1OTc1M2FkMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvvWkeX8a7e666CCRLbbSOul1Wi9 hWJq/Lvcy2TuWr+R7G6jjMEu2pqN9vw317Y3BO0tdNPdMFq+OhtuynIH2sg23sx8 QKiMt4lLCgZ/vYDad3bFiEANgcYUfETmDpBW0axNRrFt0dD5X/cDDhqZxIJ5wbsu AIkm0zP4UDlGBZXuLHZAi+TpTcsLwXltOc2HOHImE0GOYsY0S9DmZBW2MO3vrWbV J7VC9/u8nukwV9RSiZBWyoHhR3g8TgjV9fBhJk62/o0rpWWmqm2Cc3dsx2b8KA4S WlxT59utnwjbtDs/kAKRmUrYUU8TioZBu+oFSt0cW7jxFTm6vCWimx/RwQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBpqFgRXWcYKYEdNiCTrTVl1OtBYMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvR21vV0JGZFp4Z3BnUjAySUpPdE5XWFU2MEZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWbsJAwQA WbsYAwQBWbsaAwQAWbsfMA0GCSqGSIb3DQEBCwUAA4IBAQCQaHV3sWJKdFb9uQGj tBQJTjn9Mx8gWTxBtU2paJWkTnoCLTgDI/+WQlBXdtW4gQPIjZhd/D2ACqviD0Ry m0i2RDC/Gwx/dbYOm+exLwnSkxxotYqjzowHQRSRD/312A/8bnYGDNgkmGPdj0iM MKck1ezEk91BejOlyc7Wn2p+AtYxZE20eSgj/YFPU9wZ5uacZL57lpBcu+WfhsQf r8N4796eevuYCe0Zb09ho1PcHvhEZD64olu9GlJdhFxgorblz4zbfGSIsaBw9rpb /x5Ynn17USJ9McD0miCNKAXWYycnMTKmOJ4xz8nhG05yp0g3y2/fxeH1s4OKQdqT C469 -----END CERTIFICATE-----Generated at Wed Jan 21 05:19:22 2026 by rpki-client