This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/gATtXJLtqL0pyDE7aBGAHapu64E.roa File: gATtXJLtqL0pyDE7aBGAHapu64E.roa (raw, json) Hash identifier: ybBtdONa/UXYBRo/ca8SLa1FBdD6Jo+wJU9zhUxtzIQ= Subject key identifier: 80:04:ED:5C:92:ED:A8:BD:29:C8:31:3B:68:11:80:1D:AA:6E:EB:81 Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019B78A22D8DBA61A5167341B298849A90A3 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/gATtXJLtqL0pyDE7aBGAHapu64E.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48753 IP address blocks: 5.10.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2d:8d:ba:61:a5:16:73:41:b2:98:84:9a:90:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8004ed5c92eda8bd29c8313b6811801daa6eeb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9a:00:80:df:e6:02:4c:b0:37:a6:f6:ce:41: ba:b4:bd:33:3a:ec:d7:7e:1b:68:8e:8c:7a:52:3d: c4:8e:17:4a:07:2e:6c:97:2b:8b:99:b4:84:4c:c8: f2:a1:80:09:0e:57:72:06:25:67:87:77:8a:e5:8c: 4a:0e:16:62:cf:33:00:49:b4:9c:5a:4a:9a:8b:95: 6e:de:11:55:e0:a9:9b:a7:87:31:ff:bf:49:0a:45: 7a:89:04:d4:29:2c:6f:59:70:b6:e0:dd:a8:2d:73: d2:ea:89:8c:e3:64:b0:d3:01:90:17:c7:b2:b3:13: fe:8b:16:f0:9c:65:61:5a:ba:87:dd:8c:14:de:20: 4b:4b:e4:69:ce:12:1f:3d:bd:e6:33:79:09:18:4c: a6:aa:0c:f9:aa:a3:f0:d0:b2:2c:5a:57:66:15:db: 1f:de:a7:18:80:8a:ff:96:9b:04:62:09:db:d9:cc: ad:ec:10:81:de:c4:be:72:f4:28:55:53:35:8b:a3: b7:e1:24:d2:9f:d4:03:fe:50:ae:ae:c0:48:15:53: ed:9a:66:62:08:71:ec:a3:46:ba:1f:8b:3c:a8:34: cd:08:ee:ca:70:96:a0:b0:e0:fe:6b:54:aa:e4:0c: f7:5d:2f:17:42:ae:d5:68:cc:b0:7f:41:32:ac:25: 6d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:04:ED:5C:92:ED:A8:BD:29:C8:31:3B:68:11:80:1D:AA:6E:EB:81 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/gATtXJLtqL0pyDE7aBGAHapu64E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.217.0/24 Signature Algorithm: sha256WithRSAEncryption 59:a1:ed:6f:5b:9c:42:aa:cc:3d:2a:7f:fd:40:34:c0:4d:35: e8:e5:84:08:b3:65:8f:1d:3a:19:3d:88:4e:04:3d:5c:8b:f8: da:2f:0f:a4:81:b4:11:cd:88:80:23:79:b1:b5:4b:3e:09:4c: a8:ab:f4:79:bc:cc:69:ff:37:86:43:07:a8:47:2e:df:a3:9e: 56:8a:00:7f:48:4b:ce:d3:6b:55:11:5d:8e:d8:06:7c:0a:45: 1b:55:2d:b2:45:37:ad:80:2b:a4:f7:f7:f3:d0:78:d7:6a:1d: b1:c5:2e:b4:bb:7a:df:d3:4d:8a:fd:08:4f:6c:e7:ca:c0:69: 71:91:7f:14:3e:0d:6a:1a:3f:bb:f6:c9:27:87:a3:6c:85:cd: f2:03:1c:54:ef:40:f7:69:b9:18:da:0c:73:fd:a9:7a:de:a3: 0e:fc:b8:8c:43:ad:88:db:17:6e:dc:27:c8:d0:86:25:cc:38: e2:4e:6c:1f:ec:ef:cd:2f:10:89:b6:8b:50:78:6b:67:40:d7: 96:9d:1c:28:7e:62:7b:f7:18:ab:6e:db:94:41:b4:10:7b:f4: 3a:68:87:86:55:cd:00:a3:87:9c:79:ba:3d:64:c0:d5:c4:f7: d6:a9:b1:2a:74:e0:28:9c:1e:53:82:3f:98:6f:9b:f9:ac:df: fa:ab:a3:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oi2NumGlFnNBspiEmpCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDA0ZWQ1YzkyZWRhOGJkMjljODMxM2I2ODExODAxZGFhNmVlYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5oAgN/mAkywN6b2zkG6tL0zOuzX fhtojox6Uj3EjhdKBy5slyuLmbSETMjyoYAJDldyBiVnh3eK5YxKDhZizzMASbSc Wkqai5Vu3hFV4Kmbp4cx/79JCkV6iQTUKSxvWXC24N2oLXPS6omM42Sw0wGQF8ey sxP+ixbwnGVhWrqH3YwU3iBLS+RpzhIfPb3mM3kJGEymqgz5qqPw0LIsWldmFdsf 3qcYgIr/lpsEYgnb2cyt7BCB3sS+cvQoVVM1i6O34STSn9QD/lCursBIFVPtmmZi CHHso0a6H4s8qDTNCO7KcJagsOD+a1Sq5Az3XS8XQq7VaMywf0EyrCVtvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIAE7VyS7ai9KcgxO2gRgB2qbuuBMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvZ0FUdFhKTHRxTDBweURFN2FCR0FIYXB1NjRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQrZMA0G CSqGSIb3DQEBCwUAA4IBAQBZoe1vW5xCqsw9Kn/9QDTATTXo5YQIs2WPHToZPYhO BD1ci/jaLw+kgbQRzYiAI3mxtUs+CUyoq/R5vMxp/zeGQweoRy7fo55WigB/SEvO 02tVEV2O2AZ8CkUbVS2yRTetgCuk9/fz0HjXah2xxS60u3rf002K/QhPbOfKwGlx kX8UPg1qGj+79sknh6Nshc3yAxxU70D3abkY2gxz/al63qMO/LiMQ62I2xdu3CfI 0IYlzDjiTmwf7O/NLxCJtotQeGtnQNeWnRwofmJ79xirbtuUQbQQe/Q6aIeGVc0A o4ecebo9ZMDVxPfWqbEqdOAonB5Tgj+Yb5v5rN/6q6PT -----END CERTIFICATE-----Generated at Wed Jan 21 15:36:59 2026 by rpki-client