This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cGxAwO4N3MJ_XJ6XEST2xCXyY6o.roa File: cGxAwO4N3MJ_XJ6XEST2xCXyY6o.roa (raw, json) Hash identifier: 3pxoxmBXuN4p0xhXoJ1bIY5BkzJWux/HjBGTsw21mrk= Subject key identifier: 70:6C:40:C0:EE:0D:DC:C2:7F:5C:9E:97:11:24:F6:C4:25:F2:63:AA Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AED2A896D7EF31E5071EEE6404E6F Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cGxAwO4N3MJ_XJ6XEST2xCXyY6o.roa Signing time: Thu 01 Jan 2026 16:18:57 +0000 ROA not before: Thu 01 Jan 2026 16:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 77.93.150.0/23 maxlen: 24 81.5.189.0/24 maxlen: 24 82.153.32.0/24 maxlen: 24 89.213.124.0/23 maxlen: 23 109.176.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ed:2a:89:6d:7e:f3:1e:50:71:ee:e6:40:4e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=706c40c0ee0ddcc27f5c9e971124f6c425f263aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:c6:2c:d5:ab:0c:25:8a:3c:d5:4b:a3:62: 8c:51:13:da:bf:49:2e:d3:97:6c:33:7e:82:a8:2f: 70:00:75:1e:6a:99:c6:2e:8c:6b:ca:94:a6:54:75: b9:e5:64:6f:98:2e:95:06:5c:48:f9:d0:54:61:01: f0:14:f9:09:7c:de:b0:c3:42:ab:17:79:de:cd:1c: 2c:50:7b:14:84:e8:ba:68:3c:0f:f0:36:63:45:bb: 5f:50:9d:0a:61:09:26:e8:85:0a:43:8a:20:c4:54: eb:7a:98:e6:7c:3a:b3:2d:45:05:c1:a9:b7:c7:66: 9a:f4:37:16:ee:86:ef:4b:53:0e:c1:4f:e8:86:6c: 9b:9c:08:15:cd:23:86:d0:a4:ef:f5:dc:cd:92:1a: cc:31:74:5f:f6:d6:b2:ff:3d:a2:7a:85:54:34:49: 94:09:60:c6:4e:ee:f4:8a:5b:11:a2:c3:e1:0c:50: 48:99:a4:3f:4e:d6:06:87:5e:99:ff:3a:47:96:f5: e8:52:8b:6f:70:82:6a:41:b9:25:8f:cb:57:63:dc: 44:32:54:e1:7b:a0:d9:e3:ca:53:68:33:6b:dd:9a: 5d:03:8c:67:2f:89:49:91:51:8f:2f:aa:02:69:ca: cd:f9:9b:63:4d:84:ec:53:13:9f:e8:11:b4:74:a0: 5e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6C:40:C0:EE:0D:DC:C2:7F:5C:9E:97:11:24:F6:C4:25:F2:63:AA X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cGxAwO4N3MJ_XJ6XEST2xCXyY6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.150.0/23 81.5.189.0/24 82.153.32.0/24 89.213.124.0/23 109.176.204.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:a4:e5:b0:cc:4f:51:e6:6c:b4:bb:2b:68:ad:d8:87:69:fb: 6a:ef:46:ac:a4:a6:f9:0b:88:b2:8a:cd:36:5d:e9:cf:00:54: cf:f0:70:f2:d4:56:5a:7e:e7:a5:80:1d:db:e8:91:a8:b0:30: 0a:2d:f0:df:ef:1d:3c:af:35:5d:3b:ef:23:7d:a3:2b:a7:52: 12:c8:ed:77:7a:50:59:56:a4:e1:8f:9f:b3:d5:fa:68:a2:01: b4:95:37:90:74:02:5a:b4:f5:4c:67:c5:2f:da:58:3b:9b:d9: 3d:af:24:21:af:f1:20:34:ef:27:ce:6b:df:d6:c4:70:6d:c6: 1e:18:4c:71:1f:ae:1c:65:6e:8c:ab:01:c9:e4:87:30:20:f7: f5:0e:d7:95:2f:30:ad:48:48:55:34:05:d7:11:ff:0f:12:55: af:e4:d4:3a:03:6a:78:f6:dd:08:fc:74:7a:6a:8e:1e:a4:c6: 3c:5e:ce:38:e8:86:75:fd:a9:c5:72:66:6b:34:3e:20:31:f5: 90:9c:46:0a:57:8f:0d:f7:9c:8a:5e:75:27:4c:6e:6f:99:3e: 39:d9:0a:af:35:fb:40:64:c9:f4:54:d0:fe:19:c9:e7:a4:e5: 5b:84:c5:b3:d7:e6:a4:f8:0e:d2:95:b1:3e:1a:4a:0a:37:e5: ac:6f:ff:1f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6Wu0qiW1+8x5Qce7mQE5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDZjNDBjMGVlMGRkY2MyN2Y1YzllOTcxMTI0ZjZjNDI1ZjI2M2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRXGLNWrDCWKPNVLo2KMURPav0ku 05dsM36CqC9wAHUeapnGLoxrypSmVHW55WRvmC6VBlxI+dBUYQHwFPkJfN6ww0Kr F3nezRwsUHsUhOi6aDwP8DZjRbtfUJ0KYQkm6IUKQ4ogxFTrepjmfDqzLUUFwam3 x2aa9DcW7obvS1MOwU/ohmybnAgVzSOG0KTv9dzNkhrMMXRf9tay/z2ieoVUNEmU CWDGTu70ilsRosPhDFBImaQ/TtYGh16Z/zpHlvXoUotvcIJqQbklj8tXY9xEMlTh e6DZ48pTaDNr3ZpdA4xnL4lJkVGPL6oCacrN+ZtjTYTsUxOf6BG0dKBecQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHBsQMDuDdzCf1yelxEk9sQl8mOqMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvY0d4QXdPNE4zTUpfWEo2WEVTVDJ4Q1h5WTZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBTV2WAwQA UQW9AwQAUpkgAwQBWdV8AwQBbbDMMA0GCSqGSIb3DQEBCwUAA4IBAQAPpOWwzE9R 5my0uytordiHaftq70aspKb5C4iyis02XenPAFTP8HDy1FZafuelgB3b6JGosDAK LfDf7x08rzVdO+8jfaMrp1ISyO13elBZVqThj5+z1fpoogG0lTeQdAJatPVMZ8Uv 2lg7m9k9ryQhr/EgNO8nzmvf1sRwbcYeGExxH64cZW6MqwHJ5IcwIPf1DteVLzCt SEhVNAXXEf8PElWv5NQ6A2p49t0I/HR6ao4epMY8Xs446IZ1/anFcmZrND4gMfWQ nEYKV48N95yKXnUnTG5vmT452QqvNftAZMn0VND+GcnnpOVbhMWz1+ak+A7SlbE+ GkoKN+Wsb/8f -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:33 2026 by rpki-client