This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/gabLNz-9haR8x0JVvUH9RWZfT3o.roa File: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (raw, json) Hash identifier: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts= Subject key identifier: 81:A6:CB:37:3F:BD:85:A4:7C:C7:42:55:BD:41:FD:45:66:5F:4F:7A Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632 Certificate serial: 019B7F15ED871C9739314E5A12C7C456E588 Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/gabLNz-9haR8x0JVvUH9RWZfT3o.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44486 IP address blocks: 80.75.218.0/24 maxlen: 24 2a13:7e80::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ed:87:1c:97:39:31:4e:5a:12:c7:c4:56:e5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81a6cb373fbd85a47cc74255bd41fd45665f4f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:49:bf:97:64:67:34:e7:f6:dc:41:0f:3d:30: 9a:2a:1d:b5:10:52:91:08:42:be:89:75:70:f5:f4: f7:eb:4a:0d:af:9b:08:28:5f:fc:14:d4:cc:be:0e: 79:3b:4f:9f:0e:4d:7a:a8:76:06:3f:40:35:69:83: 32:d4:cd:ed:6d:22:b7:7a:75:6d:5e:6b:a5:dd:fa: 68:a7:c4:ed:a2:69:8c:55:92:73:45:f0:35:3d:cc: da:45:a8:1e:06:2c:54:13:f0:e7:35:ce:8f:45:ee: 1c:a4:b0:d2:b5:5b:41:9c:d0:fe:91:4c:9d:7a:86: 51:db:6c:a8:c1:9b:c3:4e:03:e2:0f:fb:24:0c:69: 9b:54:5c:95:20:f4:2b:88:20:a6:7c:95:83:89:00: 25:0d:a0:77:51:ec:fb:48:f7:d4:c0:1c:49:cb:a6: 47:49:76:e7:9a:97:8f:d7:bb:c5:9b:20:86:08:39: 7c:ee:58:7e:fd:e1:75:b7:ff:4d:2c:07:12:0c:2b: db:19:c6:56:b6:5a:69:a4:d6:a4:28:34:aa:d1:98: 3c:d2:32:2c:61:a9:ee:93:0f:9a:8e:3c:b2:35:c3: 07:4d:f5:3d:d0:07:84:89:2c:ed:1a:11:3e:22:7e: e9:07:f0:21:f9:11:f8:71:7a:b5:da:7e:2d:3d:d0: 99:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A6:CB:37:3F:BD:85:A4:7C:C7:42:55:BD:41:FD:45:66:5F:4F:7A X509v3 Authority Key Identifier: keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/gabLNz-9haR8x0JVvUH9RWZfT3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.218.0/24 IPv6: 2a13:7e80::/29 Signature Algorithm: sha256WithRSAEncryption 9a:e5:9c:9d:a4:49:6b:e2:ea:1a:bc:61:1a:2c:db:0c:e0:d8: c4:24:23:5e:6a:7b:96:d3:24:87:10:b8:7a:79:2f:3a:57:c9: 15:94:ce:17:29:19:84:3d:e3:02:a8:e7:e3:f2:af:1b:4b:03: 8f:ff:4f:c8:81:cc:30:af:73:cc:9d:14:a8:cd:b7:11:e3:89: cc:52:3f:cf:6d:78:44:f0:09:57:f2:14:74:f9:4b:4a:da:fa: ce:e9:9d:7b:48:1b:90:d5:af:53:2e:a6:52:37:46:09:cc:fd: 35:92:35:63:db:12:1e:05:bf:7e:2c:0c:38:67:5c:9b:d6:06: a8:0f:27:36:27:ef:f3:b6:72:1f:57:ef:cf:1d:0b:4e:63:f3: b8:d8:7a:2c:d5:1f:09:a8:56:0f:74:fe:dd:04:f7:89:0f:56: 5e:29:20:90:e7:13:cf:0e:c3:bc:b5:5d:19:88:66:a1:9f:f0: 91:55:1a:f6:76:ea:63:a7:5c:10:03:d4:e7:e9:ff:47:c2:6f: 1a:11:4e:fa:82:30:71:d3:5c:5f:39:4a:1b:60:61:b8:35:8b: e3:9f:27:c8:8a:30:aa:34:ef:92:88:21:06:4c:e1:70:a5:b8: 55:e9:db:d9:2d:5f:2b:c1:66:95:85:52:64:15:96:77:a9:79: fe:0a:51:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/Fe2HHJc5MU5aEsfEVuWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx NTY2MzIwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWE2Y2IzNzNmYmQ4NWE0N2NjNzQyNTViZDQxZmQ0NTY2NWY0ZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEm/l2RnNOf23EEPPTCaKh21EFKR CEK+iXVw9fT360oNr5sIKF/8FNTMvg55O0+fDk16qHYGP0A1aYMy1M3tbSK3enVt Xmul3fpop8TtommMVZJzRfA1PczaRageBixUE/DnNc6PRe4cpLDStVtBnND+kUyd eoZR22yowZvDTgPiD/skDGmbVFyVIPQriCCmfJWDiQAlDaB3Uez7SPfUwBxJy6ZH SXbnmpeP17vFmyCGCDl87lh+/eF1t/9NLAcSDCvbGcZWtlpppNakKDSq0Zg80jIs Yanukw+ajjyyNcMHTfU90AeEiSztGhE+In7pB/Ah+RH4cXq12n4tPdCZvQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIGmyzc/vYWkfMdCVb1B/UVmX096MB8GA1UdIwQY MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt MDk5YmFkMDM3NjhlLzEvZ2FiTE56LTloYVI4eDBKVnZVSDlSV1pmVDNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUEvaMA0E AgACMAcDBQMqE36AMA0GCSqGSIb3DQEBCwUAA4IBAQCa5ZydpElr4uoavGEaLNsM 4NjEJCNeanuW0ySHELh6eS86V8kVlM4XKRmEPeMCqOfj8q8bSwOP/0/Igcwwr3PM nRSozbcR44nMUj/PbXhE8AlX8hR0+UtK2vrO6Z17SBuQ1a9TLqZSN0YJzP01kjVj 2xIeBb9+LAw4Z1yb1gaoDyc2J+/ztnIfV+/PHQtOY/O42Hos1R8JqFYPdP7dBPeJ D1ZeKSCQ5xPPDsO8tV0ZiGahn/CRVRr2dupjp1wQA9Tn6f9Hwm8aEU76gjBx01xf OUobYGG4NYvjnyfIijCqNO+SiCEGTOFwpbhV6dvZLV8rwWaVhVJkFZZ3qXn+ClGR -----END CERTIFICATE-----Generated at Sun Jan 18 08:34:57 2026 by rpki-client