This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gKz1-Mt7Jzv749qmMArquMsARKQ.roa File: gKz1-Mt7Jzv749qmMArquMsARKQ.roa (raw, json) Hash identifier: VGdRm8WsxCojNaCRCyyIwadV6IxmzEv1hZx2rLAE99E= Subject key identifier: 80:AC:F5:F8:CB:7B:27:3B:FB:E3:DA:A6:30:0A:EA:B8:CB:00:44:A4 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B3619964FD3BB0367979243FB177F7F Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gKz1-Mt7Jzv749qmMArquMsARKQ.roa Signing time: Thu 01 Jan 2026 20:18:21 +0000 ROA not before: Thu 01 Jan 2026 20:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215729 IP address blocks: 77.81.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:19:96:4f:d3:bb:03:67:97:92:43:fb:17:7f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80acf5f8cb7b273bfbe3daa6300aeab8cb0044a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4c:b0:ef:b4:33:fd:1b:84:9a:86:e5:6c:46: a5:28:a2:b5:c7:12:d8:a9:10:dd:85:35:89:33:2d: 1d:bb:a7:c1:29:c5:3e:22:33:88:f5:0f:c8:cb:97: e2:82:72:60:3b:40:c3:12:4b:bc:52:ac:1c:e4:14: 2c:5c:24:b3:1b:9e:7a:9b:5d:12:13:0b:03:cb:e3: d5:72:98:30:e0:57:b4:26:c3:08:b2:f2:9e:1d:22: c8:4a:3c:15:59:9c:a2:a5:62:f4:4e:97:90:83:15: be:21:f5:dc:4c:fd:18:2c:f8:91:8a:49:aa:e0:72: 41:fb:9d:8a:d0:58:65:06:3f:7b:fb:be:2d:65:48: d4:0a:c8:40:c2:ea:0d:88:c3:75:51:f6:70:07:53: b4:14:3f:1c:b6:b7:9e:ba:eb:18:e4:41:6c:ad:20: 8d:ae:8c:d1:a2:02:76:c2:20:a6:5f:6d:d0:ba:ed: 24:36:d7:09:e6:86:a1:ba:15:d8:a2:d9:45:9a:a4: cb:8c:c9:67:c6:c0:70:46:84:3a:43:4f:29:d2:bf: fc:44:fc:79:ef:1c:d9:04:b3:7a:01:0b:b6:5e:34: 9b:dd:4e:03:2d:fc:e8:1d:22:8e:9c:b8:a3:32:4a: f2:01:04:8a:bc:2b:12:d1:eb:3b:a6:53:84:ff:62: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AC:F5:F8:CB:7B:27:3B:FB:E3:DA:A6:30:0A:EA:B8:CB:00:44:A4 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gKz1-Mt7Jzv749qmMArquMsARKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.190.0/24 Signature Algorithm: sha256WithRSAEncryption 23:81:6d:8c:3b:e9:5d:06:aa:a4:a1:71:65:91:cc:ec:d4:51: f8:01:b8:ce:cc:ab:59:e7:f1:38:8d:b9:71:06:b5:f9:fa:25: f2:26:cd:8a:eb:12:76:3e:9e:94:ee:0c:04:d4:a8:9f:00:89: 7f:b4:5c:e0:e3:fd:66:1b:b5:ce:d3:ed:79:15:62:39:98:1d: 11:82:d5:ba:a0:64:9c:44:aa:aa:ce:82:70:e7:b7:00:07:55: ea:ee:cd:ea:68:b1:d3:d8:1c:bd:fa:06:18:35:52:6a:d7:30: f5:f6:40:c3:67:af:12:3e:68:64:97:30:d7:dd:72:e0:07:6f: 9b:62:d3:19:5e:e5:65:d2:9e:56:c4:74:6d:ea:d4:4f:d8:d3: 0e:10:a8:28:e0:6e:c6:9b:a7:29:c1:5a:9c:88:3d:6f:4b:33: bb:8a:cc:78:71:9e:25:da:a9:5f:f6:c9:f9:01:5a:7b:e9:21: 6e:a4:3d:6d:35:ce:c6:11:10:c2:43:a2:28:16:e2:9b:4b:f9: 6a:ed:e4:51:77:b5:09:90:19:52:a5:a4:54:06:94:8f:8f:1c: 55:59:94:83:c4:07:ea:2c:ca:2f:8e:f0:4a:af:46:e1:0f:3e: bd:33:38:28:c2:e7:ed:95:a5:78:7d:4c:4a:ba:1d:8b:4b:1e: cc:6e:60:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhmWT9O7A2eXkkP7F39/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGFjZjVmOGNiN2IyNzNiZmJlM2RhYTYzMDBhZWFiOGNiMDA0NGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Eyw77Qz/RuEmoblbEalKKK1xxLY qRDdhTWJMy0du6fBKcU+IjOI9Q/Iy5fignJgO0DDEku8Uqwc5BQsXCSzG556m10S EwsDy+PVcpgw4Fe0JsMIsvKeHSLISjwVWZyipWL0TpeQgxW+IfXcTP0YLPiRikmq 4HJB+52K0FhlBj97+74tZUjUCshAwuoNiMN1UfZwB1O0FD8ctreeuusY5EFsrSCN rozRogJ2wiCmX23Quu0kNtcJ5oahuhXYotlFmqTLjMlnxsBwRoQ6Q08p0r/8RPx5 7xzZBLN6AQu2XjSb3U4DLfzoHSKOnLijMkryAQSKvCsS0es7plOE/2KhqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICs9fjLeyc7++PapjAK6rjLAESkMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvZ0t6MS1NdDdKenY3NDlxbU1BcnF1TXNBUktRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVG+MA0G CSqGSIb3DQEBCwUAA4IBAQAjgW2MO+ldBqqkoXFlkczs1FH4AbjOzKtZ5/E4jblx BrX5+iXyJs2K6xJ2Pp6U7gwE1KifAIl/tFzg4/1mG7XO0+15FWI5mB0RgtW6oGSc RKqqzoJw57cAB1Xq7s3qaLHT2By9+gYYNVJq1zD19kDDZ68SPmhklzDX3XLgB2+b YtMZXuVl0p5WxHRt6tRP2NMOEKgo4G7Gm6cpwVqciD1vSzO7isx4cZ4l2qlf9sn5 AVp76SFupD1tNc7GERDCQ6IoFuKbS/lq7eRRd7UJkBlSpaRUBpSPjxxVWZSDxAfq LMovjvBKr0bhDz69MzgowuftlaV4fUxKuh2LSx7MbmDJ -----END CERTIFICATE-----Generated at Tue Jan 20 00:29:38 2026 by rpki-client