This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rCHZqnKTLnkV-IRvPVyjvCMImcc.roa File: rCHZqnKTLnkV-IRvPVyjvCMImcc.roa (raw, json) Hash identifier: SGcPhuVDulI6n4Hi271QHa+uDx+5hY6mc1NVrLuOhF4= Subject key identifier: AC:21:D9:AA:72:93:2E:79:15:F8:84:6F:3D:5C:A3:BC:23:08:99:C7 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5AA17A31F4026659DD78E639EAD123 Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rCHZqnKTLnkV-IRvPVyjvCMImcc.roa Signing time: Thu 01 Jan 2026 16:18:38 +0000 ROA not before: Thu 01 Jan 2026 16:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202662 IP address blocks: 83.147.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a1:7a:31:f4:02:66:59:dd:78:e6:39:ea:d1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac21d9aa72932e7915f8846f3d5ca3bc230899c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:9a:da:57:ae:dc:2a:ca:a4:6e:90:01:20: f5:2e:c2:cd:55:4b:c7:02:49:f5:6c:92:12:c8:85: 09:32:8c:77:2f:5a:53:1e:6a:82:ad:b4:b4:2d:17: 0d:0c:1e:84:c2:76:a5:bd:eb:fc:d6:bb:ad:44:8b: 78:0f:15:7b:da:07:82:11:34:eb:85:e1:e7:99:c0: 8a:f2:c3:dd:40:75:50:7c:32:a9:40:c8:55:18:e2: 3c:ca:d9:70:7a:0d:15:c8:2d:94:f5:48:5f:d4:61: 17:f6:92:aa:0d:d9:9f:08:20:e8:43:97:e7:9b:3f: 13:76:0a:f4:a0:04:74:cb:37:fe:e1:d2:91:7f:ed: 72:ee:a0:79:14:3e:90:51:05:18:93:5e:54:ed:a7: b5:97:d9:b0:e3:7e:b0:3e:17:9a:05:bd:71:46:af: d2:87:f3:34:89:82:1b:3a:f7:98:83:51:b4:e5:d1: 72:f2:08:a3:af:2a:47:73:a0:51:be:46:57:bb:91: 04:74:32:23:cb:ea:d0:ff:fe:8b:1b:b5:8f:03:aa: 69:27:62:c0:d5:c8:22:d4:e8:5e:f8:ec:71:e3:87: 4f:86:35:d7:ed:8c:4c:6b:3d:71:9c:46:ad:5c:e3: b6:cd:a3:e5:6f:c0:e2:aa:1c:0b:26:fd:23:89:ff: e0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:21:D9:AA:72:93:2E:79:15:F8:84:6F:3D:5C:A3:BC:23:08:99:C7 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rCHZqnKTLnkV-IRvPVyjvCMImcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.60.0/23 Signature Algorithm: sha256WithRSAEncryption 89:06:9b:f3:24:7f:f8:8b:37:31:f0:06:db:3d:c7:96:e2:a3: 8b:5d:ed:39:cc:2d:ea:1a:f3:90:7c:ed:b5:10:30:ed:d1:79: cf:4b:7d:82:e6:2c:ab:b9:4f:ce:24:fc:9a:55:88:17:9e:4b: 10:1b:0d:5b:ba:89:1c:30:39:46:f1:87:d1:5b:fa:0a:36:f1: 0f:93:6b:9f:f2:7e:27:2d:5f:54:58:79:a0:71:c9:41:53:c3: 3b:8f:ed:5a:81:c3:01:51:ed:25:8a:81:36:79:5d:81:35:c1: 8d:b7:04:71:2b:97:51:9a:7d:4c:c9:98:ed:a2:21:fe:38:86: 1f:dc:18:14:56:02:39:a4:d1:9f:64:c3:4f:20:41:89:6e:18: b3:40:77:a9:fc:ef:84:c8:58:dc:00:cd:d6:50:6d:f9:67:a2: 4f:4f:b9:0c:60:c6:af:f8:5f:0d:bf:62:17:76:57:55:7b:70: 7a:18:fe:54:43:2a:2b:9b:46:4b:a9:f3:15:f8:38:6b:3e:1c: b3:31:03:c9:4c:01:4f:74:bc:1c:4b:9c:ce:08:51:fc:86:e2: 9e:d4:4e:8c:e1:f6:b3:fc:0a:38:b4:5f:a8:4f:03:7a:5b:77: 49:03:bf:71:de:1d:77:58:0a:a4:a7:ce:b4:d5:4d:b9:1b:68: 65:4b:bf:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqF6MfQCZlndeOY56tEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzIxZDlhYTcyOTMyZTc5MTVmODg0NmYzZDVjYTNiYzIzMDg5OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYSa2leu3CrKpG6QASD1LsLNVUvH Akn1bJISyIUJMox3L1pTHmqCrbS0LRcNDB6Ewnalvev81rutRIt4DxV72geCETTr heHnmcCK8sPdQHVQfDKpQMhVGOI8ytlweg0VyC2U9Uhf1GEX9pKqDdmfCCDoQ5fn mz8Tdgr0oAR0yzf+4dKRf+1y7qB5FD6QUQUYk15U7ae1l9mw436wPheaBb1xRq/S h/M0iYIbOveYg1G05dFy8gijrypHc6BRvkZXu5EEdDIjy+rQ//6LG7WPA6ppJ2LA 1cgi1Ohe+Oxx44dPhjXX7YxMaz1xnEatXOO2zaPlb8DiqhwLJv0jif/g8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKwh2apyky55FfiEbz1co7wjCJnHMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvckNIWnFuS1RMbmtWLUlSdlBWeWp2Q01JbWNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU5M8MA0G CSqGSIb3DQEBCwUAA4IBAQCJBpvzJH/4izcx8AbbPceW4qOLXe05zC3qGvOQfO21 EDDt0XnPS32C5iyruU/OJPyaVYgXnksQGw1buokcMDlG8YfRW/oKNvEPk2uf8n4n LV9UWHmgcclBU8M7j+1agcMBUe0lioE2eV2BNcGNtwRxK5dRmn1MyZjtoiH+OIYf 3BgUVgI5pNGfZMNPIEGJbhizQHep/O+EyFjcAM3WUG35Z6JPT7kMYMav+F8Nv2IX dldVe3B6GP5UQyorm0ZLqfMV+DhrPhyzMQPJTAFPdLwcS5zOCFH8huKe1E6M4faz /Ao4tF+oTwN6W3dJA79x3h13WAqkp8601U25G2hlS78i -----END CERTIFICATE-----Generated at Wed Jan 21 18:20:41 2026 by rpki-client