This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/cGSyEqlaNLY1LymfACjH5x7qwiY.roa File: cGSyEqlaNLY1LymfACjH5x7qwiY.roa (raw, json) Hash identifier: PPsjXk3d3JTucJBSEkB9JMB6kS1QWHypumoBDsX0uds= Subject key identifier: 70:64:B2:12:A9:5A:34:B6:35:2F:29:9F:00:28:C7:E7:1E:EA:C2:26 Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Certificate serial: 019B7AC874692347C822BAF0C664A149D2BC Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/cGSyEqlaNLY1LymfACjH5x7qwiY.roa Signing time: Thu 01 Jan 2026 18:18:35 +0000 ROA not before: Thu 01 Jan 2026 18:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47376 IP address blocks: 185.129.190.0/23 maxlen: 23 185.129.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:74:69:23:47:c8:22:ba:f0:c6:64:a1:49:d2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Validity Not Before: Jan 1 18:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7064b212a95a34b6352f299f0028c7e71eeac226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:00:6d:6d:19:09:b3:06:c2:e4:96:79:17: 9a:77:81:0b:f0:8e:14:ca:7d:ab:24:d8:bc:bd:9d: 26:db:99:c9:6b:43:c0:b0:cc:38:b3:10:2c:3f:3a: 3c:81:b0:6a:ad:58:4d:b1:7b:cf:40:23:ed:92:cd: 2f:d1:df:37:fd:8c:4b:65:0d:09:bc:21:9d:63:71: f9:d4:81:2b:02:b1:59:d9:c3:63:31:84:93:19:b1: 81:d2:f7:b5:84:be:bf:e7:28:e5:70:1b:cf:8f:cd: aa:09:8d:6f:dd:24:db:65:bc:14:de:9f:a8:c5:37: f4:3a:54:f0:72:11:18:89:a0:f5:35:90:38:6e:5e: 89:dc:63:77:72:f1:76:1f:ac:e8:61:57:27:43:ac: 33:eb:06:8b:c6:6f:ed:ef:b6:d1:ca:72:9e:8b:d9: 54:f7:27:c5:d0:d7:c1:8b:dd:78:6b:14:ac:9d:c7: c4:89:57:ce:19:f2:ef:f6:39:c9:d4:4f:e5:1a:57: 20:c6:c2:4c:a1:a4:1c:75:9c:30:d6:ae:66:42:cb: 87:b1:73:2c:b5:c0:56:5a:8b:00:cf:d0:e7:f5:75: c7:3c:38:ca:aa:d7:36:be:c1:1e:10:c9:cc:36:e8: d8:34:69:d2:0c:ed:5f:be:a5:6b:d9:5b:f9:cc:ba: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:64:B2:12:A9:5A:34:B6:35:2F:29:9F:00:28:C7:E7:1E:EA:C2:26 X509v3 Authority Key Identifier: keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/cGSyEqlaNLY1LymfACjH5x7qwiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.190.0/23 185.129.230.0/24 Signature Algorithm: sha256WithRSAEncryption c3:ca:16:ca:f8:b4:6d:3b:27:3c:18:7a:45:e7:87:90:58:95: de:83:15:45:6c:b8:f7:d0:bb:9d:d6:2c:20:23:54:6b:30:6c: fd:ce:d6:d6:c3:7e:f1:e2:6c:dd:25:8f:97:d2:3a:47:95:55: d3:83:f6:f5:26:f5:1b:20:77:13:dd:97:23:a6:6d:b5:9f:f2: 43:c6:34:46:70:0c:cd:c9:7c:b2:70:75:b1:96:56:23:4f:f1: d9:96:a6:64:ac:8d:76:ee:5c:0e:0a:5e:c2:76:43:d2:6f:55: 29:02:a0:42:c1:61:61:34:06:a3:3d:4b:be:c0:c7:e4:06:8a: 1b:d6:9f:f9:08:ee:f0:21:27:ef:81:fe:2a:21:2d:46:57:6f: 83:49:5b:2e:64:9c:9e:3a:f3:cd:92:24:04:0b:b4:b5:af:8d: a2:1c:cd:e8:4f:d6:53:c8:34:8c:f9:23:97:e5:e7:fa:c0:05: ea:72:cf:a3:b3:08:6f:c2:78:6c:bd:5e:f8:70:e6:c1:45:1f: 74:3c:70:c5:ba:42:77:b4:c0:55:b6:d7:f7:ad:71:57:28:c1: e3:cc:6b:28:77:a3:76:99:eb:84:94:58:19:56:ae:be:8e:5f: 79:81:91:7f:20:26:9e:36:7c:fa:8b:ef:d8:16:d2:80:3e:bd: 7f:d7:21:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yHRpI0fIIrrwxmShSdK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh MjM4YzAwHhcNMjYwMTAxMTgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDY0YjIxMmE5NWEzNGI2MzUyZjI5OWYwMDI4YzdlNzFlZWFjMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxsAbW0ZCbMGwuSWeRead4EL8I4U yn2rJNi8vZ0m25nJa0PAsMw4sxAsPzo8gbBqrVhNsXvPQCPtks0v0d83/YxLZQ0J vCGdY3H51IErArFZ2cNjMYSTGbGB0ve1hL6/5yjlcBvPj82qCY1v3STbZbwU3p+o xTf0OlTwchEYiaD1NZA4bl6J3GN3cvF2H6zoYVcnQ6wz6waLxm/t77bRynKei9lU 9yfF0NfBi914axSsncfEiVfOGfLv9jnJ1E/lGlcgxsJMoaQcdZww1q5mQsuHsXMs tcBWWosAz9Dn9XXHPDjKqtc2vsEeEMnMNujYNGnSDO1fvqVr2Vv5zLqwgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHBkshKpWjS2NS8pnwAox+ce6sImMB8GA1UdIwQY MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt OTdjOWFhYjgyOGYyLzEvY0dTeUVxbGFOTFkxTHltZkFDakg1eDdxd2lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuYG+AwQA uYHmMA0GCSqGSIb3DQEBCwUAA4IBAQDDyhbK+LRtOyc8GHpF54eQWJXegxVFbLj3 0Lud1iwgI1RrMGz9ztbWw37x4mzdJY+X0jpHlVXTg/b1JvUbIHcT3Zcjpm21n/JD xjRGcAzNyXyycHWxllYjT/HZlqZkrI127lwOCl7CdkPSb1UpAqBCwWFhNAajPUu+ wMfkBoob1p/5CO7wISfvgf4qIS1GV2+DSVsuZJyeOvPNkiQEC7S1r42iHM3oT9ZT yDSM+SOX5ef6wAXqcs+jswhvwnhsvV74cObBRR90PHDFukJ3tMBVttf3rXFXKMHj zGsod6N2meuElFgZVq6+jl95gZF/ICaeNnz6i+/YFtKAPr1/1yEo -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:29 2026 by rpki-client