This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/gyvu9cFnJO4MAwvAgHj8LvBNP7s.roa File: gyvu9cFnJO4MAwvAgHj8LvBNP7s.roa (raw, json) Hash identifier: eMyRVFCyce/Miwfnx+0dN7toaAvORgqRwSdJr9xSmK8= Subject key identifier: 83:2B:EE:F5:C1:67:24:EE:0C:03:0B:C0:80:78:FC:2E:F0:4D:3F:BB Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df Certificate serial: 019B79ECAA687AAB8CEE80A2DB7BF49F237B Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/gyvu9cFnJO4MAwvAgHj8LvBNP7s.roa Signing time: Thu 01 Jan 2026 14:18:31 +0000 ROA not before: Thu 01 Jan 2026 14:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207333 IP address blocks: 176.120.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 14:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:aa:68:7a:ab:8c:ee:80:a2:db:7b:f4:9f:23:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30663b5b7044232b989818d12cc90490212524df Validity Not Before: Jan 1 14:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=832beef5c16724ee0c030bc08078fc2ef04d3fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:3c:d8:e5:4a:01:2f:cf:67:c2:72:a7:64: 5f:f2:3a:8f:39:3d:63:cc:6e:6c:03:97:28:9e:09: 88:08:be:15:54:5d:56:52:46:6b:a5:3b:7c:55:ef: 04:67:d4:d6:94:04:99:7f:86:84:b6:7a:8e:10:cf: 06:35:93:88:41:54:36:39:4a:cf:2f:31:82:54:c9: 5b:f4:77:31:c3:c0:22:8c:4c:fb:4c:4c:1f:86:aa: 33:9b:ca:6b:c0:0d:73:b5:3d:05:ee:fb:b5:a5:4b: 4f:a4:0c:aa:9e:d5:03:91:32:09:c4:a3:ce:c9:b4: 4a:f9:22:e1:d8:59:a5:45:19:97:73:81:04:da:95: 35:3f:30:f4:be:15:86:ee:e3:ce:53:6b:1d:7f:8e: 7e:91:85:0a:2d:d0:62:c7:e5:23:e8:0a:ea:ae:7e: fb:61:e6:19:08:fe:4d:29:62:00:76:aa:fc:cb:e0: 03:65:d1:06:49:7d:e7:5d:8b:bc:c4:36:9f:d1:d7: 1a:66:c9:cd:74:1e:3b:91:11:6a:3d:3d:e9:a9:b7: cd:34:70:6f:fb:40:39:96:fb:50:38:7f:33:2d:72: 1c:e4:e2:44:0a:f1:dd:b7:3c:5d:f6:ee:94:c8:aa: ba:6a:be:41:f2:ac:8d:e3:ff:41:0a:c6:7d:27:40: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2B:EE:F5:C1:67:24:EE:0C:03:0B:C0:80:78:FC:2E:F0:4D:3F:BB X509v3 Authority Key Identifier: keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/gyvu9cFnJO4MAwvAgHj8LvBNP7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.120.21.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:5b:c0:0e:a8:2d:0d:6d:94:91:dd:00:ad:33:74:b7:a9:09: 63:7d:fc:32:e4:3d:f4:a9:4c:5c:16:d6:06:d5:38:35:f2:25: f9:cb:d2:ac:86:c3:34:34:8c:93:77:37:67:9f:3b:c5:eb:88: 8a:10:a1:e9:87:dc:f3:6c:e6:4f:42:09:40:1f:05:ab:6a:4f: c9:60:a9:6f:b1:52:10:99:e6:7f:4f:29:99:4b:49:80:aa:e6: 79:af:a8:8d:38:e0:7b:71:ab:f1:f4:1e:c0:85:e0:dd:a6:44: 6f:5e:a4:2b:d8:81:b5:ad:e3:c4:ed:55:84:2a:5d:9d:37:ab: bd:c7:9f:b7:5c:bb:96:97:c1:57:d4:56:90:fc:c4:8b:05:73: 42:d0:cf:71:bf:35:07:a5:f3:18:6c:c8:b7:8b:b4:1f:57:04: c9:43:5a:03:8e:84:7f:4c:33:83:df:96:b8:b2:95:05:8a:dd: 57:95:41:a2:66:10:0e:7b:e5:24:a3:6f:cb:de:ca:bd:af:73: a9:63:0b:a5:18:73:9e:f7:59:a3:54:46:1c:1d:79:a6:2b:85: 28:fe:77:92:7a:f6:d4:9d:15:72:40:80:04:96:79:1e:2d:90: 46:34:bb:e6:07:b4:99:46:c9:92:1e:02:76:7a:7d:27:ca:3e: c4:3d:4e:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57KpoequM7oCi23v0nyN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjYzYjViNzA0NDIzMmI5ODk4MThkMTJjYzkwNDkwMjEy NTI0ZGYwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzJiZWVmNWMxNjcyNGVlMGMwMzBiYzA4MDc4ZmMyZWYwNGQzZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHw82OVKAS/PZ8Jyp2Rf8jqPOT1j zG5sA5congmICL4VVF1WUkZrpTt8Ve8EZ9TWlASZf4aEtnqOEM8GNZOIQVQ2OUrP LzGCVMlb9Hcxw8AijEz7TEwfhqozm8prwA1ztT0F7vu1pUtPpAyqntUDkTIJxKPO ybRK+SLh2FmlRRmXc4EE2pU1PzD0vhWG7uPOU2sdf45+kYUKLdBix+Uj6Arqrn77 YeYZCP5NKWIAdqr8y+ADZdEGSX3nXYu8xDaf0dcaZsnNdB47kRFqPT3pqbfNNHBv +0A5lvtQOH8zLXIc5OJECvHdtzxd9u6UyKq6ar5B8qyN4/9BCsZ9J0B4VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIMr7vXBZyTuDAMLwIB4/C7wTT+7MB8GA1UdIwQY MBaAFDBmO1twRCMrmJgY0SzJBJAhJSTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAt MDExODc4MjU1YmE3LzEvZ3l2dTljRm5KTzRNQXd2QWdIajhMdkJOUDdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAtMDExODc4MjU1YmE3 LzEvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHgVMA0G CSqGSIb3DQEBCwUAA4IBAQBvW8AOqC0NbZSR3QCtM3S3qQljffwy5D30qUxcFtYG 1Tg18iX5y9KshsM0NIyTdzdnnzvF64iKEKHph9zzbOZPQglAHwWrak/JYKlvsVIQ meZ/TymZS0mAquZ5r6iNOOB7cavx9B7AheDdpkRvXqQr2IG1rePE7VWEKl2dN6u9 x5+3XLuWl8FX1FaQ/MSLBXNC0M9xvzUHpfMYbMi3i7QfVwTJQ1oDjoR/TDOD35a4 spUFit1XlUGiZhAOe+Uko2/L3sq9r3OpYwulGHOe91mjVEYcHXmmK4Uo/neSevbU nRVyQIAElnkeLZBGNLvmB7SZRsmSHgJ2en0nyj7EPU7+ -----END CERTIFICATE-----Generated at Thu Jan 1 22:38:32 2026 by rpki-client