This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9gIUZ3-KWFOqbPCbkWI5yHzecO0.roa File: 9gIUZ3-KWFOqbPCbkWI5yHzecO0.roa (raw, json) Hash identifier: jjpO0DxwKQMyYQwBPNQVarsVnFCb4DMo73zMMJVeyFI= Subject key identifier: F6:02:14:67:7F:8A:58:53:AA:6C:F0:9B:91:62:39:C8:7C:DE:70:ED Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6D03AD1F10BBE58F94A969AB4D4FE Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9gIUZ3-KWFOqbPCbkWI5yHzecO0.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213373 IP address blocks: 5.178.0.0/24 maxlen: 24 46.23.109.0/24 maxlen: 24 164.215.98.0/24 maxlen: 24 164.215.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d0:3a:d1:f1:0b:be:58:f9:4a:96:9a:b4:d4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f60214677f8a5853aa6cf09b916239c87cde70ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2b:c0:7f:e9:a2:8d:85:a2:21:a8:6b:d4:77: 56:a5:38:71:f2:3d:fd:ae:27:a5:f9:71:f7:1b:a0: 2d:44:b6:da:3b:95:c7:02:c1:50:b2:a6:27:86:49: eb:e7:0d:50:af:9e:8f:b4:69:39:c3:4c:d0:d4:69: ea:da:e7:5a:45:be:4d:8f:c6:3e:a9:c7:93:19:9d: 84:b5:4a:37:9e:bd:7f:53:58:53:40:32:10:1d:35: 96:2a:d9:86:aa:e0:96:db:32:ed:d2:df:04:e4:32: 51:98:b7:ed:94:04:2b:36:b4:60:81:f9:ca:16:58: 97:77:93:ac:4b:eb:e5:60:7c:55:2b:32:2a:ce:13: a9:7b:c7:d7:8e:04:90:1d:25:83:f0:c2:f4:3a:38: e2:54:3c:7d:77:0a:11:6f:f0:00:8c:c0:bb:cf:3d: 33:1c:c3:cb:f2:8c:c2:8a:05:23:6d:cd:e5:eb:4a: ca:84:3c:d5:8d:aa:0b:7c:51:45:f7:18:5e:7e:61: 13:37:b4:58:ad:5c:82:35:d0:33:31:69:06:57:53: 60:dd:21:77:ac:07:cf:4a:63:4d:19:6d:22:f1:be: 21:7c:4e:c8:e1:41:82:90:84:0d:5b:20:23:63:ed: 6f:25:af:4d:82:a3:c5:f1:86:9b:50:a3:13:02:80: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:02:14:67:7F:8A:58:53:AA:6C:F0:9B:91:62:39:C8:7C:DE:70:ED X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9gIUZ3-KWFOqbPCbkWI5yHzecO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.0.0/24 46.23.109.0/24 164.215.98.0/24 164.215.103.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:ea:25:6e:5f:8f:dc:94:22:0a:47:ee:a8:da:45:8f:be:a7: 28:bf:75:70:1e:56:c9:41:1f:61:87:f9:9a:b4:75:9f:60:08: c1:46:56:6e:58:c2:f4:fb:5d:16:a7:86:71:b3:09:fd:63:48: c6:20:ee:6c:8b:18:3c:e7:93:1a:e8:fb:3d:88:ad:38:1f:74: 46:2e:0b:a5:b2:9a:c3:ac:a4:6f:f5:e8:db:e1:a9:87:e0:3e: 41:40:50:8b:fd:4a:ba:a2:e9:37:06:71:93:52:b7:5d:ed:56: 4f:0d:c6:7b:38:3a:a8:4f:e9:12:5b:c8:a2:24:5a:e0:84:27: 86:d4:e3:23:4a:0d:0c:0d:62:53:58:69:10:bc:e4:9a:22:cd: 16:11:38:2c:4d:58:09:d5:fd:eb:45:44:2d:a3:6e:b5:72:f1: 98:c5:ea:aa:50:a7:96:d2:10:5c:59:af:5c:07:9b:91:d8:df: 25:81:c8:13:e1:c1:07:e3:79:36:0b:23:e3:30:c4:88:04:36: 7a:ad:ee:a6:08:73:32:7d:59:7b:f8:d7:ff:0b:66:41:78:7a: 30:63:b2:00:fb:6f:04:04:2d:ec:16:cd:7c:66:b5:2a:96:46: bf:40:36:86:4d:e4:20:39:8c:dc:95:84:ba:57:af:2e:01:50: 88:5d:5b:96 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xtA60fELvlj5SpaatNT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjAyMTQ2NzdmOGE1ODUzYWE2Y2YwOWI5MTYyMzljODdjZGU3MGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SvAf+mijYWiIahr1HdWpThx8j39 riel+XH3G6AtRLbaO5XHAsFQsqYnhknr5w1Qr56PtGk5w0zQ1Gnq2udaRb5Nj8Y+ qceTGZ2EtUo3nr1/U1hTQDIQHTWWKtmGquCW2zLt0t8E5DJRmLftlAQrNrRggfnK FliXd5OsS+vlYHxVKzIqzhOpe8fXjgSQHSWD8ML0OjjiVDx9dwoRb/AAjMC7zz0z HMPL8ozCigUjbc3l60rKhDzVjaoLfFFF9xhefmETN7RYrVyCNdAzMWkGV1Ng3SF3 rAfPSmNNGW0i8b4hfE7I4UGCkIQNWyAjY+1vJa9NgqPF8YabUKMTAoBZTQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPYCFGd/ilhTqmzwm5FiOch83nDtMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvOWdJVVozLUtXRk9xYlBDYmtXSTV5SHplY08wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABbIAAwQA LhdtAwQApNdiAwQApNdnMA0GCSqGSIb3DQEBCwUAA4IBAQBa6iVuX4/clCIKR+6o 2kWPvqcov3VwHlbJQR9hh/matHWfYAjBRlZuWML0+10Wp4Zxswn9Y0jGIO5sixg8 55Ma6Ps9iK04H3RGLgulsprDrKRv9ejb4amH4D5BQFCL/Uq6ouk3BnGTUrdd7VZP DcZ7ODqoT+kSW8iiJFrghCeG1OMjSg0MDWJTWGkQvOSaIs0WETgsTVgJ1f3rRUQt o261cvGYxeqqUKeW0hBcWa9cB5uR2N8lgcgT4cEH43k2CyPjMMSIBDZ6re6mCHMy fVl7+Nf/C2ZBeHowY7IA+28EBC3sFs18ZrUqlka/QDaGTeQgOYzclYS6V68uAVCI XVuW -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:02 2026 by rpki-client