This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/gnDB9W02-r6mUcSzv9GpwgZT3jo.roa File: gnDB9W02-r6mUcSzv9GpwgZT3jo.roa (raw, json) Hash identifier: xF1q8i5GseG2Y/ChOFm114hCxbfrQRyX8F0vQWk71OI= Subject key identifier: 82:70:C1:F5:6D:36:FA:BE:A6:51:C4:B3:BF:D1:A9:C2:06:53:DE:3A Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6D078FD9CEC2F841B03DFCA22BEA8 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/gnDB9W02-r6mUcSzv9GpwgZT3jo.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 88.151.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d0:78:fd:9c:ec:2f:84:1b:03:df:ca:22:be:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8270c1f56d36fabea651c4b3bfd1a9c20653de3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ec:f9:e2:89:03:36:d0:8b:ba:82:d9:da:1d: 5c:49:6a:2a:19:a0:6d:fa:73:aa:8d:30:3f:58:9d: 82:63:7c:8a:b1:85:7c:d2:55:7d:aa:a1:28:cd:5d: 98:6e:52:78:72:c5:23:30:f3:7e:5e:06:e2:dc:6e: eb:c0:23:a1:70:9f:52:b5:74:bd:e9:43:44:ec:84: b5:fe:e1:b8:42:f2:e3:7b:4a:c7:58:b7:62:0e:af: 5d:6a:84:48:c0:4e:c8:8b:4b:be:a3:eb:fc:4e:f3: 9f:a7:a6:9a:d1:52:21:56:7f:8c:43:f4:7d:07:d6: 82:ce:36:24:51:d1:1d:4b:01:b9:fa:84:be:6e:5f: 2e:b5:df:d2:98:12:58:d6:b9:55:3a:5a:b7:c6:ca: 81:c2:43:df:3d:53:24:e3:0f:8c:f9:5a:97:37:fc: d9:39:c2:b8:c7:a1:f6:27:9b:ff:67:21:0c:a1:78: dd:1b:53:66:12:4b:72:3f:4a:1b:b3:f9:2e:a5:ca: 39:85:eb:2d:2b:89:63:c1:20:b9:2a:e9:63:ee:34: 58:d5:4c:3b:dd:d6:9b:0e:e5:ee:f0:33:78:7c:09: d5:24:45:cb:f7:da:85:7c:4e:4b:dd:bb:be:75:f7: 95:08:42:e7:35:44:5c:ad:f9:2d:ba:a7:a9:34:20: 4c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:70:C1:F5:6D:36:FA:BE:A6:51:C4:B3:BF:D1:A9:C2:06:53:DE:3A X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/gnDB9W02-r6mUcSzv9GpwgZT3jo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.192.0/24 Signature Algorithm: sha256WithRSAEncryption 91:36:8c:94:8e:7f:32:07:f4:e1:9d:c6:c8:63:6c:4b:77:ff: f0:24:1a:8e:9e:a7:d8:ca:f3:7f:e5:f0:ac:76:55:39:6d:ea: 7d:b6:0e:e0:1b:b0:fa:0f:d2:ef:60:7d:74:00:57:97:f8:fd: fd:2f:10:f0:ec:cd:d5:c6:a7:15:7a:55:c6:eb:f0:03:dc:37: 1e:ed:e2:8f:cf:c4:9e:54:98:dc:c6:da:bc:dc:e5:a5:d1:93: 7d:2c:79:8d:0f:b3:1f:00:c2:33:f2:d7:1e:10:f3:4a:95:31: 07:61:ba:66:44:bf:b4:f9:fb:ed:6a:5b:85:ef:30:d4:d0:65: f4:b4:fc:b1:50:4d:08:65:f1:99:3d:2b:4c:07:75:13:17:de: aa:cb:03:b3:93:eb:0d:7c:0c:37:04:81:cf:e2:7d:fd:2a:d0: cf:09:00:17:63:bd:ae:27:c6:a1:9d:0d:94:15:77:4f:89:1b: b0:75:52:07:d0:d8:50:b8:63:22:a8:74:09:22:3e:75:e4:f7: 50:76:40:80:24:fc:4e:16:3b:2e:76:01:e6:3c:2d:df:1b:4e: 7d:f4:59:5e:76:33:b9:f3:40:49:78:70:cc:d0:29:61:58:30: 77:27:59:10:91:84:b6:09:14:31:de:5d:2e:4a:d6:7f:0c:a0: 55:e7:99:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtB4/ZzsL4QbA9/KIr6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjcwYzFmNTZkMzZmYWJlYTY1MWM0YjNiZmQxYTljMjA2NTNkZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+z54okDNtCLuoLZ2h1cSWoqGaBt +nOqjTA/WJ2CY3yKsYV80lV9qqEozV2YblJ4csUjMPN+Xgbi3G7rwCOhcJ9StXS9 6UNE7IS1/uG4QvLje0rHWLdiDq9daoRIwE7Ii0u+o+v8TvOfp6aa0VIhVn+MQ/R9 B9aCzjYkUdEdSwG5+oS+bl8utd/SmBJY1rlVOlq3xsqBwkPfPVMk4w+M+VqXN/zZ OcK4x6H2J5v/ZyEMoXjdG1NmEktyP0obs/kupco5hestK4ljwSC5Kulj7jRY1Uw7 3dabDuXu8DN4fAnVJEXL99qFfE5L3bu+dfeVCELnNURcrfktuqepNCBMswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJwwfVtNvq+plHEs7/RqcIGU946MB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvZ25EQjlXMDItcjZtVWNTenY5R3B3Z1pUM2pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJfAMA0G CSqGSIb3DQEBCwUAA4IBAQCRNoyUjn8yB/ThncbIY2xLd//wJBqOnqfYyvN/5fCs dlU5bep9tg7gG7D6D9LvYH10AFeX+P39LxDw7M3VxqcVelXG6/AD3Dce7eKPz8Se VJjcxtq83OWl0ZN9LHmND7MfAMIz8tceEPNKlTEHYbpmRL+0+fvtaluF7zDU0GX0 tPyxUE0IZfGZPStMB3UTF96qywOzk+sNfAw3BIHP4n39KtDPCQAXY72uJ8ahnQ2U FXdPiRuwdVIH0NhQuGMiqHQJIj515PdQdkCAJPxOFjsudgHmPC3fG0599FledjO5 80BJeHDM0ClhWDB3J1kQkYS2CRQx3l0uStZ/DKBV55kS -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:03 2026 by rpki-client