This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/gcMWsBoDFkrh-EvyNxWQMNUmVIE.roa File: gcMWsBoDFkrh-EvyNxWQMNUmVIE.roa (raw, json) Hash identifier: gknScLT558AwNuqdvMmD/GV256E2UaSmjDtUQzxe0LE= Subject key identifier: 81:C3:16:B0:1A:03:16:4A:E1:F8:4B:F2:37:15:90:30:D5:26:54:81 Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8 Certificate serial: 019B7A5B574DDF8A6614020792201E3E8BC3 Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/gcMWsBoDFkrh-EvyNxWQMNUmVIE.roa Signing time: Thu 01 Jan 2026 16:19:25 +0000 ROA not before: Thu 01 Jan 2026 16:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12361 IP address blocks: 77.69.38.0/24 maxlen: 24 195.97.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:57:4d:df:8a:66:14:02:07:92:20:1e:3e:8b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8 Validity Not Before: Jan 1 16:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81c316b01a03164ae1f84bf237159030d5265481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:84:ba:4b:32:ea:a4:53:7d:4b:4b:b2:7a: ca:ed:be:be:45:fc:94:38:2f:f4:b9:56:ff:6e:5a: c9:b6:2d:94:1a:73:e8:48:74:ed:76:73:55:53:4a: ae:9c:07:c4:e4:6b:d8:26:d2:29:2f:67:33:aa:8e: e5:3c:f0:7d:cf:18:52:5d:64:d2:1d:46:b6:ea:2c: 88:2a:7f:d2:25:b9:38:e8:a8:c1:8d:4e:52:6c:fc: 6e:0f:67:ad:ad:5d:47:bd:7e:b0:98:97:cb:c4:33: 4e:62:fe:3a:a0:dd:3c:89:c3:a6:fc:e8:67:ac:ef: 4a:8b:30:2c:24:52:f7:6d:f0:71:8e:2e:10:a9:2b: ae:f6:e5:3a:37:f3:4b:8a:3b:e8:2a:22:5b:cd:46: c1:27:c8:f6:6b:70:ee:cc:68:74:ea:24:59:38:82: 80:3a:c3:72:60:5f:23:7b:91:ab:ae:fc:bb:e2:05: a9:70:aa:1f:ac:c4:80:93:6f:a0:d7:58:16:cd:60: 36:14:18:bf:e4:2f:a8:73:51:eb:7a:3f:53:44:2b: 6a:4e:10:e3:df:f4:c8:b4:ec:da:7f:f8:5a:4d:16: 6e:51:12:0c:17:e3:e1:d1:73:16:7c:c2:83:f2:25: 30:57:cd:29:ba:ec:8b:58:4a:ff:c7:6b:82:aa:4d: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C3:16:B0:1A:03:16:4A:E1:F8:4B:F2:37:15:90:30:D5:26:54:81 X509v3 Authority Key Identifier: keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/gcMWsBoDFkrh-EvyNxWQMNUmVIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.69.38.0/24 195.97.52.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:1b:81:73:83:a3:15:6c:9c:28:6e:1b:b6:fb:2e:33:3e:1c: 88:78:58:ee:ae:8c:c8:7c:84:08:b2:8a:f3:63:b0:88:95:94: 68:23:10:db:65:f9:37:1f:a3:49:2c:c2:09:c5:69:9a:4f:09: 21:b7:52:29:00:7c:38:1b:b0:f9:b5:a4:74:36:56:c2:c5:c0: 33:5e:6c:26:45:86:1a:3f:77:64:4d:75:ec:0e:6d:9e:a4:b7: d9:ac:70:f9:04:98:dd:27:cd:e1:87:e9:80:5e:b9:2d:5b:87: d6:a5:58:56:16:19:54:23:14:e0:97:9a:a1:56:11:d9:6b:7e: 35:2a:db:38:3d:48:39:c5:74:24:0b:d5:18:34:f8:31:4f:14: 69:8d:e9:6a:78:c6:93:8b:d5:19:9d:44:ec:91:f4:07:5a:11: af:f6:23:e9:c7:70:45:b5:27:d7:7c:ac:6b:63:b4:2e:94:f6: c5:8a:91:b8:36:40:04:06:f4:9c:25:92:2a:d7:5e:f3:d1:73: 50:98:69:ae:d0:fc:ea:5f:39:9a:ae:12:d4:0d:b9:51:1c:3e: 66:1e:25:a5:ea:63:07:29:8b:0c:41:03:75:05:8a:cc:16:06: ff:e3:9b:93:68:60:98:cb:bf:4a:c9:c8:f0:e2:72:b1:ee:40: 67:8e:5b:34 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W1dN34pmFAIHkiAePovDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NTVjNWE3MTM3ZWI1ZDQ3ZWEyNGUxN2QyN2ZhOTJkMGI0 MmZiZDgwHhcNMjYwMTAxMTYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWMzMTZiMDFhMDMxNjRhZTFmODRiZjIzNzE1OTAzMGQ1MjY1NDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqCEuksy6qRTfUtLsnrK7b6+RfyU OC/0uVb/blrJti2UGnPoSHTtdnNVU0qunAfE5GvYJtIpL2czqo7lPPB9zxhSXWTS HUa26iyIKn/SJbk46KjBjU5SbPxuD2etrV1HvX6wmJfLxDNOYv46oN08icOm/Ohn rO9KizAsJFL3bfBxji4QqSuu9uU6N/NLijvoKiJbzUbBJ8j2a3DuzGh06iRZOIKA OsNyYF8je5Grrvy74gWpcKofrMSAk2+g11gWzWA2FBi/5C+oc1Hrej9TRCtqThDj 3/TItOzaf/haTRZuURIMF+Ph0XMWfMKD8iUwV80puuyLWEr/x2uCqk3lFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIHDFrAaAxZK4fhL8jcVkDDVJlSBMB8GA1UdIwQY MBaAFJlVxacTfrXUfqJOF9J/qS0LQvvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTkt ZTM5NTI0ZTdhNmVkLzEvZ2NNV3NCb0RGa3JoLUV2eU54V1FNTlVtVklFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTktZTM5NTI0ZTdhNmVk LzEvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUUmAwQA w2E0MA0GCSqGSIb3DQEBCwUAA4IBAQA8G4Fzg6MVbJwobhu2+y4zPhyIeFjurozI fIQIsorzY7CIlZRoIxDbZfk3H6NJLMIJxWmaTwkht1IpAHw4G7D5taR0NlbCxcAz XmwmRYYaP3dkTXXsDm2epLfZrHD5BJjdJ83hh+mAXrktW4fWpVhWFhlUIxTgl5qh VhHZa341Kts4PUg5xXQkC9UYNPgxTxRpjelqeMaTi9UZnUTskfQHWhGv9iPpx3BF tSfXfKxrY7QulPbFipG4NkAEBvScJZIq117z0XNQmGmu0PzqXzmarhLUDblRHD5m HiWl6mMHKYsMQQN1BYrMFgb/45uTaGCYy79Kycjw4nKx7kBnjls0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:48 2026 by rpki-client