This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/G_gkubCq_7tYxAJOgwxm9_sjOcc.roa File: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (raw, json) Hash identifier: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes= Subject key identifier: 1B:F8:24:B9:B0:AA:FF:BB:58:C4:02:4E:83:0C:66:F7:FB:23:39:C7 Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 019B7CECC1B2A5C73A4968620F6675B05150 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/G_gkubCq_7tYxAJOgwxm9_sjOcc.roa Signing time: Fri 02 Jan 2026 04:17:29 +0000 ROA not before: Fri 02 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 146.247.106.0/24 maxlen: 24 146.247.112.0/23 maxlen: 23 146.247.114.0/24 maxlen: 24 146.247.121.0/24 maxlen: 24 146.247.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c1:b2:a5:c7:3a:49:68:62:0f:66:75:b0:51:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Jan 2 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bf824b9b0aaffbb58c4024e830c66f7fb2339c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:43:7e:d7:0b:28:b2:4c:82:ad:94:c9:88: d6:a9:8d:31:5f:df:7a:fd:71:ba:12:50:52:2f:d5: 72:8d:ce:7f:4e:6a:10:f0:82:0a:92:0b:9b:1b:d8: ff:e4:f1:f4:a1:38:a2:31:38:86:80:8b:55:7a:07: fe:9e:b9:2c:81:68:c7:37:1f:b0:8e:6e:45:2f:f0: 90:66:ee:c3:30:c1:cd:15:83:47:d7:d4:be:5f:c0: ce:6f:14:50:c8:71:20:62:3d:2e:09:8b:da:53:e5: 84:c8:9f:eb:b7:b6:88:9c:a2:35:11:46:34:cd:60: 2c:9c:e8:16:ea:4a:fa:b4:70:96:31:5a:3c:f8:68: a8:d2:df:ff:51:49:3b:fc:de:1a:29:dc:b2:03:61: db:17:e5:e4:77:95:c8:96:f0:6e:f1:cc:a8:af:83: 4e:cc:81:60:6a:63:a3:f8:c0:9c:98:89:90:d4:d6: fb:e7:0b:ce:e6:c6:41:89:40:ee:c3:f0:c3:c9:de: fa:23:00:f3:2e:ff:05:5a:44:fe:27:a2:b8:3b:ac: 12:83:64:72:34:43:b6:b5:a4:e4:d3:9b:3a:64:71: 86:ec:ae:80:94:42:67:e5:62:84:de:e3:63:95:c5: e1:a6:69:1e:c0:1f:63:b7:ee:47:93:2a:c8:f9:88: 43:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F8:24:B9:B0:AA:FF:BB:58:C4:02:4E:83:0C:66:F7:FB:23:39:C7 X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/G_gkubCq_7tYxAJOgwxm9_sjOcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.247.106.0/24 146.247.112.0-146.247.114.255 146.247.121.0/24 146.247.127.0/24 Signature Algorithm: sha256WithRSAEncryption 48:f9:e7:79:45:d7:8a:28:fa:04:be:cc:1f:45:b3:3f:97:0c: 27:3e:48:97:3a:5a:fe:b8:7d:41:66:94:61:03:3e:bb:19:11: 62:f4:fe:18:e7:7a:13:ce:ce:1e:e2:ac:c7:4c:1c:b9:96:71: 2b:52:5a:70:60:9a:6a:bb:0f:34:52:e1:5a:1c:63:15:17:34: 4e:1b:78:3e:ba:e1:70:c0:1d:a0:90:0d:e9:fa:3e:db:9f:0e: c3:1b:62:52:be:7d:9a:c5:6c:6a:f2:88:ed:aa:93:e2:cc:95: 3d:19:a0:89:82:a0:e7:cd:27:de:16:a7:e2:fc:7f:3d:3b:83: c3:aa:c2:55:5f:53:e0:39:51:30:5b:9d:d7:ad:90:01:fb:c8: e1:69:3c:50:36:dd:07:0f:0e:11:a0:60:04:b9:40:6d:58:8c: de:a1:26:d8:36:21:35:47:35:8e:87:8c:15:e5:5a:a1:55:7c: 4f:95:be:02:d5:fa:a6:f5:30:e8:27:5f:74:4a:12:84:bb:37: 28:82:c7:e3:df:b2:eb:a3:3e:1d:31:c1:e7:dd:94:ef:51:a2: 1f:2b:e9:01:fc:e2:88:80:f0:55:8d:09:f0:51:47:51:cc:9d: df:e5:6a:11:12:f3:7a:ed:15:5f:54:b6:b6:dc:8c:af:40:9d: d9:82:07:27 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt87MGypcc6SWhiD2Z1sFFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjYwMTAyMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmY4MjRiOWIwYWFmZmJiNThjNDAyNGU4MzBjNjZmN2ZiMjMzOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAxDftcLKLJMgq2UyYjWqY0xX996 /XG6ElBSL9Vyjc5/TmoQ8IIKkgubG9j/5PH0oTiiMTiGgItVegf+nrksgWjHNx+w jm5FL/CQZu7DMMHNFYNH19S+X8DObxRQyHEgYj0uCYvaU+WEyJ/rt7aInKI1EUY0 zWAsnOgW6kr6tHCWMVo8+Gio0t//UUk7/N4aKdyyA2HbF+Xkd5XIlvBu8cyor4NO zIFgamOj+MCcmImQ1Nb75wvO5sZBiUDuw/DDyd76IwDzLv8FWkT+J6K4O6wSg2Ry NEO2taTk05s6ZHGG7K6AlEJn5WKE3uNjlcXhpmkewB9jt+5HkyrI+YhDswIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBv4JLmwqv+7WMQCToMMZvf7IznHMB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvR19na3ViQ3FfN3RZeEFKT2d3eG05X3NqT2NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAkvdqMAwD BASS93ADBACS93IDBACS93kDBACS938wDQYJKoZIhvcNAQELBQADggEBAEj553lF 14oo+gS+zB9Fsz+XDCc+SJc6Wv64fUFmlGEDPrsZEWL0/hjnehPOzh7irMdMHLmW cStSWnBgmmq7DzRS4VocYxUXNE4beD664XDAHaCQDen6PtufDsMbYlK+fZrFbGry iO2qk+LMlT0ZoImCoOfNJ94Wp+L8fz07g8OqwlVfU+A5UTBbndetkAH7yOFpPFA2 3QcPDhGgYAS5QG1YjN6hJtg2ITVHNY6HjBXlWqFVfE+VvgLV+qb1MOgnX3RKEoS7 NyiCx+PfsuujPh0xwefdlO9Roh8r6QH84oiA8FWNCfBRR1HMnd/lahES83rtFV9U trbcjK9AndmCByc= -----END CERTIFICATE-----Generated at Thu Jan 8 12:55:37 2026 by rpki-client