This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/gCCBng99KXDVeWAz6SVqc6621Es.roa File: gCCBng99KXDVeWAz6SVqc6621Es.roa (raw, json) Hash identifier: e7M/HYxoa73UG/pywkVHgPX4IwBqsi3fATk507CmMb0= Subject key identifier: 80:20:81:9E:0F:7D:29:70:D5:79:60:33:E9:25:6A:73:AE:B6:D4:4B Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f Certificate serial: 019B7B35AA48759305A55D32A292BF4875A6 Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/gCCBng99KXDVeWAz6SVqc6621Es.roa Signing time: Thu 01 Jan 2026 20:17:53 +0000 ROA not before: Thu 01 Jan 2026 20:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 185.79.200.0/23 maxlen: 24 185.79.201.0/24 maxlen: 24 2a03:5e20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:aa:48:75:93:05:a5:5d:32:a2:92:bf:48:75:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f Validity Not Before: Jan 1 20:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8020819e0f7d2970d5796033e9256a73aeb6d44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:d4:bf:c1:86:bd:81:69:02:05:47:28:11: 8a:9c:e4:c7:f4:29:29:71:53:d7:0a:28:af:62:c7: 39:2f:77:ec:05:df:48:0d:68:b4:28:2b:bf:7f:6a: 01:4f:3b:45:9d:87:cf:82:46:24:fe:21:1c:ca:58: 73:27:fd:46:1f:b0:34:a5:38:6b:2c:b0:70:f6:14: 0e:26:f8:e3:78:95:8f:d3:48:e1:31:0f:41:b1:9c: b1:ec:e2:4b:7b:34:66:59:05:e8:70:18:2a:0a:af: e0:91:d5:fb:8a:30:81:c9:a9:1a:37:c9:58:a6:0e: 4d:34:e3:cd:27:7b:a6:1c:ac:1c:8e:5b:11:03:9d: 13:49:d2:66:b9:62:4a:28:6a:2f:3a:c4:3d:91:15: 73:a5:c6:8a:c4:14:2a:6e:08:ac:30:f4:11:1f:39: 48:3a:f2:31:2c:57:cf:fc:b0:f9:5b:d0:4d:ff:88: 9c:e9:d5:36:e7:40:82:53:14:30:aa:33:b3:28:1c: 9d:d4:5b:ac:1b:39:66:a8:a2:a7:36:4e:b3:4a:0c: 55:49:56:b6:fe:21:79:57:bb:c2:8b:55:81:fe:40: ea:a6:29:87:44:61:c0:ca:27:6c:a1:4d:eb:62:74: 6f:0a:de:6b:16:20:33:9a:76:86:16:e0:2c:23:28: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:20:81:9E:0F:7D:29:70:D5:79:60:33:E9:25:6A:73:AE:B6:D4:4B X509v3 Authority Key Identifier: keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/gCCBng99KXDVeWAz6SVqc6621Es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.200.0/23 IPv6: 2a03:5e20::/32 Signature Algorithm: sha256WithRSAEncryption 6e:ea:5d:4b:e3:fb:77:d2:96:f1:9c:93:dc:fd:8f:26:d5:ad: dc:ac:2b:e7:bd:57:ec:30:42:e9:91:f4:2e:66:90:5b:a5:8b: 51:29:ce:22:23:25:1b:bf:75:05:62:d9:0e:d2:66:50:e8:60: fe:b9:83:c7:d1:89:f5:da:07:51:da:16:26:5c:f5:9e:00:86: fa:bf:c6:82:e9:7a:b2:b3:2a:a1:23:6e:07:2d:a2:dc:3f:2a: b4:50:d9:23:a2:dd:f4:ef:32:63:7d:9a:44:04:90:f7:cd:6f: 7c:c4:57:4a:68:9c:9a:7e:a2:9f:7a:44:0c:16:f9:be:63:65: 8d:95:1b:db:42:d6:6d:0b:f3:55:30:37:64:81:88:3a:53:2a: f3:85:d8:c7:02:b2:ab:8d:d4:b7:12:a0:39:c3:77:16:84:ae: 98:19:ab:fc:86:60:71:24:47:1e:11:ee:2a:95:ce:17:17:bb: 9c:07:63:10:57:b9:73:17:74:63:ba:5c:96:2d:24:0c:e0:cf: b3:4e:59:79:4e:19:2b:a4:10:48:98:f7:2e:14:4f:83:40:06: 94:ed:23:10:14:ab:ac:56:82:5f:7b:7c:bb:bf:8e:fd:fb:d4: ae:3f:81:bd:04:bd:f1:dc:88:2e:d4:6b:51:e6:fb:93:45:b2: 98:ba:d2:9d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NapIdZMFpV0yopK/SHWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZmU3YjU2NzIyMjQ1MTE2ZDQyMzRiZTQ4NGEwMmE0OGEx ZGRlMWYwHhcNMjYwMTAxMjAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDIwODE5ZTBmN2QyOTcwZDU3OTYwMzNlOTI1NmE3M2FlYjZkNDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV3Uv8GGvYFpAgVHKBGKnOTH9Ckp cVPXCiivYsc5L3fsBd9IDWi0KCu/f2oBTztFnYfPgkYk/iEcylhzJ/1GH7A0pThr LLBw9hQOJvjjeJWP00jhMQ9BsZyx7OJLezRmWQXocBgqCq/gkdX7ijCByakaN8lY pg5NNOPNJ3umHKwcjlsRA50TSdJmuWJKKGovOsQ9kRVzpcaKxBQqbgisMPQRHzlI OvIxLFfP/LD5W9BN/4ic6dU250CCUxQwqjOzKByd1FusGzlmqKKnNk6zSgxVSVa2 /iF5V7vCi1WB/kDqpimHRGHAyidsoU3rYnRvCt5rFiAzmnaGFuAsIygsyQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIAggZ4PfSlw1XlgM+klanOuttRLMB8GA1UdIwQY MBaAFEb+e1ZyIkURbUI0vkhKAqSKHd4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTct NGJkMzM5MmQ1NWQxLzEvZ0NDQm5nOTlLWERWZVdBejZTVnFjNjYyMUVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTctNGJkMzM5MmQ1NWQx LzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuU/IMA0E AgACMAcDBQAqA14gMA0GCSqGSIb3DQEBCwUAA4IBAQBu6l1L4/t30pbxnJPc/Y8m 1a3crCvnvVfsMELpkfQuZpBbpYtRKc4iIyUbv3UFYtkO0mZQ6GD+uYPH0Yn12gdR 2hYmXPWeAIb6v8aC6XqysyqhI24HLaLcPyq0UNkjot307zJjfZpEBJD3zW98xFdK aJyafqKfekQMFvm+Y2WNlRvbQtZtC/NVMDdkgYg6UyrzhdjHArKrjdS3EqA5w3cW hK6YGav8hmBxJEceEe4qlc4XF7ucB2MQV7lzF3RjulyWLSQM4M+zTll5ThkrpBBI mPcuFE+DQAaU7SMQFKusVoJfe3y7v479+9SuP4G9BL3x3Igu1GtR5vuTRbKYutKd -----END CERTIFICATE-----Generated at Mon Jan 26 19:21:49 2026 by rpki-client