This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/g9ua57B68Th2qHv-LwwTCs4_D70.roa File: g9ua57B68Th2qHv-LwwTCs4_D70.roa (raw, json) Hash identifier: ixgw1P9zw7Z7z4MdMiYSxnHOT3jBJhnJXOHzvec5R28= Subject key identifier: 83:DB:9A:E7:B0:7A:F1:38:76:A8:7B:FE:2F:0C:13:0A:CE:3F:0F:BD Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1 Certificate serial: 019B77C66196DB8662CECECF6822FF483F46 Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/g9ua57B68Th2qHv-LwwTCs4_D70.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 192.112.151.0/24 maxlen: 24 192.112.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:61:96:db:86:62:ce:ce:cf:68:22:ff:48:3f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83db9ae7b07af13876a87bfe2f0c130ace3f0fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:ba:34:15:77:01:3e:f4:d3:df:ea:35:21: 67:73:c1:f2:30:ba:f7:ce:b8:82:1d:0a:7f:3c:af: aa:c2:0f:d5:44:a8:94:1a:dd:6e:18:75:47:eb:7e: 5b:8b:34:d8:ff:e2:0d:61:09:11:a4:e4:8b:ea:3a: 8e:d7:ad:24:f7:9a:dd:aa:a7:bc:aa:84:cc:79:f5: e2:d5:8b:c3:e6:9f:5d:f1:96:a6:b1:db:34:2a:d8: 3c:9e:72:c2:ce:c9:a8:ed:8e:4c:30:e9:53:d0:7d: da:d6:2a:e0:37:b1:ec:c2:24:88:79:3c:d4:ad:5d: b9:87:ef:00:fe:15:14:88:73:2b:0b:de:96:0d:99: 09:66:7d:6e:5d:23:de:a6:be:94:16:5c:71:d4:6f: 6c:89:3a:f1:69:22:11:a3:24:f9:6c:a0:e6:03:be: d1:65:ec:36:96:b6:fc:02:10:20:db:54:11:6a:ca: 94:b9:ea:ba:81:c4:06:43:ec:c2:e6:3e:b1:d7:15: 50:ae:4d:7b:77:43:19:e5:fc:d5:e5:99:86:46:f1: d9:45:28:b9:6f:bf:cf:30:13:cc:f8:00:92:ca:a4: c0:8f:d4:5d:d0:8c:16:f6:4b:2f:87:78:c0:a9:72: bc:60:b6:49:ac:f6:6c:55:6b:d4:a5:44:e6:e4:1d: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DB:9A:E7:B0:7A:F1:38:76:A8:7B:FE:2F:0C:13:0A:CE:3F:0F:BD X509v3 Authority Key Identifier: keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/g9ua57B68Th2qHv-LwwTCs4_D70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.112.151.0/24 192.112.178.0/24 Signature Algorithm: sha256WithRSAEncryption d2:2b:f2:cc:fc:f3:c7:e7:40:45:c5:e5:2c:6a:28:14:a4:e5: 43:3e:dc:22:d4:eb:b9:e8:18:77:5a:2f:cf:f2:b9:f1:d6:f1: 86:83:d6:e1:21:f5:4c:bd:0e:b7:f5:27:77:5a:fd:ea:e1:89: dc:ab:e4:1d:2a:93:10:24:bd:68:98:39:2d:1b:8c:a2:6b:68: 1d:4b:ca:a3:0f:4c:91:b4:03:59:02:18:d6:c8:fe:0e:12:bd: 3c:4c:2e:91:2b:d4:3b:ac:14:b1:ac:8b:fb:3e:ae:08:5d:05: 63:4f:4f:f5:78:0a:21:fa:f0:18:be:95:d6:12:c1:d9:c5:c6: 45:29:8f:df:fb:ff:2c:22:a0:6b:57:b8:8f:f5:65:fc:65:d2: fe:75:65:a2:a6:cf:c9:d0:e7:3f:c3:bc:f0:5f:e9:8b:aa:9e: f4:9d:a7:78:65:f3:4b:7d:ad:8d:26:bb:8c:1c:6b:95:03:2e: e9:bf:49:f8:53:5d:91:ae:bf:23:42:cd:31:f2:9e:5b:dd:4c: cb:77:55:03:92:3b:3e:04:c8:08:8e:0d:72:cd:2e:65:18:80: 33:b9:b9:1c:dd:42:68:c6:ea:b8:b8:4e:a9:b0:58:53:35:25: c5:17:65:91:23:78:73:11:92:9a:43:c2:5f:9f:92:1e:98:65: 0e:0c:0d:cc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xmGW24Zizs7PaCL/SD9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZDZjZGM2ZmQzMzJkODhiZTJhYjA5MWVjZTc0ZDc2MjRk MzU5ZjEwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2RiOWFlN2IwN2FmMTM4NzZhODdiZmUyZjBjMTMwYWNlM2YwZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOy6NBV3AT7009/qNSFnc8HyMLr3 zriCHQp/PK+qwg/VRKiUGt1uGHVH635bizTY/+INYQkRpOSL6jqO160k95rdqqe8 qoTMefXi1YvD5p9d8Zamsds0Ktg8nnLCzsmo7Y5MMOlT0H3a1irgN7HswiSIeTzU rV25h+8A/hUUiHMrC96WDZkJZn1uXSPepr6UFlxx1G9siTrxaSIRoyT5bKDmA77R Zew2lrb8AhAg21QRasqUueq6gcQGQ+zC5j6x1xVQrk17d0MZ5fzV5ZmGRvHZRSi5 b7/PMBPM+ACSyqTAj9Rd0IwW9ksvh3jAqXK8YLZJrPZsVWvUpUTm5B1g0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIPbmuewevE4dqh7/i8MEwrOPw+9MB8GA1UdIwQY MBaAFHvWzcb9My2IviqwkeznTXYk01nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yOWYzODYtNDI0Ny00ZTZhLTliZjEt NjFjNGEyNTZmOWFkLzEvZzl1YTU3QjY4VGgycUh2LUx3d1RDczRfRDcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8yOWYzODYtNDI0Ny00ZTZhLTliZjEtNjFjNGEyNTZmOWFk LzEvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHCXAwQA wHCyMA0GCSqGSIb3DQEBCwUAA4IBAQDSK/LM/PPH50BFxeUsaigUpOVDPtwi1Ou5 6Bh3Wi/P8rnx1vGGg9bhIfVMvQ639Sd3Wv3q4Yncq+QdKpMQJL1omDktG4yia2gd S8qjD0yRtANZAhjWyP4OEr08TC6RK9Q7rBSxrIv7Pq4IXQVjT0/1eAoh+vAYvpXW EsHZxcZFKY/f+/8sIqBrV7iP9WX8ZdL+dWWips/J0Oc/w7zwX+mLqp70nad4ZfNL fa2NJruMHGuVAy7pv0n4U12Rrr8jQs0x8p5b3UzLd1UDkjs+BMgIjg1yzS5lGIAz ubkc3UJoxuq4uE6psFhTNSXFF2WRI3hzEZKaQ8Jfn5IemGUODA3M -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:02 2026 by rpki-client