This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/1GJaJ403qul9t0nQgnGsoLcGUtc.roa File: 1GJaJ403qul9t0nQgnGsoLcGUtc.roa (raw, json) Hash identifier: bPKln41VhHa/R1nW7OwKkjFaR1ucxre3o10KEPwCiCk= Subject key identifier: D4:62:5A:27:8D:37:AA:E9:7D:B7:49:D0:82:71:AC:A0:B7:06:52:D7 Certificate issuer: /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66 Certificate serial: 019BE0EE937315C486FAF64A0786C5259A93 Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/1GJaJ403qul9t0nQgnGsoLcGUtc.roa Signing time: Wed 21 Jan 2026 14:21:30 +0000 ROA not before: Wed 21 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35133 IP address blocks: 77.73.114.0/24 maxlen: 24 217.18.95.0/24 maxlen: 24 2a07:5500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:ee:93:73:15:c4:86:fa:f6:4a:07:86:c5:25:9a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66 Validity Not Before: Jan 21 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4625a278d37aae97db749d08271aca0b70652d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:c4:00:83:72:7c:9d:83:57:17:cf:3b:45: 00:e1:f7:db:fd:ad:ab:36:85:24:11:d5:c0:32:54: 56:9b:30:e1:87:34:76:f2:30:1d:39:34:7f:9b:e0: f0:5c:45:43:7f:da:19:f1:73:16:b9:11:61:04:b3: 16:a5:75:94:5c:41:a2:f3:aa:c0:7c:58:58:ee:ad: 78:7d:73:df:99:a0:61:59:dd:9d:fb:69:c2:5a:5e: 8e:d0:ca:ea:bb:b6:5e:00:fe:61:c9:79:01:69:32: 0b:eb:95:d1:a3:44:37:77:d2:92:a2:6c:08:e9:45: 01:02:22:8f:09:5b:fc:7a:85:f0:4c:aa:42:fa:7b: 3d:d6:33:c4:86:5f:e8:05:a9:00:77:5f:ac:ab:8d: 85:65:5a:53:13:d4:62:71:50:86:a8:39:31:f9:5d: 9e:14:b2:7a:11:83:2c:fe:26:77:93:b9:a0:6d:5d: 4e:e3:05:ea:96:07:de:33:61:cb:31:7e:ea:b9:b2: 10:dc:2f:ed:63:9c:00:34:c2:42:0d:47:cb:28:03: 7b:86:f1:fe:0f:08:80:77:ef:0c:6d:c7:47:4b:62: 8f:a4:52:57:bd:f1:7d:fb:da:4d:ca:9a:37:a6:9c: d1:8f:f4:fe:c7:59:2c:67:d5:34:02:7e:77:87:63: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:62:5A:27:8D:37:AA:E9:7D:B7:49:D0:82:71:AC:A0:B7:06:52:D7 X509v3 Authority Key Identifier: keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/1GJaJ403qul9t0nQgnGsoLcGUtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.114.0/24 217.18.95.0/24 IPv6: 2a07:5500::/29 Signature Algorithm: sha256WithRSAEncryption 3d:2b:93:ea:19:3f:a3:b3:81:80:af:f5:0c:34:9b:c3:d8:ef: 90:28:39:cf:a9:d5:d4:d3:d6:f6:54:c5:16:dd:06:92:31:c1: 4b:97:88:a4:bd:f7:ea:f6:eb:35:7c:3a:d8:e2:54:16:9c:ab: b2:20:a5:42:59:41:f7:88:d0:10:35:a5:20:43:c4:4b:39:67: a2:e9:da:80:59:ab:33:a9:93:34:ed:79:d0:7d:ad:37:5c:96: 97:27:84:d1:07:0a:d7:e0:d2:e3:23:0f:91:5a:c4:30:79:8d: 15:92:8e:7a:88:a3:1b:ad:ed:88:4e:c9:b9:a5:78:6a:6f:fe: 9c:06:cc:cf:a5:4b:15:6c:c1:e0:ad:7c:91:a2:b8:3e:c2:d6: 0a:60:6c:2f:1f:b5:3f:aa:c5:b0:66:ea:2a:c8:38:fe:18:79: 38:96:a7:0e:e4:73:3a:fe:c0:e1:43:ff:c5:c7:7c:1a:86:ca: c7:2f:c2:9c:ec:be:34:5a:62:88:0d:fe:9d:d7:34:25:7b:a2: 5d:6e:96:fd:86:f4:78:83:21:2e:a0:2e:f9:73:3d:39:c2:12: 9c:16:2a:d3:f8:72:1b:b9:8d:49:32:79:1d:28:1a:53:f2:ab: 0a:3e:60:cf:53:2e:78:20:ce:0e:bb:ec:ca:19:33:06:0d:0b: 55:10:a1:42 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvg7pNzFcSG+vZKB4bFJZqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YmQyNmRjZTQ4MTYxYzdmYmY5ZmY2N2I5MDdmMWU2MDVj MjVhNjYwHhcNMjYwMTIxMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDYyNWEyNzhkMzdhYWU5N2RiNzQ5ZDA4MjcxYWNhMGI3MDY1MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4PEAINyfJ2DVxfPO0UA4ffb/a2r NoUkEdXAMlRWmzDhhzR28jAdOTR/m+DwXEVDf9oZ8XMWuRFhBLMWpXWUXEGi86rA fFhY7q14fXPfmaBhWd2d+2nCWl6O0Mrqu7ZeAP5hyXkBaTIL65XRo0Q3d9KSomwI 6UUBAiKPCVv8eoXwTKpC+ns91jPEhl/oBakAd1+sq42FZVpTE9RicVCGqDkx+V2e FLJ6EYMs/iZ3k7mgbV1O4wXqlgfeM2HLMX7qubIQ3C/tY5wANMJCDUfLKAN7hvH+ DwiAd+8MbcdHS2KPpFJXvfF9+9pNypo3ppzRj/T+x1ksZ9U0An53h2NY7wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNRiWieNN6rpfbdJ0IJxrKC3BlLXMB8GA1UdIwQY MBaAFOi9JtzkgWHH+/n/Z7kH8eYFwlpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQt NTBkZDNhNTgxNTRiLzEvMUdKYUo0MDNxdWw5dDBuUWduR3NvTGNHVXRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQtNTBkZDNhNTgxNTRi LzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATUlyAwQA 2RJfMA0EAgACMAcDBQMqB1UAMA0GCSqGSIb3DQEBCwUAA4IBAQA9K5PqGT+js4GA r/UMNJvD2O+QKDnPqdXU09b2VMUW3QaSMcFLl4ikvffq9us1fDrY4lQWnKuyIKVC WUH3iNAQNaUgQ8RLOWei6dqAWaszqZM07XnQfa03XJaXJ4TRBwrX4NLjIw+RWsQw eY0Vko56iKMbre2ITsm5pXhqb/6cBszPpUsVbMHgrXyRorg+wtYKYGwvH7U/qsWw ZuoqyDj+GHk4lqcO5HM6/sDhQ//Fx3wahsrHL8Kc7L40WmKIDf6d1zQle6Jdbpb9 hvR4gyEuoC75cz05whKcFirT+HIbuY1JMnkdKBpT8qsKPmDPUy54IM4Ou+zKGTMG DQtVEKFC -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:56 2026 by rpki-client