This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/Gj7_HCZCEIEaaQcIOB8I26hpXJo.roa File: Gj7_HCZCEIEaaQcIOB8I26hpXJo.roa (raw, json) Hash identifier: dna5HeCv7m+irZ9B9MRHtXXyokNwB7b4uG9bBJzKQjA= Subject key identifier: 1A:3E:FF:1C:26:42:10:81:1A:69:07:08:38:1F:08:DB:A8:69:5C:9A Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab Certificate serial: 019B7F818716B10C116ABC4485AD8414F9D3 Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/Gj7_HCZCEIEaaQcIOB8I26hpXJo.roa Signing time: Fri 02 Jan 2026 16:19:13 +0000 ROA not before: Fri 02 Jan 2026 16:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205763 IP address blocks: 185.207.124.0/24 maxlen: 24 2a0b:2340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:87:16:b1:0c:11:6a:bc:44:85:ad:84:14:f9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab Validity Not Before: Jan 2 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a3eff1c264210811a690708381f08dba8695c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:70:32:7a:11:93:f4:29:7b:fc:d0:52:9d: 70:a9:22:31:52:ca:44:73:20:3f:68:fc:d0:64:ab: cd:7b:91:08:1a:23:a1:68:c3:0f:0f:9b:ff:a5:7e: 8c:6b:14:a7:37:3c:5b:5e:4a:63:56:1e:a9:07:fe: 9b:a2:79:b7:c1:aa:8a:78:7c:dc:51:4c:52:3c:d9: 5e:84:c1:21:e6:a3:6d:24:67:f2:dc:7f:d0:08:6b: b3:30:b9:9a:c5:25:32:c3:e7:d2:a0:b5:89:60:cd: 10:a0:a4:61:6b:8c:89:44:e5:17:40:3b:2b:c8:3a: 17:1e:28:9a:25:aa:bd:9d:2c:dd:ca:af:d9:f0:ec: 94:50:19:84:20:e7:29:b8:6b:3c:37:17:bd:2e:d3: e2:f2:ca:bd:6b:a0:07:36:ee:cb:23:10:80:19:b5: cd:a5:55:66:34:f6:11:60:7e:5e:52:04:71:fd:b7: c9:7d:90:ed:94:3e:92:bd:a1:c7:72:5e:a9:57:43: b1:e3:bb:68:6b:ea:4b:d7:ea:39:9a:87:08:a1:7d: 14:83:47:2a:56:fc:44:4b:f2:c9:80:26:32:15:a0: 53:1f:49:0d:e5:67:73:d0:a5:5d:90:b0:f6:3a:7d: 5c:7e:50:00:a0:24:f9:9a:30:76:a0:f0:ba:62:73: 94:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3E:FF:1C:26:42:10:81:1A:69:07:08:38:1F:08:DB:A8:69:5C:9A X509v3 Authority Key Identifier: keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/Gj7_HCZCEIEaaQcIOB8I26hpXJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.124.0/24 IPv6: 2a0b:2340::/29 Signature Algorithm: sha256WithRSAEncryption 18:64:d1:02:0a:8b:49:05:a4:66:65:24:15:db:75:b5:ec:d7: 97:7e:07:b7:30:d1:89:77:c5:21:03:65:b9:48:3c:60:2e:d5: 43:4c:31:0e:6f:7d:0a:17:6c:df:40:a6:f2:97:6e:d7:ae:7b: 29:3f:97:3f:4a:a6:22:b1:17:ef:c2:3d:e3:6a:ac:c2:f8:bf: cf:af:6c:4b:c7:97:9a:a7:ab:0d:2d:78:35:b5:20:82:ba:4b: 18:0d:67:9c:b6:46:83:3b:63:da:bd:5b:bb:aa:e6:ae:8f:79: a5:76:16:09:38:fe:95:f6:ee:69:c4:e8:cf:d8:70:d7:6e:6d: d6:62:03:f9:7d:31:92:43:9a:b4:45:d2:22:ef:d9:01:89:d4: 39:9e:90:56:e1:93:88:96:17:e4:51:30:e7:82:63:7f:bb:07: 5b:cf:be:91:f8:29:81:ed:2b:78:fd:f1:ff:e6:85:53:98:ce: 56:6a:71:1b:6a:a2:b9:2d:e9:93:e8:7e:b2:ad:8f:fb:2a:dc: 29:e2:28:cc:20:59:0d:70:20:38:ea:72:da:c7:d9:25:55:aa: df:30:ea:07:5e:76:b4:60:79:42:ed:4a:b6:43:8c:7f:bf:19: dd:7b:89:7d:26:a4:76:ab:eb:14:8f:46:a7:4c:46:2e:2e:17: 4c:7c:90:a1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gYcWsQwRarxEha2EFPnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTFkZTE3NDM3YTAwMjVmZDFlZGUxMGY3MTBmMTdhMzA4 MGIzYWIwHhcNMjYwMTAyMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTNlZmYxYzI2NDIxMDgxMWE2OTA3MDgzODFmMDhkYmE4Njk1YzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW9wMnoRk/Qpe/zQUp1wqSIxUspE cyA/aPzQZKvNe5EIGiOhaMMPD5v/pX6MaxSnNzxbXkpjVh6pB/6bonm3waqKeHzc UUxSPNlehMEh5qNtJGfy3H/QCGuzMLmaxSUyw+fSoLWJYM0QoKRha4yJROUXQDsr yDoXHiiaJaq9nSzdyq/Z8OyUUBmEIOcpuGs8Nxe9LtPi8sq9a6AHNu7LIxCAGbXN pVVmNPYRYH5eUgRx/bfJfZDtlD6SvaHHcl6pV0Ox47toa+pL1+o5mocIoX0Ug0cq VvxES/LJgCYyFaBTH0kN5Wdz0KVdkLD2On1cflAAoCT5mjB2oPC6YnOUNwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBo+/xwmQhCBGmkHCDgfCNuoaVyaMB8GA1UdIwQY MBaAFA6R3hdDegAl/R7eEPcQ8XowgLOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUt ODhlYmJmOTk3ODBiLzEvR2o3X0hDWkNFSUVhYVFjSU9COEkyNmhwWEpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUtODhlYmJmOTk3ODBi LzEvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuc98MA0E AgACMAcDBQMqCyNAMA0GCSqGSIb3DQEBCwUAA4IBAQAYZNECCotJBaRmZSQV23W1 7NeXfge3MNGJd8UhA2W5SDxgLtVDTDEOb30KF2zfQKbyl27XrnspP5c/SqYisRfv wj3jaqzC+L/Pr2xLx5eap6sNLXg1tSCCuksYDWectkaDO2PavVu7quauj3mldhYJ OP6V9u5pxOjP2HDXbm3WYgP5fTGSQ5q0RdIi79kBidQ5npBW4ZOIlhfkUTDngmN/ uwdbz76R+CmB7St4/fH/5oVTmM5WanEbaqK5LemT6H6yrY/7Ktwp4ijMIFkNcCA4 6nLax9klVarfMOoHXna0YHlC7Uq2Q4x/vxnde4l9JqR2q+sUj0anTEYuLhdMfJCh -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:53 2026 by rpki-client