This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/ggUa6LfIuLLVR5P1Qr24VmoyZso.roa File: ggUa6LfIuLLVR5P1Qr24VmoyZso.roa (raw, json) Hash identifier: rdmuXEokTMYqrj4xUmy2EZVO5gA++Wv14CxkDlRPOSQ= Subject key identifier: 82:05:1A:E8:B7:C8:B8:B2:D5:47:93:F5:42:BD:B8:56:6A:32:66:CA Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c Certificate serial: 019B76EB3CA9060C3B2A1833D0E043DF84BB Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/ggUa6LfIuLLVR5P1Qr24VmoyZso.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42084 IP address blocks: 91.189.0.0/21 maxlen: 21 176.107.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3c:a9:06:0c:3b:2a:18:33:d0:e0:43:df:84:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82051ae8b7c8b8b2d54793f542bdb8566a3266ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2d:ea:36:63:de:b9:29:2f:b3:58:85:3e:3e: 52:4e:6e:14:a2:db:95:5e:f3:c7:c2:ed:31:9b:ab: 5d:3b:10:6a:9c:52:23:13:dd:b3:ea:8c:27:a6:9a: b7:db:b7:2e:0d:d2:61:95:56:23:98:12:f0:a4:4e: 30:7e:de:b7:97:8b:7b:7c:14:f0:fe:a9:41:d8:76: b6:66:24:12:ab:9d:d2:f3:45:92:4b:14:bd:e4:d6: c8:8b:1f:70:20:04:ba:53:e6:ce:71:45:34:c8:fc: 07:59:8f:25:c7:7c:e0:93:cb:94:28:dd:1e:71:a7: a1:ee:14:d7:f9:00:5c:5e:02:17:b4:80:26:1c:23: fb:85:d1:c0:e3:f1:e4:b5:f0:8e:cd:23:09:17:9c: 15:79:e0:75:c9:8d:e3:01:e1:83:34:11:06:44:a3: 90:31:4c:dd:4e:77:80:72:ce:8c:04:55:5e:6d:2c: 86:fe:81:75:21:94:45:77:1a:78:34:84:80:d7:3c: ea:71:ee:ca:46:63:a9:6a:0b:9f:79:eb:de:10:72: 36:ed:6b:f3:cc:00:9a:94:72:81:1b:a8:d4:0e:b8: 3a:ab:f4:67:7e:10:00:67:4d:da:da:1b:6a:67:d8: c7:37:c6:cd:2c:7b:ec:93:27:bd:39:78:cc:84:3b: 5a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:05:1A:E8:B7:C8:B8:B2:D5:47:93:F5:42:BD:B8:56:6A:32:66:CA X509v3 Authority Key Identifier: keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/ggUa6LfIuLLVR5P1Qr24VmoyZso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.189.0.0/21 176.107.40.0/21 Signature Algorithm: sha256WithRSAEncryption 48:48:c4:80:dd:ff:7f:04:24:9f:28:37:2e:f5:0d:c7:2c:7c: d5:df:fc:a3:93:1f:fb:9c:00:58:f0:36:b4:a8:72:ff:a3:c3: c0:8f:5b:49:aa:11:7c:2b:73:04:e0:06:b9:bd:6c:31:08:ba: d4:c0:a9:70:13:57:a9:fe:e1:1d:eb:1b:88:bb:e8:c7:09:5f: 41:1a:97:55:a5:2a:c6:7c:64:39:83:6d:34:99:f7:41:d7:17: 5c:c5:bc:fd:0c:7a:a6:ba:91:75:dc:5c:0c:a9:61:f7:10:7a: 77:d1:b2:2d:9b:53:b5:be:a9:51:b9:0b:72:80:1a:bb:91:3f: e9:9f:6b:c0:e3:9c:16:cd:cf:ab:6d:cb:c1:d0:5b:02:f9:62: 76:f4:83:bf:02:0b:56:54:37:c3:71:dc:55:4a:84:64:05:f4: d3:af:29:f2:7b:dc:f2:84:78:bd:be:f6:3b:b3:d2:c5:13:75: 0a:c3:dc:83:1d:3c:a7:6c:65:35:1b:d7:1d:c3:26:13:39:c1: f6:42:b0:88:3d:a9:d0:49:0c:96:0b:06:d7:d8:06:3c:bf:6a: 8d:d0:08:54:c0:85:2e:32:41:b7:7c:c9:a3:d3:89:5a:62:58: 62:c0:6f:0b:72:e7:0c:86:0f:38:13:13:9f:ff:a8:f3:fc:ec: 58:7a:85:f1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26zypBgw7Khgz0OBD34S7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OTgzYjNhOTc1OGZjYmU3ODczM2Q5MTU1YWVkMjY2Yzg4 MmEyM2MwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjA1MWFlOGI3YzhiOGIyZDU0NzkzZjU0MmJkYjg1NjZhMzI2NmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C3qNmPeuSkvs1iFPj5STm4UotuV XvPHwu0xm6tdOxBqnFIjE92z6ownppq327cuDdJhlVYjmBLwpE4wft63l4t7fBTw /qlB2Ha2ZiQSq53S80WSSxS95NbIix9wIAS6U+bOcUU0yPwHWY8lx3zgk8uUKN0e caeh7hTX+QBcXgIXtIAmHCP7hdHA4/HktfCOzSMJF5wVeeB1yY3jAeGDNBEGRKOQ MUzdTneAcs6MBFVebSyG/oF1IZRFdxp4NISA1zzqce7KRmOpagufeeveEHI27Wvz zACalHKBG6jUDrg6q/RnfhAAZ03a2htqZ9jHN8bNLHvskye9OXjMhDtaqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIIFGui3yLiy1UeT9UK9uFZqMmbKMB8GA1UdIwQY MBaAFMeYOzqXWPy+eHM9kVWu0mbIgqI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEt MjM4NDA1ZjJjZGU5LzEvZ2dVYTZMZkl1TExWUjVQMVFyMjRWbW95WnNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEtMjM4NDA1ZjJjZGU5 LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDW70AAwQD sGsoMA0GCSqGSIb3DQEBCwUAA4IBAQBISMSA3f9/BCSfKDcu9Q3HLHzV3/yjkx/7 nABY8Da0qHL/o8PAj1tJqhF8K3ME4Aa5vWwxCLrUwKlwE1ep/uEd6xuIu+jHCV9B GpdVpSrGfGQ5g200mfdB1xdcxbz9DHqmupF13FwMqWH3EHp30bItm1O1vqlRuQty gBq7kT/pn2vA45wWzc+rbcvB0FsC+WJ29IO/AgtWVDfDcdxVSoRkBfTTrynye9zy hHi9vvY7s9LFE3UKw9yDHTynbGU1G9cdwyYTOcH2QrCIPanQSQyWCwbX2AY8v2qN 0AhUwIUuMkG3fMmj04laYlhiwG8LcucMhg84ExOf/6jz/OxYeoXx -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:31 2026 by rpki-client