This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/cagtjc8bDeRcNxkPpsNFtRSw4HA.roa File: cagtjc8bDeRcNxkPpsNFtRSw4HA.roa (raw, json) Hash identifier: aF1LQSDw1Bl5408F1vJ3i4//pV71kCpJdauO5OKZNZo= Subject key identifier: 71:A8:2D:8D:CF:1B:0D:E4:5C:37:19:0F:A6:C3:45:B5:14:B0:E0:70 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019B7BA327ECB3F532A0E19EB58C9DE312C3 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/cagtjc8bDeRcNxkPpsNFtRSw4HA.roa Signing time: Thu 01 Jan 2026 22:17:28 +0000 ROA not before: Thu 01 Jan 2026 22:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214891 IP address blocks: 77.91.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:27:ec:b3:f5:32:a0:e1:9e:b5:8c:9d:e3:12:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jan 1 22:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71a82d8dcf1b0de45c37190fa6c345b514b0e070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:56:25:ff:c4:f7:b7:b8:da:54:a6:cf:c7:ea: 76:11:cf:94:23:a9:6b:c7:f9:43:7a:3a:0d:6f:fa: 7c:e9:a1:f4:c2:b8:eb:bf:f3:c9:e2:8e:c6:73:ae: 44:1c:c1:8d:d6:42:c5:53:65:ef:94:d5:86:8e:ad: 62:38:43:d1:fa:83:17:62:60:6f:4a:9d:a7:c1:7b: 46:ec:4d:eb:50:dd:a5:51:ec:1a:6c:a8:c6:fb:5b: 83:d3:33:df:5a:3f:e4:f8:e2:c8:91:a7:6d:1f:57: 4f:b4:80:80:f1:09:ed:42:68:5e:66:49:9f:ed:d7: 08:99:50:8b:3b:e8:60:1e:91:7b:b5:ff:0a:7e:60: 59:ef:01:fb:cd:4f:66:32:3b:35:5c:48:98:ff:a6: a0:a0:59:de:b5:1e:99:be:4c:d4:c0:94:26:eb:94: 5b:9b:47:0d:34:86:72:6f:a4:13:ed:80:e3:44:98: 26:00:96:ce:cf:a3:9e:b5:b5:74:2b:fd:12:73:70: b6:3c:63:4b:ce:0a:d9:6b:99:7e:99:d4:ae:77:2e: 47:d0:d5:ed:2a:9c:a5:2e:ad:af:dd:19:a0:33:3b: 73:f9:d5:73:33:06:5b:b1:73:7a:b3:c3:e4:65:27: d6:8e:19:3a:f9:8c:f6:fd:fa:bb:96:0e:48:1e:68: 7f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A8:2D:8D:CF:1B:0D:E4:5C:37:19:0F:A6:C3:45:B5:14:B0:E0:70 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/cagtjc8bDeRcNxkPpsNFtRSw4HA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.66.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:a6:1a:a9:59:77:a8:fc:64:3d:c8:79:bb:78:12:4e:4c:d3: 60:67:b8:fb:72:37:bb:a1:f3:c2:9c:c5:8b:11:f9:1f:66:c4: 5c:e7:9a:c9:c7:00:62:0b:1e:6d:bc:f6:5e:2b:74:b4:e1:52: 13:ae:19:61:d2:1a:ef:e1:d7:22:9e:e5:a3:03:7a:af:65:ce: 23:25:eb:35:41:d2:36:6a:0f:a1:33:60:f3:a5:04:e8:99:07: 17:60:4b:21:d6:d9:9a:0f:d1:31:e8:7b:3a:cf:4a:05:89:0d: 4f:00:cf:79:5d:c0:de:12:2e:2c:a2:15:e4:d9:fe:0f:15:ff: aa:38:00:dc:1b:90:d9:89:ea:12:49:b7:e7:db:cc:3f:1a:e1: b8:46:e5:54:1c:f4:21:cc:5a:8c:ad:77:f9:c2:ce:8f:12:b8: df:9a:ca:a0:34:c7:2c:aa:87:d7:30:99:85:2c:3b:bb:bb:79: 42:b7:93:65:5e:2e:94:56:39:6b:25:fa:5e:04:c1:b0:b0:79: 3f:f4:0b:8b:a9:91:14:c0:de:b0:5f:52:d5:c3:84:49:26:c0: 86:d7:a8:b9:c2:55:b0:4d:95:d0:53:4b:ef:50:01:e2:68:98: 1e:5c:2c:b4:c2:58:b4:d8:17:2b:1c:71:23:c3:b2:34:88:b4: 9c:1f:5d:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyfss/UyoOGetYyd4xLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwMTAxMjIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWE4MmQ4ZGNmMWIwZGU0NWMzNzE5MGZhNmMzNDViNTE0YjBlMDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lYl/8T3t7jaVKbPx+p2Ec+UI6lr x/lDejoNb/p86aH0wrjrv/PJ4o7Gc65EHMGN1kLFU2XvlNWGjq1iOEPR+oMXYmBv Sp2nwXtG7E3rUN2lUewabKjG+1uD0zPfWj/k+OLIkadtH1dPtICA8QntQmheZkmf 7dcImVCLO+hgHpF7tf8KfmBZ7wH7zU9mMjs1XEiY/6agoFnetR6ZvkzUwJQm65Rb m0cNNIZyb6QT7YDjRJgmAJbOz6OetbV0K/0Sc3C2PGNLzgrZa5l+mdSudy5H0NXt KpylLq2v3RmgMztz+dVzMwZbsXN6s8PkZSfWjhk6+Yz2/fq7lg5IHmh/aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHGoLY3PGw3kXDcZD6bDRbUUsOBwMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvY2FndGpjOGJEZVJjTnhrUHBzTkZ0UlN3NEhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVtCMA0G CSqGSIb3DQEBCwUAA4IBAQCaphqpWXeo/GQ9yHm7eBJOTNNgZ7j7cje7ofPCnMWL EfkfZsRc55rJxwBiCx5tvPZeK3S04VITrhlh0hrv4dcinuWjA3qvZc4jJes1QdI2 ag+hM2DzpQTomQcXYEsh1tmaD9Ex6Hs6z0oFiQ1PAM95XcDeEi4sohXk2f4PFf+q OADcG5DZieoSSbfn28w/GuG4RuVUHPQhzFqMrXf5ws6PErjfmsqgNMcsqofXMJmF LDu7u3lCt5NlXi6UVjlrJfpeBMGwsHk/9AuLqZEUwN6wX1LVw4RJJsCG16i5wlWw TZXQU0vvUAHiaJgeXCy0wli02BcrHHEjw7I0iLScH11E -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:27 2026 by rpki-client