This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/gsgYLG2levdNw0tCxvOjg_usjF4.roa File: gsgYLG2levdNw0tCxvOjg_usjF4.roa (raw, json) Hash identifier: QJe2VYcgMJstEBYaUDYCKnslGhoMfxk94aM7gVad6/g= Subject key identifier: 82:C8:18:2C:6D:A5:7A:F7:4D:C3:4B:42:C6:F3:A3:83:FB:AC:8C:5E Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B77591984A0129C6F223CEE1943F8981C Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/gsgYLG2levdNw0tCxvOjg_usjF4.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213174 IP address blocks: 77.65.160.0/21 maxlen: 24 77.65.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:19:84:a0:12:9c:6f:22:3c:ee:19:43:f8:98:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82c8182c6da57af74dc34b42c6f3a383fbac8c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:c2:bf:be:f7:b5:eb:4c:71:aa:64:3d:c4: c3:17:2b:0f:d6:8a:d4:ec:a2:80:4b:d7:e7:81:c6: f5:73:88:ef:2e:14:12:56:95:69:44:cb:46:2f:d3: 23:13:e8:10:c8:87:85:f0:3b:05:e0:ca:8f:f8:62: 83:0c:c9:e1:4c:9e:1c:52:c3:ec:b1:0b:88:73:51: 91:a0:0b:ac:15:08:87:04:47:8e:f4:23:d9:7c:ad: 07:f6:69:a2:10:6f:32:a9:f8:3d:e0:74:66:8a:7c: 32:dd:c4:f1:1e:a2:31:08:2f:10:01:07:0a:10:75: 26:b2:2c:9d:73:ef:70:28:b9:d5:1a:7c:c8:bf:14: b6:45:18:62:c6:5e:4a:f9:1c:27:dd:dc:9b:f6:07: b0:31:41:b2:33:12:26:8c:05:c2:a4:80:56:be:17: 84:86:5f:29:07:a5:2b:80:d4:fa:d7:6a:16:f0:90: 7e:0e:e8:f4:e7:6e:68:3b:b3:11:a0:eb:7c:b6:92: 56:69:59:b7:78:2f:2a:bf:a8:0c:28:ab:bc:32:f6: 3d:c5:0b:b7:d2:bc:63:c5:91:37:8c:dd:80:cf:c0: 76:81:9d:ba:2a:84:ca:9a:91:d5:4e:8e:60:fd:06: 9a:05:bd:97:98:28:73:5b:ab:1a:6f:0b:fd:be:af: af:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C8:18:2C:6D:A5:7A:F7:4D:C3:4B:42:C6:F3:A3:83:FB:AC:8C:5E X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/gsgYLG2levdNw0tCxvOjg_usjF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.65.160.0-77.65.169.255 Signature Algorithm: sha256WithRSAEncryption 71:a6:b2:0d:af:1e:0f:b2:3d:ad:03:ce:62:20:bc:23:92:8a: e2:f5:cb:2a:4c:bd:70:16:6e:9e:cb:d2:22:46:c5:50:07:db: 76:dd:09:b3:d8:1d:63:a4:8d:6a:d8:35:b4:09:5c:ac:6e:cc: 2f:a7:01:d8:5c:75:c1:d5:9b:4c:6d:3e:b1:29:49:56:12:b5: 08:2d:75:6d:d6:dc:5d:4e:e3:30:1c:08:eb:14:cb:a5:e7:97: 65:30:9f:52:b6:0a:2e:ad:7a:82:cc:36:74:eb:a2:ef:11:e4: f6:e2:44:ca:ab:28:89:54:1f:a6:f4:91:14:b0:c5:a7:a0:9f: ae:cc:0c:3d:1e:0e:03:64:a6:c2:70:54:31:88:8c:a9:12:6a: e1:3d:c5:f0:e4:03:42:dd:bd:1e:48:42:ee:44:58:ab:e2:28: f5:f5:1b:1c:71:eb:ac:9b:10:9a:7b:3f:0b:80:87:4d:c6:a0: 5d:d9:1c:fa:f9:db:a6:c4:2d:8f:9b:d7:61:48:87:67:29:d3: 06:e0:17:05:15:c9:22:e0:10:b9:c0:73:53:f2:e4:01:c0:40: e9:93:36:94:a3:ec:66:0b:ae:d3:3f:95:7f:d8:0e:35:4a:6d: 79:39:b6:49:93:a3:50:d8:8d:01:4a:a1:9f:28:3c:0a:6f:fe: 9a:23:33:ec -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WRmEoBKcbyI87hlD+JgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmM4MTgyYzZkYTU3YWY3NGRjMzRiNDJjNmYzYTM4M2ZiYWM4YzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEbCv773tetMcapkPcTDFysP1orU 7KKAS9fngcb1c4jvLhQSVpVpRMtGL9MjE+gQyIeF8DsF4MqP+GKDDMnhTJ4cUsPs sQuIc1GRoAusFQiHBEeO9CPZfK0H9mmiEG8yqfg94HRminwy3cTxHqIxCC8QAQcK EHUmsiydc+9wKLnVGnzIvxS2RRhixl5K+Rwn3dyb9gewMUGyMxImjAXCpIBWvheE hl8pB6UrgNT612oW8JB+Duj0525oO7MRoOt8tpJWaVm3eC8qv6gMKKu8MvY9xQu3 0rxjxZE3jN2Az8B2gZ26KoTKmpHVTo5g/QaaBb2XmChzW6sabwv9vq+vvwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFILIGCxtpXr3TcNLQsbzo4P7rIxeMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvZ3NnWUxHMmxldmROdzB0Q3h2T2pnX3VzakY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVNQaAD BAFNQagwDQYJKoZIhvcNAQELBQADggEBAHGmsg2vHg+yPa0DzmIgvCOSiuL1yypM vXAWbp7L0iJGxVAH23bdCbPYHWOkjWrYNbQJXKxuzC+nAdhcdcHVm0xtPrEpSVYS tQgtdW3W3F1O4zAcCOsUy6Xnl2Uwn1K2Ci6teoLMNnTrou8R5PbiRMqrKIlUH6b0 kRSwxaegn67MDD0eDgNkpsJwVDGIjKkSauE9xfDkA0LdvR5IQu5EWKviKPX1Gxxx 66ybEJp7PwuAh03GoF3ZHPr526bELY+b12FIh2cp0wbgFwUVySLgELnAc1Py5AHA QOmTNpSj7GYLrtM/lX/YDjVKbXk5tkmTo1DYjQFKoZ8oPApv/pojM+w= -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:51 2026 by rpki-client