This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gxDOnX4e95uDcZ5EAs39ieATAKc.roa File: gxDOnX4e95uDcZ5EAs39ieATAKc.roa (raw, json) Hash identifier: EI7nBfP2QXrHUBV2TqlU1gQx2zwgezdykjkxJKp1Lzg= Subject key identifier: 83:10:CE:9D:7E:1E:F7:9B:83:71:9E:44:02:CD:FD:89:E0:13:00:A7 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019BE101CEB1981375DB989121830FCC732E Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gxDOnX4e95uDcZ5EAs39ieATAKc.roa Signing time: Wed 21 Jan 2026 14:42:30 +0000 ROA not before: Wed 21 Jan 2026 14:42:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 79.172.204.0/24 maxlen: 24 87.229.23.0/24 maxlen: 24 87.229.35.0/24 maxlen: 24 87.229.124.0/24 maxlen: 24 87.229.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:01:ce:b1:98:13:75:db:98:91:21:83:0f:cc:73:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 21 14:42:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8310ce9d7e1ef79b83719e4402cdfd89e01300a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:c8:62:f8:28:41:33:ac:e2:24:b9:26:fe: 19:8d:0e:26:ff:f8:4f:f5:a2:97:37:3c:eb:85:0c: 69:53:81:ab:7e:af:f2:ac:81:30:d8:fe:68:c0:70: 3b:4d:87:6f:03:65:59:58:f5:f0:7d:f2:f2:d2:68: 41:1d:d0:c6:a8:55:43:af:22:ae:ef:86:44:c4:5f: 75:7a:52:6b:97:85:27:8b:6a:fa:ce:af:75:5d:ab: 8e:c4:c8:4d:7e:7e:95:4f:1b:4e:80:1f:4e:c0:a3: 07:18:b6:ed:ca:59:6a:75:50:30:e3:42:5c:8e:2c: 26:0e:41:81:3c:a6:39:c4:89:3a:24:df:fd:5b:5f: 15:de:d2:6c:64:2a:4f:74:07:28:78:ca:87:22:f3: 25:f5:82:ff:b7:5b:2d:ba:78:ca:a4:98:8a:10:8f: 37:6d:50:57:4e:f8:10:e0:8f:cb:23:d7:d9:13:d5: 79:8b:c6:3e:06:95:a9:d8:f9:26:74:d3:fb:5d:53: 51:74:29:d6:bc:f6:a5:2d:4a:a9:0a:fb:42:f5:1d: a8:92:13:36:c9:9a:eb:39:1c:13:f2:50:77:0a:51: 7f:a3:90:2c:69:43:8f:4f:53:67:e0:04:3d:8a:b5: 67:8b:31:d2:9d:9c:f9:4a:c0:3a:56:27:52:c9:f9: 73:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:CE:9D:7E:1E:F7:9B:83:71:9E:44:02:CD:FD:89:E0:13:00:A7 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gxDOnX4e95uDcZ5EAs39ieATAKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.204.0/24 87.229.23.0/24 87.229.35.0/24 87.229.124.0/23 Signature Algorithm: sha256WithRSAEncryption 20:64:bb:4b:bf:13:f3:5b:5c:01:a1:90:70:1c:37:e3:ee:ed: c3:bb:19:b4:53:11:6c:6d:c0:5a:a5:de:13:14:08:61:b2:fc: dd:77:41:6b:fe:f7:ae:98:0a:ca:46:b4:de:1e:93:2f:12:d2: ea:3c:f4:6d:55:3f:01:fe:e6:4d:0b:03:32:10:a4:60:cf:a7: b5:56:32:ba:e6:32:a6:5e:02:ae:e5:da:27:be:d1:ed:3f:ed: b0:c3:3e:dc:d7:ce:a2:1f:98:ff:32:fa:5e:bb:15:a9:c2:96: d2:c8:5a:1d:a9:9c:31:ed:65:57:79:8f:f3:a5:f2:90:2a:10: 8a:b9:e3:89:24:f2:e3:49:78:84:17:27:27:e1:0f:45:69:b6: 8a:7c:3c:71:77:ba:f3:76:51:b1:c8:09:87:ea:38:49:38:7b: ab:fa:78:a2:a3:a7:63:9e:af:de:a1:a7:7c:c5:39:26:ee:96: d5:d7:26:4d:cb:a5:68:b3:b4:8e:0b:e9:74:8d:d3:ef:0c:0a: c9:e3:d1:da:a3:dc:c1:fe:ff:8f:fd:18:07:3e:16:39:3b:f3: ac:8a:6c:19:bc:17:3c:69:90:57:36:ee:18:fa:6d:f9:1e:5d: 96:38:cb:f9:77:e6:1d:63:17:de:ab:bb:05:af:a6:25:62:3f: 34:fa:7c:05 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvhAc6xmBN125iRIYMPzHMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTIxMTQ0MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzEwY2U5ZDdlMWVmNzliODM3MTllNDQwMmNkZmQ4OWUwMTMwMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0rIYvgoQTOs4iS5Jv4ZjQ4m//hP 9aKXNzzrhQxpU4Grfq/yrIEw2P5owHA7TYdvA2VZWPXwffLy0mhBHdDGqFVDryKu 74ZExF91elJrl4Uni2r6zq91XauOxMhNfn6VTxtOgB9OwKMHGLbtyllqdVAw40Jc jiwmDkGBPKY5xIk6JN/9W18V3tJsZCpPdAcoeMqHIvMl9YL/t1stunjKpJiKEI83 bVBXTvgQ4I/LI9fZE9V5i8Y+BpWp2PkmdNP7XVNRdCnWvPalLUqpCvtC9R2okhM2 yZrrORwT8lB3ClF/o5AsaUOPT1Nn4AQ9irVnizHSnZz5SsA6VidSyflzUwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIMQzp1+Hvebg3GeRALN/YngEwCnMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvZ3hET25YNGU5NXVEY1o1RUFzMzlpZUFUQUtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAT6zMAwQA V+UXAwQAV+UjAwQBV+V8MA0GCSqGSIb3DQEBCwUAA4IBAQAgZLtLvxPzW1wBoZBw HDfj7u3Duxm0UxFsbcBapd4TFAhhsvzdd0Fr/veumArKRrTeHpMvEtLqPPRtVT8B /uZNCwMyEKRgz6e1VjK65jKmXgKu5donvtHtP+2wwz7c186iH5j/MvpeuxWpwpbS yFodqZwx7WVXeY/zpfKQKhCKueOJJPLjSXiEFycn4Q9FabaKfDxxd7rzdlGxyAmH 6jhJOHur+niio6djnq/eoad8xTkm7pbV1yZNy6Vos7SOC+l0jdPvDArJ49Hao9zB /v+P/RgHPhY5O/OsimwZvBc8aZBXNu4Y+m35Hl2WOMv5d+YdYxfeq7sFr6YlYj80 +nwF -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:08 2026 by rpki-client