This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa File: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (raw, json) Hash identifier: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc= Subject key identifier: 1A:0F:73:A8:B7:9A:2C:93:96:A9:C2:09:7B:84:7D:E8:68:2B:C0:FB Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Certificate serial: 019B7835143A81545E68010A5CFF32E9970A Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197042 IP address blocks: 91.216.148.0/24 maxlen: 24 194.164.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:14:3a:81:54:5e:68:01:0a:5c:ff:32:e9:97:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a0f73a8b79a2c9396a9c2097b847de8682bc0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:28:6d:f0:38:08:40:c2:1a:4d:34:16:e4: f4:89:f4:3d:78:d5:69:50:c0:96:58:47:6a:78:13: 6b:bf:16:a2:47:88:b9:cb:d3:1b:3f:e4:9d:12:24: fe:13:27:25:9d:fa:2d:35:4f:e8:2b:b0:8c:0e:46: 1a:70:1e:aa:ba:9d:c5:8c:67:7e:69:99:83:f2:b7: 1b:b9:19:53:a8:d5:f5:12:82:6a:08:f1:3f:78:b6: d5:47:55:19:3d:13:19:5c:46:2e:f8:2e:34:b5:1f: a7:a2:52:fa:07:7d:f0:e6:7c:95:9b:ed:ac:45:17: 7b:03:32:98:51:f3:06:fc:ae:e8:5f:4e:d9:4f:34: 63:d0:45:9f:16:f5:80:b6:57:df:dd:89:5e:ce:32: f1:11:38:80:93:ea:8c:22:3d:43:35:9f:85:28:de: 04:40:72:f0:5e:81:80:41:9c:07:39:3c:0e:47:37: 48:42:13:be:9e:31:6f:f2:4a:fa:f6:76:31:b2:78: 3d:00:8d:63:e9:44:cf:79:27:1c:77:08:91:2c:aa: a3:0b:95:11:c2:9a:33:c7:aa:5d:28:0d:20:fb:b5: 5b:c4:bf:86:d7:0f:2c:ee:68:f0:76:1a:f3:6d:4b: 26:73:04:c7:b9:20:c8:ca:26:85:93:dd:d6:31:79: 0e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0F:73:A8:B7:9A:2C:93:96:A9:C2:09:7B:84:7D:E8:68:2B:C0:FB X509v3 Authority Key Identifier: keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.148.0/24 194.164.219.0/24 Signature Algorithm: sha256WithRSAEncryption 27:87:1b:17:82:bb:d8:19:4f:b2:7e:9c:1d:cb:84:d9:c4:b2: 7a:20:e6:a3:aa:c9:34:3f:1f:97:c2:82:6b:ad:9e:f0:7a:7f: 8a:c8:13:10:f2:ec:58:a3:16:de:47:23:e3:48:31:06:ae:d9: fd:bd:eb:8f:08:62:38:6e:20:dc:c9:3c:7c:1c:27:5e:50:5d: 93:dd:5f:d8:89:7a:98:6b:91:8c:8a:f1:f5:23:90:0d:63:da: fb:b7:fe:08:a1:16:cc:3b:9e:96:e1:6a:36:90:86:17:5e:f3: 4c:0a:f0:b4:0b:88:74:87:b9:9c:86:1e:dd:38:9b:b8:20:71: 23:1b:aa:ce:8f:7b:3e:54:6c:3b:be:67:42:a4:24:5b:ed:a6: 41:ca:87:f1:2b:aa:f9:10:0a:e7:8c:c1:d1:6f:46:d2:66:32: 28:68:ae:46:5d:04:37:e3:49:b4:3f:00:db:98:80:56:d7:25: 2f:ec:d5:e0:97:6a:2a:48:d3:04:9c:52:ed:a6:7c:0d:9f:a2: 46:1b:bf:c2:b1:0a:59:f9:33:c2:27:42:d6:54:2d:b7:97:cf: d0:21:3b:bb:a2:77:1c:ab:d0:23:8d:e1:66:c3:86:13:c5:7f: de:d8:a0:b6:70:93:83:5b:47:99:4f:82:7c:20:81:e6:3a:4d: c3:63:8c:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NRQ6gVReaAEKXP8y6ZcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm OTRkY2EwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTBmNzNhOGI3OWEyYzkzOTZhOWMyMDk3Yjg0N2RlODY4MmJjMGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0oobfA4CEDCGk00FuT0ifQ9eNVp UMCWWEdqeBNrvxaiR4i5y9MbP+SdEiT+EyclnfotNU/oK7CMDkYacB6qup3FjGd+ aZmD8rcbuRlTqNX1EoJqCPE/eLbVR1UZPRMZXEYu+C40tR+nolL6B33w5nyVm+2s RRd7AzKYUfMG/K7oX07ZTzRj0EWfFvWAtlff3YlezjLxETiAk+qMIj1DNZ+FKN4E QHLwXoGAQZwHOTwORzdIQhO+njFv8kr69nYxsng9AI1j6UTPeSccdwiRLKqjC5UR wpozx6pdKA0g+7VbxL+G1w8s7mjwdhrzbUsmcwTHuSDIyiaFk93WMXkOaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBoPc6i3miyTlqnCCXuEfehoK8D7MB8GA1UdIwQY MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt NDQxMTAxMmFiOTllLzEvR2c5enFMZWFMSk9XcWNJSmU0Ujk2R2dyd1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9iUAwQA wqTbMA0GCSqGSIb3DQEBCwUAA4IBAQAnhxsXgrvYGU+yfpwdy4TZxLJ6IOajqsk0 Px+XwoJrrZ7wen+KyBMQ8uxYoxbeRyPjSDEGrtn9veuPCGI4biDcyTx8HCdeUF2T 3V/YiXqYa5GMivH1I5ANY9r7t/4IoRbMO56W4Wo2kIYXXvNMCvC0C4h0h7mchh7d OJu4IHEjG6rOj3s+VGw7vmdCpCRb7aZByofxK6r5EArnjMHRb0bSZjIoaK5GXQQ3 40m0PwDbmIBW1yUv7NXgl2oqSNMEnFLtpnwNn6JGG7/CsQpZ+TPCJ0LWVC23l8/Q ITu7onccq9AjjeFmw4YTxX/e2KC2cJODW0eZT4J8IIHmOk3DY4xj -----END CERTIFICATE-----Generated at Mon Jan 26 04:19:50 2026 by rpki-client