This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/GAkBUkP8O44HfA6UaUDucppg-zQ.roa File: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (raw, json) Hash identifier: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM= Subject key identifier: 18:09:01:52:43:FC:3B:8E:07:7C:0E:94:69:40:EE:72:9A:60:FB:34 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019B791102E7942A9F96EA3BB89BEB08944C Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/GAkBUkP8O44HfA6UaUDucppg-zQ.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212910 IP address blocks: 77.221.58.0/23 maxlen: 23 77.221.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:02:e7:94:2a:9f:96:ea:3b:b8:9b:eb:08:94:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1809015243fc3b8e077c0e946940ee729a60fb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ba:62:99:63:0a:5b:e5:ff:84:71:e0:e2:5c: 39:ce:b2:c0:b0:6e:36:f9:db:c8:8b:31:7c:16:72: 8a:90:47:b9:14:49:9a:41:f8:2d:0c:70:4f:7d:16: f6:de:c2:90:4d:6e:79:97:38:ce:47:dd:a8:35:90: f3:d6:63:ed:e4:94:73:87:e2:61:62:87:d0:d9:47: ed:07:d2:ae:4b:9d:0d:39:d6:c8:c6:4b:15:aa:d4: 12:09:55:c9:d8:19:15:59:89:95:c1:3a:40:47:35: c3:02:e7:4e:48:35:21:97:d2:68:92:f6:22:92:a1: 47:26:28:4f:d2:06:2c:1c:36:64:a3:68:3e:a0:42: 02:93:ba:f8:11:a4:c2:30:43:20:99:e7:a0:fa:2b: c0:4e:d3:de:c8:2a:56:d4:35:4f:69:28:dd:36:2c: 72:ab:7a:46:f8:a7:5d:b1:05:0a:df:bc:f6:a4:8a: f6:7a:7c:6c:fd:4b:f5:16:31:81:33:a6:ea:dc:8b: a5:23:09:02:2d:b5:ab:6f:ab:6e:37:4a:33:43:80: 2d:ff:1d:0f:de:a8:6a:dd:d2:37:07:72:38:38:73: ea:e1:b2:95:87:fd:43:67:43:93:a9:34:8c:18:6b: 26:fb:6c:71:76:cd:7d:2c:94:19:e4:85:d9:2a:d9: 42:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:09:01:52:43:FC:3B:8E:07:7C:0E:94:69:40:EE:72:9A:60:FB:34 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/GAkBUkP8O44HfA6UaUDucppg-zQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.58.0-77.221.61.255 Signature Algorithm: sha256WithRSAEncryption 3f:ca:d8:09:1b:f4:b8:9c:e2:5a:a8:73:3d:cc:df:f4:d4:ac: bb:90:aa:63:16:60:97:37:a6:ea:26:d1:79:64:26:f8:fd:9e: 16:5c:d8:60:a1:d5:0d:b9:37:5f:97:16:c5:79:7f:39:68:c9: 84:3b:99:42:3d:0c:5e:26:bf:13:20:d8:9e:3a:98:e4:b4:81: d0:68:2f:77:e5:fd:15:3f:70:a2:da:98:6c:13:3d:ec:7b:46: af:fe:0b:f9:e2:f7:7f:be:99:b2:c3:89:24:2f:1a:1b:06:35: 38:c1:7e:a7:d7:9c:a6:94:c5:5d:73:e5:fb:d4:05:19:c2:ba: d0:a5:3b:af:43:ac:c2:fd:a0:78:f9:67:51:3d:d4:89:67:67: 56:8d:d4:38:38:cb:12:fc:e6:5b:66:6b:90:1d:ef:5e:0b:43: b4:72:22:d2:7e:5f:9c:1a:37:f2:2b:32:0b:12:b8:33:63:8b: e9:6b:7f:e4:a0:15:b8:a2:a2:b2:34:48:80:0d:a5:9c:9b:64: 66:a1:e9:ed:00:db:4c:c7:ca:2a:8d:3a:05:9f:e3:da:d8:a5: e0:49:8b:fa:fa:ec:06:35:75:1c:75:93:5c:f0:d7:99:c0:3d: 21:ca:99:f2:da:f4:ce:fd:a2:da:13:6d:e1:f2:69:94:45:6a: 79:cd:85:23 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EQLnlCqfluo7uJvrCJRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODA5MDE1MjQzZmMzYjhlMDc3YzBlOTQ2OTQwZWU3MjlhNjBmYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bpimWMKW+X/hHHg4lw5zrLAsG42 +dvIizF8FnKKkEe5FEmaQfgtDHBPfRb23sKQTW55lzjOR92oNZDz1mPt5JRzh+Jh YofQ2UftB9KuS50NOdbIxksVqtQSCVXJ2BkVWYmVwTpARzXDAudOSDUhl9JokvYi kqFHJihP0gYsHDZko2g+oEICk7r4EaTCMEMgmeeg+ivATtPeyCpW1DVPaSjdNixy q3pG+KddsQUK37z2pIr2enxs/Uv1FjGBM6bq3IulIwkCLbWrb6tuN0ozQ4At/x0P 3qhq3dI3B3I4OHPq4bKVh/1DZ0OTqTSMGGsm+2xxds19LJQZ5IXZKtlCrQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBgJAVJD/DuOB3wOlGlA7nKaYPs0MB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvR0FrQlVrUDhPNDRIZkE2VWFVRHVjcHBnLXpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFN3ToD BAFN3TwwDQYJKoZIhvcNAQELBQADggEBAD/K2Akb9Lic4lqocz3M3/TUrLuQqmMW YJc3puom0XlkJvj9nhZc2GCh1Q25N1+XFsV5fzloyYQ7mUI9DF4mvxMg2J46mOS0 gdBoL3fl/RU/cKLamGwTPex7Rq/+C/ni93++mbLDiSQvGhsGNTjBfqfXnKaUxV1z 5fvUBRnCutClO69DrML9oHj5Z1E91IlnZ1aN1Dg4yxL85ltma5Ad714LQ7RyItJ+ X5waN/IrMgsSuDNji+lrf+SgFbiiorI0SIANpZybZGah6e0A20zHyiqNOgWf49rY peBJi/r67AY1dRx1k1zw15nAPSHKmfLa9M79otoTbeHyaZRFannNhSM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:00 2026 by rpki-client