This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/gB9pySILbpD_ARKbsKBosjbrp2o.roa File: gB9pySILbpD_ARKbsKBosjbrp2o.roa (raw, json) Hash identifier: P7JIDPQrScNZtIMVCacJw/YIMNuDt6IHyEVuiNcFTOw= Subject key identifier: 80:1F:69:C9:22:0B:6E:90:FF:01:12:9B:B0:A0:68:B2:36:EB:A7:6A Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B7F146C7E97379215B8A1822FF7BBAA9F Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/gB9pySILbpD_ARKbsKBosjbrp2o.roa Signing time: Fri 02 Jan 2026 14:20:03 +0000 ROA not before: Fri 02 Jan 2026 14:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216300 IP address blocks: 77.221.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:6c:7e:97:37:92:15:b8:a1:82:2f:f7:bb:aa:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Jan 2 14:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=801f69c9220b6e90ff01129bb0a068b236eba76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:b9:a6:da:9d:4f:ab:15:bd:39:e3:fd:ba: fd:fc:05:95:a6:83:6d:c4:1b:17:7f:cf:0a:75:8e: 2d:38:b6:49:a6:9f:fd:35:fd:2b:6d:d0:23:6d:3f: ef:93:b9:09:a8:df:a7:64:1b:ab:d0:95:27:8e:2c: ae:ff:40:57:3f:73:77:06:93:5f:08:47:d7:9d:c9: 67:8f:71:06:bc:77:fa:7a:3a:3c:d5:4e:30:b5:95: 6a:5b:88:20:c4:2e:62:e8:8f:30:e9:29:9d:90:6a: 0a:03:24:14:d9:3a:7a:52:dc:d7:da:31:be:2f:9c: 54:b1:a2:21:3f:48:73:97:07:1f:72:25:41:93:a6: 68:08:54:33:17:20:88:90:cd:ae:0f:ae:45:a0:73: d9:4b:bd:58:ac:9c:b5:3d:e2:e5:01:a7:c6:79:53: 2e:e4:c1:f1:0c:7e:66:b0:81:e2:54:c9:7f:b5:57: 87:e0:02:3a:35:82:90:a0:ba:f1:f9:fb:72:5f:1a: 9d:e1:2e:eb:32:37:37:26:ac:e3:c1:0a:43:2b:b0: 16:f9:69:dc:8d:40:3a:3b:31:c7:04:1e:36:98:8d: af:da:10:6a:5e:f8:e3:82:00:0e:fc:ef:92:55:7c: aa:40:b9:cf:45:db:a6:ae:7c:8e:14:f4:b0:ec:63: 61:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1F:69:C9:22:0B:6E:90:FF:01:12:9B:B0:A0:68:B2:36:EB:A7:6A X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/gB9pySILbpD_ARKbsKBosjbrp2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.135.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:19:81:8f:cc:39:18:ca:8e:3a:51:88:81:d4:f0:39:6d:03: b2:d6:15:43:3e:c6:a4:0e:3a:c7:8d:c4:70:79:db:b7:48:c3: f2:63:45:9e:a0:55:7f:2a:39:0c:eb:fa:81:f5:30:a2:09:f6: 1f:cf:a9:c0:23:2f:87:42:4f:de:f1:35:99:9d:2d:6f:98:d1: 9b:e1:85:68:1f:9c:ee:20:1e:ca:c6:b0:f3:ce:ca:04:c3:37: 52:8e:34:5e:24:4d:71:db:b3:83:58:3b:c1:8a:2c:d2:d8:0f: 11:ac:e0:69:da:45:42:5d:72:d9:dd:7f:56:c5:96:b6:f3:ec: 9e:91:57:42:e8:f8:29:1a:71:85:89:23:e9:c6:82:4e:d1:41: 14:8e:4f:e6:b1:8c:aa:2c:21:93:bb:65:06:29:75:3c:ff:45: 98:12:55:00:c5:51:07:fb:60:40:eb:d7:de:51:2b:bb:49:08: d9:ab:8a:5d:13:fb:2c:55:57:d8:0f:5b:13:56:7c:6c:5e:84: 7a:5e:32:03:9b:95:f4:f8:67:9d:18:f1:11:e6:f7:b1:5f:56: c7:51:a7:1d:94:8d:41:b1:64:75:ae:b1:7c:9b:c8:96:99:b4: 4a:f1:5c:aa:47:c3:f8:e3:c9:54:4a:88:82:ed:95:e4:97:72: 5c:43:f8:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGx+lzeSFbihgi/3u6qfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjYwMTAyMTQyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDFmNjljOTIyMGI2ZTkwZmYwMTEyOWJiMGEwNjhiMjM2ZWJhNzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscq5ptqdT6sVvTnj/br9/AWVpoNt xBsXf88KdY4tOLZJpp/9Nf0rbdAjbT/vk7kJqN+nZBur0JUnjiyu/0BXP3N3BpNf CEfXnclnj3EGvHf6ejo81U4wtZVqW4ggxC5i6I8w6SmdkGoKAyQU2Tp6UtzX2jG+ L5xUsaIhP0hzlwcfciVBk6ZoCFQzFyCIkM2uD65FoHPZS71YrJy1PeLlAafGeVMu 5MHxDH5msIHiVMl/tVeH4AI6NYKQoLrx+ftyXxqd4S7rMjc3JqzjwQpDK7AW+Wnc jUA6OzHHBB42mI2v2hBqXvjjggAO/O+SVXyqQLnPRdumrnyOFPSw7GNhaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIAfackiC26Q/wESm7CgaLI266dqMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvZ0I5cHlTSUxicERfQVJLYnNLQm9zamJycDJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATd2HMA0G CSqGSIb3DQEBCwUAA4IBAQBPGYGPzDkYyo46UYiB1PA5bQOy1hVDPsakDjrHjcRw edu3SMPyY0WeoFV/KjkM6/qB9TCiCfYfz6nAIy+HQk/e8TWZnS1vmNGb4YVoH5zu IB7KxrDzzsoEwzdSjjReJE1x27ODWDvBiizS2A8RrOBp2kVCXXLZ3X9WxZa28+ye kVdC6PgpGnGFiSPpxoJO0UEUjk/msYyqLCGTu2UGKXU8/0WYElUAxVEH+2BA69fe USu7SQjZq4pdE/ssVVfYD1sTVnxsXoR6XjIDm5X0+GedGPER5vexX1bHUacdlI1B sWR1rrF8m8iWmbRK8VyqR8P448lUSoiC7ZXkl3JcQ/iW -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:24 2026 by rpki-client