This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/G7Xbpr7vHvkmIJQmWHsvOakqdjw.roa File: G7Xbpr7vHvkmIJQmWHsvOakqdjw.roa (raw, json) Hash identifier: qWjL1bQeFwXeFmjLRN8X3nUGN5tctakBOqZVOMvExME= Subject key identifier: 1B:B5:DB:A6:BE:EF:1E:F9:26:20:94:26:58:7B:2F:39:A9:2A:76:3C Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb Certificate serial: 019B7B360264B680287C55E83E5278BC5FFB Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/G7Xbpr7vHvkmIJQmWHsvOakqdjw.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2200 IP address blocks: 138.231.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:02:64:b6:80:28:7c:55:e8:3e:52:78:bc:5f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ad79492e809934d693b11855e75103241569eb Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bb5dba6beef1ef926209426587b2f39a92a763c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:84:df:ef:e9:11:a4:36:08:4c:f4:f8:76:83: 9f:8e:b7:fd:58:d9:1f:e7:a2:04:f4:92:66:33:9c: 2a:4c:bf:69:e7:a9:f5:77:33:e0:b5:35:69:f5:2c: 93:83:71:37:3f:e1:75:c5:eb:b7:dc:05:79:76:68: 4d:65:6c:0e:74:4e:4b:fd:ec:dd:cb:48:94:b6:ca: b3:a0:28:38:21:be:96:30:a3:3a:8b:d5:79:7f:1f: a1:2b:a2:eb:4c:87:eb:70:22:2c:44:a6:8a:4b:fa: 59:ea:92:61:04:cb:22:d2:b6:60:8d:e8:71:c5:f1: e0:81:18:6f:14:96:66:83:c4:9a:4c:09:b0:cd:50: a2:77:26:82:fc:a4:e3:e8:dd:5c:f8:fc:b1:ce:4f: 38:f6:13:17:a5:06:66:da:81:c7:d0:bb:60:ea:f3: 10:29:76:3e:a8:26:31:eb:8f:7f:7d:b9:b7:ac:ea: 61:84:b4:43:a6:6d:10:f2:15:4e:42:a2:d1:48:21: 9c:de:2e:1f:eb:c9:30:4f:f2:cd:bd:b0:5d:25:bd: 6b:2c:9b:76:9d:fc:de:8e:d3:c9:c6:02:f0:eb:b9: 0c:eb:9d:84:0f:04:5e:ec:ac:51:49:bf:25:13:e8: 4a:87:fb:bc:ea:0b:70:e9:b8:ca:a4:49:de:d5:27: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B5:DB:A6:BE:EF:1E:F9:26:20:94:26:58:7B:2F:39:A9:2A:76:3C X509v3 Authority Key Identifier: keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/G7Xbpr7vHvkmIJQmWHsvOakqdjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.231.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:85:11:4b:c6:5a:e5:21:40:32:1c:52:f5:e5:59:1a:2f:9b: f7:20:c3:3d:25:7c:43:b9:a6:03:b5:7c:84:ab:1b:b3:1f:e8: ea:3b:89:dd:c2:9d:47:0c:8f:ac:94:62:5b:b7:09:58:43:aa: 49:18:f5:38:62:8c:e7:8f:4a:27:9d:c3:dd:01:e6:fe:9e:41: ce:28:ff:32:6f:dc:16:5b:76:c6:0a:5c:e4:05:08:b1:2f:46: 20:16:c4:b1:48:85:e8:59:42:db:8a:52:59:9f:b2:ae:14:3a: ee:5e:b1:ad:6f:a5:73:b4:fe:0b:5b:91:84:30:9a:dd:90:84: 4f:71:e4:91:b7:82:6d:a0:d1:ce:21:d0:22:7a:7e:ce:93:f4: 4d:45:08:94:46:7b:a8:38:8b:59:8a:70:33:ef:68:a2:46:36: 80:58:f8:de:5d:27:07:fd:57:07:eb:99:35:14:07:a6:e3:a2: 29:64:9e:23:b5:7a:dd:38:4e:02:a6:ae:87:46:fa:4d:e1:ed: 8c:70:78:47:52:85:84:e6:87:21:61:83:3a:c4:ce:22:c9:bc: e6:67:98:60:71:78:17:20:22:4e:e0:c3:71:d9:d8:aa:a5:0b: 5e:d7:67:60:4d:5d:3c:8f:fb:bb:7b:6a:03:51:5b:81:a1:56: f7:95:e6:06 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7NgJktoAofFXoPlJ4vF/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YWQ3OTQ5MmU4MDk5MzRkNjkzYjExODU1ZTc1MTAzMjQx NTY5ZWIwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmI1ZGJhNmJlZWYxZWY5MjYyMDk0MjY1ODdiMmYzOWE5MmE3NjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhITf7+kRpDYITPT4doOfjrf9WNkf 56IE9JJmM5wqTL9p56n1dzPgtTVp9SyTg3E3P+F1xeu33AV5dmhNZWwOdE5L/ezd y0iUtsqzoCg4Ib6WMKM6i9V5fx+hK6LrTIfrcCIsRKaKS/pZ6pJhBMsi0rZgjehx xfHggRhvFJZmg8SaTAmwzVCidyaC/KTj6N1c+Pyxzk849hMXpQZm2oHH0Ltg6vMQ KXY+qCYx649/fbm3rOphhLRDpm0Q8hVOQqLRSCGc3i4f68kwT/LNvbBdJb1rLJt2 nfzejtPJxgLw67kM652EDwRe7KxRSb8lE+hKh/u86gtw6bjKpEne1SfBEwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFBu126a+7x75JiCUJlh7LzmpKnY8MB8GA1UdIwQY MBaAFAWteUkugJk01pOxGFXnUQMkFWnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzIt ZjM3OTdlZjM0OGZmLzEvRzdYYnByN3ZIdmttSUpRbVdIc3ZPYWtxZGp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzItZjM3OTdlZjM0OGZm LzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiucwDQYJ KoZIhvcNAQELBQADggEBAHSFEUvGWuUhQDIcUvXlWRovm/cgwz0lfEO5pgO1fISr G7Mf6Oo7id3CnUcMj6yUYlu3CVhDqkkY9ThijOePSiedw90B5v6eQc4o/zJv3BZb dsYKXOQFCLEvRiAWxLFIhehZQtuKUlmfsq4UOu5esa1vpXO0/gtbkYQwmt2QhE9x 5JG3gm2g0c4h0CJ6fs6T9E1FCJRGe6g4i1mKcDPvaKJGNoBY+N5dJwf9VwfrmTUU B6bjoilkniO1et04TgKmrodG+k3h7YxweEdShYTmhyFhgzrEziLJvOZnmGBxeBcg Ik7gw3HZ2KqlC17XZ2BNXTyP+7t7agNRW4GhVveV5gY= -----END CERTIFICATE-----Generated at Mon Jan 26 06:20:41 2026 by rpki-client