This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/gr7bdy0VGRdMj5tfmP6Hs9UXaj4.roa File: gr7bdy0VGRdMj5tfmP6Hs9UXaj4.roa (raw, json) Hash identifier: QyHstRZRdvd47ZQl36Rd/igqRzb8/8PpW8S7eiZiQPM= Subject key identifier: 82:BE:DB:77:2D:15:19:17:4C:8F:9B:5F:98:FE:87:B3:D5:17:6A:3E Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B77C75E4348B3FCC78D7FF6F07EC06840 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/gr7bdy0VGRdMj5tfmP6Hs9UXaj4.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206129 IP address blocks: 89.187.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5e:43:48:b3:fc:c7:8d:7f:f6:f0:7e:c0:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82bedb772d1519174c8f9b5f98fe87b3d5176a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:b3:c1:f0:95:be:b0:65:d8:e9:fd:4a:45: e5:ee:8a:8f:85:d1:f9:34:bf:7c:27:a2:37:d0:7e: 72:df:d9:10:e8:86:27:82:bd:fc:78:50:ba:83:14: 29:36:f1:e6:3e:e9:b7:93:cc:2e:ef:40:4f:44:64: f3:ff:63:50:12:ee:22:7c:cf:68:7a:d1:09:52:59: 15:6c:b8:c7:de:17:7b:56:2a:a9:20:40:4e:34:51: af:ed:95:19:1c:92:31:56:5c:07:1c:78:a9:4e:bd: 46:69:32:97:f4:af:74:56:92:17:91:85:e0:6e:cd: d1:92:a0:06:80:42:39:22:c4:22:3e:9c:d9:84:cc: ef:4c:7e:b1:81:64:20:02:9e:60:3f:58:b9:5e:89: 89:0f:7b:72:8d:78:9d:b7:02:09:33:78:6c:f7:9b: 08:a5:35:f3:ff:7f:43:c5:bc:2f:cd:cd:75:f1:a2: 51:7e:7c:27:c7:fd:b1:75:c4:70:a0:95:11:29:9d: 6a:3e:dd:78:39:47:e7:c2:77:4d:97:50:56:2f:26: ab:ae:73:aa:71:52:49:d4:18:ee:48:91:9b:7b:5a: 09:59:1b:1f:98:ae:c7:af:56:b0:95:d6:a6:bd:80: 84:40:0b:08:51:f0:0b:36:c9:0f:8c:f1:ed:65:06: b3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BE:DB:77:2D:15:19:17:4C:8F:9B:5F:98:FE:87:B3:D5:17:6A:3E X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/gr7bdy0VGRdMj5tfmP6Hs9UXaj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.7.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:31:c9:fd:ee:7e:77:e2:fa:d4:a7:da:34:12:fa:e1:9e:ba: e7:d3:77:60:fd:37:2d:22:71:29:c7:d1:49:71:21:dc:92:6a: e1:8f:b8:88:ff:47:87:7b:7b:d3:bf:a2:ee:70:18:36:a3:67: 1f:bd:cd:9b:2b:7b:0e:6a:32:89:9b:12:7b:43:8b:1e:cc:09: 78:5f:d3:d6:2b:f1:e3:d9:bb:6c:aa:b7:f9:57:30:94:de:ca: de:0f:d9:a6:a0:63:e3:85:86:58:14:b9:35:16:50:71:a3:95: 21:aa:85:ae:bc:d6:68:71:89:1a:20:b6:fa:59:de:e1:86:88: 32:f4:c6:8c:64:9c:67:c7:8f:6c:83:dd:1a:b3:b2:bc:87:ad: 06:27:6a:2d:81:65:5b:5b:3c:1e:b4:d6:b0:dd:f3:9d:dc:05: 0b:52:c3:b1:74:ae:1d:eb:d8:61:4e:92:59:30:ed:a3:1c:36: f5:05:cd:8d:2c:3d:a0:0c:29:6f:3c:22:27:a8:3a:e8:63:cc: 9c:c9:06:97:df:39:ee:f2:61:69:4a:4d:8f:50:51:0e:ec:e4: 61:c0:1c:67:5a:af:41:bb:7f:c8:a6:7a:0f:8a:19:0f:a3:9a: 84:99:a3:8b:2f:69:05:d4:cb:2a:03:db:93:34:d2:c7:ac:98: db:44:27:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x15DSLP8x41/9vB+wGhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmJlZGI3NzJkMTUxOTE3NGM4ZjliNWY5OGZlODdiM2Q1MTc2YTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoCzwfCVvrBl2On9SkXl7oqPhdH5 NL98J6I30H5y39kQ6IYngr38eFC6gxQpNvHmPum3k8wu70BPRGTz/2NQEu4ifM9o etEJUlkVbLjH3hd7ViqpIEBONFGv7ZUZHJIxVlwHHHipTr1GaTKX9K90VpIXkYXg bs3RkqAGgEI5IsQiPpzZhMzvTH6xgWQgAp5gP1i5XomJD3tyjXidtwIJM3hs95sI pTXz/39Dxbwvzc118aJRfnwnx/2xdcRwoJURKZ1qPt14OUfnwndNl1BWLyarrnOq cVJJ1BjuSJGbe1oJWRsfmK7Hr1awldamvYCEQAsIUfALNskPjPHtZQazZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIK+23ctFRkXTI+bX5j+h7PVF2o+MB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvZ3I3YmR5MFZHUmRNajV0Zm1QNkhzOVVYYWo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsHMA0G CSqGSIb3DQEBCwUAA4IBAQA7Mcn97n534vrUp9o0Evrhnrrn03dg/TctInEpx9FJ cSHckmrhj7iI/0eHe3vTv6LucBg2o2cfvc2bK3sOajKJmxJ7Q4sezAl4X9PWK/Hj 2btsqrf5VzCU3sreD9mmoGPjhYZYFLk1FlBxo5UhqoWuvNZocYkaILb6Wd7hhogy 9MaMZJxnx49sg90as7K8h60GJ2otgWVbWzwetNaw3fOd3AULUsOxdK4d69hhTpJZ MO2jHDb1Bc2NLD2gDClvPCInqDroY8ycyQaX3znu8mFpSk2PUFEO7ORhwBxnWq9B u3/IpnoPihkPo5qEmaOLL2kF1MsqA9uTNNLHrJjbRCfE -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:33 2026 by rpki-client