This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/gmjG60yO-dM5NBY95RTYVC92dCU.roa File: gmjG60yO-dM5NBY95RTYVC92dCU.roa (raw, json) Hash identifier: dL9a0J4WqVdYe7nzF2w3AJROlcgyQJx3wd5YtcwcZ6U= Subject key identifier: 82:68:C6:EB:4C:8E:F9:D3:39:34:16:3D:E5:14:D8:54:2F:76:74:25 Certificate issuer: /CN=5134d1320645644e2eaf3685879d693f72522c76 Certificate serial: 019B78A2FEC92518C5F336929A3DE29FD406 Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/gmjG60yO-dM5NBY95RTYVC92dCU.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203036 IP address blocks: 91.194.104.0/23 maxlen: 23 91.194.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fe:c9:25:18:c5:f3:36:92:9a:3d:e2:9f:d4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8268c6eb4c8ef9d33934163de514d8542f767425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:52:60:de:07:5d:90:05:49:43:e0:1d:d1: 0e:ab:37:84:00:1a:5d:be:fc:34:08:78:16:af:41: 29:c7:53:01:a3:a1:96:00:ae:ef:eb:48:ac:c1:52: 33:d3:94:94:b8:d5:15:3f:1e:1d:6c:3c:1a:99:43: 83:2f:2d:cd:9c:ce:25:a7:d0:b5:2e:44:db:06:c3: ec:f4:ea:73:54:06:4d:03:d7:8a:29:fd:0a:ea:76: 03:3b:26:08:07:b2:1f:69:f4:a9:fa:77:76:b1:e2: 1c:90:f8:35:fb:2d:46:3c:a7:41:ef:cf:ff:29:cb: 38:ef:ad:07:e2:a6:cd:76:01:f4:5e:dd:e4:54:23: f3:37:10:7b:bd:79:f1:d5:b9:23:bc:14:27:42:90: 61:fe:a1:42:3c:4b:a1:47:17:65:b6:9d:d2:05:28: e5:00:f4:59:c5:ef:d7:86:22:53:f6:0c:a4:11:b0: 56:3c:78:35:db:01:de:65:ed:91:5e:a6:56:6a:be: 83:35:74:20:63:50:42:00:19:c4:ab:f6:32:7f:da: 33:4e:ec:56:41:a9:89:13:37:86:e7:81:d4:ff:ab: 45:d9:8f:3f:d6:db:59:2f:6f:4a:ea:23:38:8b:f5: af:b4:3a:e1:5e:a8:0a:5c:a9:69:fa:98:c1:e1:e2: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:68:C6:EB:4C:8E:F9:D3:39:34:16:3D:E5:14:D8:54:2F:76:74:25 X509v3 Authority Key Identifier: keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/gmjG60yO-dM5NBY95RTYVC92dCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.104.0/23 Signature Algorithm: sha256WithRSAEncryption 79:49:26:bb:ca:a6:c4:a4:8c:f8:5f:aa:9a:bc:e6:25:22:04: 76:b0:63:9d:d7:a2:2c:96:7d:4f:73:79:b4:b9:49:52:24:f5: da:9c:96:12:14:71:39:8b:2a:76:da:f1:76:47:98:a3:09:c5: d3:78:03:1e:0b:28:6c:c9:a2:e3:8d:67:70:50:51:f7:7e:53: 42:ab:56:e0:c4:ad:04:8c:e1:90:df:18:c1:87:00:c8:df:f1: 07:f3:6b:9b:49:9c:03:59:52:38:35:eb:46:0a:2e:1b:46:8f: 5a:f1:b5:c0:10:ef:96:51:5b:64:fd:b6:e9:f4:fe:84:81:8d: 30:d9:da:24:4f:aa:4d:e8:e3:e5:0f:62:9e:aa:63:76:e1:97: f7:2f:de:f0:0c:09:12:d0:4b:9e:c3:5f:03:53:8f:42:23:b3: 49:60:88:50:a3:5f:22:9f:f5:35:13:e1:a4:a7:39:f5:2b:e2: 2a:5a:5a:9a:56:e7:32:e8:f3:ed:44:2d:df:90:3a:90:cb:96: 57:8d:ee:41:2a:6d:d3:de:89:48:74:d2:58:b4:eb:a1:1c:0a: 70:7b:8c:87:dc:b2:9a:12:93:78:05:7d:62:16:9e:0e:5a:04: aa:85:62:fd:51:62:07:5b:4d:8e:e0:10:37:04:8a:4f:24:0e: b5:42:16:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ov7JJRjF8zaSmj3in9QGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMzRkMTMyMDY0NTY0NGUyZWFmMzY4NTg3OWQ2OTNmNzI1 MjJjNzYwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjY4YzZlYjRjOGVmOWQzMzkzNDE2M2RlNTE0ZDg1NDJmNzY3NDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvolSYN4HXZAFSUPgHdEOqzeEABpd vvw0CHgWr0Epx1MBo6GWAK7v60iswVIz05SUuNUVPx4dbDwamUODLy3NnM4lp9C1 LkTbBsPs9OpzVAZNA9eKKf0K6nYDOyYIB7IfafSp+nd2seIckPg1+y1GPKdB78// Kcs4760H4qbNdgH0Xt3kVCPzNxB7vXnx1bkjvBQnQpBh/qFCPEuhRxdltp3SBSjl APRZxe/XhiJT9gykEbBWPHg12wHeZe2RXqZWar6DNXQgY1BCABnEq/Yyf9ozTuxW QamJEzeG54HU/6tF2Y8/1ttZL29K6iM4i/WvtDrhXqgKXKlp+pjB4eJ+9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJoxutMjvnTOTQWPeUU2FQvdnQlMB8GA1UdIwQY MBaAFFE00TIGRWROLq82hYedaT9yUix2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2It MmY1MWVjZDFhYTBlLzEvZ21qRzYweU8tZE01TkJZOTVSVFlWQzkyZENVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2ItMmY1MWVjZDFhYTBl LzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8JoMA0G CSqGSIb3DQEBCwUAA4IBAQB5SSa7yqbEpIz4X6qavOYlIgR2sGOd16Isln1Pc3m0 uUlSJPXanJYSFHE5iyp22vF2R5ijCcXTeAMeCyhsyaLjjWdwUFH3flNCq1bgxK0E jOGQ3xjBhwDI3/EH82ubSZwDWVI4NetGCi4bRo9a8bXAEO+WUVtk/bbp9P6EgY0w 2dokT6pN6OPlD2KeqmN24Zf3L97wDAkS0Euew18DU49CI7NJYIhQo18in/U1E+Gk pzn1K+IqWlqaVucy6PPtRC3fkDqQy5ZXje5BKm3T3olIdNJYtOuhHApwe4yH3LKa EpN4BX1iFp4OWgSqhWL9UWIHW02O4BA3BIpPJA61QhYh -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:21 2026 by rpki-client