This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/ggiN19hON3fGMR1iyBOn5QHg5K0.roa File: ggiN19hON3fGMR1iyBOn5QHg5K0.roa (raw, json) Hash identifier: +yIZfIWfHK3xTt3gd2tGqutsEXcMSM2ci7Is4Kr/vmo= Subject key identifier: 82:08:8D:D7:D8:4E:37:77:C6:31:1D:62:C8:13:A7:E5:01:E0:E4:AD Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b Certificate serial: 019AE0B41018370CC7E750D65CF0861D7B29 Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/ggiN19hON3fGMR1iyBOn5QHg5K0.roa Signing time: Tue 02 Dec 2025 20:14:48 +0000 ROA not before: Tue 02 Dec 2025 20:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8888 IP address blocks: 78.31.211.0/24 maxlen: 24 94.124.79.0/24 maxlen: 24 146.19.0.0/24 maxlen: 24 146.19.145.0/24 maxlen: 24 2a11::/32 maxlen: 48 2a11:3::/32 maxlen: 48 2a11:4::/30 maxlen: 48 2a11:8080::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b4:10:18:37:0c:c7:e7:50:d6:5c:f0:86:1d:7b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b Validity Not Before: Dec 2 20:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=82088dd7d84e3777c6311d62c813a7e501e0e4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:2a:2b:8f:41:e3:bf:5b:e2:72:f8:72:92: b2:c6:46:90:d4:28:11:08:14:d9:4c:22:8b:3d:0c: ea:6f:7b:29:3d:e5:0d:a8:ac:90:64:60:77:b7:a9: 26:77:f4:92:11:ce:a8:8c:48:30:0b:ac:df:42:24: 73:92:7a:f9:9a:61:d8:6f:98:81:d6:ff:be:0c:ef: 6e:2a:97:f5:e9:5e:f7:10:0a:f6:e4:97:ee:10:22: 8a:75:5f:f3:84:40:7e:95:a0:77:b5:e1:03:08:5d: 6d:33:8e:82:51:11:35:f6:3a:35:98:69:0f:82:82: 9c:1f:ec:b0:a2:39:dc:09:6a:78:a8:50:a3:f0:47: b4:54:df:32:42:06:ec:71:ce:d3:23:4e:32:bb:e1: 96:53:d4:76:0c:f8:8c:37:cd:0e:45:7a:f7:90:9f: 6d:64:c0:d0:9c:c5:5e:92:13:3d:85:7b:be:b5:b7: da:ac:08:af:9c:a8:39:23:31:65:b4:20:57:9c:ba: b8:0d:38:d3:3d:e5:8a:50:b4:05:aa:87:11:fd:b3: a6:12:8b:83:73:19:70:3c:b6:d1:2e:8c:4c:37:32: 48:41:4a:7b:f4:63:1e:b8:60:ec:a7:7d:98:d5:f1: c8:46:b9:e9:84:97:db:c0:8c:e6:78:a0:cc:f1:fb: 97:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:08:8D:D7:D8:4E:37:77:C6:31:1D:62:C8:13:A7:E5:01:E0:E4:AD X509v3 Authority Key Identifier: keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/ggiN19hON3fGMR1iyBOn5QHg5K0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.211.0/24 94.124.79.0/24 146.19.0.0/24 146.19.145.0/24 IPv6: 2a11::/32 2a11:3::-2a11:7:ffff:ffff:ffff:ffff:ffff:ffff 2a11:8080::/29 Signature Algorithm: sha256WithRSAEncryption b1:13:e7:df:80:d1:2f:12:0f:7a:76:f7:21:56:6b:e1:6a:ef: 06:6e:12:ae:48:ff:0a:21:15:cd:78:76:ca:a0:62:19:b3:7a: 54:8c:07:0d:c8:82:4c:6c:29:4d:38:a7:86:1f:c0:7a:7b:66: 70:85:21:40:04:2a:b1:26:59:c7:5b:89:f4:92:8f:2c:53:09: d0:cd:4e:50:ab:a6:45:14:db:1b:93:ea:99:60:5e:4b:35:84: 4c:3e:7a:00:3c:14:69:4d:22:e1:e9:88:30:a6:e1:22:d1:b5: 48:3d:89:85:d6:3b:7f:13:20:e1:87:0f:d5:06:bc:d6:96:cd: 06:24:b5:4d:af:d4:98:78:03:69:ba:4d:c8:d0:7d:8d:90:68: 34:b8:d5:fa:3b:46:af:0a:ee:be:4b:96:09:c7:2f:4f:9f:84: f1:d7:dc:82:e6:ba:ae:aa:1f:84:e5:2b:2a:cb:9d:af:66:f6: f7:55:dc:bd:91:f5:89:6a:c6:ee:74:44:2e:61:c0:5d:47:63: 7f:22:b5:dd:c1:72:97:7b:67:68:54:c9:c3:7f:0f:3b:a0:28: 9c:2a:11:84:ab:b5:2c:77:c1:b9:b5:6a:0e:b2:b9:13:b3:3f: 52:fd:cc:dc:14:d3:19:aa:76:9c:f7:db:0e:7d:bc:ae:19:e4: de:63:7c:ec -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZrgtBAYNwzH51DWXPCGHXspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjUxMjI5NzczYWY5MTU3ZTMxNzE2MGY5ZGM4MDBmMzgx ZTBiMmIwHhcNMjUxMjAyMjAxNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjA4OGRkN2Q4NGUzNzc3YzYzMTFkNjJjODEzYTdlNTAxZTBlNGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHYqK49B479b4nL4cpKyxkaQ1CgR CBTZTCKLPQzqb3spPeUNqKyQZGB3t6kmd/SSEc6ojEgwC6zfQiRzknr5mmHYb5iB 1v++DO9uKpf16V73EAr25JfuECKKdV/zhEB+laB3teEDCF1tM46CURE19jo1mGkP goKcH+ywojncCWp4qFCj8Ee0VN8yQgbscc7TI04yu+GWU9R2DPiMN80ORXr3kJ9t ZMDQnMVekhM9hXu+tbfarAivnKg5IzFltCBXnLq4DTjTPeWKULQFqocR/bOmEouD cxlwPLbRLoxMNzJIQUp79GMeuGDsp32Y1fHIRrnphJfbwIzmeKDM8fuXxwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFIIIjdfYTjd3xjEdYsgTp+UB4OStMB8GA1UdIwQY MBaAFHr1Eil3OvkVfjFxYPncgA84HgsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjIt ZWUxZWE2MzZlZDRmLzEvZ2dpTjE5aE9OM2ZHTVIxaXlCT241UUhnNUswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjItZWUxZWE2MzZlZDRm LzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAeBAIAATAYAwQATh/TAwQA XnxPAwQAkhMAAwQAkhORMCQEAgACMB4DBQAqEQAAMA4DBQAqEQADAwUDKhEAAAMF AyoRgIAwDQYJKoZIhvcNAQELBQADggEBALET59+A0S8SD3p29yFWa+Fq7wZuEq5I /wohFc14dsqgYhmzelSMBw3IgkxsKU04p4YfwHp7ZnCFIUAEKrEmWcdbifSSjyxT CdDNTlCrpkUU2xuT6plgXks1hEw+egA8FGlNIuHpiDCm4SLRtUg9iYXWO38TIOGH D9UGvNaWzQYktU2v1Jh4A2m6TcjQfY2QaDS41fo7Rq8K7r5LlgnHL0+fhPHX3ILm uq6qH4TlKyrLna9m9vdV3L2R9Ylqxu50RC5hwF1HY38itd3Bcpd7Z2hUycN/Dzug KJwqEYSrtSx3wbm1ag6yuROzP1L9zNwU0xmqdpz32w59vK4Z5N5jfOw= -----END CERTIFICATE-----Generated at Sat Dec 6 18:46:44 2025 by rpki-client