This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/gVi39EeTsdnoO7eTwDanhGM1H0I.roa File: gVi39EeTsdnoO7eTwDanhGM1H0I.roa (raw, json) Hash identifier: DtiliU1JGliSpHI+PJT+vAy9Sc5gsRSb35eDO6PM7lY= Subject key identifier: 81:58:B7:F4:47:93:B1:D9:E8:3B:B7:93:C0:36:A7:84:63:35:1F:42 Certificate issuer: /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d Certificate serial: 019B7F15CFBDA101E82F790A9FE97BA648DB Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/gVi39EeTsdnoO7eTwDanhGM1H0I.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38719 IP address blocks: 176.74.24.0/21 maxlen: 24 185.184.152.0/22 maxlen: 24 2a00:fd80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cf:bd:a1:01:e8:2f:79:0a:9f:e9:7b:a6:48:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8158b7f44793b1d9e83bb793c036a78463351f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:b6:cc:ee:10:29:b1:d5:11:6d:21:46:d4: 89:8d:3e:06:53:3b:64:00:d1:3d:48:56:00:fd:9c: a6:d9:48:b8:41:40:70:10:26:c9:75:95:ab:5b:b9: 23:08:c1:f5:3a:78:9b:9d:cc:0e:82:1b:8f:c8:e7: b2:66:ef:35:c6:7e:2e:ab:12:f7:ff:26:a5:4b:92: 3b:a5:8b:58:e9:af:38:6f:0a:09:a6:07:75:b9:8b: 82:0e:5a:1c:5b:65:ee:6d:78:07:5d:03:0a:df:43: 97:07:6e:41:96:00:7c:aa:ea:b4:05:3b:ec:fc:3e: b2:93:c6:4b:84:92:78:45:0d:21:71:de:21:3b:d6: 54:d0:f0:77:47:1d:c0:0f:83:a5:9e:18:7c:3b:12: 5c:2c:92:59:ed:07:2c:63:8f:bb:ec:5a:bc:d7:c4: 47:84:2c:d7:88:ec:ba:d0:40:52:9a:2a:31:75:c2: e9:d2:19:53:f3:63:a9:80:5a:de:0e:a0:be:e4:0d: 73:b4:74:a0:c6:24:e4:9a:6d:19:53:b3:14:17:7c: 30:10:d4:53:a9:86:af:05:5c:2f:ca:8d:1d:58:35: 9b:f0:2d:f5:d4:10:dc:a8:11:9a:a5:d9:16:86:30: 2b:93:e3:2e:6e:66:d2:69:78:e7:31:cc:d2:d6:c5: ee:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:58:B7:F4:47:93:B1:D9:E8:3B:B7:93:C0:36:A7:84:63:35:1F:42 X509v3 Authority Key Identifier: keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/gVi39EeTsdnoO7eTwDanhGM1H0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.74.24.0/21 185.184.152.0/22 IPv6: 2a00:fd80::/32 Signature Algorithm: sha256WithRSAEncryption 2f:dd:87:b2:9f:99:f1:7a:4c:2b:8a:a5:d6:2e:7d:23:c9:46: 3c:a7:6c:60:55:2a:83:51:4e:41:2a:37:77:f3:a1:2f:a1:d5: c1:bb:f4:ec:d3:e2:58:cd:4a:e3:8f:09:e2:b6:ed:b8:99:f3: 04:94:15:f6:dc:0c:22:36:84:57:07:9d:08:38:5b:1d:47:34: 5f:78:19:85:cc:97:96:01:d9:e1:d1:fe:3a:be:f7:17:63:2d: 93:0c:b8:06:c5:9d:06:23:79:8d:96:4d:3a:43:61:08:67:88: f6:36:11:5e:a7:22:52:2c:f2:ac:cf:40:7f:c1:7b:6b:61:66: 48:f3:03:1d:41:ad:74:6c:60:58:11:f7:72:e5:b4:a8:1c:e9: af:9e:81:10:8e:6e:19:dd:31:81:3c:e1:45:35:3a:04:56:75: 30:73:dd:e3:dd:e1:70:70:0e:89:9d:39:c6:20:8a:3d:60:c8: 55:6e:84:ea:b8:a7:da:3c:d2:da:cd:ee:89:00:85:56:3d:1f: bd:ab:73:a1:28:95:27:ec:1b:ad:95:7a:5e:1d:fe:96:37:4f: f0:22:7c:f8:8b:45:88:dd:19:69:49:a9:00:2c:3b:a9:cc:26: 52:d4:36:c7:88:67:35:6d:b9:cb:f6:08:31:29:d9:26:1d:26: 41:ea:67:65 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/Fc+9oQHoL3kKn+l7pkjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNzdjY2Q3YTk0NDE1ZGZjNjhjY2NhODc0ZTk0YzJlOGMy MjIwMmQwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTU4YjdmNDQ3OTNiMWQ5ZTgzYmI3OTNjMDM2YTc4NDYzMzUxZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpm2zO4QKbHVEW0hRtSJjT4GUztk ANE9SFYA/Zym2Ui4QUBwECbJdZWrW7kjCMH1OnibncwOghuPyOeyZu81xn4uqxL3 /yalS5I7pYtY6a84bwoJpgd1uYuCDlocW2XubXgHXQMK30OXB25BlgB8quq0BTvs /D6yk8ZLhJJ4RQ0hcd4hO9ZU0PB3Rx3AD4Olnhh8OxJcLJJZ7QcsY4+77Fq818RH hCzXiOy60EBSmioxdcLp0hlT82OpgFreDqC+5A1ztHSgxiTkmm0ZU7MUF3wwENRT qYavBVwvyo0dWDWb8C311BDcqBGapdkWhjArk+MubmbSaXjnMczS1sXuqQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIFYt/RHk7HZ6Du3k8A2p4RjNR9CMB8GA1UdIwQY MBaAFE13zNepRBXfxozMqHTpTC6MIiAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjIt MTBlNTdmNTZhMTdhLzEvZ1ZpMzlFZVRzZG5vTzdlVHdEYW5oR00xSDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjItMTBlNTdmNTZhMTdh LzEvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsEoYAwQC ubiYMA0EAgACMAcDBQAqAP2AMA0GCSqGSIb3DQEBCwUAA4IBAQAv3Yeyn5nxekwr iqXWLn0jyUY8p2xgVSqDUU5BKjd386EvodXBu/Ts0+JYzUrjjwnitu24mfMElBX2 3AwiNoRXB50IOFsdRzRfeBmFzJeWAdnh0f46vvcXYy2TDLgGxZ0GI3mNlk06Q2EI Z4j2NhFepyJSLPKsz0B/wXtrYWZI8wMdQa10bGBYEfdy5bSoHOmvnoEQjm4Z3TGB POFFNToEVnUwc93j3eFwcA6JnTnGIIo9YMhVboTquKfaPNLaze6JAIVWPR+9q3Oh KJUn7ButlXpeHf6WN0/wInz4i0WI3RlpSakALDupzCZS1DbHiGc1bbnL9ggxKdkm HSZB6mdl -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:06 2026 by rpki-client