This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa File: gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa (raw, json) Hash identifier: NAQ/vI5+2VgZpVpsxQmGoZaiAZnJI/pT7XEYYA4d1IM= Subject key identifier: 82:BD:7B:51:86:D1:8B:B7:10:E9:E4:3D:13:20:C5:F8:2B:89:22:9E Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019B7C12DD86D8AB85C76140E8F2DB4804BC Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28716 IP address blocks: 147.123.80.0/22 maxlen: 24 147.123.84.0/22 maxlen: 24 147.123.88.0/22 maxlen: 24 147.123.92.0/22 maxlen: 24 147.123.96.0/22 maxlen: 24 147.123.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:dd:86:d8:ab:85:c7:61:40:e8:f2:db:48:04:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82bd7b5186d18bb710e9e43d1320c5f82b89229e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:cd:ea:d0:99:18:63:3a:66:d7:49:87:ee: 00:2e:ff:53:a5:94:e0:4c:f6:79:54:e0:7d:ed:c8: d8:d9:96:27:0d:57:e6:70:e6:11:21:d1:a2:10:1d: cf:0f:62:29:5d:49:7e:34:94:f1:2d:6f:bd:0f:eb: 82:77:8c:1d:42:bd:42:d7:4a:58:7d:4a:38:a4:08: b6:34:83:39:e4:a0:79:ba:94:51:e7:9b:37:f0:54: 05:36:25:8b:1d:c4:00:a2:a6:6a:99:d6:b8:52:22: 87:79:92:3d:d6:8c:de:79:7e:5a:d7:4a:e9:32:26: a1:2e:e8:ab:3e:fe:d4:64:9f:4d:12:69:4c:9b:64: c4:e8:c4:f9:e6:02:c7:68:52:02:fd:76:a3:ad:51: 8a:24:4c:4a:a6:38:69:84:02:7a:e0:da:b6:7f:0e: 28:9b:67:e5:31:fb:f4:15:6e:6a:3f:00:84:d4:de: dc:d4:1a:c3:0c:69:29:b8:79:ef:05:30:3e:2b:45: da:dd:30:9a:02:5a:cb:d7:71:34:4d:9e:a9:7f:d5: d2:4d:8c:4a:b2:41:8e:2c:2e:35:86:f2:31:57:fc: b2:86:78:33:e3:dd:b3:24:4f:4e:3c:ee:c2:04:ff: 25:0f:41:ce:59:39:94:f6:8d:48:b6:87:b1:dc:42: eb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BD:7B:51:86:D1:8B:B7:10:E9:E4:3D:13:20:C5:F8:2B:89:22:9E X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.123.80.0-147.123.103.255 Signature Algorithm: sha256WithRSAEncryption 27:b1:59:05:79:58:73:a6:8a:a6:32:80:99:17:c1:4b:88:8a: 49:2d:03:17:3a:a9:1f:73:f5:f2:1e:49:7f:9c:0e:d9:48:a6: 2f:87:88:8d:57:0d:b2:99:7f:74:61:b1:0c:31:d8:f2:90:65: 2f:8f:ec:d1:19:da:a0:cb:4c:d7:4a:87:b4:2f:d9:a9:c2:33: a0:b8:bb:ad:c2:ed:af:1f:e7:2a:50:cc:9e:25:7a:03:88:c6: fb:b7:40:e1:40:91:14:59:96:d2:7a:a5:15:1a:36:28:fa:d2: 2b:69:25:ea:bd:40:9f:81:8e:0c:d5:66:93:e9:66:99:21:21: 51:99:36:f4:ba:30:cd:b1:0c:ab:17:8f:6d:6c:c8:bf:56:23: 1a:ae:76:06:38:60:0f:78:df:00:05:5c:c9:e2:4e:18:bb:3c: 74:0a:d0:33:de:6b:c4:7c:a0:ee:c4:e2:bd:7e:40:e9:5f:f3: 62:06:84:f5:89:ef:8a:46:5e:1a:43:f7:3a:a2:fe:8a:9e:76: 76:0a:f2:79:fb:25:80:35:0e:20:22:03:ab:49:cc:b8:a1:0d: a3:8a:e7:d4:c0:2e:ca:ef:5f:76:32:9a:f7:18:55:50:0a:73: a6:93:88:d2:40:c6:94:eb:96:21:72:02:25:22:f8:e0:43:06: 19:bc:eb:bb -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8Et2G2KuFx2FA6PLbSAS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmJkN2I1MTg2ZDE4YmI3MTBlOWU0M2QxMzIwYzVmODJiODkyMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEDN6tCZGGM6ZtdJh+4ALv9TpZTg TPZ5VOB97cjY2ZYnDVfmcOYRIdGiEB3PD2IpXUl+NJTxLW+9D+uCd4wdQr1C10pY fUo4pAi2NIM55KB5upRR55s38FQFNiWLHcQAoqZqmda4UiKHeZI91ozeeX5a10rp MiahLuirPv7UZJ9NEmlMm2TE6MT55gLHaFIC/XajrVGKJExKpjhphAJ64Nq2fw4o m2flMfv0FW5qPwCE1N7c1BrDDGkpuHnvBTA+K0Xa3TCaAlrL13E0TZ6pf9XSTYxK skGOLC41hvIxV/yyhngz492zJE9OPO7CBP8lD0HOWTmU9o1Itoex3ELrswIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIK9e1GG0Yu3EOnkPRMgxfgriSKeMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvZ3IxN1VZYlJpN2NRNmVROUV5REYtQ3VKSXA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASTe1AD BAOTe2AwDQYJKoZIhvcNAQELBQADggEBACexWQV5WHOmiqYygJkXwUuIikktAxc6 qR9z9fIeSX+cDtlIpi+HiI1XDbKZf3RhsQwx2PKQZS+P7NEZ2qDLTNdKh7Qv2anC M6C4u63C7a8f5ypQzJ4legOIxvu3QOFAkRRZltJ6pRUaNij60itpJeq9QJ+BjgzV ZpPpZpkhIVGZNvS6MM2xDKsXj21syL9WIxqudgY4YA943wAFXMniThi7PHQK0DPe a8R8oO7E4r1+QOlf82IGhPWJ74pGXhpD9zqi/oqednYK8nn7JYA1DiAiA6tJzLih DaOK59TALsrvX3YymvcYVVAKc6aTiNJAxpTrliFyAiUi+OBDBhm867s= -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:43 2026 by rpki-client