This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/gd9FyMAEx2zDcAvRasWsSCt8jII.roa File: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (raw, json) Hash identifier: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI= Subject key identifier: 81:DF:45:C8:C0:04:C7:6C:C3:70:0B:D1:6A:C5:AC:48:2B:7C:8C:82 Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Certificate serial: 019B7D5D0F0C455B6FC38E6DCC2600FB9456 Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/gd9FyMAEx2zDcAvRasWsSCt8jII.roa Signing time: Fri 02 Jan 2026 06:20:09 +0000 ROA not before: Fri 02 Jan 2026 06:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4809 IP address blocks: 147.78.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0f:0c:45:5b:6f:c3:8e:6d:cc:26:00:fb:94:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81df45c8c004c76cc3700bd16ac5ac482b7c8c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:0a:dd:a1:da:9e:21:f2:0a:4f:23:d6:b3: 8f:2b:a5:4d:7d:06:3b:5f:5e:61:9f:29:7f:9f:36: 0f:97:2f:d8:d9:e1:ad:9d:55:55:7d:25:16:9a:51: dd:b2:f5:ad:86:98:22:92:2c:d2:e3:3b:37:d2:1e: 8e:d1:b8:94:c1:5e:b1:63:04:cb:4a:78:a2:b2:b6: ab:54:74:c7:86:d0:8a:0f:fe:b5:2e:25:dd:f1:69: 02:bb:59:8c:6f:25:42:18:99:2a:51:d5:ab:17:07: b4:b8:7b:6a:0a:b4:2a:a7:db:13:86:ea:45:dd:61: b6:10:f0:63:98:5a:fa:55:06:48:96:d6:0d:5a:84: f5:c2:85:cc:6c:cb:88:cd:2c:46:3c:d9:4e:d5:6e: 5b:00:da:9a:f5:67:1c:11:86:7a:72:99:c0:39:28: 5c:e4:48:75:c6:fc:d0:ce:0d:40:c7:f6:84:0e:fe: 2b:38:5c:78:59:7e:63:ab:fc:c5:3f:8f:d6:b1:86: 02:94:1d:cc:b1:7e:24:71:5c:90:f8:66:37:e9:8b: 6d:c2:a4:bf:c4:6b:d2:22:b8:79:e4:ee:c9:65:b0: 93:d2:18:82:1b:27:3e:1b:29:3a:5c:63:9c:e8:67: d5:f6:d4:4c:0d:e2:70:09:55:c8:ac:32:5f:bc:85: f1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DF:45:C8:C0:04:C7:6C:C3:70:0B:D1:6A:C5:AC:48:2B:7C:8C:82 X509v3 Authority Key Identifier: keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/gd9FyMAEx2zDcAvRasWsSCt8jII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.132.0/23 Signature Algorithm: sha256WithRSAEncryption 33:33:5c:cc:72:eb:e8:e4:34:ee:fd:dc:0c:45:d2:43:43:57: 21:5d:a0:a1:2e:db:aa:ff:85:96:51:c1:f6:df:f9:b1:89:56: cd:6b:d6:2f:87:eb:cc:6a:72:dd:87:8a:9d:3a:5a:4d:67:c5: 80:58:36:4a:89:0e:63:c6:2c:f6:4d:bf:87:42:ed:2d:83:e7: da:49:cc:e8:35:51:9c:fd:b4:1f:39:ea:84:92:46:d3:8f:6f: de:e0:04:ba:32:18:7b:ff:18:10:e2:74:2a:82:a5:75:a1:2c: 76:88:e0:73:e6:82:0e:12:54:b3:9f:24:c6:cb:84:d4:93:3d: 53:b7:fc:f7:ea:99:7d:59:54:37:50:7c:b2:6f:d4:18:b1:18: e4:c0:44:9a:3a:92:3e:fc:d8:a8:3b:82:9c:ca:26:1b:bd:db: 6c:0d:3a:b5:98:a0:01:ab:c0:72:89:74:26:00:a8:db:05:3f: 3c:66:64:2f:60:4d:c1:da:04:c0:04:a3:36:f6:9d:f4:f2:98: e8:ca:8a:be:09:29:fb:83:11:b9:bb:c9:ae:e0:a6:d0:3a:98: 3b:49:69:75:fe:a4:96:82:d3:18:5e:d5:15:e7:37:e5:40:d5: 08:72:29:82:fa:91:e1:27:fd:79:3c:f5:7a:ed:1e:14:df:b8: 77:44:83:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQ8MRVtvw45tzCYA+5RWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj MzlmMzQwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWRmNDVjOGMwMDRjNzZjYzM3MDBiZDE2YWM1YWM0ODJiN2M4YzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuoK3aHaniHyCk8j1rOPK6VNfQY7 X15hnyl/nzYPly/Y2eGtnVVVfSUWmlHdsvWthpgikizS4zs30h6O0biUwV6xYwTL SniisrarVHTHhtCKD/61LiXd8WkCu1mMbyVCGJkqUdWrFwe0uHtqCrQqp9sThupF 3WG2EPBjmFr6VQZIltYNWoT1woXMbMuIzSxGPNlO1W5bANqa9WccEYZ6cpnAOShc 5Eh1xvzQzg1Ax/aEDv4rOFx4WX5jq/zFP4/WsYYClB3MsX4kcVyQ+GY36YttwqS/ xGvSIrh55O7JZbCT0hiCGyc+Gyk6XGOc6GfV9tRMDeJwCVXIrDJfvIXx2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIHfRcjABMdsw3AL0WrFrEgrfIyCMB8GA1UdIwQY MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt MjU2MzM5NzM2YzJiLzEvZ2Q5RnlNQUV4MnpEY0F2UmFzV3NTQ3Q4aklJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk06EMA0G CSqGSIb3DQEBCwUAA4IBAQAzM1zMcuvo5DTu/dwMRdJDQ1chXaChLtuq/4WWUcH2 3/mxiVbNa9Yvh+vManLdh4qdOlpNZ8WAWDZKiQ5jxiz2Tb+HQu0tg+faSczoNVGc /bQfOeqEkkbTj2/e4AS6Mhh7/xgQ4nQqgqV1oSx2iOBz5oIOElSznyTGy4TUkz1T t/z36pl9WVQ3UHyyb9QYsRjkwESaOpI+/NioO4KcyiYbvdtsDTq1mKABq8ByiXQm AKjbBT88ZmQvYE3B2gTABKM29p308pjoyoq+CSn7gxG5u8mu4KbQOpg7SWl1/qSW gtMYXtUV5zflQNUIcimC+pHhJ/15PPV67R4U37h3RINH -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:34 2026 by rpki-client