This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa File: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (raw, json) Hash identifier: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs= Subject key identifier: 1A:2F:F0:91:49:35:3B:5F:7F:2A:66:87:B1:0B:03:14:13:97:4C:81 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B7D5CFF2F64CED596943BED82DA2D86BE Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56547 IP address blocks: 79.127.8.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ff:2f:64:ce:d5:96:94:3b:ed:82:da:2d:86:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a2ff09149353b5f7f2a6687b10b031413974c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:a4:ff:16:70:a3:b4:eb:d8:dd:eb:45:75: 7d:da:f2:64:9f:d8:e3:10:ee:89:c2:87:49:88:a1: ea:62:13:97:6e:34:03:9e:45:d7:bb:2b:f3:67:a8: a5:d8:8a:16:6f:ec:6c:6a:9a:5b:99:78:24:78:d6: 21:f5:62:ca:43:71:8c:80:4b:94:35:19:bb:b2:d2: 1a:7f:98:4a:53:99:83:d6:34:24:9d:2c:e7:5a:78: 58:af:62:40:91:46:e3:33:ed:e0:61:63:73:bd:96: bf:01:f8:17:65:fe:4f:3e:6f:98:ba:ca:ce:1f:22: 71:7f:cd:24:93:ca:b3:49:92:1b:35:8e:f5:85:22: ce:86:bf:50:49:48:32:ca:2f:39:2f:17:a6:58:1d: e7:8e:17:f6:8a:7a:3b:39:4d:ab:22:0a:e0:20:a2: 97:7c:18:f5:b3:1e:63:7a:d0:19:ab:b6:87:cb:1e: 7d:11:07:d6:3a:af:f9:08:1b:e0:a0:42:6c:8a:97: 28:e0:8d:1e:4c:75:3c:5f:eb:01:71:08:31:e3:83: 6d:f6:e0:00:2e:eb:21:5c:98:84:18:f5:64:2b:3d: 2e:38:d5:1f:b3:42:70:64:59:29:bf:07:d9:5e:e6: d4:c4:66:8f:21:aa:14:84:35:d4:29:7f:b8:ac:8f: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2F:F0:91:49:35:3B:5F:7F:2A:66:87:B1:0B:03:14:13:97:4C:81 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.127.8.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:40:24:72:18:f6:a2:9a:8a:56:19:39:f0:1c:71:b1:3e:08: 01:62:3d:5e:3b:5e:b1:9b:27:05:83:0b:b8:29:c1:c7:21:30: 99:bb:7a:81:00:68:da:dc:0f:da:56:e9:ff:a5:88:81:ef:d7: 7c:d9:6e:03:c7:21:78:2d:a6:68:50:50:90:88:41:7d:44:c2: 5b:98:db:82:4e:11:e2:ec:88:6e:ce:69:ff:c2:c4:ae:03:40: 71:8f:29:43:76:bc:cd:91:8f:f6:6a:96:d1:df:cf:3a:a4:0e: 0e:52:c4:7d:bb:43:33:1a:24:8d:16:b3:80:c7:5c:fe:85:77: 20:2c:ba:86:5c:73:da:b9:1a:18:66:eb:15:cb:75:48:e8:f4: e3:f2:47:d7:25:45:2e:1f:81:7d:6e:08:a6:5a:10:35:19:80: af:bc:24:c8:2b:b7:02:fa:24:22:17:ec:3d:11:42:98:34:aa: cb:e3:06:6a:ef:11:47:f8:ef:f1:63:12:06:62:98:af:fd:bc: 8e:cd:b3:c8:42:ea:be:e7:ce:33:93:9b:0f:d3:f0:8a:27:aa: 1b:b5:95:93:38:64:68:0c:df:90:bd:9e:99:6b:cd:01:9a:5e: 73:48:65:63:fa:47:94:ac:77:f1:5a:81:a2:a3:ae:2a:4d:d3: 94:62:b4:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XP8vZM7VlpQ77YLaLYa+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTJmZjA5MTQ5MzUzYjVmN2YyYTY2ODdiMTBiMDMxNDEzOTc0YzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiik/xZwo7Tr2N3rRXV92vJkn9jj EO6JwodJiKHqYhOXbjQDnkXXuyvzZ6il2IoWb+xsappbmXgkeNYh9WLKQ3GMgEuU NRm7stIaf5hKU5mD1jQknSznWnhYr2JAkUbjM+3gYWNzvZa/AfgXZf5PPm+YusrO HyJxf80kk8qzSZIbNY71hSLOhr9QSUgyyi85LxemWB3njhf2ino7OU2rIgrgIKKX fBj1sx5jetAZq7aHyx59EQfWOq/5CBvgoEJsipco4I0eTHU8X+sBcQgx44Nt9uAA LushXJiEGPVkKz0uONUfs0JwZFkpvwfZXubUxGaPIaoUhDXUKX+4rI9MiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBov8JFJNTtffypmh7ELAxQTl0yBMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvR2lfd2tVazFPMTlfS21hSHNRc0RGQk9YVElFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT38IMA0G CSqGSIb3DQEBCwUAA4IBAQAcQCRyGPaimopWGTnwHHGxPggBYj1eO16xmycFgwu4 KcHHITCZu3qBAGja3A/aVun/pYiB79d82W4DxyF4LaZoUFCQiEF9RMJbmNuCThHi 7Ihuzmn/wsSuA0BxjylDdrzNkY/2apbR3886pA4OUsR9u0MzGiSNFrOAx1z+hXcg LLqGXHPauRoYZusVy3VI6PTj8kfXJUUuH4F9bgimWhA1GYCvvCTIK7cC+iQiF+w9 EUKYNKrL4wZq7xFH+O/xYxIGYpiv/byOzbPIQuq+584zk5sP0/CKJ6obtZWTOGRo DN+QvZ6Za80Bml5zSGVj+keUrHfxWoGio64qTdOUYrSu -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:35 2026 by rpki-client