This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/G7HS4Pe64aq7LX7Ac6sahYxcvsg.roa File: G7HS4Pe64aq7LX7Ac6sahYxcvsg.roa (raw, json) Hash identifier: CRoiGyn3+g1TcYhralq7D2YpvKZFCAsmyg1ItQBPBYo= Subject key identifier: 1B:B1:D2:E0:F7:BA:E1:AA:BB:2D:7E:C0:73:AB:1A:85:8C:5C:BE:C8 Certificate issuer: /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba Certificate serial: 019B7910B4429378F2BF406AB479553271C7 Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/G7HS4Pe64aq7LX7Ac6sahYxcvsg.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24929 IP address blocks: 45.66.140.0/22 maxlen: 24 83.175.168.0/22 maxlen: 24 109.232.240.0/24 maxlen: 24 194.54.24.0/22 maxlen: 22 2a0e:84c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b4:42:93:78:f2:bf:40:6a:b4:79:55:32:71:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bb1d2e0f7bae1aabb2d7ec073ab1a858c5cbec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:ab:9c:23:ed:ae:2e:ec:a9:73:1b:78:2e: ea:da:d3:d2:be:b4:76:20:1b:ba:9b:d9:8f:89:1d: 15:a6:64:46:62:45:bd:6a:28:9b:f7:bc:0e:1c:e3: 92:3e:95:d1:8b:1d:8d:9e:79:c1:9f:1e:3b:79:3b: f6:1e:c4:f6:35:5a:ea:ab:2d:ee:08:12:aa:4d:d7: c0:b4:ad:e1:ba:dd:9c:fa:06:f9:4c:c2:68:af:89: 4c:3f:01:82:f9:f8:05:ad:f3:65:1f:c2:35:63:89: 95:70:c5:ae:42:c7:30:63:63:49:b3:9f:9a:38:20: a8:d2:bc:2d:67:0d:2a:26:08:55:42:af:90:ce:29: 94:63:ec:12:5c:0a:f5:37:8a:e2:00:67:33:2c:a2: 80:d0:8e:28:02:72:a9:c8:69:6a:5a:3f:2f:77:df: a2:46:f6:9f:b3:00:9b:b3:7d:c9:b4:0e:25:fa:bc: 86:71:18:a8:1f:63:10:d2:64:8f:c8:80:16:bb:c2: b8:c3:1c:9b:8c:d6:bc:ae:4f:31:3f:5b:ca:8f:bf: cf:38:6c:e0:1c:f8:ec:04:b1:1e:ad:a5:b7:49:f6: 41:53:78:18:59:f5:22:12:64:bc:a6:4b:f6:d0:73: 77:17:34:e9:f6:10:f9:40:fc:56:9d:83:ff:c6:d0: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B1:D2:E0:F7:BA:E1:AA:BB:2D:7E:C0:73:AB:1A:85:8C:5C:BE:C8 X509v3 Authority Key Identifier: keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/G7HS4Pe64aq7LX7Ac6sahYxcvsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.140.0/22 83.175.168.0/22 109.232.240.0/24 194.54.24.0/22 IPv6: 2a0e:84c0::/32 Signature Algorithm: sha256WithRSAEncryption 24:fc:84:7b:76:a2:93:36:ad:ed:9a:25:42:07:6a:25:16:25: 47:22:59:d3:fe:43:8e:4c:12:27:39:9d:57:67:89:fe:df:e4: 3b:5e:2d:5f:c9:70:48:2d:58:b7:3b:4e:7d:07:8b:40:74:3e: 64:f7:1a:81:2f:b1:e9:5f:dd:aa:11:d9:1c:11:66:66:2a:9b: 84:d0:a1:1a:ae:6a:d0:59:d6:4f:da:99:63:11:51:a4:44:d2: 64:9c:ea:8c:92:be:68:5c:fb:ca:42:f8:9e:5b:96:ff:eb:4e: b3:1c:30:a6:a4:00:e5:04:f5:66:83:e0:5c:39:ef:99:84:aa: a3:53:c6:9e:bd:f0:8d:65:ae:9f:bf:82:4e:06:83:01:75:ed: 6f:a5:4a:69:2a:a5:90:87:a8:af:e9:6a:ac:f2:f3:2b:0d:aa: e4:28:a6:af:5d:2d:de:e6:30:f9:4b:cd:4d:55:f9:75:ad:c2: 00:47:0b:b4:97:9e:c1:a5:e6:16:54:53:51:20:96:93:6b:8c: de:6c:41:b3:bb:b7:ed:92:56:84:2f:48:f4:b9:47:a4:91:1e: c9:3b:46:43:25:52:58:9f:94:5a:78:32:4f:56:29:4a:56:f5: a6:94:21:dd:a2:ed:93:bc:31:03:19:b5:f9:2c:c9:29:b9:23: 21:93:ea:7b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt5ELRCk3jyv0BqtHlVMnHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjkyMGJiZDdmYjcwZWY1ZGJjZjJkMGZlYTIwMmJkOTU3 NjVlYmEwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmIxZDJlMGY3YmFlMWFhYmIyZDdlYzA3M2FiMWE4NThjNWNiZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpyrnCPtri7sqXMbeC7q2tPSvrR2 IBu6m9mPiR0VpmRGYkW9aiib97wOHOOSPpXRix2NnnnBnx47eTv2HsT2NVrqqy3u CBKqTdfAtK3hut2c+gb5TMJor4lMPwGC+fgFrfNlH8I1Y4mVcMWuQscwY2NJs5+a OCCo0rwtZw0qJghVQq+QzimUY+wSXAr1N4riAGczLKKA0I4oAnKpyGlqWj8vd9+i RvafswCbs33JtA4l+ryGcRioH2MQ0mSPyIAWu8K4wxybjNa8rk8xP1vKj7/POGzg HPjsBLEeraW3SfZBU3gYWfUiEmS8pkv20HN3FzTp9hD5QPxWnYP/xtB+wwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFBux0uD3uuGquy1+wHOrGoWMXL7IMB8GA1UdIwQY MBaAFPJpILvX+3DvXbzy0P6iAr2Vdl66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYt MGJjZmM1MzI5MzNjLzEvRzdIUzRQZTY0YXE3TFg3QWM2c2FoWXhjdnNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYtMGJjZmM1MzI5MzNj LzEvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLUKMAwQC U6+oAwQAbejwAwQCwjYYMA0EAgACMAcDBQAqDoTAMA0GCSqGSIb3DQEBCwUAA4IB AQAk/IR7dqKTNq3tmiVCB2olFiVHIlnT/kOOTBInOZ1XZ4n+3+Q7Xi1fyXBILVi3 O059B4tAdD5k9xqBL7HpX92qEdkcEWZmKpuE0KEarmrQWdZP2pljEVGkRNJknOqM kr5oXPvKQvieW5b/606zHDCmpADlBPVmg+BcOe+ZhKqjU8aevfCNZa6fv4JOBoMB de1vpUppKqWQh6iv6Wqs8vMrDarkKKavXS3e5jD5S81NVfl1rcIARwu0l57BpeYW VFNRIJaTa4zebEGzu7ftklaEL0j0uUekkR7JO0ZDJVJYn5RaeDJPVilKVvWmlCHd ou2TvDEDGbX5LMkpuSMhk+p7 -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:30 2026 by rpki-client