This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/gjKej6nLmog1Pdhy2m7-nfTgjGw.roa File: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (raw, json) Hash identifier: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60= Subject key identifier: 82:32:9E:8F:A9:CB:9A:88:35:3D:D8:72:DA:6E:FE:9D:F4:E0:8C:6C Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Certificate serial: 019B7C808735F8DE8C7A7BAD2976F6B55871 Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/gjKej6nLmog1Pdhy2m7-nfTgjGw.roa Signing time: Fri 02 Jan 2026 02:19:16 +0000 ROA not before: Fri 02 Jan 2026 02:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49100 IP address blocks: 176.122.210.0/24 maxlen: 24 176.122.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:87:35:f8:de:8c:7a:7b:ad:29:76:f6:b5:58:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82329e8fa9cb9a88353dd872da6efe9df4e08c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:63:9f:00:2b:3c:9f:0e:2f:85:6d:ab:0f:63: 57:b1:6b:3e:ff:07:58:f0:29:17:1c:f1:11:b3:11: 3c:fa:dc:b0:a0:32:95:58:78:f1:d2:1b:3d:f0:94: 37:ff:ac:11:e6:f8:5e:8e:6b:ea:16:30:4b:14:8a: 5f:fc:f2:11:86:fc:97:25:3b:9e:80:4c:74:9d:27: a5:ac:79:71:8c:10:61:19:57:83:d6:1d:0f:28:19: 8d:9e:71:67:08:8b:63:42:5c:16:01:72:d6:ea:03: 7c:26:18:a2:33:bd:00:d5:df:84:3d:73:06:79:64: 5f:0f:8c:5f:75:d5:61:5d:c8:70:2e:a8:56:f1:5c: d0:f2:ab:ac:1e:0e:63:82:f7:dc:33:f6:0e:66:54: f9:8e:f4:68:86:73:b5:8a:63:6b:52:51:98:4e:9b: 97:b7:41:e4:f4:61:61:bc:21:ee:a4:7c:6f:eb:10: ec:92:0c:05:bd:c9:46:83:da:96:27:29:f0:73:b1: 16:b1:32:be:77:c7:0f:f6:e9:c8:72:c9:cd:02:8d: d8:47:32:14:80:3c:e8:3b:bb:22:4d:60:b8:32:60: 83:36:96:f1:e4:34:ff:c3:7d:63:cd:92:13:5c:0c: 8f:42:c8:82:97:4c:84:11:03:4d:c8:8d:be:4b:63: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:32:9E:8F:A9:CB:9A:88:35:3D:D8:72:DA:6E:FE:9D:F4:E0:8C:6C X509v3 Authority Key Identifier: keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/gjKej6nLmog1Pdhy2m7-nfTgjGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.122.210.0/23 Signature Algorithm: sha256WithRSAEncryption 08:31:22:35:dc:9b:96:16:89:f3:0b:8a:a5:13:56:5b:7c:91: 0d:9b:73:8e:02:d5:47:b5:70:27:8f:eb:ef:f2:c2:c9:e2:e7: b0:b9:40:fa:41:67:c8:ad:5a:1e:15:a4:f3:7c:7a:9b:09:34: e2:23:e7:9e:a2:78:00:49:13:9c:86:6e:6d:26:3e:88:54:95: 66:ce:2b:d9:d4:25:1f:3e:37:a7:50:30:c8:5e:ae:2f:6f:f1: a5:80:a6:aa:06:21:a5:ff:9e:3a:39:c9:d7:36:41:f9:60:46: 79:98:71:72:58:43:7f:bd:81:47:6f:e7:ec:7d:3d:9e:5e:c6: b1:28:62:93:c1:b3:86:3f:9a:a2:2b:db:88:bf:89:f6:66:44: 4d:45:d4:2e:4b:c5:6c:c4:3e:65:10:70:6d:09:36:18:be:2a: 89:22:55:ab:4a:9d:d3:e6:eb:91:96:e4:75:8a:a0:06:af:a9: 47:8e:ed:55:a7:ed:85:d0:25:e9:94:9a:ff:44:84:06:2d:26: f6:93:5b:6c:f6:2f:31:19:83:cf:ad:a7:9a:b9:48:30:d6:05: 37:e7:86:a2:82:c0:63:c7:69:4c:9c:01:8a:0a:fa:46:31:e9: 3b:c9:33:9a:6b:10:a1:62:da:e6:d9:c8:01:8a:fb:42:fb:03: 77:40:bd:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIc1+N6MenutKXb2tVhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2 Zjg4MzIwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjMyOWU4ZmE5Y2I5YTg4MzUzZGQ4NzJkYTZlZmU5ZGY0ZTA4YzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42OfACs8nw4vhW2rD2NXsWs+/wdY 8CkXHPERsxE8+tywoDKVWHjx0hs98JQ3/6wR5vhejmvqFjBLFIpf/PIRhvyXJTue gEx0nSelrHlxjBBhGVeD1h0PKBmNnnFnCItjQlwWAXLW6gN8JhiiM70A1d+EPXMG eWRfD4xfddVhXchwLqhW8VzQ8qusHg5jgvfcM/YOZlT5jvRohnO1imNrUlGYTpuX t0Hk9GFhvCHupHxv6xDskgwFvclGg9qWJynwc7EWsTK+d8cP9unIcsnNAo3YRzIU gDzoO7siTWC4MmCDNpbx5DT/w31jzZITXAyPQsiCl0yEEQNNyI2+S2OX8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIIyno+py5qINT3Yctpu/p304IxsMB8GA1UdIwQY MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt Y2I5ZTFlZDc3OWFjLzEvZ2pLZWo2bkxtb2cxUGRoeTJtNy1uZlRnakd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHrSMA0G CSqGSIb3DQEBCwUAA4IBAQAIMSI13JuWFonzC4qlE1ZbfJENm3OOAtVHtXAnj+vv 8sLJ4uewuUD6QWfIrVoeFaTzfHqbCTTiI+eeongASROchm5tJj6IVJVmzivZ1CUf PjenUDDIXq4vb/GlgKaqBiGl/546OcnXNkH5YEZ5mHFyWEN/vYFHb+fsfT2eXsax KGKTwbOGP5qiK9uIv4n2ZkRNRdQuS8VsxD5lEHBtCTYYviqJIlWrSp3T5uuRluR1 iqAGr6lHju1Vp+2F0CXplJr/RIQGLSb2k1ts9i8xGYPPraeauUgw1gU354aigsBj x2lMnAGKCvpGMek7yTOaaxChYtrm2cgBivtC+wN3QL27 -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:31 2026 by rpki-client