This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/gNIwlQhqrQHrAmcQt_v7U7yPQls.roa File: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (raw, json) Hash identifier: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I= Subject key identifier: 80:D2:30:95:08:6A:AD:01:EB:02:67:10:B7:FB:FB:53:BC:8F:42:5B Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57 Certificate serial: 019B77C74F69EFDC5767340CFB3E79CEEB7B Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/gNIwlQhqrQHrAmcQt_v7U7yPQls.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29075 IP address blocks: 194.147.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4f:69:ef:dc:57:67:34:0c:fb:3e:79:ce:eb:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80d23095086aad01eb026710b7fbfb53bc8f425b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cd:6a:11:80:10:e7:63:3e:22:b9:59:e8:09: 3e:35:af:ad:eb:09:45:0e:f6:b7:51:79:9f:88:f7: 2d:9d:d1:39:ff:2a:7d:3c:13:c2:f9:0d:b0:cf:b4: 86:6b:25:d5:f2:63:a9:91:32:7d:e8:f0:5a:26:dc: 3e:4e:ae:21:3d:01:06:58:54:2b:7f:fd:30:40:88: 78:43:07:bc:68:4b:f6:10:78:b4:03:64:6d:54:77: 29:df:a5:e0:37:0a:f5:8b:7a:9c:c6:f6:74:ac:e4: 7c:91:e9:0d:2f:8e:a2:4b:da:76:96:91:fa:83:cb: 81:de:f2:de:b5:71:7e:aa:32:ca:d3:aa:91:9c:2d: 58:b7:46:2e:03:74:54:ce:1e:f9:a7:3d:4b:9f:c8: 33:73:a3:04:02:8b:5a:ca:98:92:85:d2:2a:df:0b: ec:e4:f5:64:72:7d:1d:c9:c0:51:13:a5:8e:b1:58: 68:1a:0a:9d:fd:7f:69:3f:d4:03:55:a9:63:1a:e9: 5b:57:f5:af:a7:ce:21:b3:30:a4:1e:b7:a2:fd:8e: 22:ed:57:03:30:14:3c:15:27:b5:45:72:ff:57:fa: 1b:8d:32:84:5e:c1:69:c3:0e:64:9c:68:5c:40:27: 96:59:89:87:19:d2:38:39:70:b2:b8:b3:ba:67:5f: 7a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D2:30:95:08:6A:AD:01:EB:02:67:10:B7:FB:FB:53:BC:8F:42:5B X509v3 Authority Key Identifier: keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/gNIwlQhqrQHrAmcQt_v7U7yPQls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.152.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:3b:ca:0f:6c:42:4e:f8:a0:96:55:f9:0b:6b:34:9a:37:cd: 97:dc:24:ec:68:7f:0a:b2:ef:1a:8f:5d:d0:1f:dd:08:3c:89: 27:dd:e2:34:b6:3b:dc:b9:bd:7d:b4:a1:83:61:6e:00:1a:8d: 7a:c5:ab:5a:27:e0:21:47:22:2b:c9:20:d5:d7:79:e9:b7:ab: 56:fe:b4:3c:34:95:21:57:31:2b:e3:e2:68:18:a8:19:e8:a5: 37:ab:65:1d:01:a1:3b:98:b3:c5:da:72:54:ce:26:27:54:a2: 7a:54:55:2c:56:2c:90:84:0a:d9:67:54:ff:2e:81:fb:d9:55: 5b:ac:b3:55:a3:a8:1c:db:c3:47:6d:2e:ba:f8:e0:25:84:f0: cf:de:9c:ca:52:11:5d:b9:d5:11:3a:6d:2b:85:00:d8:11:b7: 3c:26:49:c2:de:0b:38:f8:a3:b4:a8:89:2c:6c:67:74:a0:c9: a5:e1:bd:0a:82:ff:11:ae:22:3f:5e:28:25:17:d6:6f:b6:c0: 10:31:3b:3a:1f:30:6c:d3:19:f8:e2:0e:5b:d5:b9:8d:a0:a9: f0:14:70:e8:4f:76:64:61:d5:13:02:12:c7:8d:88:a0:8c:ad: d1:ff:bf:8e:ca:9c:90:ae:10:99:54:04:1e:e4:bb:45:fd:78: 7e:d4:9b:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x09p79xXZzQM+z55zut7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzQ2MTQ3N2I1OWI3YmMwOTA2ZjZjZTYwNjUwYmIzYWQy ZGVlNTcwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGQyMzA5NTA4NmFhZDAxZWIwMjY3MTBiN2ZiZmI1M2JjOGY0MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM1qEYAQ52M+IrlZ6Ak+Na+t6wlF Dva3UXmfiPctndE5/yp9PBPC+Q2wz7SGayXV8mOpkTJ96PBaJtw+Tq4hPQEGWFQr f/0wQIh4Qwe8aEv2EHi0A2RtVHcp36XgNwr1i3qcxvZ0rOR8kekNL46iS9p2lpH6 g8uB3vLetXF+qjLK06qRnC1Yt0YuA3RUzh75pz1Ln8gzc6MEAotaypiShdIq3wvs 5PVkcn0dycBRE6WOsVhoGgqd/X9pP9QDValjGulbV/Wvp84hszCkHrei/Y4i7VcD MBQ8FSe1RXL/V/objTKEXsFpww5knGhcQCeWWYmHGdI4OXCyuLO6Z196EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDSMJUIaq0B6wJnELf7+1O8j0JbMB8GA1UdIwQY MBaAFE50YUd7Wbe8CQb2zmBlC7OtLe5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MTEwOWYtMmQxOS00MWNlLWJhNmUt ZGRiYzBkZWY4M2UxLzEvZ05Jd2xRaHFyUUhyQW1jUXRfdjdVN3lQUWxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MTEwOWYtMmQxOS00MWNlLWJhNmUtZGRiYzBkZWY4M2Ux LzEvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpOYMA0G CSqGSIb3DQEBCwUAA4IBAQBcO8oPbEJO+KCWVfkLazSaN82X3CTsaH8Ksu8aj13Q H90IPIkn3eI0tjvcub19tKGDYW4AGo16xataJ+AhRyIrySDV13npt6tW/rQ8NJUh VzEr4+JoGKgZ6KU3q2UdAaE7mLPF2nJUziYnVKJ6VFUsViyQhArZZ1T/LoH72VVb rLNVo6gc28NHbS66+OAlhPDP3pzKUhFdudUROm0rhQDYEbc8JknC3gs4+KO0qIks bGd0oMml4b0Kgv8RriI/XiglF9ZvtsAQMTs6HzBs0xn44g5b1bmNoKnwFHDoT3Zk YdUTAhLHjYigjK3R/7+OypyQrhCZVAQe5LtF/Xh+1Jsx -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:39 2026 by rpki-client