This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gYqPp0715x8fnLBLGQRRio72ifg.roa File: gYqPp0715x8fnLBLGQRRio72ifg.roa (raw, json) Hash identifier: Fn5SSX7eSP5XsHHBSdgMVUtRYMrHi13YEgcpUBaM4zo= Subject key identifier: 81:8A:8F:A7:4E:F5:E7:1F:1F:9C:B0:4B:19:04:51:8A:8E:F6:89:F8 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C768C3CC8D851F48D1CCE5E46C9AB8 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gYqPp0715x8fnLBLGQRRio72ifg.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35298 IP address blocks: 31.173.176.0/20 maxlen: 20 37.29.76.0/22 maxlen: 22 78.41.100.0/22 maxlen: 22 178.176.154.0/23 maxlen: 23 2a03:d000:8703::/48 maxlen: 48 2a03:d000:8704::/48 maxlen: 48 2a03:d000:8740::/48 maxlen: 48 2a03:d000:8741::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:68:c3:cc:8d:85:1f:48:d1:cc:e5:e4:6c:9a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=818a8fa74ef5e71f1f9cb04b1904518a8ef689f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:a3:a0:fc:57:f0:91:78:9c:92:a1:4d:df: 23:02:6c:44:42:5b:66:7d:88:fe:d1:22:23:f7:1d: c9:d8:1f:55:c5:f4:7c:63:f8:b2:da:6c:dd:d2:2f: b9:a2:a4:44:b1:88:98:dc:4e:67:2a:95:b7:fe:6f: 21:76:b1:2a:36:5b:a1:2f:63:a2:17:be:f5:ac:30: d3:22:15:c5:19:3a:78:13:b6:6b:da:0a:df:52:26: 34:9b:6e:70:3e:ea:70:74:e4:a4:86:c3:53:83:79: d0:b7:da:21:4b:32:a9:42:b5:91:7d:95:c6:9f:cd: 0d:42:fe:9c:d7:c8:32:75:6c:ab:15:59:3a:7e:2c: 41:af:58:db:ec:bb:10:54:4e:b3:4f:09:82:b9:d9: 55:c7:0f:e1:1d:99:35:58:41:70:95:65:3a:7c:0b: 65:f2:e3:6b:6e:f8:3e:78:d9:42:eb:7c:71:fd:e4: a2:d0:56:71:c6:8b:2f:35:5e:3b:b5:c3:95:a7:b9: d5:02:42:39:71:81:cf:f4:19:10:04:30:1f:59:ee: 49:04:b7:0c:9d:89:c3:b6:3f:af:fa:10:55:2a:e1: 95:08:c6:59:47:e8:07:72:c5:67:f2:da:5f:f1:76: e5:c7:76:23:a7:7c:26:d9:08:dc:f1:01:75:fb:8f: 0e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8A:8F:A7:4E:F5:E7:1F:1F:9C:B0:4B:19:04:51:8A:8E:F6:89:F8 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gYqPp0715x8fnLBLGQRRio72ifg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.173.176.0/20 37.29.76.0/22 78.41.100.0/22 178.176.154.0/23 IPv6: 2a03:d000:8703::-2a03:d000:8704:ffff:ffff:ffff:ffff:ffff 2a03:d000:8740::/47 Signature Algorithm: sha256WithRSAEncryption 82:42:e2:23:34:83:04:3b:0e:d2:1c:45:a2:77:62:d1:89:dc: e4:d1:b0:d4:8e:ab:8b:17:46:5c:9f:db:2b:74:8e:27:36:59: 4c:30:a6:0b:c2:c6:85:53:da:0c:9e:96:c9:6c:f0:6e:d8:8c: 8b:3f:db:f8:77:aa:71:91:a9:79:39:ac:a0:f4:30:b2:b6:dd: ce:2d:56:e3:85:c2:26:07:80:24:ae:77:a2:10:34:f2:21:4f: 0d:2e:5b:f9:a1:b5:74:7c:5b:91:39:ec:fa:ee:01:82:47:98: e8:1f:33:95:38:59:26:4f:37:55:1a:b0:55:3c:ef:a1:4c:b2: 3a:f8:cb:4f:a6:cd:3c:8f:8f:9e:6d:c3:b7:ff:92:01:31:a3: 99:f3:74:b0:04:da:89:e3:86:7e:b2:85:f2:f4:a2:bc:66:df: bf:5d:ad:cd:03:c5:b7:35:48:74:ce:94:e1:04:cc:c2:97:37: 06:c4:a5:70:c1:0c:ce:71:42:ac:23:fd:6e:9b:44:55:dc:1c: 10:bc:72:2b:cd:c2:b2:47:48:d1:7b:fe:9f:0f:fd:da:a8:4b: e2:d7:39:00:2f:43:dd:ab:3a:25:63:f2:66:8a:a6:35:08:f3: 3f:65:d6:68:57:44:1f:49:5b:77:9c:fe:97:52:10:7b:d3:89: 19:42:5f:ad -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt3x2jDzI2FH0jRzOXkbJq4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MThhOGZhNzRlZjVlNzFmMWY5Y2IwNGIxOTA0NTE4YThlZjY4OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu62joPxX8JF4nJKhTd8jAmxEQltm fYj+0SIj9x3J2B9VxfR8Y/iy2mzd0i+5oqREsYiY3E5nKpW3/m8hdrEqNluhL2Oi F771rDDTIhXFGTp4E7Zr2grfUiY0m25wPupwdOSkhsNTg3nQt9ohSzKpQrWRfZXG n80NQv6c18gydWyrFVk6fixBr1jb7LsQVE6zTwmCudlVxw/hHZk1WEFwlWU6fAtl 8uNrbvg+eNlC63xx/eSi0FZxxosvNV47tcOVp7nVAkI5cYHP9BkQBDAfWe5JBLcM nYnDtj+v+hBVKuGVCMZZR+gHcsVn8tpf8Xblx3Yjp3wm2Qjc8QF1+48ONwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFIGKj6dO9ecfH5ywSxkEUYqO9on4MB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvZ1lxUHAwNzE1eDhmbkxCTEdRUlJpbzcyaWZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAeBAIAATAYAwQEH62wAwQC JR1MAwQCTilkAwQBsrCaMCMEAgACMB0wEgMHACoD0ACHAwMHACoD0ACHBAMHASoD 0ACHQDANBgkqhkiG9w0BAQsFAAOCAQEAgkLiIzSDBDsO0hxFondi0Ync5NGw1I6r ixdGXJ/bK3SOJzZZTDCmC8LGhVPaDJ6WyWzwbtiMiz/b+HeqcZGpeTmsoPQwsrbd zi1W44XCJgeAJK53ohA08iFPDS5b+aG1dHxbkTns+u4BgkeY6B8zlThZJk83VRqw VTzvoUyyOvjLT6bNPI+Pnm3Dt/+SATGjmfN0sATaieOGfrKF8vSivGbfv12tzQPF tzVIdM6U4QTMwpc3BsSlcMEMznFCrCP9bptEVdwcELxyK83CskdI0Xv+nw/92qhL 4tc5AC9D3as6JWPyZoqmNQjzP2XWaFdEH0lbd5z+l1IQe9OJGUJfrQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:20 2026 by rpki-client