This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/gng50Ziqb6xrb3gKYd3mPMqKi20.roa File: gng50Ziqb6xrb3gKYd3mPMqKi20.roa (raw, json) Hash identifier: Qgx/fSQr4uTOuIoJO8P5gUwe6l71dGbPdS6w5iyet3I= Subject key identifier: 82:78:39:D1:98:AA:6F:AC:6B:6F:78:0A:61:DD:E6:3C:CA:8A:8B:6D Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Certificate serial: 019B797EA4606E0994F9E4E8BB1255A8E92D Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/gng50Ziqb6xrb3gKYd3mPMqKi20.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31673 IP address blocks: 185.87.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a4:60:6e:09:94:f9:e4:e8:bb:12:55:a8:e9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=827839d198aa6fac6b6f780a61dde63cca8a8b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:25:f3:f9:14:c1:d2:72:a3:5e:e2:f2:2c:4f: 03:8d:ad:ca:bc:72:d5:8e:be:b1:b2:64:77:5b:a3: e3:aa:07:bc:07:6a:89:41:8a:c8:dc:06:73:0c:e4: 3c:64:62:c7:3e:1e:81:61:5d:f1:58:dc:f8:a1:eb: cc:1d:08:96:c2:38:c3:dd:34:4c:e0:c1:44:fe:a9: 49:c4:1d:00:7a:65:c6:f5:e2:4e:25:72:cc:e6:b8: 3e:ef:d3:e4:96:d5:dd:9b:7f:a0:0d:df:04:fd:43: 68:0d:90:6a:88:b2:08:1b:23:b4:11:17:73:03:b8: c0:9d:71:58:a0:86:cf:dc:b0:9e:3c:fc:34:67:33: 9c:ed:26:31:d0:0d:31:79:68:7e:8e:be:9a:26:80: 96:d3:43:e7:a4:af:a1:17:93:0b:9f:b1:55:52:d3: 89:f0:9c:f0:f8:16:a9:96:6a:a4:01:ab:4e:e9:c2: 98:64:b0:30:76:40:08:51:56:bd:11:b4:9c:f7:c8: 60:ad:d2:d5:bc:28:52:b3:99:44:b7:5f:02:0a:bd: 70:1f:7b:69:29:7e:9b:1c:91:78:60:61:dd:62:19: 0a:ed:0c:55:e3:03:ec:01:2b:d0:09:15:f1:8b:0a: 57:7c:d3:5f:c9:96:8c:e9:cd:c4:d5:0f:c1:7e:8e: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:78:39:D1:98:AA:6F:AC:6B:6F:78:0A:61:DD:E6:3C:CA:8A:8B:6D X509v3 Authority Key Identifier: keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/gng50Ziqb6xrb3gKYd3mPMqKi20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.152.0/22 Signature Algorithm: sha256WithRSAEncryption b4:ef:74:5e:a9:3d:5a:37:f7:de:ee:bd:9e:06:6c:7c:95:0c: 10:c8:31:4b:e2:c8:22:cb:b7:4d:fd:cf:40:06:0f:7d:83:f4: 46:0a:61:eb:1e:10:5a:cb:15:8f:51:73:fb:e7:52:be:f9:fe: 5e:d0:13:4b:56:8c:18:a3:b6:92:1b:0e:7e:0d:17:e9:df:36: a2:76:68:2e:28:8e:62:29:81:1d:06:ad:fd:7c:97:fa:d2:9f: a7:61:ef:6e:f8:10:a0:73:67:9e:e3:96:5c:ff:fa:58:6f:04: 47:24:a1:c3:43:2a:75:f5:c6:ad:fc:d3:6a:d6:b8:98:a8:8b: f6:12:24:40:3a:c4:b4:1d:e7:42:f5:a9:c2:29:41:d6:10:0f: 00:73:d2:13:74:85:2b:51:c2:13:95:a2:18:bb:0e:56:81:8c: 34:be:30:6e:49:59:0d:03:7c:cf:48:2a:85:46:b3:8b:6b:36: b9:65:80:fe:b2:4d:ed:20:0b:17:e5:b1:b1:2f:5e:fd:59:70: 50:23:03:d5:a6:a2:26:72:56:33:64:82:7f:c5:20:4a:c1:42: a5:82:7c:b8:a9:6b:02:50:ec:fc:f1:58:a3:d6:07:37:05:86: ec:d4:f1:85:bf:01:b0:a7:85:1e:06:bd:0f:56:6f:55:52:db: b5:df:5c:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqRgbgmU+eTouxJVqOktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzliYmQzZDYwNTY1ZmI1OTU4MDJlYzdjNjk3ZWEyMWFi ZDk3ZTQwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mjc4MzlkMTk4YWE2ZmFjNmI2Zjc4MGE2MWRkZTYzY2NhOGE4YjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iXz+RTB0nKjXuLyLE8Dja3KvHLV jr6xsmR3W6Pjqge8B2qJQYrI3AZzDOQ8ZGLHPh6BYV3xWNz4oevMHQiWwjjD3TRM 4MFE/qlJxB0AemXG9eJOJXLM5rg+79PkltXdm3+gDd8E/UNoDZBqiLIIGyO0ERdz A7jAnXFYoIbP3LCePPw0ZzOc7SYx0A0xeWh+jr6aJoCW00PnpK+hF5MLn7FVUtOJ 8Jzw+BaplmqkAatO6cKYZLAwdkAIUVa9EbSc98hgrdLVvChSs5lEt18CCr1wH3tp KX6bHJF4YGHdYhkK7QxV4wPsASvQCRXxiwpXfNNfyZaM6c3E1Q/Bfo5cdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJ4OdGYqm+sa294CmHd5jzKiottMB8GA1UdIwQY MBaAFFc5u9PWBWX7WVgC7HxpfqIavZfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTct NWQ2Mjk1OWQxMDViLzEvZ25nNTBaaXFiNnhyYjNnS1lkM21QTXFLaTIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTctNWQ2Mjk1OWQxMDVi LzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVeYMA0G CSqGSIb3DQEBCwUAA4IBAQC073ReqT1aN/fe7r2eBmx8lQwQyDFL4sgiy7dN/c9A Bg99g/RGCmHrHhBayxWPUXP751K++f5e0BNLVowYo7aSGw5+DRfp3zaidmguKI5i KYEdBq39fJf60p+nYe9u+BCgc2ee45Zc//pYbwRHJKHDQyp19cat/NNq1riYqIv2 EiRAOsS0HedC9anCKUHWEA8Ac9ITdIUrUcITlaIYuw5WgYw0vjBuSVkNA3zPSCqF RrOLaza5ZYD+sk3tIAsX5bGxL179WXBQIwPVpqImclYzZIJ/xSBKwUKlgny4qWsC UOz88Vij1gc3BYbs1PGFvwGwp4UeBr0PVm9VUtu131yb -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:46 2026 by rpki-client