This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/GJBycD0z-Vwt49rxYIkUFvJmg34.roa File: GJBycD0z-Vwt49rxYIkUFvJmg34.roa (raw, json) Hash identifier: ntE/dfk2CI0GAxVSBHDhu+/dJpNEVggZuAuaXY3BXZQ= Subject key identifier: 18:90:72:70:3D:33:F9:5C:2D:E3:DA:F1:60:89:14:16:F2:66:83:7E Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0 Certificate serial: 019B79ED5F3A5BA68E1E3047F89D4A927B39 Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/GJBycD0z-Vwt49rxYIkUFvJmg34.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2471 IP address blocks: 147.99.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5f:3a:5b:a6:8e:1e:30:47:f8:9d:4a:92:7b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0 Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=189072703d33f95c2de3daf160891416f266837e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d8:bd:c9:95:b2:17:37:8a:57:98:83:f8:c7: 45:a7:80:ae:c7:e6:35:22:09:94:de:e1:fc:8a:9b: b2:14:99:3a:6c:58:83:fd:7a:51:ba:b3:bf:cc:05: 32:40:7b:6b:12:94:8f:a5:6e:dc:3a:f3:3c:dd:dc: a4:66:5a:9c:14:dd:ab:37:1a:f7:18:b1:4c:87:d1: 38:7f:9c:61:4e:6c:f1:42:a7:d0:66:0f:65:20:00: 53:04:7c:aa:45:0e:f6:f1:8c:44:60:3e:de:96:52: a1:a9:56:df:77:0c:41:c1:a0:1f:54:b8:07:ad:19: 9d:77:29:b2:ca:a1:89:f9:62:cd:a6:26:1c:9e:ed: 53:a6:8b:11:a3:6b:59:19:6d:1b:62:d5:6b:8f:ab: 13:51:96:e3:22:ee:76:0b:51:7c:88:66:f4:bf:d7: e8:b4:ee:98:7e:66:cf:a2:8d:df:7b:c8:b7:6b:a5: 40:67:2a:b9:7e:6e:fd:10:af:02:91:18:d3:5b:93: 65:4a:b9:f0:5c:a7:a0:dd:0c:97:35:e1:bd:e3:e1: dc:69:f4:52:8e:c9:55:d6:30:3a:a8:fc:1f:f0:4d: 2f:17:86:35:6c:c1:c9:1c:36:bc:49:a0:5b:0a:0f: 67:10:03:f1:bd:8a:cc:c9:83:58:ba:88:82:0c:44: 32:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:90:72:70:3D:33:F9:5C:2D:E3:DA:F1:60:89:14:16:F2:66:83:7E X509v3 Authority Key Identifier: keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/GJBycD0z-Vwt49rxYIkUFvJmg34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.99.88.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:88:23:9b:6d:8d:4a:00:48:b5:f5:42:71:e0:b2:d5:a0:e5: 6a:a4:5b:e2:78:4f:eb:37:de:24:94:7f:85:71:7a:c7:88:1b: cc:0d:e7:c4:56:6b:cf:4d:2e:67:4d:20:d4:d3:9c:42:4a:8a: 9f:42:e6:d0:12:01:bd:6b:a2:7d:d4:ca:89:e2:ea:c8:4a:9c: 8b:6e:87:c1:6e:96:3c:79:cd:c7:86:95:a5:32:e8:9c:f0:56: d7:b2:f3:ce:b9:68:10:44:a9:48:3e:1e:9a:b4:34:04:38:9c: 0a:9b:71:a2:a2:7d:f7:9d:81:22:18:6a:14:d5:8f:c2:ff:69: ab:ca:e2:7b:61:03:f3:37:c0:e4:6f:71:d5:c1:59:6a:60:5f: 6a:4f:18:b0:c5:cf:e0:6d:4c:f6:7e:1c:80:24:d5:bd:ad:dd: b9:52:75:ce:be:bf:34:81:6f:f3:c2:17:54:59:31:16:be:2a: 70:69:b7:a4:2a:55:b4:f7:79:ff:8b:53:08:e8:29:da:ad:c1: 71:22:61:8d:71:6e:42:ec:93:88:29:ae:13:21:ed:ad:44:7f: ee:6c:dd:e5:58:48:12:1f:e8:81:82:52:d6:7a:f0:49:67:3e: 7b:e9:15:0f:67:fc:eb:97:20:0e:15:3b:f8:2f:88:63:46:92: 5f:28:f7:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57V86W6aOHjBH+J1Kkns5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNjA2YjhhYWQ1NTNmMDk0OGM3YTg5NGQ2ODY3MTg3MGVi ODJjYjAwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODkwNzI3MDNkMzNmOTVjMmRlM2RhZjE2MDg5MTQxNmYyNjY4MzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9i9yZWyFzeKV5iD+MdFp4Cux+Y1 IgmU3uH8ipuyFJk6bFiD/XpRurO/zAUyQHtrEpSPpW7cOvM83dykZlqcFN2rNxr3 GLFMh9E4f5xhTmzxQqfQZg9lIABTBHyqRQ728YxEYD7ellKhqVbfdwxBwaAfVLgH rRmddymyyqGJ+WLNpiYcnu1TposRo2tZGW0bYtVrj6sTUZbjIu52C1F8iGb0v9fo tO6YfmbPoo3fe8i3a6VAZyq5fm79EK8CkRjTW5NlSrnwXKeg3QyXNeG94+HcafRS jslV1jA6qPwf8E0vF4Y1bMHJHDa8SaBbCg9nEAPxvYrMyYNYuoiCDEQyhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBiQcnA9M/lcLePa8WCJFBbyZoN+MB8GA1UdIwQY MBaAFKBga4qtVT8JSMeolNaGcYcOuCywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYt YmIzNDMxZmUwMjg1LzEvR0pCeWNEMHotVnd0NDlyeFlJa1VGdkptZzM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYtYmIzNDMxZmUwMjg1 LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk2NYMA0G CSqGSIb3DQEBCwUAA4IBAQAdiCObbY1KAEi19UJx4LLVoOVqpFvieE/rN94klH+F cXrHiBvMDefEVmvPTS5nTSDU05xCSoqfQubQEgG9a6J91MqJ4urISpyLbofBbpY8 ec3HhpWlMuic8FbXsvPOuWgQRKlIPh6atDQEOJwKm3Gion33nYEiGGoU1Y/C/2mr yuJ7YQPzN8Dkb3HVwVlqYF9qTxiwxc/gbUz2fhyAJNW9rd25UnXOvr80gW/zwhdU WTEWvipwabekKlW093n/i1MI6CnarcFxImGNcW5C7JOIKa4TIe2tRH/ubN3lWEgS H+iBglLWevBJZz576RUPZ/zrlyAOFTv4L4hjRpJfKPe7 -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:10 2026 by rpki-client