This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/g2DbDkvIUX7fbrbq_Ty_SuS7Ivo.roa File: g2DbDkvIUX7fbrbq_Ty_SuS7Ivo.roa (raw, json) Hash identifier: ENAgFJa6dqHP3ZHjhcKA/BIcppzlZ/9wq2mVnrsfeV8= Subject key identifier: 83:60:DB:0E:4B:C8:51:7E:DF:6E:B6:EA:FD:3C:BF:4A:E4:BB:22:FA Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834 Certificate serial: 019B7A5ACAF6149212CE4BD6761050DB5CAF Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/g2DbDkvIUX7fbrbq_Ty_SuS7Ivo.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50807 IP address blocks: 78.40.16.0/24 maxlen: 24 78.40.17.0/24 maxlen: 24 78.40.18.0/24 maxlen: 24 78.40.19.0/24 maxlen: 24 78.40.20.0/24 maxlen: 24 78.40.21.0/24 maxlen: 24 91.193.104.0/24 maxlen: 24 91.193.105.0/24 maxlen: 24 195.149.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ca:f6:14:92:12:ce:4b:d6:76:10:50:db:5c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8360db0e4bc8517edf6eb6eafd3cbf4ae4bb22fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dc:e7:c5:4f:a0:f6:65:77:ab:6d:08:fa:01: 09:f1:b1:7f:d3:3b:b6:70:ca:dc:03:c7:60:90:36: 4f:ae:f0:51:43:cc:0e:f9:9e:1f:81:57:54:ae:5c: 2e:5b:19:78:67:0e:d6:00:e9:f1:90:33:2a:d1:aa: d8:8b:03:8e:d6:8d:b6:03:ea:ed:92:ba:1f:29:8b: 00:57:fe:f9:07:da:0c:f3:2a:16:e2:18:77:31:e6: 78:01:1f:09:ea:93:fa:9a:9d:96:99:45:12:80:b1: 9b:af:d9:bd:d9:80:f4:6d:8d:9c:4e:b6:fc:e5:30: c0:27:e4:7d:54:cc:fa:ef:27:f5:f5:48:66:cb:52: 06:0e:01:95:f2:6c:61:7d:81:1e:02:0d:93:40:20: 1a:e7:72:94:1a:a9:01:87:c1:b6:5b:4f:b1:26:ff: 54:37:b5:67:5a:d5:06:49:cc:c8:4c:16:31:16:8c: 6b:43:5c:27:3b:82:45:c8:79:61:db:7b:f8:e2:c7: 81:8a:9c:d1:76:76:48:05:b3:0c:d3:ce:75:77:68: 07:32:92:38:e3:06:d0:e1:f5:e3:f7:75:e2:fe:0d: 98:ae:10:3f:f5:0b:19:cc:87:27:f8:22:15:02:99: 8d:b3:9e:1f:91:66:f8:16:07:fb:92:54:39:89:3f: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:60:DB:0E:4B:C8:51:7E:DF:6E:B6:EA:FD:3C:BF:4A:E4:BB:22:FA X509v3 Authority Key Identifier: keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/g2DbDkvIUX7fbrbq_Ty_SuS7Ivo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.16.0-78.40.21.255 91.193.104.0/23 195.149.121.0/24 Signature Algorithm: sha256WithRSAEncryption 82:39:1e:da:13:72:23:1d:c5:f7:d6:f2:ae:ac:da:1c:4b:b4: 08:92:4c:83:d6:8d:68:81:e3:ea:ba:6f:dc:d3:b9:5b:b9:3e: 05:b3:75:cb:53:09:66:d7:33:7e:d6:1f:b3:96:34:54:81:a1: 22:cb:69:3e:b0:6d:a1:36:c2:37:e3:8b:ea:2f:de:b1:05:74: 01:88:9a:f6:dd:dd:66:86:3c:5c:97:07:e1:09:b0:73:e5:8e: 8f:e6:67:14:99:87:b0:97:0a:c6:63:2d:20:54:25:8a:86:33: 73:b0:57:56:26:98:c5:22:00:0a:2a:f4:c8:42:07:ee:49:5f: d8:a3:28:0c:c0:02:dc:da:e8:f2:44:5a:e1:e9:47:32:b6:0d: a8:81:18:e2:07:c4:ee:2d:13:8a:4d:87:63:db:0d:b6:40:02: a3:29:70:26:64:82:9b:e1:eb:48:73:7d:0a:b2:78:f6:78:e8: 14:6d:1f:06:dc:43:2c:75:cd:14:61:b7:ed:31:b7:e3:99:9b: 8b:eb:65:ea:e3:67:63:b3:ee:67:6c:e0:99:2e:c6:06:00:ce: 7e:b1:cb:3d:54:11:c1:ed:bf:a9:6c:48:75:22:65:61:3c:88: 36:67:e1:3d:e3:83:6c:39:03:0d:b1:28:14:79:93:9b:61:09: d1:ce:f7:9d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6Wsr2FJISzkvWdhBQ21yvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YThiNzBhYTEwMDY5YjU1MTVhOWNiM2MxNDliODg1Yjdh MTI4MzQwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzYwZGIwZTRiYzg1MTdlZGY2ZWI2ZWFmZDNjYmY0YWU0YmIyMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtznxU+g9mV3q20I+gEJ8bF/0zu2 cMrcA8dgkDZPrvBRQ8wO+Z4fgVdUrlwuWxl4Zw7WAOnxkDMq0arYiwOO1o22A+rt krofKYsAV/75B9oM8yoW4hh3MeZ4AR8J6pP6mp2WmUUSgLGbr9m92YD0bY2cTrb8 5TDAJ+R9VMz67yf19Uhmy1IGDgGV8mxhfYEeAg2TQCAa53KUGqkBh8G2W0+xJv9U N7VnWtUGSczITBYxFoxrQ1wnO4JFyHlh23v44seBipzRdnZIBbMM0851d2gHMpI4 4wbQ4fXj93Xi/g2YrhA/9QsZzIcn+CIVApmNs54fkWb4Fgf7klQ5iT9zZQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFINg2w5LyFF+32626v08v0rkuyL6MB8GA1UdIwQY MBaAFPeotwqhAGm1UVqcs8FJuIW3oSg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEt OWQwNzQzMzcwNDk1LzEvZzJEYkRrdklVWDdmYnJicV9UeV9TdVM3SXZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEtOWQwNzQzMzcwNDk1 LzEvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAROKBAD BAFOKBQDBAFbwWgDBADDlXkwDQYJKoZIhvcNAQELBQADggEBAII5HtoTciMdxffW 8q6s2hxLtAiSTIPWjWiB4+q6b9zTuVu5PgWzdctTCWbXM37WH7OWNFSBoSLLaT6w baE2wjfji+ov3rEFdAGImvbd3WaGPFyXB+EJsHPljo/mZxSZh7CXCsZjLSBUJYqG M3OwV1YmmMUiAAoq9MhCB+5JX9ijKAzAAtza6PJEWuHpRzK2DaiBGOIHxO4tE4pN h2PbDbZAAqMpcCZkgpvh60hzfQqyePZ46BRtHwbcQyx1zRRht+0xt+OZm4vrZerj Z2Oz7mds4JkuxgYAzn6xyz1UEcHtv6lsSHUiZWE8iDZn4T3jg2w5Aw2xKBR5k5th CdHO950= -----END CERTIFICATE-----Generated at Thu Jan 8 13:19:30 2026 by rpki-client