This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/gSng8bmqZiw6jb1bs3NjfDpX7wM.roa File: gSng8bmqZiw6jb1bs3NjfDpX7wM.roa (raw, json) Hash identifier: rLCdrSPUSpTEnkTQiU5fDOLCEMchnh4Nxl216udf2yU= Subject key identifier: 81:29:E0:F1:B9:AA:66:2C:3A:8D:BD:5B:B3:73:63:7C:3A:57:EF:03 Certificate issuer: /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Certificate serial: 019B77591CEB0D50F031DBCE4E9F5976F4FB Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/gSng8bmqZiw6jb1bs3NjfDpX7wM.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41304 IP address blocks: 91.209.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1c:eb:0d:50:f0:31:db:ce:4e:9f:59:76:f4:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8129e0f1b9aa662c3a8dbd5bb373637c3a57ef03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:72:aa:b9:12:10:b4:5d:7f:c0:49:25:6b: a3:c1:36:2a:45:57:5b:79:ba:32:fb:8d:56:95:48: f7:27:69:32:b5:54:98:c5:32:f6:d2:54:ab:79:22: 8b:36:c4:45:77:12:57:4d:cd:fe:45:1c:f7:4d:3e: cf:01:55:d8:f3:1c:85:d1:83:b2:fa:7c:b2:e0:40: 66:f5:d7:7d:d7:8b:66:76:29:1a:13:0f:4b:23:e7: 64:df:96:90:2f:90:6d:16:57:fe:ed:c2:d7:45:4b: 98:81:b2:76:06:c0:36:d3:fd:c5:74:90:3e:66:03: d0:65:8a:87:01:eb:de:5c:1f:88:36:8e:03:1a:3d: 6a:16:a9:fc:21:03:c8:d6:03:3b:c4:cc:fa:cd:8f: 39:50:c5:da:2b:c2:07:a4:5f:63:68:19:4c:38:db: bb:b7:19:1b:06:1d:e1:4f:3d:6a:29:a1:1d:6b:22: b3:66:3a:d2:a7:4d:29:c6:b0:cc:43:0f:4c:c4:c7: 24:2a:45:cb:75:67:92:9a:d0:5c:bc:ba:d6:83:66: 7c:e7:82:3a:e6:b2:15:fd:b8:f9:06:de:50:50:d0: 58:f6:4c:c3:15:67:e1:4c:d3:e0:05:cd:56:55:87: c4:de:ef:bf:6f:bd:36:cd:e6:68:bb:e7:42:e2:a1: cd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:29:E0:F1:B9:AA:66:2C:3A:8D:BD:5B:B3:73:63:7C:3A:57:EF:03 X509v3 Authority Key Identifier: keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/gSng8bmqZiw6jb1bs3NjfDpX7wM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.238.0/24 Signature Algorithm: sha256WithRSAEncryption 12:b4:b7:81:0e:bf:44:54:1d:7e:9f:b9:e6:ac:c9:b7:9a:cf: b8:a4:40:17:10:83:21:c7:21:02:dd:c3:39:c8:6b:62:a9:a7: 52:c0:e7:17:41:87:99:6c:c4:f5:59:7e:21:34:cc:0b:45:b3: ff:7a:80:41:1c:5e:bc:67:d5:81:dc:f8:16:07:34:19:ce:c6: b8:fe:95:26:5e:00:de:3a:88:d7:3e:e6:e8:c1:4f:b8:90:85: d9:18:ab:16:24:13:8d:0e:f4:19:96:64:f7:c8:b0:94:2c:ca: f8:4f:e8:f0:46:52:80:2f:18:dd:5c:a4:22:77:77:85:30:a5: c9:c0:2d:52:7f:01:20:8a:8e:88:19:d8:eb:e9:36:77:64:52: 17:39:a4:0d:72:3f:e9:dc:0e:de:ef:e9:e0:e4:53:64:03:48: 1e:f5:94:3f:cb:1e:58:53:c4:ba:d9:b0:8b:c0:d5:f4:38:fe: 09:7a:7c:47:50:85:e3:81:19:a8:5a:6b:17:98:91:b9:9c:48: 8e:62:fb:2e:3a:f6:47:ef:2d:82:17:2a:b3:ae:2c:ce:59:f6: cb:08:0e:fa:d6:72:4b:8e:98:e6:4e:dc:40:15:f4:23:33:c0: c3:1a:79:8f:be:d9:da:46:4c:2c:d8:61:02:1b:0f:5c:a6:5c: dc:6d:88:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRzrDVDwMdvOTp9ZdvT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYjMwYTQxYTZhNmYyMWE5YjJkZDdlNTg1NmEyMGQ1YjVl ZmZlMWMwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTI5ZTBmMWI5YWE2NjJjM2E4ZGJkNWJiMzczNjM3YzNhNTdlZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYxyqrkSELRdf8BJJWujwTYqRVdb eboy+41WlUj3J2kytVSYxTL20lSreSKLNsRFdxJXTc3+RRz3TT7PAVXY8xyF0YOy +nyy4EBm9dd914tmdikaEw9LI+dk35aQL5BtFlf+7cLXRUuYgbJ2BsA20/3FdJA+ ZgPQZYqHAeveXB+INo4DGj1qFqn8IQPI1gM7xMz6zY85UMXaK8IHpF9jaBlMONu7 txkbBh3hTz1qKaEdayKzZjrSp00pxrDMQw9MxMckKkXLdWeSmtBcvLrWg2Z854I6 5rIV/bj5Bt5QUNBY9kzDFWfhTNPgBc1WVYfE3u+/b702zeZou+dC4qHNNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIEp4PG5qmYsOo29W7NzY3w6V+8DMB8GA1UdIwQY MBaAFG2zCkGmpvIamy3X5YVqINW17/4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAt ZDg5MzIxMWU2NzE5LzEvZ1NuZzhibXFaaXc2amIxYnMzTmpmRHBYN3dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAtZDg5MzIxMWU2NzE5 LzEvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HuMA0G CSqGSIb3DQEBCwUAA4IBAQAStLeBDr9EVB1+n7nmrMm3ms+4pEAXEIMhxyEC3cM5 yGtiqadSwOcXQYeZbMT1WX4hNMwLRbP/eoBBHF68Z9WB3PgWBzQZzsa4/pUmXgDe OojXPubowU+4kIXZGKsWJBONDvQZlmT3yLCULMr4T+jwRlKALxjdXKQid3eFMKXJ wC1SfwEgio6IGdjr6TZ3ZFIXOaQNcj/p3A7e7+ng5FNkA0ge9ZQ/yx5YU8S62bCL wNX0OP4JenxHUIXjgRmoWmsXmJG5nEiOYvsuOvZH7y2CFyqzrizOWfbLCA761nJL jpjmTtxAFfQjM8DDGnmPvtnaRkws2GECGw9cplzcbYgo -----END CERTIFICATE-----Generated at Thu Jan 1 14:06:42 2026 by rpki-client