This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Gay3j7r5bMuL1O3lqGZJU_WbCJA.roa File: Gay3j7r5bMuL1O3lqGZJU_WbCJA.roa (raw, json) Hash identifier: 8Z1yEawpjvuXMIl7aRVa0CurHKu9yij+BtnWRFN4QL4= Subject key identifier: 19:AC:B7:8F:BA:F9:6C:CB:8B:D4:ED:E5:A8:66:49:53:F5:9B:08:90 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019B7BA45BB4E9111ABCD61EF2248F4DB7F8 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Gay3j7r5bMuL1O3lqGZJU_WbCJA.roa Signing time: Thu 01 Jan 2026 22:18:47 +0000 ROA not before: Thu 01 Jan 2026 22:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209267 IP address blocks: 89.34.174.0/24 maxlen: 24 89.40.69.0/24 maxlen: 24 93.117.175.0/24 maxlen: 24 176.223.163.0/24 maxlen: 24 2a11:1400:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:5b:b4:e9:11:1a:bc:d6:1e:f2:24:8f:4d:b7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Jan 1 22:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19acb78fbaf96ccb8bd4ede5a8664953f59b0890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:4f:85:a8:e8:07:60:95:fa:70:98:85:09: 3b:e2:52:af:2b:77:63:4f:32:ed:bf:ee:8b:20:79: 7a:91:f3:f4:7d:d2:23:2e:83:23:6b:7f:0f:19:7c: 21:22:e2:f3:c5:a6:1a:7f:c6:c4:ae:c4:8d:5b:d0: ce:fb:c0:ae:6d:a7:ea:6b:49:78:74:1c:3f:0a:75: 56:1d:91:27:dd:f0:b4:06:f8:c9:26:9e:87:e2:01: 8c:1e:a9:86:30:de:f7:77:19:69:86:30:7f:1f:4d: 40:68:5b:52:31:1b:37:50:6f:3c:d0:ed:02:cd:f5: e5:46:b5:66:7f:d9:09:90:cd:85:91:5c:20:f3:d3: 88:be:ab:d5:61:6b:8a:73:1e:8b:93:bd:cb:0c:9d: ba:0e:35:06:de:0d:9b:3d:73:7f:e6:5f:82:b7:25: d4:a5:a6:50:7f:69:11:e5:16:52:6d:06:af:5d:b9: d1:c1:88:8b:b6:ab:61:a4:08:4b:0a:90:a9:38:2e: 5b:13:60:3b:66:bd:a7:32:da:9b:34:40:7c:37:c6: 52:e7:c6:10:dd:9a:22:84:46:11:df:b2:7f:ae:94: b7:85:c6:a2:cd:f8:d6:9f:61:11:9f:a1:4c:ae:9c: 86:b9:89:a7:7e:9f:5d:c0:2d:8e:fd:45:19:c8:bc: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AC:B7:8F:BA:F9:6C:CB:8B:D4:ED:E5:A8:66:49:53:F5:9B:08:90 X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Gay3j7r5bMuL1O3lqGZJU_WbCJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.174.0/24 89.40.69.0/24 93.117.175.0/24 176.223.163.0/24 IPv6: 2a11:1400:4000::/40 Signature Algorithm: sha256WithRSAEncryption 6c:bc:fc:69:8d:21:55:ae:4a:41:a6:7b:5f:bd:89:31:77:48: 75:6a:21:64:1d:1e:78:26:b5:d2:a1:2b:f5:9c:4b:82:f1:80: f5:4c:71:b4:33:52:c2:22:dd:b1:fd:b7:62:d4:1c:d9:93:c2: e6:65:e4:f4:2e:e2:92:b1:ec:6c:49:c1:ac:0d:09:35:5b:c7: 36:d6:1d:0a:81:8a:ab:0e:aa:40:fc:c7:87:9a:8f:99:20:d9: c9:e8:04:df:80:b6:bd:28:bd:a4:1b:39:c8:2e:29:0e:29:f1: 4c:ab:c9:25:77:a4:3e:d3:e5:16:66:0a:b8:d6:17:5a:1f:47: a6:62:0f:5d:c9:18:27:f6:0e:2c:b0:88:90:7b:61:e3:04:f1: a6:0b:ae:f7:43:47:fc:a9:08:ac:b8:1a:2b:6e:f9:4e:e7:99: c2:ed:9d:91:c3:b9:c7:1e:47:bb:ea:b8:5c:64:93:fe:46:1a: 3e:17:5a:18:db:9c:1e:d4:57:f9:3a:79:3f:a4:09:b8:32:ac: 08:ef:2f:f1:ce:07:d4:3e:b7:48:9c:32:4c:50:79:22:1c:95: db:88:90:71:82:65:40:24:da:f6:ee:20:a9:9c:22:14:38:4d: b6:b9:45:57:9e:33:fc:1f:30:66:9f:f1:06:cd:97:ef:7c:4c: 1c:49:a8:dc -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7pFu06REavNYe8iSPTbf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjYwMTAxMjIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWFjYjc4ZmJhZjk2Y2NiOGJkNGVkZTVhODY2NDk1M2Y1OWIwODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2pPhajoB2CV+nCYhQk74lKvK3dj TzLtv+6LIHl6kfP0fdIjLoMja38PGXwhIuLzxaYaf8bErsSNW9DO+8Cubafqa0l4 dBw/CnVWHZEn3fC0BvjJJp6H4gGMHqmGMN73dxlphjB/H01AaFtSMRs3UG880O0C zfXlRrVmf9kJkM2FkVwg89OIvqvVYWuKcx6Lk73LDJ26DjUG3g2bPXN/5l+CtyXU paZQf2kR5RZSbQavXbnRwYiLtqthpAhLCpCpOC5bE2A7Zr2nMtqbNEB8N8ZS58YQ 3ZoihEYR37J/rpS3hcaizfjWn2ERn6FMrpyGuYmnfp9dwC2O/UUZyLz1RwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFBmst4+6+WzLi9Tt5ahmSVP1mwiQMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvR2F5M2o3cjViTXVMMU8zbHFHWkpVX1diQ0pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQAWSKuAwQA WShFAwQAXXWvAwQAsN+jMA4EAgACMAgDBgAqERQAQDANBgkqhkiG9w0BAQsFAAOC AQEAbLz8aY0hVa5KQaZ7X72JMXdIdWohZB0eeCa10qEr9ZxLgvGA9UxxtDNSwiLd sf23YtQc2ZPC5mXk9C7ikrHsbEnBrA0JNVvHNtYdCoGKqw6qQPzHh5qPmSDZyegE 34C2vSi9pBs5yC4pDinxTKvJJXekPtPlFmYKuNYXWh9HpmIPXckYJ/YOLLCIkHth 4wTxpguu90NH/KkIrLgaK275TueZwu2dkcO5xx5Hu+q4XGST/kYaPhdaGNucHtRX +Tp5P6QJuDKsCO8v8c4H1D63SJwyTFB5IhyV24iQcYJlQCTa9u4gqZwiFDhNtrlF V54z/B8wZp/xBs2X73xMHEmo3A== -----END CERTIFICATE-----Generated at Sat Jan 3 01:01:54 2026 by rpki-client