This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa File: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (raw, json) Hash identifier: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c= Subject key identifier: 1A:9E:FA:1A:FF:9E:1D:64:60:46:F8:44:8C:7A:89:EA:27:27:D3:44 Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Certificate serial: 019B79102EB9017F47FBF6DC8840038EAE46 Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa Signing time: Thu 01 Jan 2026 10:17:42 +0000 ROA not before: Thu 01 Jan 2026 10:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62211 IP address blocks: 46.106.204.0/22 maxlen: 22 149.140.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2e:b9:01:7f:47:fb:f6:dc:88:40:03:8e:ae:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Validity Not Before: Jan 1 10:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a9efa1aff9e1d646046f8448c7a89ea2727d344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:38:fe:e1:4f:ad:8e:59:7c:01:b8:3f:a3:d4: 95:1d:27:da:44:b9:4b:ab:2b:6f:fb:0c:5d:29:2b: 23:75:c1:2b:65:de:ab:a8:99:37:48:f6:1d:13:4f: dc:2d:56:fc:69:a5:1c:45:96:42:bc:13:88:46:01: 88:fe:7c:77:83:e5:c8:31:9c:45:d7:0b:80:f6:d0: a4:a3:a4:9d:0a:92:af:5d:ee:95:23:49:2b:54:92: c4:e0:c9:43:a8:66:e6:e3:67:5b:ff:b0:38:70:2c: 9e:07:88:9f:69:14:bf:bb:37:8f:b5:b6:0d:15:4b: 6c:c3:d0:42:21:61:43:09:b1:b7:61:23:07:8d:b3: 51:49:82:3c:13:3e:b6:b4:5f:6f:db:19:5b:f2:03: 82:df:18:b1:96:18:90:ec:04:eb:ac:de:ed:3d:0a: 01:48:dc:2d:b8:09:d7:15:0d:ad:64:3a:d6:f9:4b: 5e:60:01:8a:46:52:8b:20:f8:4a:18:a9:55:5d:ad: be:a6:d8:c4:57:c9:ad:49:01:59:cb:77:86:9d:f0: ad:3b:84:c6:2f:95:86:eb:65:68:4a:0b:29:61:56: 6f:f8:33:06:1b:94:3d:97:df:36:01:18:e3:18:18: 34:5f:6a:f4:1b:b3:16:9b:28:ac:44:c8:f1:d8:1c: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9E:FA:1A:FF:9E:1D:64:60:46:F8:44:8C:7A:89:EA:27:27:D3:44 X509v3 Authority Key Identifier: keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.106.204.0/22 149.140.252.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:7c:a3:90:cf:f0:99:20:7c:57:23:3d:55:33:ce:46:c6:3f: d7:0d:b1:b2:18:fb:79:eb:95:dd:08:27:67:b3:0a:c2:2d:ad: 51:f5:0d:ac:d6:78:5d:6b:9e:dd:9d:cc:4f:73:81:f0:13:2b: a0:d9:55:58:a7:34:ab:8b:56:3c:b0:3f:19:43:23:78:b9:1d: 26:a2:94:19:64:86:6b:e1:4f:bc:ff:8d:a3:dc:88:61:0f:02: bb:f1:63:9d:ff:af:81:ad:51:fd:ba:03:04:6c:fc:00:a1:33: 18:ea:31:cb:2a:72:e5:4b:a9:b9:c9:93:b8:82:71:9b:59:62: 05:53:d9:9c:69:83:bd:22:e8:b8:cb:ad:70:f2:a4:10:08:67: e9:96:cb:1e:60:24:bc:c4:b1:00:21:3c:0f:50:7b:85:97:7b: 42:f7:51:79:18:a5:07:af:cc:86:71:63:9a:f8:d4:07:7d:b0: 67:5f:bc:1d:f0:70:5f:09:aa:4c:72:90:21:8b:8c:a8:5f:01: 36:4b:c1:d3:0e:24:65:bf:b9:93:b2:87:4c:29:a7:99:c4:9a: cd:e3:fb:d1:85:f8:d5:ee:1e:e9:03:b7:6b:af:c9:3d:c6:43: 36:9d:17:a0:f2:74:55:17:24:f8:2a:d9:48:a1:a6:85:a4:0d: d5:61:aa:19 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EC65AX9H+/bciEADjq5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2 NjIxYjkwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTllZmExYWZmOWUxZDY0NjA0NmY4NDQ4YzdhODllYTI3MjdkMzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzj+4U+tjll8Abg/o9SVHSfaRLlL qytv+wxdKSsjdcErZd6rqJk3SPYdE0/cLVb8aaUcRZZCvBOIRgGI/nx3g+XIMZxF 1wuA9tCko6SdCpKvXe6VI0krVJLE4MlDqGbm42db/7A4cCyeB4ifaRS/uzePtbYN FUtsw9BCIWFDCbG3YSMHjbNRSYI8Ez62tF9v2xlb8gOC3xixlhiQ7ATrrN7tPQoB SNwtuAnXFQ2tZDrW+UteYAGKRlKLIPhKGKlVXa2+ptjEV8mtSQFZy3eGnfCtO4TG L5WG62VoSgspYVZv+DMGG5Q9l982ARjjGBg0X2r0G7MWmyisRMjx2Bzo4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBqe+hr/nh1kYEb4RIx6ieonJ9NEMB8GA1UdIwQY MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt YzFhZGRkN2RlYmFhLzEvR3A3Nkd2LWVIV1JnUnZoRWpIcUo2aWNuMDBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLmrMAwQC lYz8MA0GCSqGSIb3DQEBCwUAA4IBAQAbfKOQz/CZIHxXIz1VM85Gxj/XDbGyGPt5 65XdCCdnswrCLa1R9Q2s1nhda57dncxPc4HwEyug2VVYpzSri1Y8sD8ZQyN4uR0m opQZZIZr4U+8/42j3IhhDwK78WOd/6+BrVH9ugMEbPwAoTMY6jHLKnLlS6m5yZO4 gnGbWWIFU9mcaYO9Iui4y61w8qQQCGfplsseYCS8xLEAITwPUHuFl3tC91F5GKUH r8yGcWOa+NQHfbBnX7wd8HBfCapMcpAhi4yoXwE2S8HTDiRlv7mTsodMKaeZxJrN 4/vRhfjV7h7pA7drr8k9xkM2nReg8nRVFyT4KtlIoaaFpA3VYaoZ -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:47 2026 by rpki-client