This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/gmSsfOKXQkDDy4ovXXqyVsXoK10.roa File: gmSsfOKXQkDDy4ovXXqyVsXoK10.roa (raw, json) Hash identifier: Fo+hT/a1FZatdtcuWByXNim69uyN5v6qXMsqXNhOVFw= Subject key identifier: 82:64:AC:7C:E2:97:42:40:C3:CB:8A:2F:5D:7A:B2:56:C5:E8:2B:5D Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700 Certificate serial: 019B78350E25FB795A5C526E51226CE6910D Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/gmSsfOKXQkDDy4ovXXqyVsXoK10.roa Signing time: Thu 01 Jan 2026 06:18:21 +0000 ROA not before: Thu 01 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49814 IP address blocks: 31.24.24.0/21 maxlen: 21 91.226.73.0/24 maxlen: 24 176.65.32.0/19 maxlen: 19 2a00:9700::/32 maxlen: 32 2a00:9700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0e:25:fb:79:5a:5c:52:6e:51:22:6c:e6:91:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700 Validity Not Before: Jan 1 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8264ac7ce2974240c3cb8a2f5d7ab256c5e82b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:dd:2f:2b:c5:b6:64:f3:90:a1:94:45:65: 16:8a:38:76:40:8d:77:be:ae:22:5e:8c:0e:03:78: bf:e5:b4:42:bb:90:13:48:82:51:6a:80:71:76:64: c3:db:44:a8:12:74:78:90:c2:dc:f5:f5:07:df:d2: e4:97:cd:f5:ea:4c:00:71:85:ce:7b:27:7b:f9:3a: d0:92:94:a2:40:9d:c9:3d:74:c6:88:77:5d:51:91: 6d:46:50:b3:a0:65:ca:49:7a:3d:b4:a7:e7:ba:e0: 0c:f2:c5:dd:38:b4:49:7e:35:45:d9:0b:a7:fb:c4: 09:76:4a:a8:b6:6a:8b:40:77:d7:6f:f8:dc:20:a0: 0b:43:d7:51:66:de:33:33:e9:7e:10:d1:77:b0:27: f8:9c:28:0c:d0:61:1c:fa:39:9c:15:21:f7:82:f5: e1:7d:64:7d:d0:8a:b7:f3:2b:45:4b:ed:71:5c:4d: 32:08:84:e5:56:83:ff:a3:ba:c9:ca:f9:e9:b4:73: c1:79:e2:3e:03:a9:70:33:b7:5a:63:0a:53:64:36: 9d:52:49:63:00:86:4d:33:7f:c1:4d:e3:e5:bd:b3: d3:1d:48:4b:74:6d:74:bb:6e:31:f2:7d:85:e0:b1: d5:c6:f6:21:15:75:e4:28:27:af:30:03:db:81:b4: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:64:AC:7C:E2:97:42:40:C3:CB:8A:2F:5D:7A:B2:56:C5:E8:2B:5D X509v3 Authority Key Identifier: keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/gmSsfOKXQkDDy4ovXXqyVsXoK10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.24.0/21 91.226.73.0/24 176.65.32.0/19 IPv6: 2a00:9700::/32 Signature Algorithm: sha256WithRSAEncryption 35:65:ca:a3:74:e4:2c:9e:1c:41:b3:67:9d:68:78:44:70:d9: ef:74:6d:2e:b5:7d:19:a4:ca:ee:b7:0a:bd:ef:d3:87:f6:35: 4f:ac:7c:00:36:fc:aa:9f:ef:30:90:f7:94:6d:f6:41:f2:74: ea:2b:1f:b6:be:60:f5:00:c4:55:e3:90:e7:e1:21:a1:16:41: f2:25:ce:de:b2:e3:d1:40:93:c7:b9:8d:ec:45:38:0f:3c:76: b7:07:f6:1a:5b:3f:6e:e6:0b:57:5e:27:99:e4:89:5d:ed:e7: 5c:bb:61:b7:00:b0:05:6e:ee:ec:eb:13:88:91:56:60:05:43: 8a:f1:1e:51:d6:65:7a:67:59:85:6d:62:0b:ed:97:92:77:47: a3:7c:72:dd:a7:a5:79:c6:c7:f4:d1:97:a2:56:71:93:1c:fc: 6b:6b:3e:f6:40:8f:98:1a:1b:5c:63:af:94:c2:f8:75:b0:32: b1:6b:cc:de:4d:31:1e:f1:61:4e:0b:c8:b3:69:df:7d:b4:17: ec:9c:c7:37:6f:f8:f6:c9:e5:e6:b7:37:51:ab:8a:80:0d:af: 11:a6:64:11:b6:76:6a:9d:00:57:62:17:9c:47:ee:bf:f1:dc: 53:a3:99:a3:0a:f7:d8:f6:86:00:00:9f:4e:68:1e:dd:14:e7: 1d:fc:b5:63 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NQ4l+3laXFJuUSJs5pENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZTBlNzU5MzU0ZTgzY2MxOTMyMDM4MTEwOWRlMjJkYTBm MWE3MDAwHhcNMjYwMTAxMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjY0YWM3Y2UyOTc0MjQwYzNjYjhhMmY1ZDdhYjI1NmM1ZTgyYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CbdLyvFtmTzkKGURWUWijh2QI13 vq4iXowOA3i/5bRCu5ATSIJRaoBxdmTD20SoEnR4kMLc9fUH39Lkl8316kwAcYXO eyd7+TrQkpSiQJ3JPXTGiHddUZFtRlCzoGXKSXo9tKfnuuAM8sXdOLRJfjVF2Qun +8QJdkqotmqLQHfXb/jcIKALQ9dRZt4zM+l+ENF3sCf4nCgM0GEc+jmcFSH3gvXh fWR90Iq38ytFS+1xXE0yCITlVoP/o7rJyvnptHPBeeI+A6lwM7daYwpTZDadUklj AIZNM3/BTePlvbPTHUhLdG10u24x8n2F4LHVxvYhFXXkKCevMAPbgbSKbwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIJkrHzil0JAw8uKL116slbF6CtdMB8GA1UdIwQY MBaAFH/g51k1ToPMGTIDgRCd4i2g8acAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi1EbldUVk9nOHdaTWdPQkVKM2lMYUR4cHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wYzcyNDMtMWZmYi00OWQyLWI1YzEt YjQwMmU4YTFkOTM0LzEvZ21Tc2ZPS1hRa0REeTRvdlhYcXlWc1hvSzEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8wYzcyNDMtMWZmYi00OWQyLWI1YzEtYjQwMmU4YTFkOTM0 LzEvZi1EbldUVk9nOHdaTWdPQkVKM2lMYUR4cHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDHxgYAwQA W+JJAwQFsEEgMA0EAgACMAcDBQAqAJcAMA0GCSqGSIb3DQEBCwUAA4IBAQA1Zcqj dOQsnhxBs2edaHhEcNnvdG0utX0ZpMrutwq979OH9jVPrHwANvyqn+8wkPeUbfZB 8nTqKx+2vmD1AMRV45Dn4SGhFkHyJc7esuPRQJPHuY3sRTgPPHa3B/YaWz9u5gtX XieZ5Ild7edcu2G3ALAFbu7s6xOIkVZgBUOK8R5R1mV6Z1mFbWIL7ZeSd0ejfHLd p6V5xsf00ZeiVnGTHPxraz72QI+YGhtcY6+Uwvh1sDKxa8zeTTEe8WFOC8izad99 tBfsnMc3b/j2yeXmtzdRq4qADa8RpmQRtnZqnQBXYhecR+6/8dxTo5mjCvfY9oYA AJ9OaB7dFOcd/LVj -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:41 2026 by rpki-client