This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/3GwgcAPKG43MCPD8y9300VUUE7U.roa File: 3GwgcAPKG43MCPD8y9300VUUE7U.roa (raw, json) Hash identifier: InZ5p01xw0MRhLMDOeL96L2077Wx0d7vpVCiYPBd65g= Subject key identifier: DC:6C:20:70:03:CA:1B:8D:CC:08:F0:FC:CB:DD:F4:D1:55:14:13:B5 Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934 Certificate serial: 019B7BA4685BAB8A0E49CEAF11B327A2B732 Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/3GwgcAPKG43MCPD8y9300VUUE7U.roa Signing time: Thu 01 Jan 2026 22:18:50 +0000 ROA not before: Thu 01 Jan 2026 22:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43108 IP address blocks: 178.213.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:68:5b:ab:8a:0e:49:ce:af:11:b3:27:a2:b7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934 Validity Not Before: Jan 1 22:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc6c207003ca1b8dcc08f0fccbddf4d1551413b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:ab:a6:e4:f7:9f:81:03:69:0d:ba:b4:ee: fd:ba:47:6b:94:19:38:6e:be:c0:26:98:fe:8c:d0: 10:2a:c7:42:85:02:50:54:d3:b2:44:85:e7:38:15: ea:d6:a2:de:8d:d3:f5:4c:bc:d7:65:cc:3f:84:38: 1c:dd:a2:d3:2e:38:91:32:f6:1b:3e:36:a0:bf:c4: 5f:f9:1b:8a:ed:f3:e3:ee:a4:89:11:b6:c9:8b:7d: f5:ca:fc:46:d9:5f:68:4e:c1:3c:1f:f1:19:37:76: 6c:c3:92:4f:3b:db:98:ef:1c:79:4c:e6:67:1f:01: 4f:10:cc:5e:e7:a3:a6:b5:22:d9:f4:8e:bd:cb:21: c0:bf:f9:11:e1:73:87:d6:22:7c:9e:e1:f8:87:25: d9:af:e4:fc:9f:6c:99:01:b3:b7:07:e4:4f:2c:67: 4f:80:2e:e2:4d:6e:74:87:42:6e:c6:ec:c0:4a:c5: 7e:fc:9f:4e:52:ba:9e:70:c5:a4:a3:b1:2c:45:62: 3a:db:9e:2c:67:4b:fc:0b:9d:07:14:15:8d:f3:56: 55:b1:e9:01:09:c0:82:27:60:5f:7f:11:d9:9b:33: 7e:7e:ea:d9:fc:ab:23:98:52:a2:d4:e0:9d:70:fa: eb:3b:28:38:cf:5b:e0:c3:7a:3c:34:99:ab:63:48: cb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6C:20:70:03:CA:1B:8D:CC:08:F0:FC:CB:DD:F4:D1:55:14:13:B5 X509v3 Authority Key Identifier: keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/3GwgcAPKG43MCPD8y9300VUUE7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.48.0/21 Signature Algorithm: sha256WithRSAEncryption 54:8a:7a:9e:d6:ee:a5:00:8a:c8:ce:34:6c:45:d3:9d:c5:0e: a3:94:dd:a9:6a:83:35:bd:2d:87:18:a2:f1:6a:be:e1:91:bb: 73:67:de:f2:f8:e7:e4:6d:da:bf:1b:5b:a6:d7:8b:ee:0b:d8: 17:78:79:d6:0c:93:81:24:0a:8f:f8:57:95:d1:b5:16:f6:8c: de:86:10:2d:5d:ca:42:a0:ad:27:a8:71:20:ee:51:d1:40:ad: 07:35:60:25:40:1c:fd:b7:de:0b:28:2a:46:19:29:9f:53:22: cd:82:12:c7:29:90:bb:61:52:58:b7:fb:72:59:1a:f3:bb:94: ea:90:27:8f:e4:aa:17:f5:e1:7b:08:41:a8:c9:15:0f:ce:85: 14:f7:01:28:11:98:32:59:84:0d:72:c8:67:d6:8e:e8:d1:20: 9e:bb:c3:92:ee:9e:bc:c3:bf:5b:53:34:33:5f:cc:cd:0d:e6: f3:6f:da:8c:84:ab:16:a5:11:b8:f2:99:1e:87:ce:30:42:3d: 4b:18:2e:c8:ad:62:19:5e:c5:63:70:9b:19:ea:c1:2a:12:ac: 29:65:eb:f5:15:e1:ae:e3:fa:8e:ca:90:c0:97:16:c8:2b:64: 4b:a1:23:d7:9c:49:2e:f6:99:06:5e:5b:a0:0b:ee:d6:1f:38: c3:c4:ed:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pGhbq4oOSc6vEbMnorcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOGVkMzNiNzBiZTZjYzIwYzg5ZmJiYWM3N2E1OWNhM2I0 YzA5MzQwHhcNMjYwMTAxMjIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzZjMjA3MDAzY2ExYjhkY2MwOGYwZmNjYmRkZjRkMTU1MTQxM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC2rpuT3n4EDaQ26tO79ukdrlBk4 br7AJpj+jNAQKsdChQJQVNOyRIXnOBXq1qLejdP1TLzXZcw/hDgc3aLTLjiRMvYb Pjagv8Rf+RuK7fPj7qSJEbbJi331yvxG2V9oTsE8H/EZN3Zsw5JPO9uY7xx5TOZn HwFPEMxe56OmtSLZ9I69yyHAv/kR4XOH1iJ8nuH4hyXZr+T8n2yZAbO3B+RPLGdP gC7iTW50h0JuxuzASsV+/J9OUrqecMWko7EsRWI6254sZ0v8C50HFBWN81ZVsekB CcCCJ2BffxHZmzN+furZ/KsjmFKi1OCdcPrrOyg4z1vgw3o8NJmrY0jLhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxsIHADyhuNzAjw/Mvd9NFVFBO1MB8GA1UdIwQY MBaAFK6O0ztwvmzCDIn7usd6Wco7TAk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUt MDRkYmM5YWMxNDQ0LzEvM0d3Z2NBUEtHNDNNQ1BEOHk5MzAwVlVVRTdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUtMDRkYmM5YWMxNDQ0 LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstUwMA0G CSqGSIb3DQEBCwUAA4IBAQBUinqe1u6lAIrIzjRsRdOdxQ6jlN2paoM1vS2HGKLx ar7hkbtzZ97y+Ofkbdq/G1um14vuC9gXeHnWDJOBJAqP+FeV0bUW9ozehhAtXcpC oK0nqHEg7lHRQK0HNWAlQBz9t94LKCpGGSmfUyLNghLHKZC7YVJYt/tyWRrzu5Tq kCeP5KoX9eF7CEGoyRUPzoUU9wEoEZgyWYQNcshn1o7o0SCeu8OS7p68w79bUzQz X8zNDebzb9qMhKsWpRG48pkeh84wQj1LGC7IrWIZXsVjcJsZ6sEqEqwpZev1FeGu 4/qOypDAlxbIK2RLoSPXnEku9pkGXlugC+7WHzjDxO2E -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:48 2026 by rpki-client