This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/gW7JxFR7uiW4ZpkuSJauf4QocGo.roa File: gW7JxFR7uiW4ZpkuSJauf4QocGo.roa (raw, json) Hash identifier: cXbpQwceKEQaMo+TbQWEr8PhkuENmJydovPMYT6tg40= Subject key identifier: 81:6E:C9:C4:54:7B:BA:25:B8:66:99:2E:48:96:AE:7F:84:28:70:6A Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019B77C7712184637B033538275FA93FC084 Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/gW7JxFR7uiW4ZpkuSJauf4QocGo.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201143 IP address blocks: 194.92.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:71:21:84:63:7b:03:35:38:27:5f:a9:3f:c0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=816ec9c4547bba25b866992e4896ae7f8428706a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:57:b5:8a:8e:f0:9c:a6:09:43:e4:8c:9a:6c: ad:4f:e2:95:e8:38:d0:91:fb:11:c4:3a:bb:d0:1c: d9:76:7d:7c:67:2e:40:17:1a:ca:01:4f:69:4d:ec: f5:9b:65:a0:1f:8e:21:60:eb:1f:fe:72:9a:2b:a2: 4b:66:2f:e0:48:1f:41:dd:f0:88:8b:62:00:3d:c1: 58:88:39:8d:5a:3c:72:6a:7e:d9:28:8e:f5:78:19: fd:b6:b9:3d:e8:7a:43:c5:3d:f7:fb:fd:b5:f1:88: 23:1a:1f:25:76:76:af:42:c2:e4:6c:59:89:53:5a: 74:3d:2f:b2:db:e7:74:96:36:c7:98:77:0f:8f:d3: ed:b5:c6:f1:9a:17:aa:06:55:d5:62:83:e2:c6:65: cd:77:37:17:71:e1:76:a5:f6:94:2f:ed:6e:7a:5f: 05:28:6c:dd:29:51:29:34:1d:fa:1d:dd:59:69:3a: ee:fa:ef:93:e7:1c:95:16:9e:fe:0b:a4:20:38:c5: 1b:b6:dc:d7:e6:94:82:89:15:95:4b:d7:01:36:a7: af:fb:9f:c9:d4:da:19:58:9f:45:f1:8b:a6:42:48: 3d:00:54:6e:88:41:91:74:cc:5b:16:f7:b6:60:af: 51:a8:87:1c:bd:99:1d:bd:f5:8e:7f:7e:29:59:9b: b0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6E:C9:C4:54:7B:BA:25:B8:66:99:2E:48:96:AE:7F:84:28:70:6A X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/gW7JxFR7uiW4ZpkuSJauf4QocGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.92.98.0/24 Signature Algorithm: sha256WithRSAEncryption 64:ba:1a:78:26:f5:18:f1:d8:61:b2:5d:27:c6:69:eb:07:a5: 91:f4:c0:ca:78:bd:d5:ff:09:dc:74:d9:d5:df:3c:2c:d8:fb: 22:80:8f:07:44:60:2f:81:f8:33:40:51:69:57:f0:db:70:8e: 2f:5d:cc:9e:47:31:79:6f:ee:ac:b7:5a:33:8f:e6:5b:06:03: 38:19:dd:68:09:f0:3d:8c:f4:9b:d3:46:0d:13:29:1c:00:77: 64:8f:5b:b2:60:3c:3a:a5:a9:1f:95:27:db:ab:f4:54:60:f6: 8a:4b:e5:81:3b:5a:58:c4:ec:9c:62:fa:1d:df:7e:71:9a:e2: 28:8b:d3:de:7d:f3:e5:17:39:b7:5f:f8:0c:d5:7a:b3:2e:d6: c0:13:a5:1c:a8:63:ff:c1:0a:d6:9d:8a:7d:8a:a3:e9:1f:2a: 03:61:0f:6c:c8:d3:c7:78:16:86:32:04:8a:f5:a4:a9:b6:14: 9e:45:c8:ab:7c:30:95:1d:87:d6:44:04:5f:fc:b4:7a:da:87: 1e:21:eb:67:4e:89:1d:08:0d:94:36:3c:56:63:18:c6:07:b6: a7:24:05:63:9d:58:94:72:51:0a:ff:ac:c5:4b:93:3a:15:db: c3:05:51:b4:43:52:54:8d:c9:ca:9a:3e:b9:fb:7f:a7:05:9e: 7a:8c:90:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3EhhGN7AzU4J1+pP8CEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTZlYzljNDU0N2JiYTI1Yjg2Njk5MmU0ODk2YWU3Zjg0Mjg3MDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFe1io7wnKYJQ+SMmmytT+KV6DjQ kfsRxDq70BzZdn18Zy5AFxrKAU9pTez1m2WgH44hYOsf/nKaK6JLZi/gSB9B3fCI i2IAPcFYiDmNWjxyan7ZKI71eBn9trk96HpDxT33+/218YgjGh8ldnavQsLkbFmJ U1p0PS+y2+d0ljbHmHcPj9PttcbxmheqBlXVYoPixmXNdzcXceF2pfaUL+1uel8F KGzdKVEpNB36Hd1ZaTru+u+T5xyVFp7+C6QgOMUbttzX5pSCiRWVS9cBNqev+5/J 1NoZWJ9F8YumQkg9AFRuiEGRdMxbFve2YK9RqIccvZkdvfWOf34pWZuwswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIFuycRUe7oluGaZLkiWrn+EKHBqMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvZ1c3SnhGUjd1aVc0WnBrdVNKYXVmNFFvY0dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlxiMA0G CSqGSIb3DQEBCwUAA4IBAQBkuhp4JvUY8dhhsl0nxmnrB6WR9MDKeL3V/wncdNnV 3zws2PsigI8HRGAvgfgzQFFpV/DbcI4vXcyeRzF5b+6st1ozj+ZbBgM4Gd1oCfA9 jPSb00YNEykcAHdkj1uyYDw6pakflSfbq/RUYPaKS+WBO1pYxOycYvod335xmuIo i9PeffPlFzm3X/gM1XqzLtbAE6UcqGP/wQrWnYp9iqPpHyoDYQ9syNPHeBaGMgSK 9aSpthSeRcirfDCVHYfWRARf/LR62oceIetnTokdCA2UNjxWYxjGB7anJAVjnViU clEK/6zFS5M6FdvDBVG0Q1JUjcnKmj65+3+nBZ56jJDD -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:48 2026 by rpki-client