This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/G1iJHYXZZbAs4A1MhgUftxUGaws.roa File: G1iJHYXZZbAs4A1MhgUftxUGaws.roa (raw, json) Hash identifier: 7QifEDFoU7RkmJKkZqgcMn81wo0EKV/iY/tFPszpQk0= Subject key identifier: 1B:58:89:1D:85:D9:65:B0:2C:E0:0D:4C:86:05:1F:B7:15:06:6B:0B Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c Certificate serial: 019B77587A42F3C30A8A41237AAC7C1742AB Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/G1iJHYXZZbAs4A1MhgUftxUGaws.roa Signing time: Thu 01 Jan 2026 02:17:25 +0000 ROA not before: Thu 01 Jan 2026 02:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 193.138.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7a:42:f3:c3:0a:8a:41:23:7a:ac:7c:17:42:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b58891d85d965b02ce00d4c86051fb715066b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:2b:6d:34:20:11:09:52:12:6d:95:64:9c: cc:d6:39:4e:33:a9:6d:3b:a8:59:2f:43:10:b5:c9: e7:88:54:1c:d7:1c:a3:87:fa:8f:cb:45:40:44:c0: 44:1c:55:26:f7:5f:78:e3:e6:c1:2b:80:a3:02:cd: f7:26:b5:81:95:c7:37:c1:70:31:7f:6a:ea:e9:db: d8:d5:8a:08:87:a8:d2:12:9f:3c:b1:24:f7:5e:16: ca:56:ed:f2:e2:2c:d8:94:cc:98:4b:f7:1a:39:b0: 90:2d:40:04:01:10:ff:38:fc:25:1f:4d:52:59:49: cd:8b:fb:c6:f9:9d:df:86:35:0b:98:42:b1:97:50: 7b:7c:f3:78:18:0b:d2:ad:8f:d8:ed:2e:f8:61:02: 1a:b6:cc:4a:6c:6d:fd:26:6d:fb:69:7f:72:53:08: 43:c7:fd:d0:e0:75:1b:ac:9e:32:6f:cf:05:e6:59: ce:a6:88:a7:d7:57:f2:6f:87:44:b7:c8:f7:46:cf: c5:40:d2:25:2c:99:80:33:b5:0d:66:31:91:cf:a6: 93:f0:4c:62:9a:eb:9f:50:98:69:48:76:55:51:59: 68:91:72:9a:cc:33:6d:e8:7a:4a:c7:a2:2a:79:15: c3:2a:75:03:d7:e3:e1:7f:87:af:0a:34:ed:20:aa: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:58:89:1D:85:D9:65:B0:2C:E0:0D:4C:86:05:1F:B7:15:06:6B:0B X509v3 Authority Key Identifier: keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/G1iJHYXZZbAs4A1MhgUftxUGaws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.77.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:a2:9e:0b:69:82:c7:ba:eb:e4:1d:27:c3:2a:87:77:02:26: 48:10:19:99:c0:73:96:50:68:27:35:f6:b5:90:28:0f:c6:84: 0e:3f:81:6a:2d:f4:1e:ca:6d:4c:74:2f:fe:27:32:33:3f:21: 1c:da:69:21:59:95:63:c8:2a:ef:54:40:5e:8e:12:52:37:35: a4:e6:12:7f:32:e6:c5:02:55:7a:d7:f7:42:1d:5b:20:ac:15: 92:ea:4d:50:cb:11:6a:4d:bc:80:4b:fd:d9:e1:c5:ba:04:e6: 0c:22:94:24:ed:65:aa:3a:c1:bd:d9:2b:e1:37:43:c6:53:27: ce:ba:e7:16:11:f7:39:8c:56:cc:9f:48:d4:5b:d8:77:70:31: db:4f:1a:6c:a2:a2:c4:0b:9a:f4:83:84:b8:52:bd:2f:24:e9: 8d:59:37:62:12:8f:39:1a:eb:be:db:00:44:06:d6:28:7c:53: ce:66:f8:03:e2:12:f7:68:fe:5a:c9:5e:e1:cf:66:3f:7d:2b: db:87:f2:22:1e:dc:8b:58:31:0e:dc:8d:75:23:05:80:38:78: 04:fb:4d:03:0c:87:a0:24:65:f2:75:27:23:22:b9:03:61:98: 03:49:27:3f:45:34:a8:09:52:27:a4:9b:71:5c:42:17:fb:3e: 30:b5:96:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WHpC88MKikEjeqx8F0KrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZDBmYmM0ZGU4MWVlMjcyN2FiYTNlOTEwYWZjZDJhNTNh NjY0MGMwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjU4ODkxZDg1ZDk2NWIwMmNlMDBkNGM4NjA1MWZiNzE1MDY2YjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouIrbTQgEQlSEm2VZJzM1jlOM6lt O6hZL0MQtcnniFQc1xyjh/qPy0VARMBEHFUm91944+bBK4CjAs33JrWBlcc3wXAx f2rq6dvY1YoIh6jSEp88sST3XhbKVu3y4izYlMyYS/caObCQLUAEARD/OPwlH01S WUnNi/vG+Z3fhjULmEKxl1B7fPN4GAvSrY/Y7S74YQIatsxKbG39Jm37aX9yUwhD x/3Q4HUbrJ4yb88F5lnOpoin11fyb4dEt8j3Rs/FQNIlLJmAM7UNZjGRz6aT8Exi muufUJhpSHZVUVlokXKazDNt6HpKx6IqeRXDKnUD1+Phf4evCjTtIKoIcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBtYiR2F2WWwLOANTIYFH7cVBmsLMB8GA1UdIwQY MBaAFN/Q+8Tege4nJ6uj6RCvzSpTpmQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzlEN3hONkI3aWNucTZQcEVLX05LbE9tWkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yNDU4NzMtMWNhNy00YjcxLWIyMjAt ZWRiMDQxOGNhYzRkLzEvRzFpSkhZWFpaYkFzNEExTWhnVWZ0eFVHYXdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8yNDU4NzMtMWNhNy00YjcxLWIyMjAtZWRiMDQxOGNhYzRk LzEvMzlEN3hONkI3aWNucTZQcEVLX05LbE9tWkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYpNMA0G CSqGSIb3DQEBCwUAA4IBAQAsop4LaYLHuuvkHSfDKod3AiZIEBmZwHOWUGgnNfa1 kCgPxoQOP4FqLfQeym1MdC/+JzIzPyEc2mkhWZVjyCrvVEBejhJSNzWk5hJ/MubF AlV61/dCHVsgrBWS6k1QyxFqTbyAS/3Z4cW6BOYMIpQk7WWqOsG92SvhN0PGUyfO uucWEfc5jFbMn0jUW9h3cDHbTxpsoqLEC5r0g4S4Ur0vJOmNWTdiEo85Guu+2wBE BtYofFPOZvgD4hL3aP5ayV7hz2Y/fSvbh/IiHtyLWDEO3I11IwWAOHgE+00DDIeg JGXydScjIrkDYZgDSSc/RTSoCVInpJtxXEIX+z4wtZaJ -----END CERTIFICATE-----Generated at Sun Jan 25 13:42:52 2026 by rpki-client