This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/G6JvpqCYvPpC7VM1ZZPSfJgdNhc.roa File: G6JvpqCYvPpC7VM1ZZPSfJgdNhc.roa (raw, json) Hash identifier: D1iE+lUItdHWGUL+J972PCDTzMoGyX6bUifXJiUpjwY= Subject key identifier: 1B:A2:6F:A6:A0:98:BC:FA:42:ED:53:35:65:93:D2:7C:98:1D:36:17 Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622 Certificate serial: 019B7D5CD19BF379FF129465007542C18051 Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/G6JvpqCYvPpC7VM1ZZPSfJgdNhc.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46071 IP address blocks: 194.99.58.0/24 maxlen: 24 194.99.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d1:9b:f3:79:ff:12:94:65:00:75:42:c1:80:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622 Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ba26fa6a098bcfa42ed53356593d27c981d3617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:83:0f:07:17:1d:09:c8:95:53:d8:fd:a1: 47:bc:1a:68:a8:d8:80:2b:9b:95:00:de:f2:08:d1: 14:87:3e:30:7c:58:ae:d0:a6:8d:45:6e:1c:35:72: 6b:dc:ba:5a:75:ba:9b:31:c3:c2:fc:0a:ed:29:8d: 82:d3:74:76:f4:cf:d9:d9:e0:21:eb:c4:a0:3c:8c: fc:48:a6:84:3b:74:bb:e4:d7:0a:f6:86:51:1c:25: 09:1c:b9:b8:3e:6e:18:6a:35:0f:df:39:cc:f1:b4: f0:ce:70:5d:8b:75:31:63:0f:f0:9a:a8:91:d6:98: d4:e6:66:ce:16:c7:12:c1:64:ff:6f:bb:8e:8b:4f: 8b:83:40:12:70:dd:bf:80:a3:8c:bf:35:49:6b:1e: ee:f8:78:d4:95:18:2b:13:12:af:77:df:76:a9:6b: 5b:30:29:58:3e:a0:5d:b5:65:30:81:db:70:05:ab: f8:cc:76:b6:54:d1:c5:0a:30:1a:a1:37:c8:fb:6f: c3:af:9e:dd:df:2c:1f:ea:fc:de:1a:f8:6e:3a:d6: d3:1e:36:01:48:1d:80:50:6f:4a:91:20:c2:51:93: f5:a7:d5:68:99:3a:2a:3a:aa:8b:15:c5:44:17:bd: 35:89:6f:c7:85:e0:a6:a5:08:c8:e8:3d:d1:ca:ca: da:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A2:6F:A6:A0:98:BC:FA:42:ED:53:35:65:93:D2:7C:98:1D:36:17 X509v3 Authority Key Identifier: keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/G6JvpqCYvPpC7VM1ZZPSfJgdNhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.99.58.0/23 Signature Algorithm: sha256WithRSAEncryption 39:fe:64:fd:78:ee:38:64:e2:17:d7:c5:5d:5a:83:53:c4:6d: 2b:1e:a4:47:1c:2e:2f:f4:c8:2a:1a:ac:50:9d:4f:99:62:dd: a3:4d:e4:a4:74:0d:ff:59:58:dc:80:af:9f:4b:fc:53:87:1b: a0:02:4a:80:ff:63:ce:0d:b9:0a:ba:52:83:b7:97:fd:25:fb: d4:8d:ac:21:86:2f:ae:21:b7:3f:9d:3d:b7:b8:45:79:10:ef: 2e:6e:61:fa:0c:4b:44:7a:a7:ef:36:63:78:7b:88:aa:85:9b: 9a:98:cd:be:31:0e:c7:33:60:10:58:cf:f7:5d:a5:8c:a9:9f: 10:89:99:6c:15:ef:f8:fc:26:d1:a8:ab:a9:89:1e:9d:64:71: 51:af:48:3d:c6:26:9e:b1:e8:8f:af:45:6c:f2:07:d0:ab:b3: 3f:b9:41:db:2f:cd:28:ab:07:4b:ea:fd:ca:81:2f:0f:2d:8d: 89:63:5e:57:89:59:d8:6f:fc:f2:20:e5:3a:a0:99:61:1e:c8: 54:fb:08:5f:50:4e:24:b9:6f:4c:e7:1e:25:d6:8d:00:77:fc: 89:3a:83:2c:e9:62:7b:71:d9:6b:35:f7:d0:b8:86:06:2e:27: 20:4e:c3:87:bf:91:94:35:a6:80:37:a4:ec:64:4a:d9:f6:08: b2:21:18:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNGb83n/EpRlAHVCwYBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1 ODY2MjIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmEyNmZhNmEwOThiY2ZhNDJlZDUzMzU2NTkzZDI3Yzk4MWQzNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlraDDwcXHQnIlVPY/aFHvBpoqNiA K5uVAN7yCNEUhz4wfFiu0KaNRW4cNXJr3LpadbqbMcPC/ArtKY2C03R29M/Z2eAh 68SgPIz8SKaEO3S75NcK9oZRHCUJHLm4Pm4YajUP3znM8bTwznBdi3UxYw/wmqiR 1pjU5mbOFscSwWT/b7uOi0+Lg0AScN2/gKOMvzVJax7u+HjUlRgrExKvd992qWtb MClYPqBdtWUwgdtwBav4zHa2VNHFCjAaoTfI+2/Dr57d3ywf6vzeGvhuOtbTHjYB SB2AUG9KkSDCUZP1p9VomToqOqqLFcVEF701iW/HheCmpQjI6D3RysraAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBuib6agmLz6Qu1TNWWT0nyYHTYXMB8GA1UdIwQY MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt OWUwYWVkMmZiOGVjLzEvRzZKdnBxQ1l2UHBDN1ZNMVpaUFNmSmdkTmhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmM6MA0G CSqGSIb3DQEBCwUAA4IBAQA5/mT9eO44ZOIX18VdWoNTxG0rHqRHHC4v9MgqGqxQ nU+ZYt2jTeSkdA3/WVjcgK+fS/xThxugAkqA/2PODbkKulKDt5f9JfvUjawhhi+u Ibc/nT23uEV5EO8ubmH6DEtEeqfvNmN4e4iqhZuamM2+MQ7HM2AQWM/3XaWMqZ8Q iZlsFe/4/CbRqKupiR6dZHFRr0g9xiaeseiPr0Vs8gfQq7M/uUHbL80oqwdL6v3K gS8PLY2JY15XiVnYb/zyIOU6oJlhHshU+whfUE4kuW9M5x4l1o0Ad/yJOoMs6WJ7 cdlrNffQuIYGLicgTsOHv5GUNaaAN6TsZErZ9giyIRiK -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:03 2026 by rpki-client