This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/sGwYaMG-fGMANWLmphJR-vDIlT8.roa File: sGwYaMG-fGMANWLmphJR-vDIlT8.roa (raw, json) Hash identifier: 4R34todPrry2ZxDJUBpJW6x1mLbY9FyCK7wsgXPjuTo= Subject key identifier: B0:6C:18:68:C1:BE:7C:63:00:35:62:E6:A6:12:51:FA:F0:C8:95:3F Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b Certificate serial: 019B7F8314D2F16B82300C6EA38A2F99DB22 Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/sGwYaMG-fGMANWLmphJR-vDIlT8.roa Signing time: Fri 02 Jan 2026 16:20:55 +0000 ROA not before: Fri 02 Jan 2026 16:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199402 IP address blocks: 46.28.235.0/24 maxlen: 24 178.210.167.0/24 maxlen: 24 178.210.179.0/24 maxlen: 24 185.123.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:14:d2:f1:6b:82:30:0c:6e:a3:8a:2f:99:db:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b Validity Not Before: Jan 2 16:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b06c1868c1be7c63003562e6a61251faf0c8953f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:8d:43:76:64:73:48:b7:62:8c:26:b5:db: da:06:ea:e4:93:ac:6f:9b:1e:e5:7d:94:4a:74:93: 76:57:8d:ee:be:23:04:19:c5:41:17:02:47:8b:32: ce:e2:01:9a:a9:b0:e3:16:3a:7e:da:81:57:62:16: 09:70:43:d3:7f:f7:74:83:56:24:7c:e9:d0:d0:a2: e0:31:44:33:10:da:9d:96:4c:b4:d4:d9:46:2f:70: 5d:c0:24:11:e3:25:d6:52:8f:22:8c:13:06:8a:8c: c7:bd:85:02:95:45:0d:32:de:fd:fe:71:45:63:6f: c5:8e:75:86:4c:fb:eb:53:1b:bf:0b:c1:f2:5f:e2: c9:e8:0e:da:e1:03:b7:e0:36:0f:ab:b0:1f:05:a2: 33:de:5b:3f:94:14:d6:0a:71:8c:7c:b7:3d:37:ed: 38:97:3f:b9:6c:ab:80:61:b0:98:70:1c:bb:0f:5f: 23:5d:3c:49:39:97:06:0d:e8:5b:ba:9f:bb:9a:c8: 22:f9:17:6a:33:6b:d8:8c:b0:fb:00:48:f4:46:55: 06:37:6f:80:6b:f9:d7:84:21:7c:2a:20:30:61:1c: 27:07:2e:b4:47:3f:a5:1b:68:f5:63:18:7b:47:9b: 5e:da:d8:6d:03:aa:8b:46:25:c4:af:7a:83:49:a5: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6C:18:68:C1:BE:7C:63:00:35:62:E6:A6:12:51:FA:F0:C8:95:3F X509v3 Authority Key Identifier: keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/sGwYaMG-fGMANWLmphJR-vDIlT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.235.0/24 178.210.167.0/24 178.210.179.0/24 185.123.103.0/24 Signature Algorithm: sha256WithRSAEncryption 47:ee:d2:6f:43:26:1e:1f:92:f9:fe:13:53:93:67:6e:93:af: 4c:64:80:ce:95:31:b1:a6:5c:b0:65:49:07:a5:29:3d:0c:0b: bc:c4:fa:7c:94:c2:f5:87:a2:25:9a:09:73:df:38:26:14:da: c1:ce:1a:ac:0d:b2:05:70:db:71:f0:45:6a:cb:4e:c1:22:30: 59:65:58:a8:26:90:8b:6c:25:5d:c3:84:be:d6:df:cf:05:85: e3:45:26:ab:0e:8b:2d:7d:a1:1e:fc:81:54:93:be:08:fa:b5: 5a:91:d8:99:19:69:40:35:d7:75:ef:08:15:2a:87:a9:c0:98: 52:ba:d5:93:7f:cc:5e:a0:a4:77:e8:48:4b:fd:4e:ef:1c:36: f3:00:24:69:a3:cc:ee:7f:cf:8e:a8:c3:8e:fc:1c:e2:91:1d: e9:50:17:88:40:dc:81:a3:d7:73:a5:77:53:45:7a:de:19:f0: fe:51:f1:bd:c3:c2:58:79:63:f0:5b:b9:b6:a5:9f:f2:49:a3: 58:9e:84:aa:d0:43:58:ba:8d:13:4e:41:9b:d5:49:9e:31:57: 8f:de:75:eb:48:6c:1e:ab:f9:53:7b:3a:c9:88:01:f2:4e:6c: f0:fe:9d:73:09:22:4d:f7:10:e4:23:57:06:9d:91:e4:e2:c2: 07:52:aa:7a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/gxTS8WuCMAxuo4ovmdsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzBmOTlkNzk3OTNhNmYwMWU5YWQ2MjdkMWY5NjhiMGMy ZDBmM2IwHhcNMjYwMTAyMTYyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDZjMTg2OGMxYmU3YzYzMDAzNTYyZTZhNjEyNTFmYWYwYzg5NTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucSNQ3Zkc0i3YowmtdvaBurkk6xv mx7lfZRKdJN2V43uviMEGcVBFwJHizLO4gGaqbDjFjp+2oFXYhYJcEPTf/d0g1Yk fOnQ0KLgMUQzENqdlky01NlGL3BdwCQR4yXWUo8ijBMGiozHvYUClUUNMt79/nFF Y2/FjnWGTPvrUxu/C8HyX+LJ6A7a4QO34DYPq7AfBaIz3ls/lBTWCnGMfLc9N+04 lz+5bKuAYbCYcBy7D18jXTxJOZcGDehbup+7msgi+RdqM2vYjLD7AEj0RlUGN2+A a/nXhCF8KiAwYRwnBy60Rz+lG2j1Yxh7R5te2thtA6qLRiXEr3qDSaW3WQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLBsGGjBvnxjADVi5qYSUfrwyJU/MB8GA1UdIwQY MBaAFM/A+Z15eTpvAemtYn0flosMLQ87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgt ODBjYzg2ZTUxODIyLzEvc0d3WWFNRy1mR01BTldMbXBoSlItdkRJbFQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgtODBjYzg2ZTUxODIy LzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALhzrAwQA stKnAwQAstKzAwQAuXtnMA0GCSqGSIb3DQEBCwUAA4IBAQBH7tJvQyYeH5L5/hNT k2duk69MZIDOlTGxplywZUkHpSk9DAu8xPp8lML1h6Ilmglz3zgmFNrBzhqsDbIF cNtx8EVqy07BIjBZZVioJpCLbCVdw4S+1t/PBYXjRSarDostfaEe/IFUk74I+rVa kdiZGWlANdd17wgVKoepwJhSutWTf8xeoKR36EhL/U7vHDbzACRpo8zuf8+OqMOO /BzikR3pUBeIQNyBo9dzpXdTRXreGfD+UfG9w8JYeWPwW7m2pZ/ySaNYnoSq0ENY uo0TTkGb1UmeMVeP3nXrSGweq/lTezrJiAHyTmzw/p1zCSJN9xDkI1cGnZHk4sIH Uqp6 -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:13 2026 by rpki-client