This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/gSOpCTMsxm1sebqZJUK3o9Zr9Zs.roa File: gSOpCTMsxm1sebqZJUK3o9Zr9Zs.roa (raw, json) Hash identifier: 9TkioDxaCkLwzYPNkh8yoUAHXHZVA478tyWocCq/RYY= Subject key identifier: 81:23:A9:09:33:2C:C6:6D:6C:79:BA:99:25:42:B7:A3:D6:6B:F5:9B Certificate issuer: /CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8 Certificate serial: 019B7A5B155619E96B6E34D5E1A78D172B15 Authority key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/gSOpCTMsxm1sebqZJUK3o9Zr9Zs.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49685 IP address blocks: 193.34.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:15:56:19:e9:6b:6e:34:d5:e1:a7:8d:17:2b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8 Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8123a909332cc66d6c79ba992542b7a3d66bf59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:2b:ac:e6:f1:ee:ec:d8:b2:6f:ec:75:ff: ef:51:0c:d0:60:63:21:cc:ab:2d:e4:61:0e:b2:49: 89:6c:e1:b1:b3:d8:c4:a4:a8:68:e4:9e:35:cb:6b: ac:99:a2:32:24:51:9f:fb:05:2d:09:89:83:95:e2: ec:a2:6f:67:1b:3e:47:11:3c:63:da:60:5f:e2:82: 60:6d:bd:b5:fd:50:bd:ff:b6:88:41:be:e3:2b:9b: 3c:b5:ec:4e:7e:71:4e:b4:cc:be:4d:d9:d4:77:a0: 8f:2f:96:ec:69:3b:8c:e2:6e:f8:bf:8b:7c:24:7e: 61:2e:fa:ad:4b:3d:f2:21:8c:67:c4:2b:cc:23:9b: 56:92:ad:4b:f1:19:10:b8:24:24:f9:f9:4d:15:4a: 8e:64:2e:18:53:23:c9:81:0e:1c:90:bd:3b:56:02: ef:93:24:77:ce:cb:32:1e:d5:99:84:04:77:8c:88: 88:26:fd:da:11:99:20:33:a4:c5:4c:1a:2c:ca:2f: ac:1d:6d:3e:6b:f0:7f:4d:e8:ce:6d:ec:ab:72:34: 11:2d:bc:54:55:de:9c:42:fc:3a:6b:d0:df:d8:00: d7:aa:15:d5:77:67:ca:6e:d2:fb:5f:c9:91:83:c2: c4:58:aa:d2:54:15:a6:16:3e:f4:0f:68:0a:a5:d1: a4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:23:A9:09:33:2C:C6:6D:6C:79:BA:99:25:42:B7:A3:D6:6B:F5:9B X509v3 Authority Key Identifier: keyid:E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/gSOpCTMsxm1sebqZJUK3o9Zr9Zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.4.0/22 Signature Algorithm: sha256WithRSAEncryption 64:86:44:bd:30:cf:14:f2:9f:49:e5:90:4b:f0:a4:0f:e1:d9: c9:e8:64:eb:b3:fb:9e:ae:db:0d:f4:e9:85:30:6b:20:56:57: ee:f6:fc:be:97:8f:a8:6e:36:6c:fe:8c:bd:80:88:c1:00:40: 59:ac:24:53:15:2c:8f:d6:b4:54:09:98:0f:4d:dd:eb:c2:78: 0d:c1:3e:5c:32:42:1e:c2:78:73:4d:20:2d:50:4c:02:c5:7d: db:8b:6a:4c:f2:4a:2d:d4:fb:7f:70:08:f2:ed:31:86:f4:92: 79:1f:77:8b:33:19:82:1a:75:c1:ee:ce:e3:69:30:d9:61:7a: 84:8a:db:87:2b:0d:89:69:7b:2c:fc:63:07:f5:60:39:1f:df: 17:cf:c6:a2:18:f4:09:99:cb:a3:d6:39:0f:ae:70:b3:5c:fc: 35:66:59:e4:c2:72:7c:02:ef:01:e7:74:f1:31:b6:95:cc:ac: a0:e0:fc:d5:7d:63:f2:1c:1c:e9:f8:c6:cd:8f:f5:45:f9:4e: 59:42:3c:8c:92:61:02:18:ab:0a:10:d5:ea:55:8a:87:93:47: da:c9:a0:13:c1:d5:48:f3:79:86:ae:9e:6d:66:d1:e6:b4:c9: 42:ba:93:84:c0:04:9a:5a:3e:1c:fd:d8:a8:c5:58:90:6d:36: 26:9f:eb:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxVWGelrbjTV4aeNFysVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzM0MTViZGYxYzAxNGFlMWMxOGU3Y2ZkMzNjNTZmMDE4 ZmVlZTgwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTIzYTkwOTMzMmNjNjZkNmM3OWJhOTkyNTQyYjdhM2Q2NmJmNTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJQrrObx7uzYsm/sdf/vUQzQYGMh zKst5GEOskmJbOGxs9jEpKho5J41y2usmaIyJFGf+wUtCYmDleLsom9nGz5HETxj 2mBf4oJgbb21/VC9/7aIQb7jK5s8texOfnFOtMy+TdnUd6CPL5bsaTuM4m74v4t8 JH5hLvqtSz3yIYxnxCvMI5tWkq1L8RkQuCQk+flNFUqOZC4YUyPJgQ4ckL07VgLv kyR3zssyHtWZhAR3jIiIJv3aEZkgM6TFTBosyi+sHW0+a/B/TejObeyrcjQRLbxU Vd6cQvw6a9Df2ADXqhXVd2fKbtL7X8mRg8LEWKrSVBWmFj70D2gKpdGkZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIEjqQkzLMZtbHm6mSVCt6PWa/WbMB8GA1UdIwQY MBaAFOfDQVvfHAFK4cGOfP0zxW8Bj+7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThOQlc5OGNBVXJod1k1OF9UUEZid0dQN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jY2I1NmYtZGQwNS00NjE2LWE1ZjEt NTYzMjQ2NjhhOTY0LzEvZ1NPcENUTXN4bTFzZWJxWkpVSzNvOVpyOVpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jY2I1NmYtZGQwNS00NjE2LWE1ZjEtNTYzMjQ2NjhhOTY0 LzEvNThOQlc5OGNBVXJod1k1OF9UUEZid0dQN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSIEMA0G CSqGSIb3DQEBCwUAA4IBAQBkhkS9MM8U8p9J5ZBL8KQP4dnJ6GTrs/uertsN9OmF MGsgVlfu9vy+l4+objZs/oy9gIjBAEBZrCRTFSyP1rRUCZgPTd3rwngNwT5cMkIe wnhzTSAtUEwCxX3bi2pM8kot1Pt/cAjy7TGG9JJ5H3eLMxmCGnXB7s7jaTDZYXqE ituHKw2JaXss/GMH9WA5H98Xz8aiGPQJmcuj1jkPrnCzXPw1ZlnkwnJ8Au8B53Tx MbaVzKyg4PzVfWPyHBzp+MbNj/VF+U5ZQjyMkmECGKsKENXqVYqHk0fayaATwdVI 83mGrp5tZtHmtMlCupOEwASaWj4c/dioxViQbTYmn+sT -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:27 2026 by rpki-client