This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/cGO9zmtQR_aEnKKixi_ZZ27XMNw.roa File: cGO9zmtQR_aEnKKixi_ZZ27XMNw.roa (raw, json) Hash identifier: fnltLcL3o2MOvIVD/pEogcufWVK0PUMmaW5TTkBQQB4= Subject key identifier: 70:63:BD:CE:6B:50:47:F6:84:9C:A2:A2:C6:2F:D9:67:6E:D7:30:DC Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C1236AFD2F979CECB16F3C691EF298E Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/cGO9zmtQR_aEnKKixi_ZZ27XMNw.roa Signing time: Fri 02 Jan 2026 00:18:46 +0000 ROA not before: Fri 02 Jan 2026 00:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60881 IP address blocks: 193.140.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:36:af:d2:f9:79:ce:cb:16:f3:c6:91:ef:29:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7063bdce6b5047f6849ca2a2c62fd9676ed730dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:22:19:0d:2d:66:eb:3b:72:1e:b1:cc:3f: 8c:0e:5f:55:23:cc:a6:00:83:15:f6:59:f2:2e:e9: f5:99:ff:60:ff:61:e9:98:63:ef:65:c7:af:c9:f6: 55:df:35:5f:38:ef:cf:1f:30:81:83:8d:82:0a:d4: 05:b3:8c:25:56:9d:eb:a1:f0:8b:45:99:93:3b:fa: f5:d2:f2:98:ae:fc:f3:62:62:6e:fb:d5:1d:a3:33: 95:b7:fc:50:39:45:c7:78:41:9d:5d:46:be:54:36: 9f:e8:7f:31:85:bd:ae:ef:ba:b5:a0:91:92:bb:6b: 1f:48:5f:c2:59:85:77:70:f7:de:d9:85:45:37:bd: 28:31:ed:23:91:84:07:ce:ee:2b:4f:fc:a4:ef:17: f1:cf:6e:13:2c:d3:a7:38:a2:13:4f:fe:f5:7e:44: c4:dc:83:39:cf:4d:9b:a8:78:58:1f:60:0c:b9:62: 4e:55:b9:f8:85:66:d9:24:92:65:c2:a2:d7:10:94: 58:1b:26:32:93:59:c5:11:a2:13:2a:cb:1c:ab:ac: 77:97:fb:56:d5:f8:e7:cc:47:e5:1f:e1:b6:44:2c: d6:20:4f:0f:5a:1b:80:d1:f9:f9:5c:cf:20:ca:25: d2:c9:b7:37:96:4c:c2:d8:41:19:f0:4c:b7:4b:74: 50:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:63:BD:CE:6B:50:47:F6:84:9C:A2:A2:C6:2F:D9:67:6E:D7:30:DC X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/cGO9zmtQR_aEnKKixi_ZZ27XMNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.140.127.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:08:c4:a2:b6:df:24:cb:34:fe:45:a5:a9:af:fb:24:f5:ae: d8:8f:ce:96:f7:78:0a:4d:6a:50:e2:72:80:99:b8:1f:00:f6: 48:2c:22:e7:be:00:6e:a4:7a:aa:86:2e:1c:7d:83:3f:db:96: c1:64:ae:4f:ef:b6:23:ad:22:8e:21:61:a1:e6:c2:dc:30:f0: 83:7b:16:d4:c2:da:75:ee:68:c7:d9:cd:22:09:59:cc:19:9d: c1:96:fb:28:36:89:96:35:4d:58:8d:95:18:45:32:63:50:b3: e9:13:3e:27:e7:a2:f2:e9:f4:f6:48:bc:21:4f:30:1e:d8:35: 35:a8:58:2b:a6:46:e7:0f:a1:c8:4e:02:d7:c2:29:6f:b1:6c: 00:b8:f8:35:ac:62:14:00:a2:32:17:bc:cb:81:8d:a4:f7:07: 71:0a:54:d5:69:1c:40:e2:1f:99:24:5b:7c:14:4c:39:96:4f: 6b:81:79:7b:0b:79:a7:9c:9d:29:a9:93:2d:a5:58:da:e9:94: 56:75:79:61:ea:da:47:b4:1a:9f:fc:bd:72:ac:29:a9:e1:16: 58:98:28:25:b2:64:32:4c:47:51:dc:eb:d2:20:a7:59:d7:57: 74:d2:9e:60:18:46:aa:56:73:47:30:a8:1d:23:ff:12:e0:9b: a3:d5:47:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ejav0vl5zssW88aR7ymOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDYzYmRjZTZiNTA0N2Y2ODQ5Y2EyYTJjNjJmZDk2NzZlZDczMGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfoiGQ0tZus7ch6xzD+MDl9VI8ym AIMV9lnyLun1mf9g/2HpmGPvZcevyfZV3zVfOO/PHzCBg42CCtQFs4wlVp3rofCL RZmTO/r10vKYrvzzYmJu+9UdozOVt/xQOUXHeEGdXUa+VDaf6H8xhb2u77q1oJGS u2sfSF/CWYV3cPfe2YVFN70oMe0jkYQHzu4rT/yk7xfxz24TLNOnOKITT/71fkTE 3IM5z02bqHhYH2AMuWJOVbn4hWbZJJJlwqLXEJRYGyYyk1nFEaITKsscq6x3l/tW 1fjnzEflH+G2RCzWIE8PWhuA0fn5XM8gyiXSybc3lkzC2EEZ8Ey3S3RQhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHBjvc5rUEf2hJyiosYv2Wdu1zDcMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvY0dPOXptdFFSX2FFbktLaXhpX1paMjdYTU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYx/MA0G CSqGSIb3DQEBCwUAA4IBAQB9CMSitt8kyzT+RaWpr/sk9a7Yj86W93gKTWpQ4nKA mbgfAPZILCLnvgBupHqqhi4cfYM/25bBZK5P77YjrSKOIWGh5sLcMPCDexbUwtp1 7mjH2c0iCVnMGZ3BlvsoNomWNU1YjZUYRTJjULPpEz4n56Ly6fT2SLwhTzAe2DU1 qFgrpkbnD6HITgLXwilvsWwAuPg1rGIUAKIyF7zLgY2k9wdxClTVaRxA4h+ZJFt8 FEw5lk9rgXl7C3mnnJ0pqZMtpVja6ZRWdXlh6tpHtBqf/L1yrCmp4RZYmCglsmQy TEdR3OvSIKdZ11d00p5gGEaqVnNHMKgdI/8S4Juj1UdD -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:58 2026 by rpki-client