This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/cGw142_-GllO3MDD7QsEH_yskO0.roa File: cGw142_-GllO3MDD7QsEH_yskO0.roa (raw, json) Hash identifier: Jv+m0/8ldgJ6xCnUTzb6i9bHjcbA9I/OI6d3NEkAr20= Subject key identifier: 70:6C:35:E3:6F:FE:1A:59:4E:DC:C0:C3:ED:0B:04:1F:FC:AC:90:ED Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C1230A7C06822145033AF36D0EA933C Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/cGw142_-GllO3MDD7QsEH_yskO0.roa Signing time: Fri 02 Jan 2026 00:18:45 +0000 ROA not before: Fri 02 Jan 2026 00:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8678 IP address blocks: 193.255.221.0/24 maxlen: 24 193.255.222.0/23 maxlen: 23 193.255.224.0/21 maxlen: 21 193.255.232.0/22 maxlen: 22 193.255.236.0/23 maxlen: 23 194.27.24.0/22 maxlen: 22 194.27.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:30:a7:c0:68:22:14:50:33:af:36:d0:ea:93:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=706c35e36ffe1a594edcc0c3ed0b041ffcac90ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5c:ad:3d:4b:f5:39:a1:78:58:1c:35:70:43: 88:93:f7:5a:98:38:09:77:79:e5:a0:c3:78:54:3d: 4a:7e:05:22:89:f4:29:5b:4f:c6:bb:bf:f9:94:90: aa:e1:70:0c:ea:73:60:d3:04:5b:80:1d:f3:94:65: d9:83:ad:88:5f:28:f0:c8:f9:76:59:01:2a:29:b3: 7f:33:9b:8e:98:95:73:4d:67:6a:80:07:69:2b:70: 68:3f:1b:fd:5a:be:36:f1:5b:7b:e7:e5:a2:2d:f0: 16:dd:92:e1:b3:d7:aa:d9:64:e7:80:9f:a2:b8:8b: 44:ab:e8:cc:fd:3a:f2:9f:65:b8:fa:bb:be:17:a6: 14:c9:c9:c0:c3:db:2a:cc:0e:5e:39:dc:92:8b:89: 79:4b:76:62:d3:3a:38:56:f6:4c:44:60:d0:64:e2: b5:0e:30:16:33:21:ea:b1:46:ba:27:ce:62:f3:26: 59:0e:a0:9b:ee:ed:51:a5:b7:3a:67:e9:f6:96:0a: 8c:dd:52:37:9d:8b:0b:a0:49:28:74:52:41:ef:86: d2:4f:39:fa:13:d2:e8:8c:28:1d:51:ab:82:35:8d: 5a:3c:a9:fc:0a:f8:bc:bd:93:8f:17:1f:15:d6:ba: a4:fa:55:7b:31:02:c9:70:11:75:57:a7:4c:33:21: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6C:35:E3:6F:FE:1A:59:4E:DC:C0:C3:ED:0B:04:1F:FC:AC:90:ED X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/cGw142_-GllO3MDD7QsEH_yskO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.255.221.0-193.255.237.255 194.27.24.0-194.27.29.255 Signature Algorithm: sha256WithRSAEncryption a6:91:44:38:79:bc:4e:e0:ab:4a:3b:1b:70:dc:14:18:09:87: d5:b4:d6:06:06:0b:d4:46:c1:4e:e4:84:73:12:c5:81:d3:29: 2d:a6:7e:61:96:45:ed:5f:ac:67:df:08:99:27:2a:51:3a:f0: ca:14:68:e8:9a:2e:64:9d:34:ab:40:07:77:c6:b5:9b:fc:26: 5e:1c:10:61:be:c2:17:cf:52:12:6c:fe:6b:28:c2:d6:2a:d5: 34:7f:d9:e7:17:ac:63:04:37:53:e7:52:ba:75:09:5b:72:48: db:a0:4d:7d:42:98:f2:f6:81:d2:a5:c4:3c:90:66:f9:b0:d3: e7:f7:0c:13:e6:db:de:e7:0e:e4:a9:3b:b7:1f:95:62:ba:08: 41:d6:78:86:15:67:2b:8a:de:25:91:49:d0:57:6c:72:66:a3: 94:99:65:eb:16:c3:f0:e0:3d:82:2b:42:65:30:27:02:40:51: 13:7f:9c:79:ab:fb:9c:2d:7c:cc:04:80:d6:1c:90:61:4f:6c: 26:07:a6:86:9d:54:d1:7b:86:96:57:8b:f6:86:56:8c:be:ba: db:df:1c:ea:c8:33:96:ba:1c:7e:eb:09:85:ec:93:f0:e6:f9: 9e:31:d3:f4:36:58:35:76:8e:a6:75:8a:e5:e9:09:4a:e7:88: 27:26:f9:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt8EjCnwGgiFFAzrzbQ6pM8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDZjMzVlMzZmZmUxYTU5NGVkY2MwYzNlZDBiMDQxZmZjYWM5MGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11ytPUv1OaF4WBw1cEOIk/damDgJ d3nloMN4VD1KfgUiifQpW0/Gu7/5lJCq4XAM6nNg0wRbgB3zlGXZg62IXyjwyPl2 WQEqKbN/M5uOmJVzTWdqgAdpK3BoPxv9Wr428Vt75+WiLfAW3ZLhs9eq2WTngJ+i uItEq+jM/Tryn2W4+ru+F6YUycnAw9sqzA5eOdySi4l5S3Zi0zo4VvZMRGDQZOK1 DjAWMyHqsUa6J85i8yZZDqCb7u1Rpbc6Z+n2lgqM3VI3nYsLoEkodFJB74bSTzn6 E9LojCgdUauCNY1aPKn8Cvi8vZOPFx8V1rqk+lV7MQLJcBF1V6dMMyHNrwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFHBsNeNv/hpZTtzAw+0LBB/8rJDtMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvY0d3MTQyXy1HbGxPM01ERDdRc0VIX3lza08wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADB/90D BAHB/+wwDAMEA8IbGAMEAcIbHDANBgkqhkiG9w0BAQsFAAOCAQEAppFEOHm8TuCr SjsbcNwUGAmH1bTWBgYL1EbBTuSEcxLFgdMpLaZ+YZZF7V+sZ98ImScqUTrwyhRo 6JouZJ00q0AHd8a1m/wmXhwQYb7CF89SEmz+ayjC1irVNH/Z5xesYwQ3U+dSunUJ W3JI26BNfUKY8vaB0qXEPJBm+bDT5/cME+bb3ucO5Kk7tx+VYroIQdZ4hhVnK4re JZFJ0FdscmajlJll6xbD8OA9gitCZTAnAkBRE3+ceav7nC18zASA1hyQYU9sJgem hp1U0XuGlleL9oZWjL66298c6sgzlrocfusJheyT8Ob5njHT9DZYNXaOpnWK5ekJ SueIJyb5gg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:23 2026 by rpki-client