This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/giSS4ZPK0j5rr7alt_LfNHrt9LQ.roa File: giSS4ZPK0j5rr7alt_LfNHrt9LQ.roa (raw, json) Hash identifier: +OyhRjz3BS+oI1uqsW4itQyM/A5nLmKq2YGALxbFDoU= Subject key identifier: 82:24:92:E1:93:CA:D2:3E:6B:AF:B6:A5:B7:F2:DF:34:7A:ED:F4:B4 Certificate issuer: /CN=795013346c8d8f23e0128d306997980237db2374 Certificate serial: 019B7C1353F26D988A5D60D5371A133D799B Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/giSS4ZPK0j5rr7alt_LfNHrt9LQ.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 77.240.48.0/20 maxlen: 32 78.158.48.0/20 maxlen: 32 185.158.56.0/22 maxlen: 32 193.104.103.0/24 maxlen: 32 193.104.131.0/24 maxlen: 32 2a03:7600::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:53:f2:6d:98:8a:5d:60:d5:37:1a:13:3d:79:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795013346c8d8f23e0128d306997980237db2374 Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=822492e193cad23e6bafb6a5b7f2df347aedf4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a9:79:d8:85:17:b2:7d:88:7b:d9:4e:d9:e9: e5:95:68:a2:5d:fe:3e:78:81:ff:46:9b:c2:1c:ae: 18:8d:5b:3d:2c:82:59:cc:fe:a4:70:10:f7:67:4c: b0:b9:fa:b8:d0:b5:d6:23:98:64:f0:42:8d:ed:7f: d2:b8:ed:43:4a:30:47:76:38:e0:bc:4c:0e:41:94: 3e:ca:e6:ed:9d:5f:e8:3f:18:51:56:de:88:76:86: ec:a6:a6:8b:d1:3f:6f:dc:fe:ce:b9:69:51:0a:89: aa:3b:ac:dd:d4:15:25:23:c6:a4:b3:3c:1d:cc:16: 20:a1:50:41:92:77:7e:d3:d4:eb:a2:27:8b:4b:16: 54:4c:df:34:00:bb:c1:ff:84:20:03:1d:c0:f5:6e: 88:70:b6:38:0c:e4:30:e0:30:11:6c:55:c8:7e:94: 36:3d:30:7d:75:0b:2e:da:02:92:4b:63:95:a5:2b: 6d:8b:33:bf:eb:cd:ba:a0:75:a3:cd:43:02:b1:75: 04:7c:ff:c5:3b:bf:2c:9b:37:3d:e0:36:34:21:c8: 9b:a1:41:5f:be:67:e9:3f:0f:46:90:dd:c3:11:e9: cb:d5:a2:8a:29:88:d1:83:b0:1c:38:65:1e:ef:9b: b7:c8:37:0a:4c:86:cf:e6:28:ba:55:a6:e2:f6:9c: 17:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:24:92:E1:93:CA:D2:3E:6B:AF:B6:A5:B7:F2:DF:34:7A:ED:F4:B4 X509v3 Authority Key Identifier: keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/giSS4ZPK0j5rr7alt_LfNHrt9LQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.240.48.0/20 78.158.48.0/20 185.158.56.0/22 193.104.103.0/24 193.104.131.0/24 IPv6: 2a03:7600::/32 Signature Algorithm: sha256WithRSAEncryption 55:cc:08:31:75:29:50:4b:d7:1d:c8:56:44:4b:c2:62:cc:21: 9d:72:3c:08:c4:3f:27:92:5b:67:c5:1b:ad:37:7f:04:d1:72: 83:a3:73:58:1d:04:31:83:01:29:f6:2a:ba:5f:f9:64:4c:81: 58:18:51:57:23:ed:9e:55:e7:ef:cf:35:9e:ee:3a:ce:54:ae: f9:b5:26:a2:aa:17:3b:c8:f4:64:fb:c3:5b:10:80:ff:41:07: ec:40:e0:65:0e:b2:e7:31:3f:06:b4:17:88:fc:58:9f:af:79: 5f:6c:92:d1:32:7d:30:13:05:10:a3:95:28:8e:7e:e0:60:2f: e1:a7:5e:21:f5:28:e7:cd:bf:17:dd:b7:3f:21:63:81:96:87: 2c:8f:7b:28:fc:c4:f7:ba:0b:14:34:c9:1d:33:f9:ca:df:83: 3f:24:f2:90:e9:4d:ce:71:1e:0f:d9:10:ac:8b:7b:f0:51:4f: 60:70:d9:e6:40:a8:71:ff:93:03:5f:60:d3:f3:bb:b6:a9:2a: f9:8b:14:6e:4e:74:c7:5c:0a:ea:4c:50:0c:b9:88:e9:1a:f4: 63:5c:e3:8a:9b:39:8d:67:b2:5b:65:0e:4b:f0:70:95:f4:77: 36:30:36:a6:d0:6f:05:96:85:0c:f8:74:03:30:16:8b:da:c5: ab:4e:b9:ea -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8E1PybZiKXWDVNxoTPXmbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NTAxMzM0NmM4ZDhmMjNlMDEyOGQzMDY5OTc5ODAyMzdk YjIzNzQwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjI0OTJlMTkzY2FkMjNlNmJhZmI2YTViN2YyZGYzNDdhZWRmNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6l52IUXsn2Ie9lO2enllWiiXf4+ eIH/RpvCHK4YjVs9LIJZzP6kcBD3Z0ywufq40LXWI5hk8EKN7X/SuO1DSjBHdjjg vEwOQZQ+yubtnV/oPxhRVt6IdobspqaL0T9v3P7OuWlRComqO6zd1BUlI8akszwd zBYgoVBBknd+09TroieLSxZUTN80ALvB/4QgAx3A9W6IcLY4DOQw4DARbFXIfpQ2 PTB9dQsu2gKSS2OVpSttizO/6826oHWjzUMCsXUEfP/FO78smzc94DY0IciboUFf vmfpPw9GkN3DEenL1aKKKYjRg7AcOGUe75u3yDcKTIbP5ii6Vabi9pwXdQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIIkkuGTytI+a6+2pbfy3zR67fS0MB8GA1UdIwQY MBaAFHlQEzRsjY8j4BKNMGmXmAI32yN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVZBVE5HeU5qeVBnRW8wd2FaZVlBamZiSTNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmMwMWUtYjhjZC00NGFkLThhYTct OGU5OGVhNmNhOGVlLzEvZ2lTUzRaUEswajVycjdhbHRfTGZOSHJ0OUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84MmMwMWUtYjhjZC00NGFkLThhYTctOGU5OGVhNmNhOGVl LzEvZVZBVE5HeU5qeVBnRW8wd2FaZVlBamZiSTNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQETfAwAwQE Tp4wAwQCuZ44AwQAwWhnAwQAwWiDMA0EAgACMAcDBQAqA3YAMA0GCSqGSIb3DQEB CwUAA4IBAQBVzAgxdSlQS9cdyFZES8JizCGdcjwIxD8nkltnxRutN38E0XKDo3NY HQQxgwEp9iq6X/lkTIFYGFFXI+2eVefvzzWe7jrOVK75tSaiqhc7yPRk+8NbEID/ QQfsQOBlDrLnMT8GtBeI/Fifr3lfbJLRMn0wEwUQo5Uojn7gYC/hp14h9Sjnzb8X 3bc/IWOBlocsj3so/MT3ugsUNMkdM/nK34M/JPKQ6U3OcR4P2RCsi3vwUU9gcNnm QKhx/5MDX2DT87u2qSr5ixRuTnTHXArqTFAMuYjpGvRjXOOKmzmNZ7JbZQ5L8HCV 9Hc2MDam0G8FloUM+HQDMBaL2sWrTrnq -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:43 2026 by rpki-client