This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GC7EQTYBSMY9ODyEMfd-aXmukuI.roa File: GC7EQTYBSMY9ODyEMfd-aXmukuI.roa (raw, json) Hash identifier: 8Oj0GhDuG/CooABo5dLPDMcwZaL8su3BCyJPmMK0h+I= Subject key identifier: 18:2E:C4:41:36:01:48:C6:3D:38:3C:84:31:F7:7E:69:79:AE:92:E2 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2DC7A7B53825B702F5F1992297ABE Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GC7EQTYBSMY9ODyEMfd-aXmukuI.roa Signing time: Thu 01 Jan 2026 08:18:17 +0000 ROA not before: Thu 01 Jan 2026 08:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 94.156.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:dc:7a:7b:53:82:5b:70:2f:5f:19:92:29:7a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=182ec441360148c63d383c8431f77e6979ae92e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:54:24:d9:71:68:13:40:14:f2:f4:42:82: 09:ad:56:af:13:99:26:d8:29:f2:00:8b:fc:b6:00: 9b:0a:04:74:d9:e4:8a:c6:02:37:f4:f7:ad:e1:a2: 01:f3:98:3f:ee:f5:62:2d:c2:7d:31:8d:58:52:fc: 61:f5:e8:c2:c3:4e:11:9f:50:0a:01:00:e9:37:2a: 82:56:57:88:d6:41:bf:1a:c0:0f:fc:c4:05:cd:8c: 08:11:fb:3c:6c:eb:a5:45:5a:87:b9:2e:83:73:c4: 71:4d:06:60:7d:15:5c:16:ec:0d:dc:3c:40:01:df: 52:9a:c1:76:d7:20:eb:39:55:be:8f:97:f7:63:48: 1c:55:d5:34:59:4e:d9:ec:7e:12:a7:c2:1b:d7:23: de:03:76:e3:e6:1f:93:a4:2a:5a:75:df:97:33:b1: 0d:2a:d9:6b:dc:cc:b4:06:cd:d0:ff:fc:dd:cc:69: 4c:07:39:dd:db:9c:e3:ee:1a:55:d7:6e:8d:e8:67: 82:6c:1b:b7:8c:57:b3:7c:df:5d:c9:fc:3d:d3:02: 10:ae:f9:59:f7:88:96:65:82:b0:45:d1:5c:d7:4b: 81:5a:5a:a8:64:c3:7b:dc:53:66:25:6f:3d:1e:52: d8:dc:48:37:e3:72:7f:6b:4c:c8:e0:55:60:10:8f: 72:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2E:C4:41:36:01:48:C6:3D:38:3C:84:31:F7:7E:69:79:AE:92:E2 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GC7EQTYBSMY9ODyEMfd-aXmukuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.10.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:10:6a:c7:bd:68:95:71:a7:d9:ec:3a:72:3d:a6:a8:96:86: 4c:2d:d6:44:2c:2a:68:ce:80:27:2c:3e:80:76:f7:65:b1:10: 8f:ec:e2:d5:f0:e5:3c:3d:f7:ac:70:7a:42:5f:3e:7e:9c:04: 7e:e0:3e:bf:eb:21:f9:55:f2:48:a2:fc:4d:79:cf:00:c7:cd: 86:43:fd:29:e8:b0:50:de:e3:a7:51:58:23:ef:35:36:90:a2: 52:99:5d:03:bd:6a:e5:19:7a:eb:45:84:19:50:89:d6:76:b3: 55:89:3b:65:b6:19:5d:5c:79:96:c0:d4:15:db:7c:13:99:e6: 43:f5:3f:a1:e6:f9:42:0a:6b:ed:0e:be:66:d5:40:da:49:d4: f1:d6:ac:2e:e7:e9:be:d1:b5:68:4e:39:2f:34:57:2e:84:b9: 34:3e:0f:86:5e:ae:62:4e:3d:e4:4c:b1:63:db:46:56:c2:f2: 3f:6e:b5:e5:40:4a:8a:a0:5c:8e:cf:b8:e1:c1:66:d2:a9:42: 02:57:39:e7:ee:c1:c8:b9:47:5a:7d:91:fe:47:b6:3b:65:2d: 6a:ec:9a:dd:d6:b9:d0:f5:ad:bf:66:4a:7a:26:5b:c4:78:90: 20:0c:91:89:c2:7a:60:12:a1:98:75:66:ce:5d:23:04:e6:d3: ce:2b:0d:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otx6e1OCW3AvXxmSKXq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODJlYzQ0MTM2MDE0OGM2M2QzODNjODQzMWY3N2U2OTc5YWU5MmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXRUJNlxaBNAFPL0QoIJrVavE5km 2CnyAIv8tgCbCgR02eSKxgI39Pet4aIB85g/7vViLcJ9MY1YUvxh9ejCw04Rn1AK AQDpNyqCVleI1kG/GsAP/MQFzYwIEfs8bOulRVqHuS6Dc8RxTQZgfRVcFuwN3DxA Ad9SmsF21yDrOVW+j5f3Y0gcVdU0WU7Z7H4Sp8Ib1yPeA3bj5h+TpCpadd+XM7EN Ktlr3My0Bs3Q//zdzGlMBznd25zj7hpV126N6GeCbBu3jFezfN9dyfw90wIQrvlZ 94iWZYKwRdFc10uBWlqoZMN73FNmJW89HlLY3Eg343J/a0zI4FVgEI9yNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBguxEE2AUjGPTg8hDH3fml5rpLiMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvR0M3RVFUWUJTTVk5T0R5RU1mZC1hWG11a3VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpwKMA0G CSqGSIb3DQEBCwUAA4IBAQAdEGrHvWiVcafZ7DpyPaaoloZMLdZELCpozoAnLD6A dvdlsRCP7OLV8OU8PfescHpCXz5+nAR+4D6/6yH5VfJIovxNec8Ax82GQ/0p6LBQ 3uOnUVgj7zU2kKJSmV0DvWrlGXrrRYQZUInWdrNViTtlthldXHmWwNQV23wTmeZD 9T+h5vlCCmvtDr5m1UDaSdTx1qwu5+m+0bVoTjkvNFcuhLk0Pg+GXq5iTj3kTLFj 20ZWwvI/brXlQEqKoFyOz7jhwWbSqUICVznn7sHIuUdafZH+R7Y7ZS1q7Jrd1rnQ 9a2/Zkp6JlvEeJAgDJGJwnpgEqGYdWbOXSME5tPOKw0l -----END CERTIFICATE-----Generated at Fri Jan 2 12:02:58 2026 by rpki-client