This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/gg5OcMVgH7lk6tVSqguHQUBZmos.roa File: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (raw, json) Hash identifier: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4= Subject key identifier: 82:0E:4E:70:C5:60:1F:B9:64:EA:D5:52:AA:0B:87:41:40:59:9A:8B Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493 Certificate serial: 019B7F822A4B308AD5429995D6ADBB415B09 Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/gg5OcMVgH7lk6tVSqguHQUBZmos.roa Signing time: Fri 02 Jan 2026 16:19:55 +0000 ROA not before: Fri 02 Jan 2026 16:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199413 IP address blocks: 91.232.46.0/24 maxlen: 24 91.232.47.0/24 maxlen: 24 91.232.48.0/24 maxlen: 24 91.232.49.0/24 maxlen: 24 91.232.50.0/24 maxlen: 24 91.232.51.0/24 maxlen: 24 91.232.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:2a:4b:30:8a:d5:42:99:95:d6:ad:bb:41:5b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493 Validity Not Before: Jan 2 16:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=820e4e70c5601fb964ead552aa0b874140599a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:c0:3e:f3:df:f5:14:fc:ad:97:f7:cd:ef:30: d5:a4:ce:7b:6a:94:99:84:f4:b4:65:28:6f:cf:fa: 37:38:b3:b5:58:ab:37:55:fb:9c:a7:21:c9:f6:5c: 82:25:3f:50:9d:6a:7d:25:e1:a5:23:1a:a7:d2:4e: 6a:62:8e:15:49:b5:a8:b3:74:42:56:f1:f1:ea:42: 44:1f:f9:85:04:c1:73:86:18:79:7a:d3:6b:ab:20: f8:9e:c7:c5:a6:dd:e5:3c:3f:c5:52:7a:c9:07:e7: e9:a7:0b:b8:b0:f1:fd:21:0e:9a:94:a0:97:71:50: e9:e3:19:c3:75:bb:e9:8f:88:db:83:7e:b0:18:07: 5b:43:7a:28:55:b6:d6:88:ab:6c:0d:e9:0b:fa:17: 0b:50:8c:3f:ba:2b:be:2e:66:62:d7:ca:ff:9f:9b: d0:5a:c0:72:f4:70:14:9f:08:a0:9b:ee:65:50:aa: 20:0d:19:a3:2a:0b:00:d7:4c:0c:28:81:c7:65:68: 8c:80:09:d8:a9:06:8b:f3:11:ba:e5:d7:2c:c1:0a: 44:2c:0e:53:21:03:85:b4:71:3a:8a:9c:9a:4b:7d: 8a:95:a9:7a:51:56:0b:8c:b1:63:21:7d:fe:ee:24: 1a:2f:1e:10:6b:dc:f8:4b:a7:88:50:c2:c6:50:7c: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0E:4E:70:C5:60:1F:B9:64:EA:D5:52:AA:0B:87:41:40:59:9A:8B X509v3 Authority Key Identifier: keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/gg5OcMVgH7lk6tVSqguHQUBZmos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.46.0-91.232.52.255 Signature Algorithm: sha256WithRSAEncryption 41:f2:ae:4f:25:07:1a:1b:a3:d1:65:f8:1f:25:23:f4:91:ec: 60:74:20:ba:06:ac:32:47:c6:ec:d2:a2:91:ac:52:75:4a:2b: 6c:1c:2d:38:b6:1a:80:e0:f8:e5:fe:68:55:9b:c6:23:42:99: df:c7:1f:74:8d:85:cd:98:9f:bd:ce:43:70:25:4d:69:62:1f: 18:77:00:ca:79:84:65:c3:c1:62:e9:68:d4:5c:02:b4:3c:4c: 3e:90:07:4c:d6:2e:1b:20:23:15:7d:47:92:17:c5:a1:12:31: 85:b4:f5:29:5f:5a:ea:da:8a:98:0b:6b:da:ae:44:a8:8d:3c: 69:d4:9f:40:d4:48:f7:c5:6c:ac:b7:cd:99:2f:3f:17:83:16: 5e:b9:97:b5:6b:54:ab:ee:70:ed:ca:dc:f6:db:34:f1:86:60: 69:75:fa:c4:55:79:ed:db:36:8e:e2:04:79:59:f9:dd:e4:51: 51:b5:a4:af:c3:cc:d0:cf:b9:01:89:bd:35:b3:0c:fa:52:c3: 15:89:e3:31:10:d1:14:65:64:5c:f8:01:30:65:b7:43:82:75: 12:c6:57:03:8b:70:d4:b2:d9:b4:fc:72:61:5d:81:05:4a:83: 5d:0e:0e:cc:8b:50:ca:5b:20:1b:eb:07:46:6c:2e:b3:e4:48: 64:e7:ac:62 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/gipLMIrVQpmV1q27QVsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTJjYjQ5YjI4YjYyZjI4ZDY5MmFkOWY0ZGEwYWU3MDgx Zjg0OTMwHhcNMjYwMTAyMTYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjBlNGU3MGM1NjAxZmI5NjRlYWQ1NTJhYTBiODc0MTQwNTk5YThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+cA+89/1FPytl/fN7zDVpM57apSZ hPS0ZShvz/o3OLO1WKs3VfucpyHJ9lyCJT9QnWp9JeGlIxqn0k5qYo4VSbWos3RC VvHx6kJEH/mFBMFzhhh5etNrqyD4nsfFpt3lPD/FUnrJB+fppwu4sPH9IQ6alKCX cVDp4xnDdbvpj4jbg36wGAdbQ3ooVbbWiKtsDekL+hcLUIw/uiu+LmZi18r/n5vQ WsBy9HAUnwigm+5lUKogDRmjKgsA10wMKIHHZWiMgAnYqQaL8xG65dcswQpELA5T IQOFtHE6ipyaS32Klal6UVYLjLFjIX3+7iQaLx4Qa9z4S6eIUMLGUHyoXwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIIOTnDFYB+5ZOrVUqoLh0FAWZqLMB8GA1UdIwQY MBaAFAWiy0myi2LyjWkq2fTaCucIH4STMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTIt ZTVjMGY1ZDMzYjIzLzEvZ2c1T2NNVmdIN2xrNnRWU3FndUhRVUJabW9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTItZTVjMGY1ZDMzYjIz LzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFb6C4D BABb6DQwDQYJKoZIhvcNAQELBQADggEBAEHyrk8lBxobo9Fl+B8lI/SR7GB0ILoG rDJHxuzSopGsUnVKK2wcLTi2GoDg+OX+aFWbxiNCmd/HH3SNhc2Yn73OQ3AlTWli Hxh3AMp5hGXDwWLpaNRcArQ8TD6QB0zWLhsgIxV9R5IXxaESMYW09SlfWuraipgL a9quRKiNPGnUn0DUSPfFbKy3zZkvPxeDFl65l7VrVKvucO3K3PbbNPGGYGl1+sRV ee3bNo7iBHlZ+d3kUVG1pK/DzNDPuQGJvTWzDPpSwxWJ4zEQ0RRlZFz4ATBlt0OC dRLGVwOLcNSy2bT8cmFdgQVKg10ODsyLUMpbIBvrB0ZsLrPkSGTnrGI= -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:23 2026 by rpki-client