This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4gsDbyB16b-EfqdGsMUNUyhH3E8.roa File: 4gsDbyB16b-EfqdGsMUNUyhH3E8.roa (raw, json) Hash identifier: BQ8e2hX9TtuJ6oYEq5WeEUTSJeCT3+Ta0HW3Ti6RYVw= Subject key identifier: E2:0B:03:6F:20:75:E9:BF:84:7E:A7:46:B0:C5:0D:53:28:47:DC:4F Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C13095A640BAAC8B1CBBF813AFE4A02 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4gsDbyB16b-EfqdGsMUNUyhH3E8.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210998 IP address blocks: 194.6.177.0/24 maxlen: 24 217.193.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:09:5a:64:0b:aa:c8:b1:cb:bf:81:3a:fe:4a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e20b036f2075e9bf847ea746b0c50d532847dc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:4c:97:93:68:51:79:05:df:52:42:ce:28: 0b:4c:cd:73:68:15:b0:45:af:7f:ce:ad:ea:d8:54: 1d:c8:23:ff:ce:63:4f:ae:45:26:2b:df:a7:67:83: 91:dd:a3:cf:ae:e3:d6:a9:12:e5:81:02:f8:30:e2: e9:7c:24:9e:8b:60:3c:5a:7f:be:a2:a2:e6:e3:00: 2d:4a:43:0f:35:6d:b3:49:fa:2f:63:be:9b:36:a9: 57:ea:a1:dc:8a:92:c9:c4:07:c8:42:72:4a:6b:eb: ba:0e:ce:7c:66:8a:1d:c2:f6:b4:56:94:90:30:df: e5:cd:2e:ba:d6:99:36:ee:96:5f:9b:02:59:33:38: 89:2b:da:c4:05:dc:12:b2:8d:d4:22:65:ff:8e:59: 73:f2:5e:82:68:d1:b3:7e:fa:c6:72:fc:bf:dd:a8: c5:d8:d7:7c:0c:53:04:6b:98:0d:85:2d:ff:2f:44: 93:10:83:f6:8e:08:be:6b:0a:83:8e:ea:82:4d:9d: cc:f2:9a:69:90:f9:a6:2e:89:e1:c9:53:ee:0d:98: 64:14:60:84:be:f8:8e:6e:e7:73:19:df:7e:8c:6c: f9:4b:b4:33:8c:70:5a:cb:f6:97:81:b5:03:27:f5: 4e:a3:29:01:15:81:04:fd:67:ff:43:d0:4c:04:c3: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0B:03:6F:20:75:E9:BF:84:7E:A7:46:B0:C5:0D:53:28:47:DC:4F X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4gsDbyB16b-EfqdGsMUNUyhH3E8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.6.177.0/24 217.193.221.0/24 Signature Algorithm: sha256WithRSAEncryption 71:3f:1d:1f:a7:d4:ab:7f:8e:6e:da:f5:00:88:c1:ac:54:a4: 7f:a1:f4:a6:c5:cc:db:2f:73:f3:5e:e6:d8:94:f9:83:4e:95: 54:2c:1e:27:c5:ae:13:02:14:16:57:61:0c:c3:e0:b6:da:1e: 2d:77:a7:47:2c:5c:1d:4a:29:72:12:b2:b4:5a:34:d4:ad:08: 52:c8:e9:2e:bd:44:b4:eb:14:04:09:b3:18:23:47:f2:2f:44: bb:86:80:2d:fe:16:5d:a0:d0:50:a2:b9:7c:0c:9c:9d:96:7d: a9:d4:b1:63:9f:27:f7:90:f0:48:67:7b:78:4b:6a:0c:9c:64: 39:e1:8b:73:b5:b6:81:86:61:0e:4f:ca:02:21:b6:2e:9e:d9: 03:b6:56:97:e1:16:45:63:c3:88:3c:ea:74:f6:97:d3:98:ff: 92:1c:6e:f8:83:d6:85:e1:ea:fd:70:0f:84:b0:95:dc:f2:95: 4d:7c:00:29:76:45:32:70:45:22:56:90:46:5f:14:d5:48:bf: c1:fa:1e:d2:e0:e7:ad:ca:32:a0:b3:25:12:e3:dd:1e:24:fa: e1:a2:8b:20:1e:83:b2:ff:55:02:29:13:7e:60:26:7d:53:4d: c5:1e:78:f3:b7:45:2d:ee:31:55:94:65:ef:0e:0f:f7:26:9c: d5:3c:e6:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EwlaZAuqyLHLv4E6/koCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjBiMDM2ZjIwNzVlOWJmODQ3ZWE3NDZiMGM1MGQ1MzI4NDdkYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoVMl5NoUXkF31JCzigLTM1zaBWw Ra9/zq3q2FQdyCP/zmNPrkUmK9+nZ4OR3aPPruPWqRLlgQL4MOLpfCSei2A8Wn++ oqLm4wAtSkMPNW2zSfovY76bNqlX6qHcipLJxAfIQnJKa+u6Ds58Zoodwva0VpSQ MN/lzS661pk27pZfmwJZMziJK9rEBdwSso3UImX/jllz8l6CaNGzfvrGcvy/3ajF 2Nd8DFMEa5gNhS3/L0STEIP2jgi+awqDjuqCTZ3M8pppkPmmLonhyVPuDZhkFGCE vviObudzGd9+jGz5S7QzjHBay/aXgbUDJ/VOoykBFYEE/Wf/Q9BMBMMjcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOILA28gdem/hH6nRrDFDVMoR9xPMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvNGdzRGJ5QjE2Yi1FZnFkR3NNVU5VeWhIM0U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwgaxAwQA 2cHdMA0GCSqGSIb3DQEBCwUAA4IBAQBxPx0fp9Srf45u2vUAiMGsVKR/ofSmxczb L3PzXubYlPmDTpVULB4nxa4TAhQWV2EMw+C22h4td6dHLFwdSilyErK0WjTUrQhS yOkuvUS06xQECbMYI0fyL0S7hoAt/hZdoNBQorl8DJydln2p1LFjnyf3kPBIZ3t4 S2oMnGQ54YtztbaBhmEOT8oCIbYuntkDtlaX4RZFY8OIPOp09pfTmP+SHG74g9aF 4er9cA+EsJXc8pVNfAApdkUycEUiVpBGXxTVSL/B+h7S4OetyjKgsyUS490eJPrh oosgHoOy/1UCKRN+YCZ9U03FHnjzt0Ut7jFVlGXvDg/3JpzVPObZ -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:39 2026 by rpki-client