This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Gx7I3jC1g98cWMOjAJrAO37xcW4.roa File: Gx7I3jC1g98cWMOjAJrAO37xcW4.roa (raw, json) Hash identifier: 69p4fwx38xe4VxF3UZqKpPehxU5u7bioJRjNjWpGHv4= Subject key identifier: 1B:1E:C8:DE:30:B5:83:DF:1C:58:C3:A3:00:9A:C0:3B:7E:F1:71:6E Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F7697F5FABD1F272656683DE1733 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Gx7I3jC1g98cWMOjAJrAO37xcW4.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47803 IP address blocks: 217.192.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f7:69:7f:5f:ab:d1:f2:72:65:66:83:de:17:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b1ec8de30b583df1c58c3a3009ac03b7ef1716e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:1f:67:0b:1a:e7:19:c5:de:43:cc:70:4a: fb:1c:77:ea:7a:f2:20:24:03:84:f6:da:c2:bc:8d: 01:98:8d:f5:4c:bf:be:27:73:11:1b:6d:de:04:1b: 95:de:be:63:07:76:2d:c0:1b:73:1f:75:9e:5d:69: 2c:db:fb:d2:64:ce:4a:89:71:02:04:17:40:0d:46: 4d:e3:40:18:95:31:44:18:eb:0b:d4:11:72:68:12: e8:dc:4c:87:52:47:d6:a2:e7:d3:15:c7:db:fa:c1: 58:c7:aa:16:8b:ba:c3:1a:3b:b0:c0:f6:88:a9:13: 5d:d7:98:42:3e:0d:b7:ca:67:47:cd:7e:26:14:f1: 23:40:a3:37:63:6a:c2:ff:05:6a:89:0e:ec:76:ec: a1:59:56:e2:db:0b:8b:d3:df:5a:af:c8:13:41:8a: 21:59:72:80:9c:5b:50:04:5a:24:4f:df:11:09:f0: 08:1b:65:b9:20:ad:47:c2:5f:ab:19:d2:da:e8:16: c1:71:54:67:17:25:26:43:25:13:af:c1:20:f2:12: 23:48:04:7c:d7:6f:97:92:b2:d4:46:ea:91:46:7c: 0b:17:33:b6:e1:22:17:fa:80:31:2c:84:cf:ac:df: 98:3d:3a:30:03:3e:0f:70:45:a1:0f:b3:dd:e1:9d: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1E:C8:DE:30:B5:83:DF:1C:58:C3:A3:00:9A:C0:3B:7E:F1:71:6E X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Gx7I3jC1g98cWMOjAJrAO37xcW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.192.92.0/24 Signature Algorithm: sha256WithRSAEncryption 43:02:46:60:a1:ee:57:e5:33:5a:bd:2c:5e:08:09:cf:e4:3c: 61:9a:c4:ed:16:c3:c6:ca:1c:64:a8:9e:ae:36:c3:86:9a:40: af:f3:8d:01:d9:fe:ad:3b:cc:db:25:b8:9b:b7:a1:e9:e6:2d: 75:03:63:23:b2:a4:6a:1b:24:b0:40:b5:fd:e1:6f:10:8c:7e: 68:43:b8:e6:0a:b4:b5:f8:01:ba:8a:f7:a9:f1:29:5f:ed:10: 96:54:4d:cd:12:ba:a1:98:8c:94:6a:7f:ab:60:9f:94:7f:7a: 07:34:92:36:31:ca:fc:c4:6f:da:7e:41:3f:aa:38:be:6b:0e: a1:ea:41:f8:37:e8:b1:dd:fd:86:ee:fc:04:75:85:92:3a:ef: 02:fd:29:00:5d:91:bb:eb:72:65:fa:4c:38:be:ba:cf:12:55: 2c:42:d8:20:dd:31:fd:fe:33:d7:5e:d6:c0:97:16:eb:f7:e8: 82:a6:db:b1:b3:bf:ec:18:dc:41:dc:2f:01:83:70:9f:e9:d6: 96:42:2b:64:c8:2e:fe:f2:9a:44:ad:20:39:44:dd:2c:83:f5: 7b:28:4d:64:dd:cb:0c:6f:0b:d4:48:7b:dc:d5:eb:b8:03:96: 99:b6:de:3c:c3:5d:92:0c:5a:8b:e3:77:65:05:fe:73:d0:d7: 67:90:00:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Evdpf1+r0fJyZWaD3hczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjFlYzhkZTMwYjU4M2RmMWM1OGMzYTMwMDlhYzAzYjdlZjE3MTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZYfZwsa5xnF3kPMcEr7HHfqevIg JAOE9trCvI0BmI31TL++J3MRG23eBBuV3r5jB3YtwBtzH3WeXWks2/vSZM5KiXEC BBdADUZN40AYlTFEGOsL1BFyaBLo3EyHUkfWoufTFcfb+sFYx6oWi7rDGjuwwPaI qRNd15hCPg23ymdHzX4mFPEjQKM3Y2rC/wVqiQ7sduyhWVbi2wuL099ar8gTQYoh WXKAnFtQBFokT98RCfAIG2W5IK1Hwl+rGdLa6BbBcVRnFyUmQyUTr8Eg8hIjSAR8 12+XkrLURuqRRnwLFzO24SIX+oAxLITPrN+YPTowAz4PcEWhD7Pd4Z13vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBseyN4wtYPfHFjDowCawDt+8XFuMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvR3g3STNqQzFnOThjV01PakFKckFPMzd4Y1c0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cBcMA0G CSqGSIb3DQEBCwUAA4IBAQBDAkZgoe5X5TNavSxeCAnP5DxhmsTtFsPGyhxkqJ6u NsOGmkCv840B2f6tO8zbJbibt6Hp5i11A2MjsqRqGySwQLX94W8QjH5oQ7jmCrS1 +AG6ivep8Slf7RCWVE3NErqhmIyUan+rYJ+Uf3oHNJI2Mcr8xG/afkE/qji+aw6h 6kH4N+ix3f2G7vwEdYWSOu8C/SkAXZG763Jl+kw4vrrPElUsQtgg3TH9/jPXXtbA lxbr9+iCptuxs7/sGNxB3C8Bg3Cf6daWQitkyC7+8ppErSA5RN0sg/V7KE1k3csM bwvUSHvc1eu4A5aZtt48w12SDFqL43dlBf5z0NdnkADr -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:33 2026 by rpki-client