This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa File: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (raw, json) Hash identifier: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8= Subject key identifier: 19:AE:0C:11:D1:3A:E8:0D:D7:E2:92:AA:1D:D9:CC:A8:BF:11:65:5F Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 019B7E384BA365E27C9763860FC1137D4CC3 Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51207 IP address blocks: 78.240.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4b:a3:65:e2:7c:97:63:86:0f:c1:13:7d:4c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19ae0c11d13ae80dd7e292aa1dd9cca8bf11655f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:34:91:2d:22:97:0d:e9:6f:90:ca:0e:1b: cf:e1:d5:77:28:35:bd:db:a7:9a:5b:69:26:00:8f: a5:7d:93:1b:dd:f1:77:2e:b4:44:85:e0:56:7f:77: fd:11:5c:88:ae:c7:f0:41:ab:25:99:13:7a:50:d7: 83:f2:af:fe:28:82:70:47:9e:ee:52:3f:0d:ee:91: 43:ff:e9:1a:19:93:ba:ce:8b:b1:a7:e2:42:41:10: 90:77:61:dc:ab:48:07:0e:30:26:8a:59:b7:5e:8b: 47:f5:11:4e:93:d4:a6:f9:b0:f0:a7:b9:91:5c:6d: 18:57:f2:c4:21:52:27:1d:34:c2:75:ff:90:74:90: 8b:ec:52:93:c0:4d:7e:74:7c:6b:de:cb:39:55:31: bd:93:1b:91:6b:0d:56:5c:db:31:fd:13:ac:e8:35: 77:8a:cf:be:ab:25:16:65:19:b9:f4:a0:4d:1c:71: 6c:47:86:fa:de:6a:93:e3:99:71:bb:b6:ca:70:c1: e1:90:6d:d3:2e:27:d1:7f:97:a6:e2:5e:77:e4:5c: be:9a:f7:16:85:3f:73:66:4f:49:d8:17:55:53:32: 08:09:9d:bc:41:78:ae:1e:77:fc:0d:33:58:53:71: 71:ec:27:f8:80:b2:02:46:7a:a8:3f:73:78:d0:de: f8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AE:0C:11:D1:3A:E8:0D:D7:E2:92:AA:1D:D9:CC:A8:BF:11:65:5F X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.240.0.0/13 Signature Algorithm: sha256WithRSAEncryption 47:4b:4d:70:92:d4:0a:b6:37:ad:18:3b:62:2b:02:45:3d:a3: 97:2e:1d:4c:1a:54:3f:d4:22:d9:51:3a:fb:a9:b3:17:7e:23: 71:c6:d8:89:e4:39:aa:b6:6e:16:e6:34:a1:39:99:0e:1e:00: 0f:e7:c8:ac:37:f7:7e:5b:41:7a:1a:21:45:0d:36:81:e2:b8: c0:6a:f9:26:60:7b:98:7a:6b:e4:57:da:aa:f2:e6:f1:d6:4a: ef:15:9a:ce:db:95:0d:ec:c1:9b:7c:57:98:37:bb:ce:e6:b8: 8c:40:b5:f1:b7:08:5d:0e:7b:73:b0:2e:65:ba:7c:c0:19:73: 70:77:f5:f8:98:2b:c9:4c:21:78:6d:ea:0f:57:37:7c:01:a3: b7:a6:dd:e7:e0:0d:b4:4b:11:19:31:76:80:b4:08:4c:8f:94: ca:8f:a1:d6:98:ab:55:8b:a1:c2:52:03:6e:7f:1f:c9:68:c6: f2:c8:d5:01:c8:40:ba:d1:bd:cd:37:43:9b:1d:89:57:b7:0d: 51:1f:31:14:a4:ca:4f:6c:ac:e7:28:03:93:cf:93:0a:08:39: 73:0a:06:33:af:66:96:a3:be:14:70:4f:0d:58:e1:57:dd:24: f1:ce:7d:25:09:b0:cb:49:05:1d:03:e5:e8:c0:68:04:c9:44: 9a:62:65:f4 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+OEujZeJ8l2OGD8ETfUzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWFlMGMxMWQxM2FlODBkZDdlMjkyYWExZGQ5Y2NhOGJmMTE2NTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4E0kS0ilw3pb5DKDhvP4dV3KDW9 26eaW2kmAI+lfZMb3fF3LrREheBWf3f9EVyIrsfwQaslmRN6UNeD8q/+KIJwR57u Uj8N7pFD/+kaGZO6zouxp+JCQRCQd2Hcq0gHDjAmilm3XotH9RFOk9Sm+bDwp7mR XG0YV/LEIVInHTTCdf+QdJCL7FKTwE1+dHxr3ss5VTG9kxuRaw1WXNsx/ROs6DV3 is++qyUWZRm59KBNHHFsR4b63mqT45lxu7bKcMHhkG3TLifRf5em4l535Fy+mvcW hT9zZk9J2BdVUzIICZ28QXiuHnf8DTNYU3Fx7Cf4gLICRnqoP3N40N74KwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFBmuDBHROugN1+KSqh3ZzKi/EWVfMB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvR2E0TUVkRTY2QTNYNHBLcUhkbk1xTDhSWlY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDTvAwDQYJ KoZIhvcNAQELBQADggEBAEdLTXCS1Aq2N60YO2IrAkU9o5cuHUwaVD/UItlROvup sxd+I3HG2InkOaq2bhbmNKE5mQ4eAA/nyKw3935bQXoaIUUNNoHiuMBq+SZge5h6 a+RX2qry5vHWSu8Vms7blQ3swZt8V5g3u87muIxAtfG3CF0Oe3OwLmW6fMAZc3B3 9fiYK8lMIXht6g9XN3wBo7em3efgDbRLERkxdoC0CEyPlMqPodaYq1WLocJSA25/ H8loxvLI1QHIQLrRvc03Q5sdiVe3DVEfMRSkyk9srOcoA5PPkwoIOXMKBjOvZpaj vhRwTw1Y4VfdJPHOfSUJsMtJBR0D5ejAaATJRJpiZfQ= -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:50 2026 by rpki-client