This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/GXCfAVmuuL63Oe4dOVqYkc3Wuzg.roa File: GXCfAVmuuL63Oe4dOVqYkc3Wuzg.roa (raw, json) Hash identifier: L3MDEpVumA01FdWvikqD5sE8kkEXPwKtDKdz6KqfMnQ= Subject key identifier: 19:70:9F:01:59:AE:B8:BE:B7:39:EE:1D:39:5A:98:91:CD:D6:BB:38 Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 019B77C6EFB2320F52F519D4184894F33780 Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/GXCfAVmuuL63Oe4dOVqYkc3Wuzg.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 195.62.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ef:b2:32:0f:52:f5:19:d4:18:48:94:f3:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19709f0159aeb8beb739ee1d395a9891cdd6bb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:04:c4:26:a2:e2:3d:0b:48:19:54:f7:9a: 15:23:ba:95:ef:3c:f0:ed:c9:bd:b0:57:14:21:7c: cd:a2:cf:91:33:99:f3:28:a0:dd:38:89:57:20:0f: a7:89:65:cc:f3:ec:43:cf:a9:00:40:3b:fe:56:f2: 48:4d:f8:1e:24:ce:7b:ff:7c:e1:4c:8d:30:ff:8d: f4:b4:83:16:92:9d:f2:b5:68:b2:5c:47:db:8c:58: 0b:8f:3a:40:00:a4:e0:4d:16:e9:66:ab:33:79:5e: 4f:0f:c0:87:6a:57:ca:5f:95:e3:3a:3d:8c:18:df: a4:5c:00:c9:7b:16:b1:2c:2a:10:26:5a:22:b0:fb: 05:66:bb:74:c2:e8:f0:19:96:af:33:bc:64:47:db: 6a:06:6d:68:f1:4e:49:dd:9a:98:a3:45:6e:40:b3: 7b:5a:d2:88:42:c6:90:31:85:bf:61:37:51:07:0a: 2c:70:f9:d5:34:50:e6:7f:ab:4e:6c:f4:7e:26:25: e3:32:9b:8c:d3:06:82:21:ae:48:01:d4:d8:70:53: 9c:f6:70:e2:55:eb:33:c8:a1:52:e4:3e:bf:89:0c: c9:be:cb:1b:ec:e1:8a:ea:d3:17:36:2d:30:fd:ff: 7e:e2:54:74:41:fc:d6:b1:a7:bb:fd:de:42:c7:be: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:70:9F:01:59:AE:B8:BE:B7:39:EE:1D:39:5A:98:91:CD:D6:BB:38 X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/GXCfAVmuuL63Oe4dOVqYkc3Wuzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.62.47.0/24 Signature Algorithm: sha256WithRSAEncryption a0:c8:69:ae:1b:9a:da:74:23:7a:13:2a:54:d6:b2:81:fb:f0: d9:0d:c2:dd:0c:df:8a:ac:9c:e9:bf:4d:38:a5:a0:2d:9f:1f: d4:2d:51:31:33:87:ee:0c:5f:3f:36:33:ed:5f:a9:07:aa:ee: a6:a3:e3:b5:89:22:65:9c:5e:c3:14:13:00:69:39:52:6c:09: a0:11:ad:f2:e6:62:80:4d:ab:cf:98:a9:70:9c:33:6f:a1:8c: 27:13:e2:59:09:cc:a4:57:83:d6:b4:07:42:db:f7:c4:04:12: fb:a7:c7:05:c1:3b:94:31:e3:4d:a4:45:29:cb:be:0a:98:1b: b4:5c:69:11:e4:b6:1d:3c:b1:7f:03:77:87:fe:c3:5b:9e:64: 87:83:48:8b:1b:4d:9d:43:2b:b7:76:ea:41:f0:0c:01:82:73: eb:25:5d:93:06:6e:5c:19:2a:0a:79:66:7a:d8:0f:a6:a1:d8: 32:59:1e:b3:7b:da:b6:de:f8:3b:2e:00:ec:fc:72:38:a0:c6: 1d:24:67:d0:41:28:f5:21:9f:3b:f2:9c:e5:59:0c:4e:39:10: 02:c7:af:0a:d6:5a:7c:13:26:1d:8d:3a:af:d3:f0:02:8d:2b: 84:83:c8:98:9e:e5:f9:60:4b:a6:f8:48:48:9d:b6:38:f2:66: ed:f4:35:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xu+yMg9S9RnUGEiU8zeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTcwOWYwMTU5YWViOGJlYjczOWVlMWQzOTVhOTg5MWNkZDZiYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wQExCai4j0LSBlU95oVI7qV7zzw 7cm9sFcUIXzNos+RM5nzKKDdOIlXIA+niWXM8+xDz6kAQDv+VvJITfgeJM57/3zh TI0w/430tIMWkp3ytWiyXEfbjFgLjzpAAKTgTRbpZqszeV5PD8CHalfKX5XjOj2M GN+kXADJexaxLCoQJloisPsFZrt0wujwGZavM7xkR9tqBm1o8U5J3ZqYo0VuQLN7 WtKIQsaQMYW/YTdRBwoscPnVNFDmf6tObPR+JiXjMpuM0waCIa5IAdTYcFOc9nDi VeszyKFS5D6/iQzJvssb7OGK6tMXNi0w/f9+4lR0QfzWsae7/d5Cx77+/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBlwnwFZrri+tznuHTlamJHN1rs4MB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEvR1hDZkFWbXV1TDYzT2U0ZE9WcVlrYzNXdXpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwz4vMA0G CSqGSIb3DQEBCwUAA4IBAQCgyGmuG5radCN6EypU1rKB+/DZDcLdDN+KrJzpv004 paAtnx/ULVExM4fuDF8/NjPtX6kHqu6mo+O1iSJlnF7DFBMAaTlSbAmgEa3y5mKA TavPmKlwnDNvoYwnE+JZCcykV4PWtAdC2/fEBBL7p8cFwTuUMeNNpEUpy74KmBu0 XGkR5LYdPLF/A3eH/sNbnmSHg0iLG02dQyu3dupB8AwBgnPrJV2TBm5cGSoKeWZ6 2A+modgyWR6ze9q23vg7LgDs/HI4oMYdJGfQQSj1IZ878pzlWQxOORACx68K1lp8 EyYdjTqv0/ACjSuEg8iYnuX5YEum+EhInbY48mbt9DVh -----END CERTIFICATE-----Generated at Fri Jan 9 17:59:16 2026 by rpki-client