This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/0GGyirColDCbufJKo9AkegU8ypY.roa File: 0GGyirColDCbufJKo9AkegU8ypY.roa (raw, json) Hash identifier: 7QPLCEclN6a9EBsfMNfOKHLR6P6jqQdzgzwlX2uR1Mk= Subject key identifier: D0:61:B2:8A:B0:A8:94:30:9B:B9:F2:4A:A3:D0:24:7A:05:3C:CA:96 Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Certificate serial: 019B77C7073572C80047E6A650F9B2F8E5B7 Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/0GGyirColDCbufJKo9AkegU8ypY.roa Signing time: Thu 01 Jan 2026 04:18:10 +0000 ROA not before: Thu 01 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205634 IP address blocks: 144.124.216.0/22 maxlen: 24 144.124.219.0/24 maxlen: 24 144.124.223.0/24 maxlen: 24 158.94.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:07:35:72:c8:00:47:e6:a6:50:f9:b2:f8:e5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d061b28ab0a894309bb9f24aa3d0247a053cca96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:d7:97:8c:4c:55:5c:ee:66:b9:a7:b9:91: c0:2d:86:2a:9c:57:28:77:26:37:36:fa:6c:80:e5: 39:fa:8f:7e:29:f1:51:82:fa:4c:e7:a6:95:09:20: 56:71:28:65:fe:df:4b:0d:02:a3:61:27:02:a9:13: 13:e4:a5:3b:9d:ec:b4:18:98:27:2f:93:b1:48:ac: 3c:e5:44:c7:c5:00:e7:9b:f1:d4:ab:89:09:51:3b: 2a:4a:63:b8:4d:ae:25:6a:34:a7:01:49:6f:aa:c1: 3d:2d:c3:87:b2:f7:0c:d1:e8:68:ca:1f:e8:68:c0: bb:49:be:c6:92:e9:2c:86:c8:73:48:fb:11:78:49: c5:24:0a:a5:fa:15:e9:a9:13:10:07:cb:54:f6:47: 49:62:80:c5:66:af:94:a0:51:d2:8d:38:27:a3:f5: b1:b4:3c:34:ac:b0:49:68:d2:c6:63:f3:07:9d:84: 38:5e:7a:05:3c:4e:a1:2e:e9:03:ec:d0:74:7b:e0: 87:b9:8a:d5:f0:2e:e2:38:2e:c2:0c:be:df:01:f6: e3:8c:05:ae:a5:8a:aa:55:a2:00:75:fc:9b:47:33: e6:4b:b8:1e:ba:1c:41:64:77:45:26:fd:ba:b9:c5: 06:b7:e4:db:3e:27:87:3c:88:38:0b:ab:6e:07:9f: 0c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:61:B2:8A:B0:A8:94:30:9B:B9:F2:4A:A3:D0:24:7A:05:3C:CA:96 X509v3 Authority Key Identifier: keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/0GGyirColDCbufJKo9AkegU8ypY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.124.216.0/22 144.124.223.0/24 158.94.213.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:0b:ae:92:68:60:82:43:80:b2:0b:2e:2e:5b:e3:ab:86:49: ce:bc:7c:ee:ba:e3:18:13:dc:a3:0e:02:6a:1a:1c:38:b4:d3: c4:81:92:8c:94:39:0e:12:4f:4b:26:74:f3:7a:a6:48:c0:b4: 97:ce:13:61:da:3a:95:cc:59:d6:10:3b:cb:7a:c1:2b:c8:9a: 1a:a0:8f:c4:29:94:4d:9f:15:04:16:98:ab:37:ce:0d:c2:26: ff:a9:a5:d1:ed:d5:ea:66:27:9a:f1:0b:d7:f1:c6:d5:f2:0b: de:03:e4:03:87:13:35:7f:52:f4:19:e5:c2:72:b0:6b:94:6b: e9:39:e4:69:01:6e:ba:1a:25:3f:3e:e9:a9:9b:fc:1f:7c:11: 49:74:7b:66:e7:de:40:8e:43:32:45:18:52:8f:9a:b4:7e:69: 44:2f:aa:2f:12:a1:ba:5f:9f:ce:97:be:39:0e:9c:9f:d1:97: 92:e6:83:73:19:d1:83:59:88:07:31:d0:46:6d:72:a9:bb:8c: d1:fd:e6:18:c1:33:10:cd:33:d9:19:41:ac:4e:a5:59:b0:98: 79:cb:74:75:65:9a:fa:8f:3e:3b:35:d1:f0:46:45:c7:0b:09: db:31:12:fa:34:36:ac:3f:1e:7b:f7:64:0a:26:5d:c7:63:eb: 5f:cf:29:47 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xwc1csgAR+amUPmy+OW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTNiOWFjMGE0ODZiMDAzNzc2NWQ2MDVjOGIxYzgxMDQw NDZmMGEwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDYxYjI4YWIwYTg5NDMwOWJiOWYyNGFhM2QwMjQ3YTA1M2NjYTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp7Xl4xMVVzuZrmnuZHALYYqnFco dyY3NvpsgOU5+o9+KfFRgvpM56aVCSBWcShl/t9LDQKjYScCqRMT5KU7ney0GJgn L5OxSKw85UTHxQDnm/HUq4kJUTsqSmO4Ta4lajSnAUlvqsE9LcOHsvcM0ehoyh/o aMC7Sb7GkukshshzSPsReEnFJAql+hXpqRMQB8tU9kdJYoDFZq+UoFHSjTgno/Wx tDw0rLBJaNLGY/MHnYQ4XnoFPE6hLukD7NB0e+CHuYrV8C7iOC7CDL7fAfbjjAWu pYqqVaIAdfybRzPmS7geuhxBZHdFJv26ucUGt+TbPieHPIg4C6tuB58M/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNBhsoqwqJQwm7nySqPQJHoFPMqWMB8GA1UdIwQY MBaAFEWTuawKSGsAN3ZdYFyLHIEEBG8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgt NDNlNmJmZjlhMjVlLzEvMEdHeWlyQ29sRENidWZKS285QWtlZ1U4eXBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgtNDNlNmJmZjlhMjVl LzEvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCkHzYAwQA kHzfAwQAnl7VMA0GCSqGSIb3DQEBCwUAA4IBAQCNC66SaGCCQ4CyCy4uW+OrhknO vHzuuuMYE9yjDgJqGhw4tNPEgZKMlDkOEk9LJnTzeqZIwLSXzhNh2jqVzFnWEDvL esEryJoaoI/EKZRNnxUEFpirN84Nwib/qaXR7dXqZiea8QvX8cbV8gveA+QDhxM1 f1L0GeXCcrBrlGvpOeRpAW66GiU/Pumpm/wffBFJdHtm595AjkMyRRhSj5q0fmlE L6ovEqG6X5/Ol745Dpyf0ZeS5oNzGdGDWYgHMdBGbXKpu4zR/eYYwTMQzTPZGUGs TqVZsJh5y3R1ZZr6jz47NdHwRkXHCwnbMRL6NDasPx5792QKJl3HY+tfzylH -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:32 2026 by rpki-client