This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/Gw1I1cMSfmj9txsMtdMmjIau-Yk.roa File: Gw1I1cMSfmj9txsMtdMmjIau-Yk.roa (raw, json) Hash identifier: A9JkF2YIBDsb9U5w0rInQubmdVk1rDCgtqhI9Yk4Xps= Subject key identifier: 1B:0D:48:D5:C3:12:7E:68:FD:B7:1B:0C:B5:D3:26:8C:86:AE:F9:89 Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1 Certificate serial: 019B7835246667CFAB0D3D4B9615650B7F9A Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/Gw1I1cMSfmj9txsMtdMmjIau-Yk.roa Signing time: Thu 01 Jan 2026 06:18:27 +0000 ROA not before: Thu 01 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8473 IP address blocks: 176.124.224.0/23 maxlen: 23 176.124.224.0/24 maxlen: 24 176.124.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:24:66:67:cf:ab:0d:3d:4b:96:15:65:0b:7f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1 Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b0d48d5c3127e68fdb71b0cb5d3268c86aef989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:41:04:dc:e3:c9:06:cc:e6:e2:68:3a:50: 7c:6b:df:28:34:1e:5c:8d:69:57:d2:75:a7:c2:b4: dc:87:54:07:2a:dc:04:e2:26:86:55:58:37:33:9b: 3e:f2:81:57:de:7f:d6:00:04:0d:b6:af:29:8b:33: fb:04:9a:f4:93:d2:49:bb:b8:39:d5:24:07:00:6c: 34:e2:42:e5:30:f7:07:ed:db:9a:89:35:46:04:d9: e6:cf:0f:89:4c:55:28:13:1c:f6:5f:02:b6:b5:bc: dd:dd:78:83:0d:e4:fc:21:67:64:71:36:e3:73:dd: 26:ad:4a:eb:c0:7e:78:c2:0b:a2:82:45:4c:4b:49: fb:db:77:82:15:68:f1:1c:56:f0:76:7e:3f:3c:cb: 6d:a6:fb:05:c7:f2:13:33:fa:d5:72:5d:b0:e3:55: c7:c0:0b:3c:35:59:bf:5a:e4:0f:c5:64:bd:3e:ab: 93:d5:b3:38:bb:9a:90:fd:57:5a:b5:ae:fc:65:2d: 0d:4b:58:9c:cd:35:85:45:09:79:2f:05:b3:74:c0: 60:af:8e:bd:b1:84:7f:e4:17:5e:0d:04:32:12:94: 4a:2a:88:03:f3:ed:1d:8b:ba:6b:ed:71:54:84:b6: a3:e4:0f:44:f5:7e:f3:93:7c:21:40:eb:29:d8:7a: 40:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0D:48:D5:C3:12:7E:68:FD:B7:1B:0C:B5:D3:26:8C:86:AE:F9:89 X509v3 Authority Key Identifier: keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/Gw1I1cMSfmj9txsMtdMmjIau-Yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.224.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:e1:4a:ac:be:af:57:c8:e4:39:da:f9:35:fc:15:63:f2:81: d1:35:a1:10:09:28:f1:d7:e7:f8:ba:ae:a4:e7:5b:d0:2d:df: a8:fb:ab:98:3b:18:b1:98:56:4e:9c:49:5b:67:4a:b0:c6:7b: b0:8e:b9:1c:ff:7f:48:41:a2:d1:11:92:43:49:cb:ea:6e:ba: 56:15:a3:3f:e8:0c:41:21:4b:71:66:78:06:6b:0a:d4:91:56: 38:23:69:26:b9:79:4a:36:55:9c:9d:58:f0:cb:10:5f:91:09: ed:74:05:55:b3:7f:0e:42:49:da:b2:05:fa:34:2f:5e:99:0c: 7b:18:74:45:e2:9f:40:1b:6d:41:48:9b:cc:de:95:fe:cc:4f: ae:49:21:ac:51:6c:01:67:00:e6:15:72:ac:90:d8:d1:54:78: 83:25:e3:ec:84:08:a0:cc:10:f0:c8:65:e7:73:47:61:cd:be: b1:65:7e:b1:80:76:a4:c1:cc:7b:63:f5:da:8a:43:2a:cf:c4: 4a:84:e4:26:1a:bd:0e:f3:b8:01:4e:42:28:8e:48:64:fd:5c: d6:f4:f8:92:49:70:85:6b:0e:35:1e:f2:54:67:9f:d5:a3:49: ad:7f:66:9e:c3:78:2e:83:01:00:f3:5f:b5:ab:b3:93:46:f3: 8c:42:af:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSRmZ8+rDT1LlhVlC3+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOTUzZTYwNzY3MGZmNzM4ZWVlNmE2YjU3N2Q4YzhiMjgw NGUxZTEwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjBkNDhkNWMzMTI3ZTY4ZmRiNzFiMGNiNWQzMjY4Yzg2YWVmOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCZBBNzjyQbM5uJoOlB8a98oNB5c jWlX0nWnwrTch1QHKtwE4iaGVVg3M5s+8oFX3n/WAAQNtq8pizP7BJr0k9JJu7g5 1SQHAGw04kLlMPcH7duaiTVGBNnmzw+JTFUoExz2XwK2tbzd3XiDDeT8IWdkcTbj c90mrUrrwH54wguigkVMS0n723eCFWjxHFbwdn4/PMttpvsFx/ITM/rVcl2w41XH wAs8NVm/WuQPxWS9PquT1bM4u5qQ/Vdata78ZS0NS1iczTWFRQl5LwWzdMBgr469 sYR/5BdeDQQyEpRKKogD8+0di7pr7XFUhLaj5A9E9X7zk3whQOsp2HpA1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBsNSNXDEn5o/bcbDLXTJoyGrvmJMB8GA1UdIwQY MBaAFBCVPmB2cP9zju5qa1d9jIsoBOHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hOTkzNTUtMmQwMS00ZGE1LThlNzMt MWJjNTUyYzAwZGQ3LzEvR3cxSTFjTVNmbWo5dHhzTXRkTW1qSWF1LVlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hOTkzNTUtMmQwMS00ZGE1LThlNzMtMWJjNTUyYzAwZGQ3 LzEvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHzgMA0G CSqGSIb3DQEBCwUAA4IBAQCO4Uqsvq9XyOQ52vk1/BVj8oHRNaEQCSjx1+f4uq6k 51vQLd+o+6uYOxixmFZOnElbZ0qwxnuwjrkc/39IQaLREZJDScvqbrpWFaM/6AxB IUtxZngGawrUkVY4I2kmuXlKNlWcnVjwyxBfkQntdAVVs38OQknasgX6NC9emQx7 GHRF4p9AG21BSJvM3pX+zE+uSSGsUWwBZwDmFXKskNjRVHiDJePshAigzBDwyGXn c0dhzb6xZX6xgHakwcx7Y/XaikMqz8RKhOQmGr0O87gBTkIojkhk/VzW9PiSSXCF aw41HvJUZ5/Vo0mtf2aew3gugwEA81+1q7OTRvOMQq96 -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:49 2026 by rpki-client