This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/GP7KWBDJ3szsdg470HEvQ_eBiTU.roa File: GP7KWBDJ3szsdg470HEvQ_eBiTU.roa (raw, json) Hash identifier: WISQGdJU8WS2sRXkUu1VfI+qv72otRs4wKcVECbAYnI= Subject key identifier: 18:FE:CA:58:10:C9:DE:CC:EC:76:0E:3B:D0:71:2F:43:F7:81:89:35 Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465 Certificate serial: 019B7CEDD1392623D983CF16A7914D27A884 Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/GP7KWBDJ3szsdg470HEvQ_eBiTU.roa Signing time: Fri 02 Jan 2026 04:18:38 +0000 ROA not before: Fri 02 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21500 IP address blocks: 193.111.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d1:39:26:23:d9:83:cf:16:a7:91:4d:27:a8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465 Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18feca5810c9deccec760e3bd0712f43f7818935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:3a:4d:df:ba:a0:fa:67:9e:1a:01:bf:76: d6:ee:50:d8:3a:19:b7:ed:76:aa:99:c3:d5:ac:54: 7f:60:d5:5c:29:f0:5f:7b:51:21:b2:72:32:d4:10: 59:43:e4:3e:df:26:d1:49:98:bc:c5:07:8b:52:f2: 93:1a:e4:a9:f6:91:3a:31:6e:d4:f6:f1:7e:f6:5d: 38:29:d5:42:05:c4:22:23:ff:bc:6d:58:f6:1d:1f: 9e:7c:94:a1:2d:cd:cc:f1:99:75:50:1d:b6:be:09: 24:bb:83:0f:35:3e:09:ff:26:f9:aa:8b:65:93:51: 71:32:29:a2:4a:53:9d:de:a0:9f:0a:f5:a6:ea:3c: 28:b4:92:6f:02:ce:43:85:99:0d:17:25:88:8e:37: db:69:f9:95:ee:7e:4f:a8:ef:73:86:1a:a9:dc:f8: 66:6c:f5:0d:79:e8:16:a9:91:a7:3c:d9:31:9e:2f: b1:5b:a4:e3:11:3c:87:d0:1c:be:cd:5b:ee:75:5f: f7:2f:76:12:44:f5:5a:45:66:de:7b:e7:20:cd:6a: 3b:7b:18:1c:ac:f1:c7:78:25:0b:eb:2b:d3:0f:f9: 71:c4:3f:87:3b:cd:d0:cc:24:bd:97:67:9d:f6:3a: f3:23:8d:bf:fb:a6:c5:1c:0b:7b:b9:31:d7:3a:df: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FE:CA:58:10:C9:DE:CC:EC:76:0E:3B:D0:71:2F:43:F7:81:89:35 X509v3 Authority Key Identifier: keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/GP7KWBDJ3szsdg470HEvQ_eBiTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.239.0/24 Signature Algorithm: sha256WithRSAEncryption 73:d5:88:4e:67:62:2d:40:0a:d7:88:15:d3:3c:8c:c8:ed:d9: c0:1c:b9:c2:a1:f8:66:bb:fb:f0:bf:f6:cd:10:f3:2d:46:ad: 6f:57:66:7d:50:6c:12:30:05:e9:43:00:33:28:0d:84:27:db: 7b:da:7d:cd:00:cd:60:64:19:da:ca:38:e3:08:7d:68:dd:29: 04:7c:12:e9:19:ed:16:35:07:c6:8c:42:80:f9:d5:c2:84:11: 02:bd:bb:70:6a:9e:45:e4:fb:50:38:52:81:98:64:92:0e:0a: 70:a6:01:21:86:05:d6:a7:72:70:53:c7:82:d8:e0:a6:27:3e: 3d:38:aa:ab:90:78:f2:ca:0f:3c:23:7c:1e:93:d0:e8:36:67: 44:3a:27:46:ca:8e:d5:92:4e:c8:41:49:72:08:e9:da:11:59: 56:9f:ea:4f:45:20:95:f4:a4:00:13:74:d4:1d:38:ae:83:4d: 08:98:a6:07:d3:77:45:41:af:e0:c5:be:2f:fb:e1:a0:0c:65: 66:22:79:12:9f:91:d5:4a:49:30:94:06:40:84:a6:a6:30:c0: 59:d4:ab:4a:ac:fe:7a:60:6b:f7:da:42:9a:05:0b:17:bd:0f: 60:2f:f7:2d:54:cc:f5:7d:ec:02:58:bb:66:d4:12:8e:fa:08: 76:8f:38:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87dE5JiPZg88Wp5FNJ6iEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDkwMmEwN2ZjN2Q0OGUwZGIyOWJmZmJlM2FiMTA1NDNm YzE0NjUwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGZlY2E1ODEwYzlkZWNjZWM3NjBlM2JkMDcxMmY0M2Y3ODE4OTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTo6Td+6oPpnnhoBv3bW7lDYOhm3 7XaqmcPVrFR/YNVcKfBfe1EhsnIy1BBZQ+Q+3ybRSZi8xQeLUvKTGuSp9pE6MW7U 9vF+9l04KdVCBcQiI/+8bVj2HR+efJShLc3M8Zl1UB22vgkku4MPNT4J/yb5qotl k1FxMimiSlOd3qCfCvWm6jwotJJvAs5DhZkNFyWIjjfbafmV7n5PqO9zhhqp3Phm bPUNeegWqZGnPNkxni+xW6TjETyH0By+zVvudV/3L3YSRPVaRWbee+cgzWo7exgc rPHHeCUL6yvTD/lxxD+HO83QzCS9l2ed9jrzI42/+6bFHAt7uTHXOt8E9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBj+ylgQyd7M7HYOO9BxL0P3gYk1MB8GA1UdIwQY MBaAFNXZAqB/x9SODbKb/746sQVD/BRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEt YTZjZWMyNWI4MDA2LzEvR1A3S1dCREozc3pzZGc0NzBIRXZRX2VCaVRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEtYTZjZWMyNWI4MDA2 LzEvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW/vMA0G CSqGSIb3DQEBCwUAA4IBAQBz1YhOZ2ItQArXiBXTPIzI7dnAHLnCofhmu/vwv/bN EPMtRq1vV2Z9UGwSMAXpQwAzKA2EJ9t72n3NAM1gZBnayjjjCH1o3SkEfBLpGe0W NQfGjEKA+dXChBECvbtwap5F5PtQOFKBmGSSDgpwpgEhhgXWp3JwU8eC2OCmJz49 OKqrkHjyyg88I3wek9DoNmdEOidGyo7Vkk7IQUlyCOnaEVlWn+pPRSCV9KQAE3TU HTiug00ImKYH03dFQa/gxb4v++GgDGVmInkSn5HVSkkwlAZAhKamMMBZ1KtKrP56 YGv32kKaBQsXvQ9gL/ctVMz1fewCWLtm1BKO+gh2jzjj -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:15 2026 by rpki-client