This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/gn61ce9ALlX0-z3Eczgbb3WMtWI.roa File: gn61ce9ALlX0-z3Eczgbb3WMtWI.roa (raw, json) Hash identifier: RHps1AzWEmNAJdqDkFEU6I0uU1ebWVTlEieytsZ34D4= Subject key identifier: 82:7E:B5:71:EF:40:2E:55:F4:FB:3D:C4:73:38:1B:6F:75:8C:B5:62 Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc Certificate serial: 019B7C7FB09560D3DD5AAF51C7B754732C31 Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/gn61ce9ALlX0-z3Eczgbb3WMtWI.roa Signing time: Fri 02 Jan 2026 02:18:21 +0000 ROA not before: Fri 02 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5491 IP address blocks: 193.163.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b0:95:60:d3:dd:5a:af:51:c7:b7:54:73:2c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc Validity Not Before: Jan 2 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=827eb571ef402e55f4fb3dc473381b6f758cb562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:05:17:a6:b3:57:20:18:90:39:4b:30:8b: bd:bf:1e:be:5a:cd:dd:49:43:bc:3e:5f:06:6e:74: 33:dd:b0:35:ec:52:40:aa:33:68:69:8b:e3:80:83: 2b:5f:fe:7e:8f:2a:bf:32:ae:b8:5e:b1:fb:80:87: dd:c9:ac:96:c3:8c:40:ee:b3:43:5c:8d:7f:2f:db: e1:52:9f:fc:a9:08:fb:8b:59:a8:fe:c8:fb:d4:eb: 41:61:fa:52:8b:20:04:ec:9d:a1:82:11:90:73:9c: ee:a3:3b:4f:48:17:c1:c8:c3:ab:c3:2c:4a:55:e8: c1:8f:72:51:31:d3:53:58:59:6a:a6:97:a3:f1:7c: d5:d6:05:04:e2:9f:05:32:5f:48:dc:4a:23:b0:44: 39:97:51:74:28:83:f4:12:3c:5b:c5:a3:8a:86:a3: 20:7b:d4:0e:6e:2e:f6:93:1e:24:3c:00:04:5b:43: ab:b5:98:05:c1:11:ff:8f:d6:c1:b8:e1:ca:93:1e: 6b:8d:30:39:30:07:0d:eb:d6:bc:9a:dd:14:a7:78: b2:6c:e1:1f:4a:6a:e0:7a:92:56:1b:00:90:71:a6: a8:ca:31:47:65:dc:58:2f:1b:3a:22:43:aa:bc:ad: ac:de:74:8d:77:58:70:46:a4:12:b9:95:47:46:43: a9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7E:B5:71:EF:40:2E:55:F4:FB:3D:C4:73:38:1B:6F:75:8C:B5:62 X509v3 Authority Key Identifier: keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/gn61ce9ALlX0-z3Eczgbb3WMtWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.221.0/24 Signature Algorithm: sha256WithRSAEncryption 71:35:a5:be:0e:51:84:f1:56:7d:b3:1d:a7:b2:db:ac:49:81: cc:4f:ce:d5:b4:57:e2:34:7f:85:8d:ad:35:e5:60:0b:f3:de: 91:16:e7:60:cc:94:53:e5:2f:44:b5:2b:92:60:1e:c5:6f:5c: 67:22:28:e9:61:49:09:8d:5c:88:02:04:3e:fb:80:0a:09:20: b0:ae:b0:37:54:38:83:64:38:84:f9:12:81:07:ab:78:89:19: 5b:a5:74:e7:26:4f:2b:9f:d9:4c:6b:e4:04:0f:e4:4b:28:01: ae:7c:d4:02:74:63:8b:3b:4f:e5:6c:b3:2a:17:61:54:7a:36: 52:90:dd:bc:c0:60:48:4c:3c:f5:c5:3f:27:af:d5:70:09:f7: d3:43:72:d8:aa:ad:4f:76:28:49:61:92:a2:9b:bc:cf:94:42: 25:2e:7a:9e:22:86:b2:df:18:bb:24:36:af:e0:37:cd:11:44: cd:1c:34:fe:fd:cc:08:a4:6f:ee:68:e8:ff:00:26:21:cd:27: 9a:7e:e2:43:16:74:a3:67:91:b4:59:4b:8c:bb:8e:7e:e2:64: a3:e2:e9:bb:f3:cf:81:48:46:3b:51:80:ee:0b:e0:b6:62:12: fd:55:f6:51:9c:f5:a4:df:a2:06:ff:aa:e2:88:63:4d:f9:d9: a1:94:a0:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7CVYNPdWq9Rx7dUcywxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTc4OGVkYTZjODBlZjkwMmI5NWQ2MDM4NzAwYTVkYTdk NmQwY2MwHhcNMjYwMTAyMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjdlYjU3MWVmNDAyZTU1ZjRmYjNkYzQ3MzM4MWI2Zjc1OGNiNTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqIFF6azVyAYkDlLMIu9vx6+Ws3d SUO8Pl8GbnQz3bA17FJAqjNoaYvjgIMrX/5+jyq/Mq64XrH7gIfdyayWw4xA7rND XI1/L9vhUp/8qQj7i1mo/sj71OtBYfpSiyAE7J2hghGQc5zuoztPSBfByMOrwyxK VejBj3JRMdNTWFlqppej8XzV1gUE4p8FMl9I3EojsEQ5l1F0KIP0EjxbxaOKhqMg e9QObi72kx4kPAAEW0OrtZgFwRH/j9bBuOHKkx5rjTA5MAcN69a8mt0Up3iybOEf SmrgepJWGwCQcaaoyjFHZdxYLxs6IkOqvK2s3nSNd1hwRqQSuZVHRkOpEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJ+tXHvQC5V9Ps9xHM4G291jLViMB8GA1UdIwQY MBaAFCqniO2myA75ArldYDhwCl2n1tDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMt ZjE2ZjFlZTRmODkxLzEvZ242MWNlOUFMbFgwLXozRWN6Z2JiM1dNdFdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMtZjE2ZjFlZTRmODkx LzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPdMA0G CSqGSIb3DQEBCwUAA4IBAQBxNaW+DlGE8VZ9sx2nstusSYHMT87VtFfiNH+Fja01 5WAL896RFudgzJRT5S9EtSuSYB7Fb1xnIijpYUkJjVyIAgQ++4AKCSCwrrA3VDiD ZDiE+RKBB6t4iRlbpXTnJk8rn9lMa+QED+RLKAGufNQCdGOLO0/lbLMqF2FUejZS kN28wGBITDz1xT8nr9VwCffTQ3LYqq1PdihJYZKim7zPlEIlLnqeIoay3xi7JDav 4DfNEUTNHDT+/cwIpG/uaOj/ACYhzSeafuJDFnSjZ5G0WUuMu45+4mSj4um788+B SEY7UYDuC+C2YhL9VfZRnPWk36IG/6riiGNN+dmhlKCj -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:15 2026 by rpki-client