This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gxpZWOefzxrMDz97J3c3xKiyPLQ.roa File: gxpZWOefzxrMDz97J3c3xKiyPLQ.roa (raw, json) Hash identifier: zZk2i0r/GP/ELgdHcziWCtAtcw41vSG2Zwrddo9jiPQ= Subject key identifier: 83:1A:59:58:E7:9F:CF:1A:CC:0F:3F:7B:27:77:37:C4:A8:B2:3C:B4 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019C23FC24E0E6074F62D74BA849497B90A3 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gxpZWOefzxrMDz97J3c3xKiyPLQ.roa Signing time: Tue 03 Feb 2026 14:50:52 +0000 ROA not before: Tue 03 Feb 2026 14:50:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 185.248.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:fc:24:e0:e6:07:4f:62:d7:4b:a8:49:49:7b:90:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Feb 3 14:50:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=831a5958e79fcf1acc0f3f7b277737c4a8b23cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ba:4f:01:89:e4:c3:b8:d5:55:68:03:8f:8e: c4:c2:19:ec:81:1c:8c:45:3f:7a:9b:63:af:eb:78: c4:dd:7a:f1:2e:28:fb:88:63:53:53:9e:e5:8c:21: 2e:a3:b2:53:72:c6:36:9d:70:cc:1a:e5:b7:58:99: 1f:28:db:9f:b2:31:c5:50:72:a5:54:e9:80:62:9b: 66:a1:97:63:49:1a:0d:06:1b:9f:07:89:f8:c7:18: 45:a8:85:03:6f:83:7e:b8:12:99:74:bb:3e:0b:00: 82:63:05:ca:93:fd:99:9e:3d:de:e8:47:08:bc:4e: cc:f9:f3:04:28:b8:4c:d9:1e:5e:6a:6b:83:c5:a1: 24:41:cc:01:32:b3:2d:ac:18:c8:be:e9:2f:f3:d9: 9f:ac:a3:70:93:c5:23:a6:57:9f:ef:90:55:0b:8e: 10:a0:05:45:3e:1f:17:a6:d2:a2:a5:27:14:ed:57: 3f:e8:9d:b6:79:92:c1:bc:da:57:3a:99:66:71:a0: cb:68:98:cf:de:56:0e:d6:1e:13:41:ef:e1:44:c4: f9:4c:c4:d0:27:36:66:12:64:86:0e:b3:6c:06:f2: 6c:69:53:d2:ef:8c:df:e6:c3:2a:26:0c:dc:02:13: a9:fc:d1:cf:7c:bf:25:4f:1c:86:90:3c:6a:67:0d: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1A:59:58:E7:9F:CF:1A:CC:0F:3F:7B:27:77:37:C4:A8:B2:3C:B4 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gxpZWOefzxrMDz97J3c3xKiyPLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.132.0/24 Signature Algorithm: sha256WithRSAEncryption 88:6c:0d:54:68:2d:40:63:5b:19:d4:0f:29:b9:ee:b5:3b:33: c4:c2:ad:9d:7a:fb:c8:96:74:f8:9a:3e:a5:f7:4e:5a:77:ce: de:1a:97:69:db:5e:54:44:ce:a6:d7:5c:fb:ac:39:b0:f9:5e: 21:38:8d:40:e8:fa:7b:85:1e:ed:bb:34:59:29:f2:b4:93:81: a1:c0:56:5c:03:13:e7:c5:80:9b:24:2e:f1:3f:51:56:45:cb: eb:7b:ba:69:7f:41:4a:d5:15:4b:0d:00:ba:c1:b0:c6:84:a4: 7c:65:ce:5d:d6:ee:03:82:bb:07:74:21:eb:6c:21:8d:d4:6a: 67:fd:ca:ee:d0:4e:ba:02:4b:8e:3e:d5:f4:46:95:1f:4d:22: 5c:a3:8f:68:84:12:ba:54:3f:cc:de:1d:6f:06:34:75:19:21: bb:c6:0b:8a:ab:7d:4e:78:4a:38:52:e2:4f:34:09:d7:f3:0e: 94:f4:30:b0:b8:f9:c6:77:da:8c:b0:c6:71:ef:70:b5:83:4a: 40:74:3c:b1:eb:d1:cc:37:c9:68:23:ae:72:9a:12:ad:d4:c3: ac:33:ce:f5:de:91:a9:8e:ce:7d:47:3c:39:71:de:5f:40:a6: 3b:b6:f0:87:ce:59:93:74:f4:c1:8e:7e:b6:4a:6a:b5:99:e3: 5b:04:7e:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwj/CTg5gdPYtdLqElJe5CjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMjAzMTQ1MDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzFhNTk1OGU3OWZjZjFhY2MwZjNmN2IyNzc3MzdjNGE4YjIzY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LpPAYnkw7jVVWgDj47EwhnsgRyM RT96m2Ov63jE3XrxLij7iGNTU57ljCEuo7JTcsY2nXDMGuW3WJkfKNufsjHFUHKl VOmAYptmoZdjSRoNBhufB4n4xxhFqIUDb4N+uBKZdLs+CwCCYwXKk/2Znj3e6EcI vE7M+fMEKLhM2R5eamuDxaEkQcwBMrMtrBjIvukv89mfrKNwk8Ujplef75BVC44Q oAVFPh8XptKipScU7Vc/6J22eZLBvNpXOplmcaDLaJjP3lYO1h4TQe/hRMT5TMTQ JzZmEmSGDrNsBvJsaVPS74zf5sMqJgzcAhOp/NHPfL8lTxyGkDxqZw2CbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIMaWVjnn88azA8/eyd3N8Sosjy0MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZ3hwWldPZWZ6eHJNRHo5N0ozYzN4S2l5UExRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufiEMA0G CSqGSIb3DQEBCwUAA4IBAQCIbA1UaC1AY1sZ1A8pue61OzPEwq2devvIlnT4mj6l 905ad87eGpdp215URM6m11z7rDmw+V4hOI1A6Pp7hR7tuzRZKfK0k4GhwFZcAxPn xYCbJC7xP1FWRcvre7ppf0FK1RVLDQC6wbDGhKR8Zc5d1u4DgrsHdCHrbCGN1Gpn /cru0E66AkuOPtX0RpUfTSJco49ohBK6VD/M3h1vBjR1GSG7xguKq31OeEo4UuJP NAnX8w6U9DCwuPnGd9qMsMZx73C1g0pAdDyx69HMN8loI65ymhKt1MOsM8713pGp js59Rzw5cd5fQKY7tvCHzlmTdPTBjn62Smq1meNbBH7A -----END CERTIFICATE-----Generated at Thu Feb 5 01:07:32 2026 by rpki-client