This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gZfFWahurh8HjEfkJXfkNIyzSbU.roa File: gZfFWahurh8HjEfkJXfkNIyzSbU.roa (raw, json) Hash identifier: tUYNskpgbbQr93TpZ+bwxd5KZRH34ozs5Z9vsYjMkwk= Subject key identifier: 81:97:C5:59:A8:6E:AE:1F:07:8C:47:E4:25:77:E4:34:8C:B3:49:B5 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84CD4661E8C6BB7697E70293FCAF01 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gZfFWahurh8HjEfkJXfkNIyzSbU.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58330 IP address blocks: 95.46.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cd:46:61:e8:c6:bb:76:97:e7:02:93:fc:af:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8197c559a86eae1f078c47e42577e4348cb349b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:4f:4d:a0:83:ff:0c:c8:90:b7:d6:a7:e2: 62:fe:7a:11:f9:b2:4e:26:4e:83:62:72:8d:9c:cc: 8f:d0:a5:ca:33:e6:a9:e7:e7:88:fa:17:e1:32:4d: af:3e:79:6c:59:78:0d:6e:79:c0:70:22:fa:b2:38: 4b:01:f6:b7:97:78:a7:60:72:ff:06:26:e9:57:92: 2e:f1:3d:cd:52:6e:e1:9e:63:24:68:7e:81:7c:41: 9a:e3:b2:83:3b:7d:6d:b4:11:55:21:af:77:bf:bd: 6a:59:e5:48:23:11:b1:d8:4f:73:ad:eb:24:d6:da: 3a:9a:a2:e9:67:7f:49:cb:83:e1:fe:47:03:a6:50: 99:ae:c3:e4:bc:95:28:1f:eb:4b:b6:31:84:91:7a: b3:c9:15:43:cc:ee:b5:79:b5:81:11:c9:9a:87:f4: 02:bb:0f:d6:51:46:63:da:5a:ff:f3:e0:08:14:6e: 0f:bb:38:1e:f3:9f:0e:b0:f5:8d:01:5e:03:20:ab: 5f:ec:5b:4c:35:4f:bb:8b:0f:05:73:0a:50:59:09: 7d:2d:53:01:07:c5:68:01:0a:9d:5d:f5:50:d8:e6: a8:61:1b:d6:f5:8b:98:3c:17:01:3b:78:15:76:da: c0:df:c2:6c:29:98:ca:93:5c:eb:3a:99:4f:9a:f7: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:97:C5:59:A8:6E:AE:1F:07:8C:47:E4:25:77:E4:34:8C:B3:49:B5 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gZfFWahurh8HjEfkJXfkNIyzSbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.160.0/22 Signature Algorithm: sha256WithRSAEncryption 54:3b:de:28:d6:1a:4d:3d:0b:1b:31:f7:08:11:4a:9e:66:ce: 96:41:5c:c3:09:1d:15:66:41:52:73:e7:73:5f:98:f9:f4:57: a8:6f:51:97:8b:dc:46:e4:38:6a:30:66:b4:b3:f9:0b:47:ab: d1:09:3a:fe:27:4f:26:43:eb:9a:64:c9:5f:48:9e:d2:bd:9f: b8:c5:ba:61:e6:1c:3b:27:ce:c9:49:0a:ce:6a:02:77:1e:9b: 00:6a:cb:2f:0e:69:1e:db:8b:c0:7b:7b:3a:6b:f7:25:83:91: 84:91:67:24:38:f7:d4:ad:a4:a0:59:44:2d:02:dd:f3:eb:8e: 89:5f:53:ab:3a:63:94:fb:63:a9:c8:71:9b:bc:93:7b:69:c5: 2a:ef:f6:41:28:04:71:ea:b4:3d:94:f1:8f:d1:90:9f:d3:d0: 99:67:e1:f7:8e:af:77:3b:48:d1:29:a5:13:f1:8d:72:99:8e: 68:23:77:ca:87:6d:15:20:fa:d4:79:60:1e:68:00:6c:f0:55: 0d:63:07:76:f0:99:fb:94:ad:c5:b1:45:64:5d:fd:58:dd:4e: 21:0c:6c:4a:b7:ca:60:1c:9f:2c:c1:65:19:86:30:6e:77:94: 6f:3d:19:b6:de:15:4a:b9:b2:d6:ed:1b:d0:7a:19:1b:fb:ee: 9d:b1:66:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hM1GYejGu3aX5wKT/K8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTk3YzU1OWE4NmVhZTFmMDc4YzQ3ZTQyNTc3ZTQzNDhjYjM0OWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFxPTaCD/wzIkLfWp+Ji/noR+bJO Jk6DYnKNnMyP0KXKM+ap5+eI+hfhMk2vPnlsWXgNbnnAcCL6sjhLAfa3l3inYHL/ BibpV5Iu8T3NUm7hnmMkaH6BfEGa47KDO31ttBFVIa93v71qWeVIIxGx2E9zresk 1to6mqLpZ39Jy4Ph/kcDplCZrsPkvJUoH+tLtjGEkXqzyRVDzO61ebWBEcmah/QC uw/WUUZj2lr/8+AIFG4Puzge858OsPWNAV4DIKtf7FtMNU+7iw8FcwpQWQl9LVMB B8VoAQqdXfVQ2OaoYRvW9YuYPBcBO3gVdtrA38JsKZjKk1zrOplPmvcyXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIGXxVmobq4fB4xH5CV35DSMs0m1MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZ1pmRldhaHVyaDhIakVma0pYZmtOSXl6U2JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXy6gMA0G CSqGSIb3DQEBCwUAA4IBAQBUO94o1hpNPQsbMfcIEUqeZs6WQVzDCR0VZkFSc+dz X5j59Feob1GXi9xG5DhqMGa0s/kLR6vRCTr+J08mQ+uaZMlfSJ7SvZ+4xbph5hw7 J87JSQrOagJ3HpsAassvDmke24vAe3s6a/clg5GEkWckOPfUraSgWUQtAt3z646J X1OrOmOU+2OpyHGbvJN7acUq7/ZBKARx6rQ9lPGP0ZCf09CZZ+H3jq93O0jRKaUT 8Y1ymY5oI3fKh20VIPrUeWAeaABs8FUNYwd28Jn7lK3FsUVkXf1Y3U4hDGxKt8pg HJ8swWUZhjBud5RvPRm23hVKubLW7RvQehkb++6dsWbu -----END CERTIFICATE-----Generated at Tue Jan 20 06:04:28 2026 by rpki-client