This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G0sIdCAH6JwyGMw_OvPrHh6TH6s.roa
File: G0sIdCAH6JwyGMw_OvPrHh6TH6s.roa (raw, json)
Hash identifier: sKvbZb/CIt3fPHSFxKp21YIBtCBw3Jjz48xL0xnr3So=
Subject key identifier: 1B:4B:08:74:20:07:E8:9C:32:18:CC:3F:3A:F3:EB:1E:1E:93:1F:AB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019B797DE7B59D00E107BBEBA2FE6D1D4D16
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G0sIdCAH6JwyGMw_OvPrHh6TH6s.roa
Signing time: Thu 01 Jan 2026 12:17:33 +0000
ROA not before: Thu 01 Jan 2026 12:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35830
IP address blocks: 45.88.13.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:e7:b5:9d:00:e1:07:bb:eb:a2:fe:6d:1d:4d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 12:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b4b08742007e89c3218cc3f3af3eb1e1e931fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:b3:cf:6a:4b:f1:5e:35:df:26:2e:2c:19:
87:d6:fd:ac:62:fc:c6:08:80:b8:d4:b3:2e:1b:e0:
66:c1:0b:8f:f1:bd:48:fd:8c:ad:49:73:31:3c:d1:
cf:33:f0:ca:af:60:6e:fa:d8:d4:2e:7d:dd:43:43:
e9:22:4b:12:76:c8:e5:d1:2e:99:71:af:84:2d:1f:
0c:de:22:b6:20:59:16:85:bd:87:f6:73:35:54:fe:
74:13:78:14:5a:be:21:ab:ab:67:3c:b7:a4:92:a3:
85:21:09:e2:fd:96:fc:78:26:ba:b4:1b:09:82:0e:
08:71:56:94:d2:b2:c7:48:53:4a:ba:1b:73:88:1d:
3e:4f:24:37:9f:a9:d1:7a:ec:81:fe:8d:fc:98:75:
83:11:e9:08:fd:a5:6d:27:2d:a2:1a:ae:78:49:ff:
4c:d8:44:74:cb:84:0e:6a:e5:54:0a:10:8f:e4:be:
da:5c:9d:7c:9e:f4:c3:34:0f:15:3f:3f:47:c6:e7:
36:c7:06:d8:2f:36:9c:fc:86:c2:ae:67:e7:87:ec:
7a:e2:2d:e4:80:88:3f:cd:97:69:bf:9d:72:64:36:
07:1e:32:4f:80:13:a2:5e:01:c0:3c:81:71:b8:eb:
c9:4d:ea:c3:72:04:fb:df:12:3d:84:e0:91:19:ec:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4B:08:74:20:07:E8:9C:32:18:CC:3F:3A:F3:EB:1E:1E:93:1F:AB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G0sIdCAH6JwyGMw_OvPrHh6TH6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.13.0/24
77.81.65.0/24
89.47.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c3:3f:4d:73:fc:71:b4:bf:bd:d4:06:96:4a:63:af:78:c3:
48:2e:7d:71:74:0c:80:2c:c2:69:cd:da:1e:cc:d7:f4:db:5a:
67:aa:74:2d:fc:d3:71:dc:77:54:cf:85:67:06:29:05:82:c2:
c2:82:09:a9:72:c0:bb:c7:09:24:d3:1d:db:eb:8f:b4:b6:97:
4b:0d:9e:9c:63:d0:49:2d:1d:a6:f7:57:59:98:a3:b4:cb:bf:
66:b8:46:bb:6e:ec:39:ff:a6:2c:11:bd:1f:73:96:c3:67:5c:
6e:fd:77:bc:9e:0a:fc:2a:d7:64:29:2a:b8:76:3c:e1:74:41:
25:28:9e:f3:e8:45:c8:53:f6:ef:db:27:6e:0d:2d:01:ad:61:
c3:70:45:f6:7d:57:3b:96:3b:31:60:3a:5a:ff:16:14:6d:7e:
ad:32:7a:f3:a4:96:d5:1a:88:ae:4c:93:a7:76:2d:03:24:c7:
b6:00:d7:9d:09:23:7b:fd:39:e9:f3:77:07:7b:c9:3b:dc:1c:
49:92:34:10:51:ff:72:f0:67:fe:67:dc:84:ac:5a:14:20:35:
86:3c:b4:34:e9:90:b9:82:49:6b:13:c9:46:fa:4c:31:8e:42:
fd:a4:d2:86:c9:1b:4b:8d:3c:17:20:cf:07:5d:e6:78:b6:4f:
04:98:ce:9f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt5fee1nQDhB7vrov5tHU0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMTAxMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjRiMDg3NDIwMDdlODljMzIxOGNjM2YzYWYzZWIxZTFlOTMxZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulmzz2pL8V413yYuLBmH1v2sYvzG
CIC41LMuG+BmwQuP8b1I/YytSXMxPNHPM/DKr2Bu+tjULn3dQ0PpIksSdsjl0S6Z
ca+ELR8M3iK2IFkWhb2H9nM1VP50E3gUWr4hq6tnPLekkqOFIQni/Zb8eCa6tBsJ
gg4IcVaU0rLHSFNKuhtziB0+TyQ3n6nReuyB/o38mHWDEekI/aVtJy2iGq54Sf9M
2ER0y4QOauVUChCP5L7aXJ18nvTDNA8VPz9Hxuc2xwbYLzac/IbCrmfnh+x64i3k
gIg/zZdpv51yZDYHHjJPgBOiXgHAPIFxuOvJTerDcgT73xI9hOCRGeyQCQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBtLCHQgB+icMhjMPzrz6x4ekx+rMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRzBzSWRDQUg2Snd5R013X092UHJIaDZUSDZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVgNAwQA
TVFBAwQAWS83MA0GCSqGSIb3DQEBCwUAA4IBAQBPwz9Nc/xxtL+91AaWSmOveMNI
Ln1xdAyALMJpzdoezNf021pnqnQt/NNx3HdUz4VnBikFgsLCggmpcsC7xwkk0x3b
64+0tpdLDZ6cY9BJLR2m91dZmKO0y79muEa7buw5/6YsEb0fc5bDZ1xu/Xe8ngr8
KtdkKSq4djzhdEElKJ7z6EXIU/bv2yduDS0BrWHDcEX2fVc7ljsxYDpa/xYUbX6t
MnrzpJbVGoiuTJOndi0DJMe2ANedCSN7/Tnp83cHe8k73BxJkjQQUf9y8Gf+Z9yE
rFoUIDWGPLQ06ZC5gklrE8lG+kwxjkL9pNKGyRtLjTwXIM8HXeZ4tk8EmM6f
-----END CERTIFICATE-----
Generated at Mon Jan 19 14:41:01 2026 by rpki-client