This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/cgpS6bexT0Usb-mxM5p40zTbByk.roa
File: cgpS6bexT0Usb-mxM5p40zTbByk.roa (raw, json)
Hash identifier: FwUyErHN7yMeD8Trs4nWcj+6ZTBD3QkRxNZbPOMD/PU=
Subject key identifier: 72:0A:52:E9:B7:B1:4F:45:2C:6F:E9:B1:33:9A:78:D3:34:DB:07:29
Certificate issuer: /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial: 019B77589B210794D9E6033E4F5BC4D4AC2A
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/cgpS6bexT0Usb-mxM5p40zTbByk.roa
Signing time: Thu 01 Jan 2026 02:17:34 +0000
ROA not before: Thu 01 Jan 2026 02:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43341
IP address blocks: 193.26.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:9b:21:07:94:d9:e6:03:3e:4f:5b:c4:d4:ac:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
Validity
Not Before: Jan 1 02:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=720a52e9b7b14f452c6fe9b1339a78d334db0729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:c0:a8:7f:24:6e:e4:e8:7e:19:ae:0d:45:
11:cb:83:95:f1:df:3f:23:d6:35:f0:21:3c:e2:73:
b7:7b:c4:b8:59:e6:dc:fe:32:19:9a:ac:e5:e6:f8:
03:cf:dd:35:f8:6a:fb:e9:5a:e2:25:de:d6:e8:e7:
4d:f2:5d:df:36:1b:19:6b:37:7f:2a:cc:8f:0a:1d:
49:4a:41:4d:1d:27:3e:c8:22:12:a1:6c:34:d4:49:
b5:4c:ff:94:d2:81:b4:97:60:5c:8d:e9:4a:96:73:
c3:e4:0f:f7:93:84:fe:74:e0:9a:4b:76:bd:9f:26:
b0:e2:e0:6d:88:3c:75:95:f5:2b:7a:c5:3a:e5:cf:
4d:fa:12:c2:03:c0:0c:7e:2a:e7:e8:f2:15:de:9c:
dc:1d:04:f5:62:f0:d8:98:3c:5e:7a:f5:1f:41:5c:
73:64:5a:39:2f:48:ba:ab:47:1a:2d:0e:af:a6:31:
ee:80:94:fb:9a:d2:2f:33:a1:01:e3:7f:a9:d1:9a:
60:68:e0:e9:69:9d:f5:42:89:e4:d3:94:62:bc:a0:
46:9d:00:3b:b8:d1:ef:db:25:8d:28:22:58:87:b7:
42:36:7c:f8:b0:9d:cf:5e:f1:05:1e:92:79:1c:e2:
52:76:34:c1:a8:28:b1:38:8e:2d:a1:1b:09:85:d5:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0A:52:E9:B7:B1:4F:45:2C:6F:E9:B1:33:9A:78:D3:34:DB:07:29
X509v3 Authority Key Identifier:
keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/cgpS6bexT0Usb-mxM5p40zTbByk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.123.0/24
Signature Algorithm: sha256WithRSAEncryption
86:cf:fb:54:44:cf:d8:a7:3e:97:81:46:ff:b0:5c:7c:f8:ef:
62:bf:6a:a9:a9:ac:2b:8e:b3:1a:bc:3d:1b:5f:db:ee:8b:43:
62:79:f7:fd:2c:60:24:ca:61:61:eb:74:b0:d8:f5:70:ee:5c:
de:20:ee:ca:3d:07:21:c6:60:4d:01:18:d9:19:56:2d:de:9f:
b1:2c:c9:a9:14:15:d5:7e:6f:65:d1:f6:44:4f:c8:68:db:f4:
e8:6a:48:c3:ba:4f:6b:b0:df:c2:b9:e7:1b:6f:38:62:9f:96:
af:87:33:be:c8:62:22:8b:59:86:76:ca:f2:67:37:b5:05:16:
93:82:54:be:3e:42:0f:a4:75:7e:ea:57:70:97:7e:30:46:59:
b9:09:c9:7b:40:ce:46:33:67:38:94:7e:d0:1d:0e:a8:2a:08:
d6:fa:9d:7f:0a:27:11:9e:c8:90:6d:23:e2:0a:4e:39:a8:5a:
cc:da:33:80:5c:fa:b0:bf:ea:63:ec:e7:c7:14:f8:0e:f9:75:
46:bb:9d:f1:cc:62:41:bf:b3:cf:7e:6f:c7:88:08:88:93:ed:
05:6f:fd:88:d3:c2:f2:10:5e:f6:26:f8:9f:86:0b:3a:b6:5a:
df:9c:b3:47:05:81:96:a6:d7:b8:73:9c:46:f1:0e:18:c9:09:
05:54:f5:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WJshB5TZ5gM+T1vE1KwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MGMyYzk4M2I2MjcxNjkyMTg1NzFjNmI4Mjk0N2FlZWVh
NWY3Y2UwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjBhNTJlOWI3YjE0ZjQ1MmM2ZmU5YjEzMzlhNzhkMzM0ZGIwNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydjAqH8kbuTofhmuDUURy4OV8d8/
I9Y18CE84nO3e8S4Webc/jIZmqzl5vgDz901+Gr76VriJd7W6OdN8l3fNhsZazd/
KsyPCh1JSkFNHSc+yCISoWw01Em1TP+U0oG0l2BcjelKlnPD5A/3k4T+dOCaS3a9
nyaw4uBtiDx1lfUresU65c9N+hLCA8AMfirn6PIV3pzcHQT1YvDYmDxeevUfQVxz
ZFo5L0i6q0caLQ6vpjHugJT7mtIvM6EB43+p0ZpgaODpaZ31Qonk05RivKBGnQA7
uNHv2yWNKCJYh7dCNnz4sJ3PXvEFHpJ5HOJSdjTBqCixOI4toRsJhdVz/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHIKUum3sU9FLG/psTOaeNM02wcpMB8GA1UdIwQY
MBaAFEcMLJg7YnFpIYVxxrgpR67upffOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnd3c21EdGljV2toaFhIR3VDbEhydTZsOTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ODE0MDgtYjIxNS00ZDFhLWIzMzAt
MTE1YWFjOTJlOWJmLzEvY2dwUzZiZXhUMFVzYi1teE01cDQwelRiQnlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ODE0MDgtYjIxNS00ZDFhLWIzMzAtMTE1YWFjOTJlOWJm
LzEvUnd3c21EdGljV2toaFhIR3VDbEhydTZsOTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRp7MA0G
CSqGSIb3DQEBCwUAA4IBAQCGz/tURM/Ypz6XgUb/sFx8+O9iv2qpqawrjrMavD0b
X9vui0Nieff9LGAkymFh63Sw2PVw7lzeIO7KPQchxmBNARjZGVYt3p+xLMmpFBXV
fm9l0fZET8ho2/ToakjDuk9rsN/Cuecbbzhin5avhzO+yGIii1mGdsryZze1BRaT
glS+PkIPpHV+6ldwl34wRlm5Ccl7QM5GM2c4lH7QHQ6oKgjW+p1/CicRnsiQbSPi
Ck45qFrM2jOAXPqwv+pj7OfHFPgO+XVGu53xzGJBv7PPfm/HiAiIk+0Fb/2I08Ly
EF72Jvifhgs6tlrfnLNHBYGWpte4c5xG8Q4YyQkFVPUI
-----END CERTIFICATE-----
Generated at Tue Feb 10 05:55:06 2026 by rpki-client