This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/gNrEO1fd_UO2lkW7If9ASyI8mM0.roa File: gNrEO1fd_UO2lkW7If9ASyI8mM0.roa (raw, json) Hash identifier: oiXIC9NyYqB7VON1tGxWLy+Yto6YiZWA2pyQHSZiaiQ= Subject key identifier: 80:DA:C4:3B:57:DD:FD:43:B6:96:45:BB:21:FF:40:4B:22:3C:98:CD Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37 Certificate serial: 019B7DCA830A4D8880580CF4A6AB6FF31C6E Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/gNrEO1fd_UO2lkW7If9ASyI8mM0.roa Signing time: Fri 02 Jan 2026 08:19:42 +0000 ROA not before: Fri 02 Jan 2026 08:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41332 IP address blocks: 194.127.234.0/23 maxlen: 24 194.127.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:83:0a:4d:88:80:58:0c:f4:a6:ab:6f:f3:1c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37 Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80dac43b57ddfd43b69645bb21ff404b223c98cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:88:14:10:8a:57:d0:2e:b1:95:81:aa:f1:e8: d2:ed:e6:de:d1:1d:ba:e1:11:04:2b:c7:31:df:17: 69:2d:af:5c:5e:74:03:23:27:8f:ef:b3:e6:7b:47: 0f:d9:fe:37:df:13:c1:3b:a6:5a:70:a7:e7:da:4b: 47:2f:69:39:54:f2:1c:ae:15:97:2a:c4:c4:9d:00: 36:78:9b:ca:ac:98:1c:66:aa:0a:4c:53:32:9d:44: 04:e6:f3:c8:c7:c6:f8:36:72:c4:ad:1b:e4:d8:c7: 5d:49:69:93:01:76:95:1d:5e:0c:ae:43:b4:5a:70: 2f:1f:e5:c4:36:05:3d:e9:eb:5d:b5:12:66:7d:86: 1f:84:d3:74:a3:89:86:3f:1f:8f:9a:91:53:3b:40: 4a:19:88:cf:45:5e:c5:ff:ae:68:f2:9a:b6:64:96: 53:69:d2:8a:e9:f3:a0:2c:16:93:b1:e7:7b:d5:37: f3:c8:11:e9:88:49:84:00:44:5e:93:4c:e6:60:2d: a9:0b:20:89:10:a6:56:35:64:66:06:23:14:86:b1: 68:46:97:13:e8:12:db:15:3f:c7:9f:79:39:ea:de: 87:7d:7d:0e:b9:92:a2:82:59:c0:ea:ef:34:6a:ec: ee:0d:59:df:ca:6c:b0:cc:4f:07:45:ea:d1:94:70: 81:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DA:C4:3B:57:DD:FD:43:B6:96:45:BB:21:FF:40:4B:22:3C:98:CD X509v3 Authority Key Identifier: keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/gNrEO1fd_UO2lkW7If9ASyI8mM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.234.0-194.127.237.255 Signature Algorithm: sha256WithRSAEncryption 0e:77:85:18:71:23:e3:d8:c9:59:36:c5:46:2a:05:ea:55:31: db:8e:45:68:e1:9f:fc:9c:0d:09:9b:4f:c8:ea:fa:e2:e8:46: d9:1a:98:36:e1:9d:12:f4:4d:f1:0b:74:84:80:25:5e:78:fa: 02:3d:28:48:cd:ad:94:8b:ec:34:b0:ec:a3:21:94:8a:77:92: fb:c1:3b:21:9e:85:dd:df:e8:11:d5:2f:86:69:d8:bf:69:07: cf:23:e7:34:8d:73:c3:fc:52:d4:a6:d9:d3:79:b1:c8:f9:85: 2d:20:13:00:f7:ec:ac:4b:ab:05:93:54:ca:c2:b9:83:18:1e: 2e:4d:4c:bf:1e:3e:26:93:65:fd:cd:9f:fc:9f:93:4a:6f:20: e8:ae:c1:c2:68:ab:41:59:90:09:10:73:1e:33:37:ca:6d:d1: a4:47:42:29:67:d2:3f:0e:59:39:90:24:c1:73:85:5f:f8:d3: 3e:53:9f:7a:16:e2:79:70:a7:3b:2c:84:4b:66:d2:6f:eb:53: 35:06:46:66:5e:3a:22:44:59:a1:36:47:f1:fa:f4:48:a9:ea: 50:ff:9f:44:33:3d:79:bc:d5:ae:3e:75:6f:d7:54:bd:98:01: 98:f0:a7:8d:ff:66:a6:8d:7d:35:38:f4:77:0b:42:c6:d4:da: bf:3d:db:be -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9yoMKTYiAWAz0pqtv8xxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzN2ExMjZkNzg1NGVjZDU2NWFlODI5NzBjNjkzZjMzNTlm ODVmMzcwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGRhYzQzYjU3ZGRmZDQzYjY5NjQ1YmIyMWZmNDA0YjIyM2M5OGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxogUEIpX0C6xlYGq8ejS7ebe0R26 4REEK8cx3xdpLa9cXnQDIyeP77Pme0cP2f433xPBO6ZacKfn2ktHL2k5VPIcrhWX KsTEnQA2eJvKrJgcZqoKTFMynUQE5vPIx8b4NnLErRvk2MddSWmTAXaVHV4MrkO0 WnAvH+XENgU96etdtRJmfYYfhNN0o4mGPx+PmpFTO0BKGYjPRV7F/65o8pq2ZJZT adKK6fOgLBaTsed71TfzyBHpiEmEAERek0zmYC2pCyCJEKZWNWRmBiMUhrFoRpcT 6BLbFT/Hn3k56t6HfX0OuZKiglnA6u80auzuDVnfymywzE8HRerRlHCBswIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIDaxDtX3f1DtpZFuyH/QEsiPJjNMB8GA1UdIwQY MBaAFKN6Em14VOzVZa6ClwxpPzNZ+F83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MzQ0MDctMTYzZC00MTBjLWI5NDkt Nzg2Y2IxMjk2ZTU4LzEvZ05yRU8xZmRfVU8ybGtXN0lmOUFTeUk4bU0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MzQ0MDctMTYzZC00MTBjLWI5NDktNzg2Y2IxMjk2ZTU4 LzEvbzNvU2JYaFU3TlZscm9LWERHa19NMW40WHpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHCf+oD BAHCf+wwDQYJKoZIhvcNAQELBQADggEBAA53hRhxI+PYyVk2xUYqBepVMduORWjh n/ycDQmbT8jq+uLoRtkamDbhnRL0TfELdISAJV54+gI9KEjNrZSL7DSw7KMhlIp3 kvvBOyGehd3f6BHVL4Zp2L9pB88j5zSNc8P8UtSm2dN5scj5hS0gEwD37KxLqwWT VMrCuYMYHi5NTL8ePiaTZf3Nn/yfk0pvIOiuwcJoq0FZkAkQcx4zN8pt0aRHQiln 0j8OWTmQJMFzhV/40z5Tn3oW4nlwpzsshEtm0m/rUzUGRmZeOiJEWaE2R/H69Eip 6lD/n0QzPXm81a4+dW/XVL2YAZjwp43/ZqaNfTU49HcLQsbU2r89274= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:08 2026 by rpki-client