This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/GOSw37CdgLKeIKbJScsqY_9Dr2w.roa File: GOSw37CdgLKeIKbJScsqY_9Dr2w.roa (raw, json) Hash identifier: ZvDfQJkz45jdazcjaKmxmDgrWuHDPZ2kpxNBxgEv1Uw= Subject key identifier: 18:E4:B0:DF:B0:9D:80:B2:9E:20:A6:C9:49:CB:2A:63:FF:43:AF:6C Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09 Certificate serial: 019B797F3F68BAD8364F0204DDAFBD38791E Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/GOSw37CdgLKeIKbJScsqY_9Dr2w.roa Signing time: Thu 01 Jan 2026 12:19:00 +0000 ROA not before: Thu 01 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39180 IP address blocks: 185.191.200.0/24 maxlen: 24 185.191.201.0/24 maxlen: 24 185.191.202.0/24 maxlen: 24 185.191.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3f:68:ba:d8:36:4f:02:04:dd:af:bd:38:79:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09 Validity Not Before: Jan 1 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18e4b0dfb09d80b29e20a6c949cb2a63ff43af6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:ea:d2:51:89:7f:80:45:e3:52:10:3c:a1: be:26:e0:52:d6:07:bd:d7:7e:ea:62:30:e7:b1:83: 82:a2:43:22:61:49:30:79:14:f8:01:de:f8:9d:b7: 32:0f:ab:7e:fb:0a:ee:2e:7c:46:9f:6d:43:43:3a: 39:94:c2:a5:b7:86:b2:0d:5d:28:b8:32:9d:97:e0: f6:7d:a6:7e:25:4c:fc:64:19:8b:c1:b1:86:65:7e: 09:8f:45:b2:b9:33:08:38:a9:b0:20:e6:45:07:eb: 73:30:88:3d:b5:dc:34:22:4d:8d:36:0d:49:8b:91: d7:90:09:0c:17:b5:12:c8:4c:8d:eb:26:15:49:9b: 63:1b:9f:bc:a0:54:8b:3d:3b:2e:54:78:61:c6:57: e0:3b:46:fa:37:ca:42:bb:49:51:fd:4b:f7:6c:ec: 06:2c:5f:2f:d2:9b:6c:cc:e9:8c:0d:f4:db:48:c2: 79:4c:ec:c1:63:c3:b4:be:41:aa:01:32:44:cd:70: 5e:81:df:8b:ff:4e:00:ce:94:3f:68:3a:ee:86:3e: be:59:ee:f6:77:cb:21:c2:45:bf:26:83:25:36:34: 05:7d:fe:bd:a1:f0:c3:98:29:eb:9b:97:bc:97:7b: df:c0:55:e4:39:b4:9e:09:ff:88:22:fd:36:af:54: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E4:B0:DF:B0:9D:80:B2:9E:20:A6:C9:49:CB:2A:63:FF:43:AF:6C X509v3 Authority Key Identifier: keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/GOSw37CdgLKeIKbJScsqY_9Dr2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.200.0/22 Signature Algorithm: sha256WithRSAEncryption a7:5c:d1:a7:f5:b3:06:4e:29:cf:57:e2:2c:16:42:48:b0:16: a2:b7:18:7f:dd:75:cd:37:5a:93:c3:9c:d6:42:9b:06:ab:16: cb:73:47:23:f4:96:70:2f:83:2f:98:b6:35:43:56:ac:dc:40: 09:f9:19:75:70:da:9b:74:50:03:75:88:b2:db:fd:12:a6:0d: fc:52:04:29:0e:3a:3b:97:20:83:c9:98:1c:65:32:75:9b:bf: 95:6d:3f:51:8c:5f:85:d5:a9:45:07:34:bf:1c:55:1f:82:f3: 87:aa:76:af:ad:cd:71:39:5f:81:09:1b:b1:e4:f3:aa:07:4f: f4:52:ce:a6:33:20:8e:c1:86:1e:db:43:80:8e:17:6e:fb:5f: 22:cd:3d:54:b8:ba:61:b6:a1:99:fc:18:85:8f:eb:54:e0:4e: 31:4f:11:02:54:d0:ab:75:5a:6d:fa:a6:75:33:01:6d:a6:bf: c4:5d:d3:74:5e:b8:0b:d7:03:46:c0:a1:1e:24:b8:d6:ec:ee: 67:f2:30:12:ec:a2:61:7d:8f:c7:74:84:ba:44:73:d1:09:7a: 2a:89:63:18:1a:9a:6c:a6:a8:15:10:3b:82:fd:08:81:bf:dd: ee:58:42:77:d0:19:62:f6:b1:69:4a:85:bf:06:86:b0:f0:99: 61:b2:9d:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fz9outg2TwIE3a+9OHkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTE5ZWI1YzIxMDgzNjAxNTVkZTdmYjRmMjE2YTA1NWFl MzFmMDkwHhcNMjYwMTAxMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGU0YjBkZmIwOWQ4MGIyOWUyMGE2Yzk0OWNiMmE2M2ZmNDNhZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzLq0lGJf4BF41IQPKG+JuBS1ge9 137qYjDnsYOCokMiYUkweRT4Ad74nbcyD6t++wruLnxGn21DQzo5lMKlt4ayDV0o uDKdl+D2faZ+JUz8ZBmLwbGGZX4Jj0WyuTMIOKmwIOZFB+tzMIg9tdw0Ik2NNg1J i5HXkAkMF7USyEyN6yYVSZtjG5+8oFSLPTsuVHhhxlfgO0b6N8pCu0lR/Uv3bOwG LF8v0ptszOmMDfTbSMJ5TOzBY8O0vkGqATJEzXBegd+L/04AzpQ/aDruhj6+We72 d8shwkW/JoMlNjQFff69ofDDmCnrm5e8l3vfwFXkObSeCf+IIv02r1T1ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBjksN+wnYCyniCmyUnLKmP/Q69sMB8GA1UdIwQY MBaAFM2RnrXCEINgFV3n+08hagVa4x8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgt OWY4ZTZhMTg0Mzc0LzEvR09TdzM3Q2RnTEtlSUtiSlNjc3FZXzlEcjJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgtOWY4ZTZhMTg0Mzc0 LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub/IMA0G CSqGSIb3DQEBCwUAA4IBAQCnXNGn9bMGTinPV+IsFkJIsBaitxh/3XXNN1qTw5zW QpsGqxbLc0cj9JZwL4MvmLY1Q1as3EAJ+Rl1cNqbdFADdYiy2/0Spg38UgQpDjo7 lyCDyZgcZTJ1m7+VbT9RjF+F1alFBzS/HFUfgvOHqnavrc1xOV+BCRux5POqB0/0 Us6mMyCOwYYe20OAjhdu+18izT1UuLphtqGZ/BiFj+tU4E4xTxECVNCrdVpt+qZ1 MwFtpr/EXdN0XrgL1wNGwKEeJLjW7O5n8jAS7KJhfY/HdIS6RHPRCXoqiWMYGpps pqgVEDuC/QiBv93uWEJ30Bli9rFpSoW/Boaw8Jlhsp1w -----END CERTIFICATE-----Generated at Tue Jan 27 03:25:28 2026 by rpki-client