This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/gvoaeS97wHF5CUpDZpVYgi7zgTg.roa File: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (raw, json) Hash identifier: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko= Subject key identifier: 82:FA:1A:79:2F:7B:C0:71:79:09:4A:43:66:95:58:82:2E:F3:81:38 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE6DF8DC375C84752FB19E842B238 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/gvoaeS97wHF5CUpDZpVYgi7zgTg.roa Signing time: Thu 01 Jan 2026 14:17:41 +0000 ROA not before: Thu 01 Jan 2026 14:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211984 IP address blocks: 213.33.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e6:df:8d:c3:75:c8:47:52:fb:19:e8:42:b2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82fa1a792f7bc07179094a43669558822ef38138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:11:3d:68:86:42:36:a9:45:b3:fc:60:ba: 4b:c0:0a:c2:5e:5e:4f:2f:7b:56:fe:d0:05:03:13: 1c:6a:33:49:85:b2:48:f4:d0:3c:5b:c6:23:71:01: 63:3e:48:e5:c9:ed:67:09:58:7f:ce:fd:f8:ec:2c: 9e:57:a5:76:31:84:d0:4f:8c:11:33:56:fe:0b:ae: 97:28:63:e6:10:a8:18:0d:fa:b0:a9:7e:d5:df:6f: b6:ce:69:0f:8a:96:65:9d:e8:6e:32:7b:68:b9:2d: 77:73:04:10:59:f8:a4:6e:e2:ca:1c:60:d0:d0:4b: 6a:41:05:e8:3e:9e:73:41:3b:3d:70:ad:ec:2e:4b: 7f:8c:fa:ca:44:03:fd:b3:9f:c2:63:2c:27:ea:59: 62:e4:57:e8:2a:c7:35:6e:2b:e1:9a:1f:85:b1:1c: 1c:b9:64:ed:df:52:c3:3f:85:6f:e9:a8:e7:64:fd: af:ea:e4:11:54:a9:44:41:88:7b:90:a9:28:97:67: d0:b5:fa:aa:ad:7a:15:c4:55:7f:00:57:bb:eb:d1: 41:38:ce:da:2c:14:4b:0d:f8:e2:0c:cc:03:9d:22: 0f:82:2f:33:9a:f2:da:02:a6:a9:5c:c6:66:35:68: 24:10:b1:b2:06:1c:27:8e:99:4f:a7:8c:b7:b1:a4: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FA:1A:79:2F:7B:C0:71:79:09:4A:43:66:95:58:82:2E:F3:81:38 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/gvoaeS97wHF5CUpDZpVYgi7zgTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.33.79.0/24 Signature Algorithm: sha256WithRSAEncryption 64:0d:92:53:52:c1:ae:87:b6:fd:c3:f1:b4:46:92:6f:ee:18: 47:bf:53:9b:3b:16:eb:a1:c0:b9:f3:d9:ee:e5:30:cb:b0:7c: b7:a5:b5:10:ff:49:51:55:13:5e:5e:78:70:44:d9:43:60:8b: ac:5b:ed:c6:af:6e:0d:36:b0:f2:aa:fa:18:25:3a:f0:8b:27: 0e:d5:d2:50:1b:28:a7:37:ee:af:1d:b1:4c:63:73:e4:7c:f2: 92:92:66:e5:d3:1a:61:2f:bc:84:d0:87:e5:32:e6:89:5c:ae: cb:3f:55:99:25:d1:37:8f:f3:8e:ec:09:ae:3f:9a:f9:d1:be: 19:6b:ff:f5:04:fa:d6:4c:ad:60:59:45:35:ea:f8:ac:ed:9f: 6b:fc:15:76:96:3b:8c:60:63:45:4c:77:cb:a3:00:92:fb:37: 94:c5:cf:6c:53:56:af:a6:bf:20:a0:06:de:bf:0e:10:80:4e: 73:71:ae:c6:65:69:26:f8:41:25:25:b3:63:43:10:04:28:80: a5:1c:bf:07:81:2b:cb:97:7a:a4:b2:ee:1e:bb:c3:47:ce:e1: 3a:1d:af:e9:00:ec:97:5e:29:3a:6e:90:56:9a:89:81:55:da: 39:23:61:bb:39:01:9f:89:b4:1f:45:e1:9e:59:9e:88:66:af: 6b:00:c7:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+bfjcN1yEdS+xnoQrI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmZhMWE3OTJmN2JjMDcxNzkwOTRhNDM2Njk1NTg4MjJlZjM4MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4ERPWiGQjapRbP8YLpLwArCXl5P L3tW/tAFAxMcajNJhbJI9NA8W8YjcQFjPkjlye1nCVh/zv347CyeV6V2MYTQT4wR M1b+C66XKGPmEKgYDfqwqX7V32+2zmkPipZlnehuMntouS13cwQQWfikbuLKHGDQ 0EtqQQXoPp5zQTs9cK3sLkt/jPrKRAP9s5/CYywn6lli5FfoKsc1bivhmh+FsRwc uWTt31LDP4Vv6ajnZP2v6uQRVKlEQYh7kKkol2fQtfqqrXoVxFV/AFe769FBOM7a LBRLDfjiDMwDnSIPgi8zmvLaAqapXMZmNWgkELGyBhwnjplPp4y3saQKYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIL6Gnkve8BxeQlKQ2aVWIIu84E4MB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvZ3ZvYWVTOTd3SEY1Q1VwRFpwVllnaTd6Z1RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1SFPMA0G CSqGSIb3DQEBCwUAA4IBAQBkDZJTUsGuh7b9w/G0RpJv7hhHv1ObOxbrocC589nu 5TDLsHy3pbUQ/0lRVRNeXnhwRNlDYIusW+3Gr24NNrDyqvoYJTrwiycO1dJQGyin N+6vHbFMY3PkfPKSkmbl0xphL7yE0IflMuaJXK7LP1WZJdE3j/OO7AmuP5r50b4Z a//1BPrWTK1gWUU16vis7Z9r/BV2ljuMYGNFTHfLowCS+zeUxc9sU1avpr8goAbe vw4QgE5zca7GZWkm+EElJbNjQxAEKIClHL8HgSvLl3qksu4eu8NHzuE6Ha/pAOyX Xik6bpBWmomBVdo5I2G7OQGfibQfReGeWZ6IZq9rAMf3 -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:19 2026 by rpki-client