This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/CzK0ougq6DriQml9weFMesSYYgM.roa File: CzK0ougq6DriQml9weFMesSYYgM.roa (raw, json) Hash identifier: tRLuwh0Bv5JNCdg32ICwjGupdf04tX4gLT0oELFtUjQ= Subject key identifier: 0B:32:B4:A2:E8:2A:E8:3A:E2:42:69:7D:C1:E1:4C:7A:C4:98:62:03 Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Certificate serial: 019B79ED548EAAA6B7BF246DC25F51F76DAC Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/CzK0ougq6DriQml9weFMesSYYgM.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43766 IP address blocks: 92.43.168.0/23 maxlen: 23 92.43.168.0/24 maxlen: 24 92.43.170.0/23 maxlen: 23 92.43.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:54:8e:aa:a6:b7:bf:24:6d:c2:5f:51:f7:6d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b32b4a2e82ae83ae242697dc1e14c7ac4986203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:db:d9:8a:94:59:87:65:5b:fd:f7:fe:c0: 43:ff:4e:5e:d4:d1:19:71:8a:17:d9:62:18:01:eb: af:f1:b4:8b:ac:ac:8d:eb:54:34:24:5d:d5:b4:0b: 24:09:a8:f5:29:e7:da:60:a9:d1:11:5d:c3:01:85: 15:37:02:cc:45:cc:a0:36:c6:74:84:b9:08:03:10: ff:c8:15:43:00:6b:46:f6:c0:b0:91:d2:94:e9:9f: 9a:d2:78:84:d7:8b:5f:f0:f2:24:cf:2c:4c:d4:e0: 2c:5c:d9:c2:f2:3e:2c:fb:2f:f6:7d:4c:b4:2c:38: c9:8f:2f:51:17:67:12:a0:43:29:67:9b:8f:70:77: d3:3c:7d:62:4f:45:2f:9b:5d:9e:4c:89:ac:ea:15: d3:89:ee:2b:74:19:10:bd:37:b3:97:cb:6d:37:04: 37:b7:ab:6a:d9:79:93:12:35:78:21:a0:7c:c1:28: 88:c4:04:7a:21:3b:cb:9a:36:c6:4e:de:8e:16:d6: 08:99:1b:f1:f5:c1:31:a2:7a:a5:54:78:50:84:e1: bf:0f:86:6d:35:e4:bf:42:69:8c:da:03:42:0d:f6: 58:be:b8:7a:51:4f:97:56:c1:03:c7:30:4f:5d:fc: f6:2d:9f:d7:80:08:95:a6:54:33:df:77:c0:ea:65: ef:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:32:B4:A2:E8:2A:E8:3A:E2:42:69:7D:C1:E1:4C:7A:C4:98:62:03 X509v3 Authority Key Identifier: keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/CzK0ougq6DriQml9weFMesSYYgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.168.0/22 Signature Algorithm: sha256WithRSAEncryption 57:6a:2c:02:9c:40:e2:f3:ee:78:98:cc:2c:5e:e6:7b:48:41: f1:ab:8b:b8:c7:2e:3b:bc:d6:b7:c3:95:4a:2b:cd:62:01:72: 91:1f:6e:3e:cb:da:59:2b:3c:25:98:11:2e:d8:d7:3f:e0:e7: 1c:8c:fa:3b:dc:8a:3a:7f:72:e3:fe:43:ea:a6:48:f0:fe:18: 07:54:e1:62:ed:ac:65:c1:91:2d:d8:1a:d8:79:da:41:8b:0e: 9a:86:1c:8a:5a:41:d3:ea:df:15:de:0b:a9:4a:8d:d2:b9:54: 20:a5:cc:3d:e2:9f:91:37:17:57:4c:d8:75:3d:6e:0d:d1:f0: b8:8b:7e:2b:a2:42:e6:e6:0a:51:71:f8:1f:46:6f:35:d8:f8: 1f:5d:e9:f0:a3:e2:1f:9b:38:8c:64:44:c4:52:8e:aa:91:71: 0c:0a:a0:af:16:6d:26:e8:74:2e:d5:a0:42:04:97:8a:d5:1d: f7:c3:ce:ac:f2:c1:13:32:18:04:69:ed:9b:e5:31:49:ec:b6: f7:2a:31:9a:47:a3:03:bc:59:03:2a:35:70:cd:9b:c0:15:78: d7:e1:49:fb:a3:21:f4:dc:97:e7:2b:d8:4b:f9:18:77:bd:32: a8:2b:d9:17:55:d5:80:01:7f:8f:9f:d3:13:c8:b6:e4:1f:24: c2:b7:42:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VSOqqa3vyRtwl9R922sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZDdmZTczMTJlZmI0MmJkOGQxZWNkODJhYzc2MTkxZWEy NmMzNTYwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjMyYjRhMmU4MmFlODNhZTI0MjY5N2RjMWUxNGM3YWM0OTg2MjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswjb2YqUWYdlW/33/sBD/05e1NEZ cYoX2WIYAeuv8bSLrKyN61Q0JF3VtAskCaj1KefaYKnREV3DAYUVNwLMRcygNsZ0 hLkIAxD/yBVDAGtG9sCwkdKU6Z+a0niE14tf8PIkzyxM1OAsXNnC8j4s+y/2fUy0 LDjJjy9RF2cSoEMpZ5uPcHfTPH1iT0Uvm12eTIms6hXTie4rdBkQvTezl8ttNwQ3 t6tq2XmTEjV4IaB8wSiIxAR6ITvLmjbGTt6OFtYImRvx9cExonqlVHhQhOG/D4Zt NeS/QmmM2gNCDfZYvrh6UU+XVsEDxzBPXfz2LZ/XgAiVplQz33fA6mXvPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAsytKLoKug64kJpfcHhTHrEmGIDMB8GA1UdIwQY MBaAFILX/nMS77Qr2NHs2CrHYZHqJsNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYt MzdiMjFiYWIzYjAwLzEvQ3pLMG91Z3E2RHJpUW1sOXdlRk1lc1NZWWdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYtMzdiMjFiYWIzYjAw LzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXCuoMA0G CSqGSIb3DQEBCwUAA4IBAQBXaiwCnEDi8+54mMwsXuZ7SEHxq4u4xy47vNa3w5VK K81iAXKRH24+y9pZKzwlmBEu2Nc/4OccjPo73Io6f3Lj/kPqpkjw/hgHVOFi7axl wZEt2BrYedpBiw6ahhyKWkHT6t8V3gupSo3SuVQgpcw94p+RNxdXTNh1PW4N0fC4 i34rokLm5gpRcfgfRm812PgfXenwo+IfmziMZETEUo6qkXEMCqCvFm0m6HQu1aBC BJeK1R33w86s8sETMhgEae2b5TFJ7Lb3KjGaR6MDvFkDKjVwzZvAFXjX4Un7oyH0 3JfnK9hL+Rh3vTKoK9kXVdWAAX+Pn9MTyLbkHyTCt0JA -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:51 2026 by rpki-client