This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/gYgOrpy-NbLVYDOt6ciQXmu5vB4.roa File: gYgOrpy-NbLVYDOt6ciQXmu5vB4.roa (raw, json) Hash identifier: HeuNS/isx5Ir7rrhD9rHIdV2SzMR1qCm5KBXOXdXtqU= Subject key identifier: 81:88:0E:AE:9C:BE:35:B2:D5:60:33:AD:E9:C8:90:5E:6B:B9:BC:1E Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Certificate serial: 019B7C11CB1F18E237637536C06962B2CF99 Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/gYgOrpy-NbLVYDOt6ciQXmu5vB4.roa Signing time: Fri 02 Jan 2026 00:18:19 +0000 ROA not before: Fri 02 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 195.43.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:cb:1f:18:e2:37:63:75:36:c0:69:62:b2:cf:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Validity Not Before: Jan 2 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81880eae9cbe35b2d56033ade9c8905e6bb9bc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:bb:ca:00:ab:e8:c7:35:44:3c:00:03:db: 84:74:26:25:48:53:74:8b:af:f9:b8:67:e4:77:00: 43:83:25:37:d8:d0:e7:48:ef:80:a8:fa:68:15:a8: cb:86:96:f3:f5:63:c7:de:8f:94:46:ca:76:ea:57: d6:51:74:fd:76:64:17:a8:1a:80:3e:92:f0:53:60: 30:dd:67:0e:59:8e:18:79:15:4c:8b:4a:5a:74:c7: 97:b1:8e:a0:42:8a:e1:74:62:52:3c:8f:c4:83:5b: 8c:20:1b:b8:bf:ee:b1:80:a5:90:a1:1f:bb:12:8a: 81:ac:99:fe:c8:e1:74:fe:74:1c:ea:98:f9:83:87: 08:ab:ce:96:88:8a:83:81:f9:3e:95:51:56:df:03: 0b:2d:85:4c:d3:c0:5d:a8:5d:af:59:ea:cd:63:50: b6:1b:9c:9f:c4:9e:18:b8:08:0a:2e:7b:b5:93:77: 2e:35:81:31:9f:b0:55:7e:14:f7:ea:83:f0:28:de: 0c:93:f8:ed:91:eb:d1:4c:54:e6:36:f9:04:09:b9: 5d:d6:1b:4f:35:75:ab:96:76:e2:fe:77:7b:96:2b: 90:56:59:5a:67:93:d0:01:cf:04:81:b2:d9:a5:de: 66:cf:57:ff:85:06:e2:e5:25:8b:b9:01:c2:cd:57: 13:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:88:0E:AE:9C:BE:35:B2:D5:60:33:AD:E9:C8:90:5E:6B:B9:BC:1E X509v3 Authority Key Identifier: keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/gYgOrpy-NbLVYDOt6ciQXmu5vB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.151.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:d6:91:69:d9:68:88:b0:26:3d:89:4b:60:d2:8c:1f:ec:62: f4:4d:9d:52:09:2f:66:16:98:03:a9:e6:ec:8a:3a:0c:e3:91: 3c:c9:9e:e8:32:d3:f1:c3:08:c4:4e:9d:e8:35:07:53:80:de: 22:cb:8f:bc:7e:9e:42:07:b7:e0:af:9e:af:33:ee:1f:37:e1: 32:ec:0c:3b:c2:bc:9f:8f:4a:69:0a:25:91:a4:32:9d:6e:e4: 7e:29:61:d2:de:a1:ea:73:7d:34:b5:58:57:6c:11:d1:dc:ce: 81:87:76:c2:74:53:3b:6d:88:da:a3:15:63:98:3f:91:7f:48: bd:4b:ca:56:e9:40:a8:b9:e5:17:33:4f:27:49:b2:54:ee:4c: e9:80:3b:6e:b3:32:32:40:62:c2:d6:65:be:23:46:4a:94:17: d8:15:fc:75:c2:a6:9c:84:8d:75:04:52:09:f6:05:65:96:6d: 52:02:2d:5a:da:db:45:70:fe:f3:a7:54:1c:d1:db:16:79:e2: 88:18:1a:44:fb:80:52:69:dd:7a:40:43:54:fd:64:14:4b:a1: b7:9e:4f:c7:c5:f1:a9:07:2d:fa:0d:47:5f:2e:16:c2:00:3a: 6a:e0:6a:ff:c0:1b:1a:f3:af:2f:68:0c:d8:31:a7:fc:e0:5c: 17:ab:b7:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EcsfGOI3Y3U2wGliss+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjVlZTIzYmZmNDJjY2Y2NzlkNzM3N2ZlNGRhNjk1ZDM0 MWFlZjAwHhcNMjYwMTAyMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTg4MGVhZTljYmUzNWIyZDU2MDMzYWRlOWM4OTA1ZTZiYjliYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq327ygCr6Mc1RDwAA9uEdCYlSFN0 i6/5uGfkdwBDgyU32NDnSO+AqPpoFajLhpbz9WPH3o+URsp26lfWUXT9dmQXqBqA PpLwU2Aw3WcOWY4YeRVMi0padMeXsY6gQorhdGJSPI/Eg1uMIBu4v+6xgKWQoR+7 EoqBrJn+yOF0/nQc6pj5g4cIq86WiIqDgfk+lVFW3wMLLYVM08BdqF2vWerNY1C2 G5yfxJ4YuAgKLnu1k3cuNYExn7BVfhT36oPwKN4Mk/jtkevRTFTmNvkECbld1htP NXWrlnbi/nd7liuQVllaZ5PQAc8EgbLZpd5mz1f/hQbi5SWLuQHCzVcT3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIGIDq6cvjWy1WAzrenIkF5rubweMB8GA1UdIwQY MBaAFM1l7iO/9CzPZ51zd/5NppXTQa7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQt NWRjMmZhNmEzNTAzLzEvZ1lnT3JweS1OYkxWWURPdDZjaVFYbXU1dkI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQtNWRjMmZhNmEzNTAz LzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyuXMA0G CSqGSIb3DQEBCwUAA4IBAQAL1pFp2WiIsCY9iUtg0owf7GL0TZ1SCS9mFpgDqebs ijoM45E8yZ7oMtPxwwjETp3oNQdTgN4iy4+8fp5CB7fgr56vM+4fN+Ey7Aw7wryf j0ppCiWRpDKdbuR+KWHS3qHqc300tVhXbBHR3M6Bh3bCdFM7bYjaoxVjmD+Rf0i9 S8pW6UCoueUXM08nSbJU7kzpgDtuszIyQGLC1mW+I0ZKlBfYFfx1wqachI11BFIJ 9gVllm1SAi1a2ttFcP7zp1Qc0dsWeeKIGBpE+4BSad16QENU/WQUS6G3nk/HxfGp By36DUdfLhbCADpq4Gr/wBsa868vaAzYMaf84FwXq7do -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:43 2026 by rpki-client