This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/G-foIY1cv2s-pbmJJsngENBWLwM.roa File: G-foIY1cv2s-pbmJJsngENBWLwM.roa (raw, json) Hash identifier: /sje/fJ/oYoi2zdAPSdZ79XrD4oozBnY/U0gHu3a9bM= Subject key identifier: 1B:E7:E8:21:8D:5C:BF:6B:3E:A5:B9:89:26:C9:E0:10:D0:56:2F:03 Certificate issuer: /CN=ca434d399d93a19d8a8108456c5575096c2ae588 Certificate serial: 019B797E496E79B48EF7F57E92918F726FC9 Authority key identifier: CA:43:4D:39:9D:93:A1:9D:8A:81:08:45:6C:55:75:09:6C:2A:E5:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/G-foIY1cv2s-pbmJJsngENBWLwM.roa Signing time: Thu 01 Jan 2026 12:17:58 +0000 ROA not before: Thu 01 Jan 2026 12:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196970 IP address blocks: 195.191.228.0/23 maxlen: 23 195.191.228.0/24 maxlen: 24 195.191.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.mft rsync://rpki.ripe.net/repository/DEFAULT/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:49:6e:79:b4:8e:f7:f5:7e:92:91:8f:72:6f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca434d399d93a19d8a8108456c5575096c2ae588 Validity Not Before: Jan 1 12:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1be7e8218d5cbf6b3ea5b98926c9e010d0562f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:05:1c:ac:18:dd:16:8d:2a:2a:9f:de:ef: 5d:91:5b:ad:6c:36:7b:79:b7:6a:81:b0:b9:2f:26: ab:f2:a8:5f:10:84:d9:aa:38:f6:a0:54:90:7e:aa: 5b:fa:6e:00:07:6b:c3:9d:19:da:90:79:d6:7e:a3: b1:13:19:49:a1:83:90:7e:b8:82:9e:2d:2f:a7:07: 54:b3:57:09:00:a2:31:56:7b:62:ba:78:57:32:52: c8:ba:8c:00:ad:12:da:09:13:3e:ac:ce:ed:f8:b3: 40:44:2d:c3:b9:e2:f5:70:ef:ed:83:03:4a:cb:7b: c8:87:63:15:50:9d:49:1d:ff:19:ef:f7:7d:7e:01: 59:ca:a4:3b:80:af:7c:1d:19:48:25:e6:e2:e3:6a: 0d:48:13:b5:bb:99:bb:11:27:52:c1:d5:d5:be:a5: dc:5f:47:7f:f6:b0:d1:89:b2:a3:3f:6b:fc:9d:be: 66:92:4b:b2:b0:ae:d7:cb:1d:bc:b7:5c:8b:69:dc: 1e:76:9e:11:b7:e4:23:9b:aa:7d:4a:40:90:01:38: c9:57:6d:d2:45:58:a4:b5:f0:fb:40:fb:4e:28:d6: c9:8c:e8:95:78:24:74:d0:7d:f8:37:67:1c:c3:d8: 63:e0:b3:97:90:d4:7a:40:b6:40:33:e1:4a:64:65: 13:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E7:E8:21:8D:5C:BF:6B:3E:A5:B9:89:26:C9:E0:10:D0:56:2F:03 X509v3 Authority Key Identifier: keyid:CA:43:4D:39:9D:93:A1:9D:8A:81:08:45:6C:55:75:09:6C:2A:E5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/G-foIY1cv2s-pbmJJsngENBWLwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.228.0/23 Signature Algorithm: sha256WithRSAEncryption 66:df:f2:55:20:45:e5:2a:78:0a:a2:61:b2:64:49:f6:c8:eb: 51:d6:76:f1:a2:cd:b7:86:30:c5:19:db:cd:6a:53:dc:58:bb: f8:28:92:05:52:c6:00:7e:09:82:36:44:e1:74:dd:8f:5e:d1: e6:13:4a:c8:d1:27:54:16:d0:9d:89:5f:ef:15:2a:f5:6e:59: 42:48:70:3c:9f:b7:a3:2f:07:b3:cc:c9:30:78:c3:6c:ce:07: 3a:ce:ef:e0:9e:9b:d9:97:d1:5a:15:80:a1:48:7d:b3:f7:a1: 9d:4b:22:71:54:1c:8c:51:77:0c:23:df:14:8c:ab:a2:68:5a: 47:ae:19:c5:65:1d:77:21:01:d4:12:bc:2e:18:d7:e6:9b:44: 96:4e:b3:92:57:ed:7a:3a:2c:2e:34:88:f4:f9:6a:9e:c8:68: 54:4a:48:01:89:18:8d:b1:7d:b6:d7:99:ad:43:50:4f:d2:e6: 0b:20:18:55:ca:d0:46:7d:65:18:5e:50:58:55:c9:52:c8:9c: 5b:e2:5f:0e:3c:11:99:74:3a:42:08:6d:9b:7b:71:fa:47:12: 9d:1b:ad:61:c4:09:12:28:87:09:da:2a:4a:8d:23:cc:01:fd: 22:60:69:9f:6f:9b:10:f3:eb:64:ea:98:91:29:0f:a9:fd:93: e9:fd:20:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkluebSO9/V+kpGPcm/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNDM0ZDM5OWQ5M2ExOWQ4YTgxMDg0NTZjNTU3NTA5NmMy YWU1ODgwHhcNMjYwMTAxMTIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmU3ZTgyMThkNWNiZjZiM2VhNWI5ODkyNmM5ZTAxMGQwNTYyZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRYFHKwY3RaNKiqf3u9dkVutbDZ7 ebdqgbC5Lyar8qhfEITZqjj2oFSQfqpb+m4AB2vDnRnakHnWfqOxExlJoYOQfriC ni0vpwdUs1cJAKIxVntiunhXMlLIuowArRLaCRM+rM7t+LNARC3DueL1cO/tgwNK y3vIh2MVUJ1JHf8Z7/d9fgFZyqQ7gK98HRlIJebi42oNSBO1u5m7ESdSwdXVvqXc X0d/9rDRibKjP2v8nb5mkkuysK7Xyx28t1yLadwedp4Rt+Qjm6p9SkCQATjJV23S RViktfD7QPtOKNbJjOiVeCR00H34N2ccw9hj4LOXkNR6QLZAM+FKZGUTdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvn6CGNXL9rPqW5iSbJ4BDQVi8DMB8GA1UdIwQY MBaAFMpDTTmdk6GdioEIRWxVdQlsKuWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWtOTk9aMlRvWjJLZ1FoRmJGVjFDV3dxNVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82YWVjNmEtMzY4My00MDVhLTllNjEt ZGIyMzY4MjcxOTEzLzEvRy1mb0lZMWN2MnMtcGJtSkpzbmdFTkJXTHdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82YWVjNmEtMzY4My00MDVhLTllNjEtZGIyMzY4MjcxOTEz LzEveWtOTk9aMlRvWjJLZ1FoRmJGVjFDV3dxNVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7/kMA0G CSqGSIb3DQEBCwUAA4IBAQBm3/JVIEXlKngKomGyZEn2yOtR1nbxos23hjDFGdvN alPcWLv4KJIFUsYAfgmCNkThdN2PXtHmE0rI0SdUFtCdiV/vFSr1bllCSHA8n7ej LwezzMkweMNszgc6zu/gnpvZl9FaFYChSH2z96GdSyJxVByMUXcMI98UjKuiaFpH rhnFZR13IQHUErwuGNfmm0SWTrOSV+16OiwuNIj0+WqeyGhUSkgBiRiNsX2215mt Q1BP0uYLIBhVytBGfWUYXlBYVclSyJxb4l8OPBGZdDpCCG2be3H6RxKdG61hxAkS KIcJ2ipKjSPMAf0iYGmfb5sQ8+tk6piRKQ+p/ZPp/SAd -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:09 2026 by rpki-client