This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/g4nCWXK_03YbprQHpph4RAU5af4.roa File: g4nCWXK_03YbprQHpph4RAU5af4.roa (raw, json) Hash identifier: bja30FhVlRyFoYSsgn4yCXyL+dT+/OEpibcb3uOS2oE= Subject key identifier: 83:89:C2:59:72:BF:D3:76:1B:A6:B4:07:A6:98:78:44:05:39:69:FE Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a Certificate serial: 019B7BA3ED659DEFB3F97EC68B655141AC40 Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/g4nCWXK_03YbprQHpph4RAU5af4.roa Signing time: Thu 01 Jan 2026 22:18:19 +0000 ROA not before: Thu 01 Jan 2026 22:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 82.192.96.0/24 maxlen: 24 82.192.97.0/24 maxlen: 24 82.192.100.0/24 maxlen: 24 82.192.101.0/24 maxlen: 24 82.192.102.0/24 maxlen: 24 82.192.103.0/24 maxlen: 24 82.192.108.0/24 maxlen: 24 82.192.109.0/24 maxlen: 24 82.192.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ed:65:9d:ef:b3:f9:7e:c6:8b:65:51:41:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a Validity Not Before: Jan 1 22:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8389c25972bfd3761ba6b407a6987844053969fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:33:e2:1b:4d:4e:d9:78:86:39:50:16:f4: 83:76:a7:44:17:4d:83:f1:9c:f3:8d:72:c6:74:20: f0:51:f5:42:87:d4:13:cf:2c:96:58:50:b9:9b:9e: e2:3f:3f:e8:cd:5b:8c:d4:bf:5c:7b:fb:b6:de:7b: 41:a9:21:83:ce:e6:47:c5:01:07:1b:8c:51:43:e0: b9:d4:e3:15:54:d9:44:8b:9f:9a:50:a5:04:77:ba: ff:e5:70:e5:2d:5b:c3:f4:30:06:51:c5:0d:d3:2b: 6c:88:17:b6:8d:20:c1:44:0c:5e:45:db:4c:5a:bb: 0e:e3:2c:33:d7:97:d0:ed:6a:78:68:dd:9c:e7:a5: a1:4c:ab:cb:53:c7:2f:80:e9:6a:05:e0:d7:0a:0c: 43:74:ff:a7:c0:19:d0:08:51:7e:29:ae:4f:c3:3d: c6:e7:2c:36:41:d8:3b:f1:42:28:db:ec:b1:f2:bb: 24:bb:36:4c:6e:85:fe:7f:4d:c1:2b:4f:67:09:28: ac:41:fa:a1:e4:91:67:1d:45:6f:74:9c:81:31:b4: 83:c7:94:34:60:26:e9:10:e2:a6:23:46:54:d8:d0: ef:4c:1e:aa:94:e1:2d:91:f8:55:55:98:e3:f0:79: 89:51:52:ba:ad:b4:33:95:60:57:4c:ff:66:e0:7f: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:89:C2:59:72:BF:D3:76:1B:A6:B4:07:A6:98:78:44:05:39:69:FE X509v3 Authority Key Identifier: keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/g4nCWXK_03YbprQHpph4RAU5af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.192.96.0/23 82.192.100.0/22 82.192.108.0-82.192.110.255 Signature Algorithm: sha256WithRSAEncryption cd:00:23:0d:1c:93:dc:ef:e5:ae:43:36:a0:6c:23:bf:78:c9: 74:95:f8:ba:18:da:76:8e:0c:a1:95:25:9e:1a:b5:c5:20:fd: 7c:3d:40:d1:f0:5e:91:2b:d3:0a:65:14:5d:9d:ce:8a:bd:3f: 9c:27:4d:a0:da:c5:17:16:0d:92:b9:16:fe:39:36:b1:6d:dc: 0f:55:23:40:da:62:df:40:1d:94:22:c7:77:e1:0f:6c:c8:62: 0c:35:4d:08:d5:92:82:d6:a2:c8:93:ac:cb:f0:59:51:70:8b: 13:e1:06:36:2e:83:22:d1:74:44:20:0e:be:dc:5a:41:fe:ac: f7:39:52:34:08:d9:16:83:76:c8:59:c2:34:13:5b:49:ea:0a: 08:af:64:16:c6:2a:ef:85:bd:50:48:f9:5e:31:30:32:a4:43: 8c:32:56:5f:1c:e5:aa:19:5b:69:9d:79:c8:1c:59:e8:06:8c: 73:d0:2d:ee:93:4c:eb:7f:19:29:ca:f1:6a:39:83:04:56:f4: 1b:66:6c:bc:09:55:3b:56:47:90:08:f4:5d:c4:cc:35:4d:41: 8c:56:82:7b:86:1d:6c:dc:bd:0f:8a:06:a2:54:b2:f4:c4:db: f5:dd:59:5c:9b:79:34:47:80:c8:0b:42:ae:9e:e5:56:47:ba: 72:be:ca:0b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7o+1lne+z+X7Gi2VRQaxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZWNhNDAxMmJmN2I1MDU2ZTJlMGExNjFlYjQ2MTg4NzZj OTExMmEwHhcNMjYwMTAxMjIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzg5YzI1OTcyYmZkMzc2MWJhNmI0MDdhNjk4Nzg0NDA1Mzk2OWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03oz4htNTtl4hjlQFvSDdqdEF02D 8ZzzjXLGdCDwUfVCh9QTzyyWWFC5m57iPz/ozVuM1L9ce/u23ntBqSGDzuZHxQEH G4xRQ+C51OMVVNlEi5+aUKUEd7r/5XDlLVvD9DAGUcUN0ytsiBe2jSDBRAxeRdtM WrsO4ywz15fQ7Wp4aN2c56WhTKvLU8cvgOlqBeDXCgxDdP+nwBnQCFF+Ka5Pwz3G 5yw2Qdg78UIo2+yx8rskuzZMboX+f03BK09nCSisQfqh5JFnHUVvdJyBMbSDx5Q0 YCbpEOKmI0ZU2NDvTB6qlOEtkfhVVZjj8HmJUVK6rbQzlWBXTP9m4H82QwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFIOJwllyv9N2G6a0B6aYeEQFOWn+MB8GA1UdIwQY MBaAFHvspAEr97UFbi4KFh60YYh2yREqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYt NThjYWY0NzAxYmUzLzEvZzRuQ1dYS18wM1licHJRSHBwaDRSQVU1YWY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYtNThjYWY0NzAxYmUz LzEvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBUsBgAwQC UsBkMAwDBAJSwGwDBABSwG4wDQYJKoZIhvcNAQELBQADggEBAM0AIw0ck9zv5a5D NqBsI794yXSV+LoY2naODKGVJZ4atcUg/Xw9QNHwXpEr0wplFF2dzoq9P5wnTaDa xRcWDZK5Fv45NrFt3A9VI0DaYt9AHZQix3fhD2zIYgw1TQjVkoLWosiTrMvwWVFw ixPhBjYugyLRdEQgDr7cWkH+rPc5UjQI2RaDdshZwjQTW0nqCgivZBbGKu+FvVBI +V4xMDKkQ4wyVl8c5aoZW2mdecgcWegGjHPQLe6TTOt/GSnK8Wo5gwRW9BtmbLwJ VTtWR5AI9F3EzDVNQYxWgnuGHWzcvQ+KBqJUsvTE2/XdWVybeTRHgMgLQq6e5VZH unK+ygs= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:39 2026 by rpki-client