This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/G6cwUHqt5rs7RBIFalSUJyMf9D0.roa File: G6cwUHqt5rs7RBIFalSUJyMf9D0.roa (raw, json) Hash identifier: fmLCgkdrA2EMgV+Qbi1vfUfbXeKr1iQ/NLq5KKaaLfQ= Subject key identifier: 1B:A7:30:50:7A:AD:E6:BB:3B:44:12:05:6A:54:94:27:23:1F:F4:3D Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d Certificate serial: 019B78A2498182129802035B575BC9390FA3 Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/G6cwUHqt5rs7RBIFalSUJyMf9D0.roa Signing time: Thu 01 Jan 2026 08:17:40 +0000 ROA not before: Thu 01 Jan 2026 08:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39310 IP address blocks: 79.98.144.0/21 maxlen: 21 195.90.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:49:81:82:12:98:02:03:5b:57:5b:c9:39:0f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d Validity Not Before: Jan 1 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ba730507aade6bb3b4412056a549427231ff43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5c:7f:a7:4e:46:e3:a1:b1:b3:c1:c5:8d:c2: dc:96:6c:9e:b6:c0:c9:71:b6:08:21:88:2a:fa:fc: 95:4a:34:ec:72:46:dc:69:2f:6b:52:c1:4d:c9:b4: c0:25:60:b1:07:9a:0b:77:4e:c0:ff:43:be:07:bd: 82:96:f2:cc:20:b6:1e:ba:73:7e:09:94:09:b7:6a: 52:09:c1:65:18:46:52:2c:5e:87:41:c5:56:24:d7: 87:c3:b2:99:90:e7:91:b3:2c:79:1c:78:b3:48:85: e5:26:22:98:d3:d1:e2:cc:9c:81:f8:c4:36:85:e4: 3a:74:61:55:07:10:fb:16:73:f9:f5:8c:75:c6:f2: c1:61:07:ca:2a:8c:9f:6d:66:4b:97:b6:01:71:84: f8:12:5d:e7:4c:2c:2e:83:cc:be:b0:77:f8:8f:ad: 3c:4e:b0:53:b9:83:7f:4d:0e:12:10:47:a9:c2:a3: 63:1c:e6:20:bb:cc:b5:19:8e:6a:fd:97:38:82:cc: 7d:f1:98:c8:fe:66:4a:74:15:a1:71:14:91:5d:7a: 98:4a:42:95:d3:8d:96:09:f7:8d:ba:a4:52:14:d7: 6a:7f:70:62:05:2f:92:52:04:2a:14:41:cd:de:02: a3:9b:cc:5a:ef:81:4c:e8:bb:6d:76:1a:b9:b5:72: 13:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A7:30:50:7A:AD:E6:BB:3B:44:12:05:6A:54:94:27:23:1F:F4:3D X509v3 Authority Key Identifier: keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/G6cwUHqt5rs7RBIFalSUJyMf9D0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.144.0/21 195.90.106.0/23 Signature Algorithm: sha256WithRSAEncryption 40:de:e3:58:d4:98:b2:6f:1b:9b:75:5c:68:a8:5c:76:72:d2: 5d:e3:42:6c:68:d6:e3:4f:d3:dc:49:67:d5:f4:9c:98:6e:bf: bd:6d:13:9b:ba:f1:91:1a:e1:fa:e6:27:79:fd:13:46:9d:44: 5d:fd:6a:c7:96:37:cf:7b:19:c3:20:c4:af:1b:48:0a:e8:6d: 3c:b0:e8:14:41:9f:d8:a1:5a:5e:4d:6e:10:ee:44:6a:01:42: 25:c6:0c:91:06:c4:ab:84:93:15:ca:9e:ff:00:d0:18:dc:6d: fc:86:d3:1b:6d:77:37:50:8d:ca:1e:66:f1:b4:f5:5b:11:bc: 47:78:f0:85:62:24:2a:ff:d3:af:28:21:8e:4a:01:84:de:09: b6:5e:5f:fa:cb:84:e3:b8:50:75:c2:19:ff:e6:27:d5:0f:85: 33:97:23:9d:5e:11:ac:b4:b2:21:5e:59:60:d1:32:95:dc:71: 9f:e5:4b:9c:ad:e7:b9:b8:ae:72:21:3e:8a:51:12:6f:65:7d: 58:63:3c:96:6c:34:ed:5c:6f:82:54:0e:34:47:e9:69:85:97: 55:dc:d8:88:10:a6:61:5a:ec:9d:a2:df:66:e0:b7:25:ac:48: 60:cb:39:f7:17:f5:07:b7:b8:38:a1:aa:a4:ac:20:4b:68:c1: 08:19:fd:6b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4okmBghKYAgNbV1vJOQ+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNDgwODU4ZmRlZWExOTI0YWI4YzYyZWMzZmM3MzJkMzQw MjBhOWQwHhcNMjYwMTAxMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmE3MzA1MDdhYWRlNmJiM2I0NDEyMDU2YTU0OTQyNzIzMWZmNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFx/p05G46Gxs8HFjcLclmyetsDJ cbYIIYgq+vyVSjTsckbcaS9rUsFNybTAJWCxB5oLd07A/0O+B72ClvLMILYeunN+ CZQJt2pSCcFlGEZSLF6HQcVWJNeHw7KZkOeRsyx5HHizSIXlJiKY09HizJyB+MQ2 heQ6dGFVBxD7FnP59Yx1xvLBYQfKKoyfbWZLl7YBcYT4El3nTCwug8y+sHf4j608 TrBTuYN/TQ4SEEepwqNjHOYgu8y1GY5q/Zc4gsx98ZjI/mZKdBWhcRSRXXqYSkKV 042WCfeNuqRSFNdqf3BiBS+SUgQqFEHN3gKjm8xa74FM6Lttdhq5tXITxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBunMFB6rea7O0QSBWpUlCcjH/Q9MB8GA1UdIwQY MBaAFHBICFj97qGSSrjGLsP8cy00AgqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTct Y2EyOGQ5OTYyNDQ2LzEvRzZjd1VIcXQ1cnM3UkJJRmFsU1VKeU1mOUQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTctY2EyOGQ5OTYyNDQ2 LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDT2KQAwQB w1pqMA0GCSqGSIb3DQEBCwUAA4IBAQBA3uNY1JiybxubdVxoqFx2ctJd40JsaNbj T9PcSWfV9JyYbr+9bRObuvGRGuH65id5/RNGnURd/WrHljfPexnDIMSvG0gK6G08 sOgUQZ/YoVpeTW4Q7kRqAUIlxgyRBsSrhJMVyp7/ANAY3G38htMbbXc3UI3KHmbx tPVbEbxHePCFYiQq/9OvKCGOSgGE3gm2Xl/6y4TjuFB1whn/5ifVD4UzlyOdXhGs tLIhXllg0TKV3HGf5Uucree5uK5yIT6KURJvZX1YYzyWbDTtXG+CVA40R+lphZdV 3NiIEKZhWuydot9m4LclrEhgyzn3F/UHt7g4oaqkrCBLaMEIGf1r -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:58 2026 by rpki-client