This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/gnw06N0gGBhicL_ONKvoP4ddQbU.roa File: gnw06N0gGBhicL_ONKvoP4ddQbU.roa (raw, json) Hash identifier: 4gwJwDTmq+vkyn3oS5mRGQ3lROpbTUw7uW4+i/6DJjc= Subject key identifier: 82:7C:34:E8:DD:20:18:18:62:70:BF:CE:34:AB:E8:3F:87:5D:41:B5 Certificate issuer: /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2 Certificate serial: 019B7A5B191DD014C0309E07A5EF7E368A7D Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/gnw06N0gGBhicL_ONKvoP4ddQbU.roa Signing time: Thu 01 Jan 2026 16:19:09 +0000 ROA not before: Thu 01 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43766 IP address blocks: 194.33.68.0/24 maxlen: 24 194.33.70.0/23 maxlen: 23 2001:67c:2994::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:19:1d:d0:14:c0:30:9e:07:a5:ef:7e:36:8a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=827c34e8dd2018186270bfce34abe83f875d41b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d7:80:69:9f:b6:12:d8:15:1b:68:2f:11:f1: 7d:45:07:bc:09:64:b4:84:85:6e:d0:81:5b:32:41: ba:7c:02:9f:b7:ee:1e:1e:69:87:37:9a:f3:67:0f: cf:68:b1:9a:60:23:7d:1c:22:2d:3b:63:b2:4d:c4: 91:3b:65:83:ce:db:e2:83:8a:da:12:01:d7:4a:29: b2:81:eb:a7:45:f4:c9:46:85:75:d2:49:2c:f3:3c: eb:ad:00:98:41:09:32:d7:86:24:63:f9:04:c3:eb: 84:2f:d8:72:bd:f9:a1:13:5b:99:cf:93:87:78:28: c4:4c:f4:2a:b9:62:86:53:d1:55:17:e6:0c:c6:1e: bd:0a:da:a0:0c:5f:3e:c0:e1:17:d8:a1:6f:6b:dc: 97:b2:f2:cc:37:77:ef:ca:0e:b3:c0:36:1d:e1:e1: ff:05:7a:b2:b5:2b:97:b3:c1:32:3d:85:d5:42:1c: 04:68:97:d5:c2:f5:b7:e7:6c:3c:c5:e6:15:35:bb: a4:c4:aa:b0:cd:66:f1:99:f6:59:4a:de:53:a5:05: 54:d5:19:9a:77:90:51:7e:b1:af:da:60:fe:82:cd: 33:d0:aa:d1:58:53:43:5c:8d:53:4d:a1:dd:35:f6: 36:ac:50:ad:d3:ef:51:a4:3a:c0:85:ab:d6:f5:3e: 07:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7C:34:E8:DD:20:18:18:62:70:BF:CE:34:AB:E8:3F:87:5D:41:B5 X509v3 Authority Key Identifier: keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/gnw06N0gGBhicL_ONKvoP4ddQbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.68.0/24 194.33.70.0/23 IPv6: 2001:67c:2994::/48 Signature Algorithm: sha256WithRSAEncryption 54:7d:61:1e:2a:b4:c3:e3:3e:ee:60:61:13:2c:4e:47:22:4c: 7d:18:84:9f:af:94:f9:2f:3d:60:45:50:bf:5a:c6:88:41:3c: c3:1e:92:78:14:20:78:3a:3e:97:5b:47:7d:3c:83:8f:8c:08: 72:7a:03:f3:87:d4:ba:59:1a:84:e5:36:54:cb:08:02:74:e7: f8:ba:4f:47:c6:bb:b6:48:76:1e:04:f6:12:71:43:cc:34:f2: ef:40:4d:e6:c4:24:9e:e4:c1:e2:b3:e7:fa:6c:4e:59:c5:6a: 34:4f:07:e4:d4:b3:86:56:8e:30:74:d0:f4:41:67:e7:1f:6f: 9d:af:2a:02:e9:6f:0c:3d:44:87:5c:52:04:62:03:05:36:6f: 53:9a:b2:21:90:b8:bc:ed:d7:d8:07:f4:c1:6a:20:88:fc:54: e8:00:2d:d1:f0:bc:7b:8b:59:39:33:d8:94:2f:e1:50:cc:74: 1c:44:86:7c:a0:24:4b:e3:3d:fb:8e:65:84:69:1d:82:29:ff: 25:2b:26:09:12:4d:d6:c3:5d:02:14:a6:71:7a:bc:58:58:5a: 95:a2:22:16:49:87:0f:81:a8:f2:a4:7c:d7:3e:11:4d:b3:23: 84:b8:40:c4:27:cf:3f:7f:7e:f3:b6:51:5f:f2:bc:c9:65:ef: b2:b1:e1:b7 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6Wxkd0BTAMJ4Hpe9+Nop9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTJlNGViOWZkM2NjZDFiYTQ0YTM2MmY3NmY5ODliN2I0 NGQ1ZjIwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjdjMzRlOGRkMjAxODE4NjI3MGJmY2UzNGFiZTgzZjg3NWQ0MWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1deAaZ+2EtgVG2gvEfF9RQe8CWS0 hIVu0IFbMkG6fAKft+4eHmmHN5rzZw/PaLGaYCN9HCItO2OyTcSRO2WDztvig4ra EgHXSimygeunRfTJRoV10kks8zzrrQCYQQky14YkY/kEw+uEL9hyvfmhE1uZz5OH eCjETPQquWKGU9FVF+YMxh69CtqgDF8+wOEX2KFva9yXsvLMN3fvyg6zwDYd4eH/ BXqytSuXs8EyPYXVQhwEaJfVwvW352w8xeYVNbukxKqwzWbxmfZZSt5TpQVU1Rma d5BRfrGv2mD+gs0z0KrRWFNDXI1TTaHdNfY2rFCt0+9RpDrAhavW9T4HhQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIJ8NOjdIBgYYnC/zjSr6D+HXUG1MB8GA1UdIwQY MBaAFMei5Ouf08zRukSjYvdvmJt7RNXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wZTQ5NzYtZTc1MC00NTY4LTg1ODMt ZGU2ZWY3Yzk1NTI2LzEvZ253MDZOMGdHQmhpY0xfT05Ldm9QNGRkUWJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wZTQ5NzYtZTc1MC00NTY4LTg1ODMtZGU2ZWY3Yzk1NTI2 LzEveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwiFEAwQB wiFGMA8EAgACMAkDBwAgAQZ8KZQwDQYJKoZIhvcNAQELBQADggEBAFR9YR4qtMPj Pu5gYRMsTkciTH0YhJ+vlPkvPWBFUL9axohBPMMekngUIHg6PpdbR308g4+MCHJ6 A/OH1LpZGoTlNlTLCAJ05/i6T0fGu7ZIdh4E9hJxQ8w08u9ATebEJJ7kweKz5/ps TlnFajRPB+TUs4ZWjjB00PRBZ+cfb52vKgLpbww9RIdcUgRiAwU2b1OasiGQuLzt 19gH9MFqIIj8VOgALdHwvHuLWTkz2JQv4VDMdBxEhnygJEvjPfuOZYRpHYIp/yUr JgkSTdbDXQIUpnF6vFhYWpWiIhZJhw+BqPKkfNc+EU2zI4S4QMQnzz9/fvO2UV/y vMll77Kx4bc= -----END CERTIFICATE-----Generated at Wed Jan 7 16:21:56 2026 by rpki-client