This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/_G9bBvAuwlhj6HdybiKcdRfKVKU.roa File: _G9bBvAuwlhj6HdybiKcdRfKVKU.roa (raw, json) Hash identifier: h0o48qu0tAEm+ZAVtwZJVmF4Z12HC5p6ZVdH5F2G+hQ= Subject key identifier: FC:6F:5B:06:F0:2E:C2:58:63:E8:77:72:6E:22:9C:75:17:CA:54:A5 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C805789359C744A4B2D757F125A8F0A Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/_G9bBvAuwlhj6HdybiKcdRfKVKU.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48939 IP address blocks: 92.63.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:57:89:35:9c:74:4a:4b:2d:75:7f:12:5a:8f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc6f5b06f02ec25863e877726e229c7517ca54a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:90:d8:62:9a:50:9a:49:2a:6f:70:83:6c: 0a:0b:7e:7d:dd:d4:25:b1:d9:7c:52:a5:47:c6:cd: d5:97:3b:59:fd:b1:08:11:cf:02:75:62:2a:6a:f8: b9:08:ea:60:db:4d:8c:39:2b:59:fd:aa:20:45:47: 07:5c:fc:b6:b2:b7:77:cc:90:34:5e:17:4c:db:e6: 45:31:25:94:66:14:47:83:be:96:af:ec:71:99:3b: 20:32:3a:31:45:9a:75:d5:9c:c9:2c:9c:21:7a:32: 4f:c4:ba:71:49:9f:5b:aa:b3:62:bc:7e:28:3f:80: 4e:8e:38:a1:b6:ea:9f:7c:23:ae:9f:a6:ea:31:11: 6e:45:2e:eb:93:5c:bd:c3:85:35:9f:39:c8:5a:ca: fe:cd:f6:b6:42:75:05:e1:49:e0:6b:a4:94:af:ba: 4e:94:23:94:78:a4:2f:36:c3:b2:68:60:eb:c6:c9: c9:24:f7:ef:b7:ca:35:d9:43:b1:25:9f:c2:3e:0d: de:cb:bf:6b:74:ee:b3:13:e5:0b:03:a8:6d:bb:78: 3f:5c:9a:fe:ae:63:6f:ce:ff:bc:54:a1:3b:47:06: c2:4e:ce:2d:8b:2d:43:72:a4:6c:b2:e0:83:d1:3b: 96:f1:bb:48:f8:b0:7b:75:18:d5:c2:2f:a7:eb:c9: 09:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6F:5B:06:F0:2E:C2:58:63:E8:77:72:6E:22:9C:75:17:CA:54:A5 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/_G9bBvAuwlhj6HdybiKcdRfKVKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.63.191.0/24 Signature Algorithm: sha256WithRSAEncryption 15:89:a1:69:18:24:82:b7:d7:83:cb:1b:55:5a:06:dd:a8:9c: bf:ce:83:cf:28:ba:24:b3:0c:a7:b7:45:fa:56:b5:41:ca:7d: 02:cf:bf:04:52:ac:fa:31:46:6d:e8:fa:f2:86:44:96:5d:75: d6:7f:b5:2c:49:dc:77:d2:df:b3:56:aa:d8:74:2e:87:70:e9: 13:37:4b:51:c0:19:17:2c:4a:5a:98:b3:7a:d0:4b:10:68:51: f9:b3:7d:8e:90:3f:fd:20:db:00:0b:78:0a:38:18:cf:d6:ac: f2:16:f5:d1:40:bb:00:6e:42:d0:b3:19:f7:49:1d:b0:b1:08: c2:6c:c3:57:54:c3:f5:7f:88:50:96:92:18:8c:0b:a2:78:fd: d0:13:40:ca:d6:a1:1d:99:e6:0d:cd:13:fb:1d:e3:b1:03:e6: 0d:74:05:9c:b8:b5:5d:6e:cc:dd:66:d7:24:3e:3a:a8:21:96: a0:51:c3:55:e8:55:50:1a:e7:09:60:c8:86:a7:5e:12:e7:ba: 45:12:3f:45:5c:56:09:32:2a:2f:09:50:5a:05:38:27:ec:91: 6f:58:30:27:72:54:93:2e:b3:94:16:31:63:33:ca:e2:00:51: be:4a:fc:97:c6:81:38:ea:a3:c8:78:18:e5:f0:6f:16:5f:f9: e2:17:d5:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFeJNZx0SkstdX8SWo8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzZmNWIwNmYwMmVjMjU4NjNlODc3NzI2ZTIyOWM3NTE3Y2E1NGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2OQ2GKaUJpJKm9wg2wKC3593dQl sdl8UqVHxs3VlztZ/bEIEc8CdWIqavi5COpg202MOStZ/aogRUcHXPy2srd3zJA0 XhdM2+ZFMSWUZhRHg76Wr+xxmTsgMjoxRZp11ZzJLJwhejJPxLpxSZ9bqrNivH4o P4BOjjihtuqffCOun6bqMRFuRS7rk1y9w4U1nznIWsr+zfa2QnUF4Unga6SUr7pO lCOUeKQvNsOyaGDrxsnJJPfvt8o12UOxJZ/CPg3ey79rdO6zE+ULA6htu3g/XJr+ rmNvzv+8VKE7RwbCTs4tiy1DcqRssuCD0TuW8btI+LB7dRjVwi+n68kJ6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPxvWwbwLsJYY+h3cm4inHUXylSlMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvX0c5YkJ2QXV3bGhqNkhkeWJpS2NkUmZLVktVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD+/MA0G CSqGSIb3DQEBCwUAA4IBAQAViaFpGCSCt9eDyxtVWgbdqJy/zoPPKLokswynt0X6 VrVByn0Cz78EUqz6MUZt6PryhkSWXXXWf7UsSdx30t+zVqrYdC6HcOkTN0tRwBkX LEpamLN60EsQaFH5s32OkD/9INsAC3gKOBjP1qzyFvXRQLsAbkLQsxn3SR2wsQjC bMNXVMP1f4hQlpIYjAuieP3QE0DK1qEdmeYNzRP7HeOxA+YNdAWcuLVdbszdZtck PjqoIZagUcNV6FVQGucJYMiGp14S57pFEj9FXFYJMiovCVBaBTgn7JFvWDAnclST LrOUFjFjM8riAFG+SvyXxoE46qPIeBjl8G8WX/niF9US -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:15 2026 by rpki-client