This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa File: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (raw, json) Hash identifier: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU= Subject key identifier: 19:34:A6:9C:6D:0F:01:54:EA:FD:92:1E:DC:EA:98:20:F2:E7:0E:4A Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019B797EEFCB3B4A08F7DD79B1B49DF7655C Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51335 IP address blocks: 194.213.124.0/23 maxlen: 23 2001:67c:10f0::/48 maxlen: 48 2a02:68c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ef:cb:3b:4a:08:f7:dd:79:b1:b4:9d:f7:65:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1934a69c6d0f0154eafd921edcea9820f2e70e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a9:1e:19:ab:05:c0:6d:5b:73:d6:6d:4c:41: f7:97:ce:2d:7b:a5:39:d2:1f:7d:6a:78:b6:2d:e8: 14:1c:e1:52:bc:7c:c5:c0:61:39:4b:7f:ec:33:fb: 9c:0e:73:7d:f0:27:30:44:4f:19:3c:6c:0d:e5:89: 32:45:e0:25:9b:7e:81:31:bf:e1:80:5f:2f:e7:29: de:02:8b:71:38:d9:c0:1f:21:5a:9b:70:5d:09:a1: ae:f3:92:e8:86:f6:6f:05:8e:cf:bf:1c:93:36:76: 1f:02:73:89:20:b6:ec:e2:90:af:c8:7e:98:92:f8: 98:40:4e:c0:c8:bc:2e:fe:3d:16:59:9a:d7:bb:5c: 12:d0:f1:87:90:da:9b:d1:b5:69:19:b0:af:b0:d4: c4:f8:4b:25:e7:eb:69:c1:1b:d5:68:3b:71:18:9e: 21:38:af:8c:54:a0:85:30:01:cb:f1:af:1a:5a:53: 56:d6:28:5e:b1:a4:6a:2e:26:f5:fd:1c:db:81:3f: 7c:56:d9:74:74:c4:7d:3a:73:01:9d:e3:1f:d9:8b: a7:99:7a:f0:19:d6:3c:05:20:bf:1d:ce:2e:fe:a0: 52:ce:02:ae:17:b3:64:7c:52:29:05:5d:32:1e:cf: 49:4d:a2:76:ab:22:96:88:24:5e:8c:bf:b8:6e:20: b8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:34:A6:9C:6D:0F:01:54:EA:FD:92:1E:DC:EA:98:20:F2:E7:0E:4A X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.213.124.0/23 IPv6: 2001:67c:10f0::/48 2a02:68c0::/32 Signature Algorithm: sha256WithRSAEncryption 11:cd:4d:29:a7:ac:b6:6d:02:55:a5:ea:a6:e3:58:f8:a7:60: c3:1a:93:f4:a1:cb:d3:2c:22:e4:7a:18:68:92:c8:b9:29:8c: d5:8d:96:d3:ac:9f:a0:ca:85:97:a9:8d:67:c1:57:74:27:62: 4d:f7:3e:58:36:aa:eb:12:b5:c1:64:68:70:b0:05:f0:8e:bd: ec:61:99:07:8f:ec:91:47:a2:05:32:b7:50:67:a1:36:84:13: 17:6b:e4:ea:42:6a:84:af:d2:a3:68:32:e8:86:c5:e9:73:ac: 92:c9:5c:e0:71:40:07:b7:9f:f8:b1:c5:a9:ca:dd:fc:0b:39: ba:ac:6f:5c:42:5b:8d:cb:f0:d9:b3:71:ce:58:93:23:92:ec: 73:ce:f9:50:f9:c9:65:ba:8e:4d:5e:63:f8:a2:d8:45:87:2f: a1:52:af:ff:ac:0b:7d:08:34:55:61:a5:3e:84:02:b3:15:39: 8f:05:03:bc:27:ee:b0:d3:63:29:69:cd:cf:b7:99:76:68:51: 05:7c:de:f5:05:ed:03:d3:59:8c:f0:f5:12:90:a3:61:1a:67: 6f:21:4c:bc:c8:e6:02:ec:5b:99:83:67:86:43:8a:c1:8e:d1: 55:2e:9a:f0:42:61:67:b4:68:52:73:92:be:15:51:83:43:04: 5a:9b:bc:f5 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5fu/LO0oI9915sbSd92VcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTM0YTY5YzZkMGYwMTU0ZWFmZDkyMWVkY2VhOTgyMGYyZTcwZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4akeGasFwG1bc9ZtTEH3l84te6U5 0h99ani2LegUHOFSvHzFwGE5S3/sM/ucDnN98CcwRE8ZPGwN5YkyReAlm36BMb/h gF8v5yneAotxONnAHyFam3BdCaGu85LohvZvBY7PvxyTNnYfAnOJILbs4pCvyH6Y kviYQE7AyLwu/j0WWZrXu1wS0PGHkNqb0bVpGbCvsNTE+Esl5+tpwRvVaDtxGJ4h OK+MVKCFMAHL8a8aWlNW1ihesaRqLib1/RzbgT98Vtl0dMR9OnMBneMf2YunmXrw GdY8BSC/Hc4u/qBSzgKuF7NkfFIpBV0yHs9JTaJ2qyKWiCRejL+4biC45QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBk0ppxtDwFU6v2SHtzqmCDy5w5KMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvR1RTbW5HMFBBVlRxX1pJZTNPcVlJUExuRGtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQBwtV8MBYE AgACMBADBwAgAQZ8EPADBQAqAmjAMA0GCSqGSIb3DQEBCwUAA4IBAQARzU0pp6y2 bQJVpeqm41j4p2DDGpP0ocvTLCLkehhoksi5KYzVjZbTrJ+gyoWXqY1nwVd0J2JN 9z5YNqrrErXBZGhwsAXwjr3sYZkHj+yRR6IFMrdQZ6E2hBMXa+TqQmqEr9KjaDLo hsXpc6ySyVzgcUAHt5/4scWpyt38Czm6rG9cQluNy/DZs3HOWJMjkuxzzvlQ+cll uo5NXmP4othFhy+hUq//rAt9CDRVYaU+hAKzFTmPBQO8J+6w02Mpac3Pt5l2aFEF fN71Be0D01mM8PUSkKNhGmdvIUy8yOYC7FuZg2eGQ4rBjtFVLprwQmFntGhSc5K+ FVGDQwRam7z1 -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:48 2026 by rpki-client