This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa File: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (raw, json) Hash identifier: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg= Subject key identifier: 1A:6F:AD:FA:58:76:13:48:0A:DC:24:AB:21:4F:A0:26:48:A3:7B:F4 Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492 Certificate serial: 019B77C6A19BF2EA9210F856DF3D88373BB2 Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12666 IP address blocks: 194.153.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a1:9b:f2:ea:92:10:f8:56:df:3d:88:37:3b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a6fadfa587613480adc24ab214fa02648a37bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0a:56:31:3b:e6:03:b0:d3:d0:93:55:d7:6d: 5d:3a:30:2c:43:20:5b:41:72:24:b8:82:36:a4:e5: bb:ee:a3:8c:12:68:27:7a:dc:29:8d:09:33:b0:ac: 3e:f9:47:e7:8e:ce:84:87:a8:dc:55:01:aa:8a:38: 37:a3:f1:6a:6d:19:d0:f7:52:18:07:b3:cf:c5:74: 83:c8:c0:a8:39:79:4c:cf:b7:1b:4b:f8:7b:18:3f: a6:d4:33:ee:3b:bd:dd:d9:48:7e:3f:83:aa:e2:75: b9:e5:0b:27:6a:69:11:01:f1:ae:b4:43:34:62:b2: 28:f3:31:e6:42:e2:6b:b0:f4:37:a7:1f:1b:1c:d9: b9:a7:8c:ca:31:80:27:31:e5:c7:c5:48:41:8a:1e: 94:f2:a8:39:66:b5:ef:09:ab:e2:25:55:ab:6c:09: 5f:d8:e8:78:cf:be:93:67:dc:0b:ec:44:5c:a8:ac: 92:7d:2f:5d:de:17:e2:d8:eb:85:bd:2a:00:25:5e: 17:93:69:94:35:8b:e9:42:cd:b9:a6:b4:72:e6:50: e2:e5:c2:cd:e2:7e:bb:4d:c2:39:48:d7:22:22:48: 7f:d6:24:02:b1:9d:04:f1:dc:e3:cb:20:7f:6c:1c: 12:c7:26:98:51:17:be:e4:70:64:3c:84:15:08:99: 46:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6F:AD:FA:58:76:13:48:0A:DC:24:AB:21:4F:A0:26:48:A3:7B:F4 X509v3 Authority Key Identifier: keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.74.0/24 Signature Algorithm: sha256WithRSAEncryption 95:31:53:1b:e2:01:d0:86:d6:83:30:b4:7e:6b:ff:c9:97:2a: 2f:d6:3d:59:de:c0:72:54:c3:1c:a3:fc:ff:c4:a7:e3:9b:d4: 17:f1:d3:9f:14:89:b5:8b:fe:b7:1a:da:95:3f:41:4e:cf:a8: 39:fc:00:0a:58:57:e0:72:19:50:cb:84:ba:a2:13:df:d6:28: 3a:76:49:db:88:17:37:b0:23:f7:7e:ff:49:c3:69:78:39:30: 1a:2b:20:9c:c1:aa:c8:4b:c5:97:41:28:b2:1c:d3:87:bd:d8: cb:de:8c:42:bd:47:72:e9:a3:a1:8d:63:57:a2:d8:86:3b:01: bd:0b:5c:51:fd:43:e5:25:ad:38:a4:ba:0b:6a:8a:9c:68:6d: 64:fc:85:b1:4f:16:b0:34:ca:d2:f3:b2:6e:b5:72:3d:50:dd: bc:b0:14:9d:39:02:dd:f8:f8:b9:b0:03:59:c3:80:9d:5d:5e: 5b:8d:19:46:71:d1:9d:26:bb:5f:80:33:8e:3a:28:45:9b:94: 53:5e:31:0e:7c:87:ba:7d:41:27:e9:f1:53:fb:a6:0a:eb:52: e4:cf:3c:af:b6:8a:46:63:20:87:83:64:d9:ee:40:b4:d4:a0: c1:f7:84:1f:e1:d1:79:9c:54:c2:5b:85:2e:ab:d7:4d:99:3a: e9:b2:fb:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqGb8uqSEPhW3z2INzuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw MzU0OTIwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTZmYWRmYTU4NzYxMzQ4MGFkYzI0YWIyMTRmYTAyNjQ4YTM3YmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ApWMTvmA7DT0JNV121dOjAsQyBb QXIkuII2pOW77qOMEmgnetwpjQkzsKw++Ufnjs6Eh6jcVQGqijg3o/FqbRnQ91IY B7PPxXSDyMCoOXlMz7cbS/h7GD+m1DPuO73d2Uh+P4Oq4nW55QsnamkRAfGutEM0 YrIo8zHmQuJrsPQ3px8bHNm5p4zKMYAnMeXHxUhBih6U8qg5ZrXvCaviJVWrbAlf 2Oh4z76TZ9wL7ERcqKySfS9d3hfi2OuFvSoAJV4Xk2mUNYvpQs25prRy5lDi5cLN 4n67TcI5SNciIkh/1iQCsZ0E8dzjyyB/bBwSxyaYURe+5HBkPIQVCJlGFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpvrfpYdhNICtwkqyFPoCZIo3v0MB8GA1UdIwQY MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et MDYyYzg4ODJiYTcxLzEvR20tdC1saDJFMGdLM0NTcklVLWdKa2lqZV9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwplKMA0G CSqGSIb3DQEBCwUAA4IBAQCVMVMb4gHQhtaDMLR+a//Jlyov1j1Z3sByVMMco/z/ xKfjm9QX8dOfFIm1i/63GtqVP0FOz6g5/AAKWFfgchlQy4S6ohPf1ig6dknbiBc3 sCP3fv9Jw2l4OTAaKyCcwarIS8WXQSiyHNOHvdjL3oxCvUdy6aOhjWNXotiGOwG9 C1xR/UPlJa04pLoLaoqcaG1k/IWxTxawNMrS87JutXI9UN28sBSdOQLd+Pi5sANZ w4CdXV5bjRlGcdGdJrtfgDOOOihFm5RTXjEOfIe6fUEn6fFT+6YK61LkzzyvtopG YyCHg2TZ7kC01KDB94Qf4dF5nFTCW4Uuq9dNmTrpsvvj -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:52 2026 by rpki-client