This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/GE-xQiOQAlfBZKjmA6TRTCGdoU0.roa File: GE-xQiOQAlfBZKjmA6TRTCGdoU0.roa (raw, json) Hash identifier: WETZQLtwrrY+i4TnqaPMnaTxbwBcRqRUBRaRgzgm52w= Subject key identifier: 18:4F:B1:42:23:90:02:57:C1:64:A8:E6:03:A4:D1:4C:21:9D:A1:4D Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B790FFBF64B64A2D964E8106A513A41E7 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/GE-xQiOQAlfBZKjmA6TRTCGdoU0.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57707 IP address blocks: 92.119.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fb:f6:4b:64:a2:d9:64:e8:10:6a:51:3a:41:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=184fb14223900257c164a8e603a4d14c219da14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:8b:b6:c9:ac:cf:6e:bf:96:e0:13:04:aa: 19:8e:4b:db:16:0d:0f:db:a6:ce:bf:46:f0:eb:3e: 17:34:4f:74:76:d5:88:49:7b:52:3a:0f:62:c1:f1: e3:67:86:8f:1b:40:7f:d0:72:05:9b:56:6f:83:2e: 62:45:c5:a4:13:f9:a0:b3:83:da:b5:3a:8c:58:e4: d1:db:a8:fb:a8:fe:0a:fe:bd:76:9f:5d:74:08:c4: cd:69:e9:99:39:35:d4:6d:5f:ee:9c:e6:4f:45:1c: b1:fa:15:fc:79:12:2d:dc:a1:7d:cd:1f:ab:1f:17: b0:3e:da:c9:2e:43:ee:33:63:2e:3d:37:0a:6d:e3: 3c:74:93:ba:a3:cd:fe:16:51:00:05:40:80:f9:1f: 6c:cb:a7:d3:09:78:24:11:83:11:65:17:ff:56:43: e8:e8:d3:03:89:71:cf:cf:c3:88:5e:2d:79:6f:ee: f0:60:87:03:a5:93:de:f2:bb:9a:c0:95:ff:36:61: 4d:b1:a6:cf:df:bc:26:13:ae:9a:28:50:e2:a7:58: 02:ca:53:31:9a:ae:38:79:a1:5d:35:c3:37:2a:0d: af:27:3b:40:2f:ad:44:29:db:0f:e9:50:c0:2d:d4: e1:77:6d:61:22:22:39:98:69:19:e6:f2:04:4f:5e: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4F:B1:42:23:90:02:57:C1:64:A8:E6:03:A4:D1:4C:21:9D:A1:4D X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/GE-xQiOQAlfBZKjmA6TRTCGdoU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.184.0/24 Signature Algorithm: sha256WithRSAEncryption 87:dd:39:d4:ff:53:1d:dc:40:73:f2:24:29:dc:f6:fe:f6:4b: c6:de:4d:cc:f5:02:16:48:90:b5:3c:4d:25:c7:f0:c5:1c:f9: 6c:9a:0d:20:4f:fa:f3:40:e8:b9:c1:4a:4b:7e:c7:a5:86:e9: 94:46:ac:c4:c6:8f:41:d1:97:83:7b:df:58:33:dd:1b:79:99: ae:59:05:04:0d:19:5c:b7:46:28:58:04:51:ca:3f:bc:64:1e: 34:c8:d5:aa:2d:84:fd:46:63:45:ab:d8:b5:85:c1:1b:1f:81: 22:90:b4:7b:ab:7c:08:d8:69:e4:26:f5:fa:2b:8e:6b:3f:6a: 23:68:1f:6a:5d:d3:fe:d1:76:95:41:75:a6:5f:23:7c:2e:c9: 44:4e:5c:7b:9b:d2:a2:f9:55:0c:df:63:26:8f:cd:6d:5e:ee: c8:13:1d:56:02:4d:2b:e0:a4:28:39:a2:d8:ac:21:10:b2:59: 5b:6e:17:f6:3c:45:95:fc:b2:b6:da:22:49:0b:59:b8:56:0e: e0:d1:c8:33:54:c7:25:e5:f2:e4:19:ea:37:a6:70:55:8a:e4: 19:e8:94:5d:f1:f8:9b:0d:0f:0f:6b:76:a1:ee:a4:78:d9:dd: df:da:b2:79:2b:c9:30:da:e8:e6:fb:05:a6:2e:db:44:3d:63: 77:ec:82:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/v2S2Si2WToEGpROkHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODRmYjE0MjIzOTAwMjU3YzE2NGE4ZTYwM2E0ZDE0YzIxOWRhMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn2Ltsmsz26/luATBKoZjkvbFg0P 26bOv0bw6z4XNE90dtWISXtSOg9iwfHjZ4aPG0B/0HIFm1Zvgy5iRcWkE/mgs4Pa tTqMWOTR26j7qP4K/r12n110CMTNaemZOTXUbV/unOZPRRyx+hX8eRIt3KF9zR+r HxewPtrJLkPuM2MuPTcKbeM8dJO6o83+FlEABUCA+R9sy6fTCXgkEYMRZRf/VkPo 6NMDiXHPz8OIXi15b+7wYIcDpZPe8ruawJX/NmFNsabP37wmE66aKFDip1gCylMx mq44eaFdNcM3Kg2vJztAL61EKdsP6VDALdThd21hIiI5mGkZ5vIET17e/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBhPsUIjkAJXwWSo5gOk0UwhnaFNMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvR0UteFFpT1FBbGZCWktqbUE2VFJUQ0dkb1UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHe4MA0G CSqGSIb3DQEBCwUAA4IBAQCH3TnU/1Md3EBz8iQp3Pb+9kvG3k3M9QIWSJC1PE0l x/DFHPlsmg0gT/rzQOi5wUpLfselhumURqzExo9B0ZeDe99YM90beZmuWQUEDRlc t0YoWARRyj+8ZB40yNWqLYT9RmNFq9i1hcEbH4EikLR7q3wI2GnkJvX6K45rP2oj aB9qXdP+0XaVQXWmXyN8LslETlx7m9Ki+VUM32Mmj81tXu7IEx1WAk0r4KQoOaLY rCEQsllbbhf2PEWV/LK22iJJC1m4Vg7g0cgzVMcl5fLkGeo3pnBViuQZ6JRd8fib DQ8Pa3ah7qR42d3f2rJ5K8kw2ujm+wWmLttEPWN37ILd -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:52 2026 by rpki-client