This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa File: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (raw, json) Hash identifier: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90= Subject key identifier: 19:D9:28:E3:EC:AB:FE:66:50:8D:B8:06:69:7F:2C:0B:84:FF:14:F4 Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544 Certificate serial: 019B7910A8BFB6A08983B06FA3206C1EB3C7 Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 149.62.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a8:bf:b6:a0:89:83:b0:6f:a3:20:6c:1e:b3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544 Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19d928e3ecabfe66508db806697f2c0b84ff14f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:54:89:0f:47:18:fc:b7:aa:7b:30:d6:b6: 3b:1a:59:11:c7:a0:2c:3d:61:d2:1c:63:79:b8:c1: 40:05:52:53:87:cb:61:b6:95:fe:c3:7d:3b:61:10: 55:78:c9:41:f6:e3:83:da:2f:51:1f:e5:16:c7:82: 19:42:11:5b:b5:dd:99:12:e5:17:ec:72:b0:5e:98: 00:6a:dc:d1:12:7f:84:91:19:b4:af:a5:d2:32:75: 13:a3:bc:e3:4e:c6:31:69:26:4e:9a:66:24:b9:e8: aa:aa:d4:93:0b:19:81:e7:85:62:56:ff:b9:ba:f0: 0a:35:ab:97:81:a7:f6:93:97:5b:69:de:2d:fd:d6: af:ff:cf:13:7c:5d:47:76:75:58:74:2f:c7:04:18: 8f:33:44:ce:a6:5f:96:37:52:46:c4:e5:ca:b4:8a: db:76:14:7e:68:0f:6b:0f:1f:41:84:ff:35:a2:dc: 52:d8:dd:18:97:f1:91:39:62:e9:a8:7b:1d:7f:9c: 03:75:0f:16:c3:9b:d0:92:1e:50:18:bf:25:b8:d9: 2b:32:88:9f:9f:41:c7:7d:fd:63:10:d1:87:60:e0: 4b:a7:be:8b:a1:96:49:8b:b2:aa:4d:06:95:a7:0a: b5:4e:65:6c:64:97:6d:ce:71:38:a2:95:9e:e7:4a: 98:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D9:28:E3:EC:AB:FE:66:50:8D:B8:06:69:7F:2C:0B:84:FF:14:F4 X509v3 Authority Key Identifier: keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.62.152.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:ca:1b:48:9a:4c:06:8f:9a:3a:ea:53:75:c2:85:9e:d6:f4: 63:76:6e:17:9c:67:25:67:af:cf:94:79:96:93:6a:a6:4a:fb: e8:fa:10:d4:e1:0f:a1:b8:b5:c9:63:82:74:af:81:e8:a1:84: 1a:3f:15:c8:f4:e3:64:77:2a:68:47:63:83:3f:fa:2c:74:ea: e1:d8:ad:b1:0f:dc:ff:12:e1:87:32:13:4e:f5:40:35:4a:72: 96:c8:a7:d1:68:16:5c:f7:ca:d1:53:b8:97:12:f1:25:60:f9: 0f:2d:56:65:09:81:63:f6:15:b9:04:09:62:90:9a:f3:38:1f: e7:50:c3:04:e2:35:05:3a:14:7f:11:24:60:db:a6:a2:3e:c5: b1:02:c8:5f:06:76:b8:e9:96:1f:e9:72:27:1e:d7:20:3c:2e: 20:be:d2:a5:e7:3c:ef:ae:40:7a:cb:1e:96:3d:dd:44:64:85: e3:24:f7:c3:b8:50:87:e5:53:aa:7d:d2:62:38:d7:5f:2d:b1: 93:96:cf:f4:29:0b:18:29:5f:2f:3e:14:ad:43:8f:8c:1f:6d: 63:57:9d:f5:9a:56:a4:1e:94:95:47:52:f7:a0:da:c0:8e:2d: 4e:b3:be:5b:ff:36:e9:45:e9:0b:ba:f2:30:ab:33:11:eb:a0: 36:a6:6e:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKi/tqCJg7BvoyBsHrPHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MWE4YzQyZWNlODliNWZiZmMyMTBkYzdiNTU0YzcyZWE0 ZjM1NDQwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWQ5MjhlM2VjYWJmZTY2NTA4ZGI4MDY2OTdmMmMwYjg0ZmYxNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAZUiQ9HGPy3qnsw1rY7GlkRx6As PWHSHGN5uMFABVJTh8thtpX+w307YRBVeMlB9uOD2i9RH+UWx4IZQhFbtd2ZEuUX 7HKwXpgAatzREn+EkRm0r6XSMnUTo7zjTsYxaSZOmmYkueiqqtSTCxmB54ViVv+5 uvAKNauXgaf2k5dbad4t/dav/88TfF1HdnVYdC/HBBiPM0TOpl+WN1JGxOXKtIrb dhR+aA9rDx9BhP81otxS2N0Yl/GROWLpqHsdf5wDdQ8Ww5vQkh5QGL8luNkrMoif n0HHff1jENGHYOBLp76LoZZJi7KqTQaVpwq1TmVsZJdtznE4opWe50qYVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBnZKOPsq/5mUI24Bml/LAuE/xT0MB8GA1UdIwQY MBaAFOQajELs6Jtfv8IQ3HtVTHLqTzVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2Yt MWQ2NjZjNDIyYzZhLzEvR2RrbzQteXJfbVpRamJnR2FYOHNDNFRfRlBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2YtMWQ2NjZjNDIyYzZh LzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlT6YMA0G CSqGSIb3DQEBCwUAA4IBAQAtyhtImkwGj5o66lN1woWe1vRjdm4XnGclZ6/PlHmW k2qmSvvo+hDU4Q+huLXJY4J0r4HooYQaPxXI9ONkdypoR2ODP/osdOrh2K2xD9z/ EuGHMhNO9UA1SnKWyKfRaBZc98rRU7iXEvElYPkPLVZlCYFj9hW5BAlikJrzOB/n UMME4jUFOhR/ESRg26aiPsWxAshfBna46ZYf6XInHtcgPC4gvtKl5zzvrkB6yx6W Pd1EZIXjJPfDuFCH5VOqfdJiONdfLbGTls/0KQsYKV8vPhStQ4+MH21jV531mlak HpSVR1L3oNrAji1Os75b/zbpRekLuvIwqzMR66A2pm5/ -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:30 2026 by rpki-client