This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/gkGO9TLlbJNRyT0FacNUzmIccKM.roa File: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (raw, json) Hash identifier: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0= Subject key identifier: 82:41:8E:F5:32:E5:6C:93:51:C9:3D:05:69:C3:54:CE:62:1C:70:A3 Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10 Certificate serial: 019B79EC3F3D370CDA8BDDA2CA9B05F8A462 Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/gkGO9TLlbJNRyT0FacNUzmIccKM.roa Signing time: Thu 01 Jan 2026 14:18:04 +0000 ROA not before: Thu 01 Jan 2026 14:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39392 IP address blocks: 213.109.164.0/22 maxlen: 22 2a09:ec00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3f:3d:37:0c:da:8b:dd:a2:ca:9b:05:f8:a4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10 Validity Not Before: Jan 1 14:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82418ef532e56c9351c93d0569c354ce621c70a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:bc:c9:a2:89:da:f5:e0:7e:31:a0:25:b9: d6:4c:21:23:8a:3a:8c:37:c9:3f:a4:78:49:3e:2b: 62:99:6d:dd:28:1d:9e:15:18:80:72:d5:47:9f:40: 1d:55:2f:83:e9:48:80:13:c7:2e:8f:34:25:62:85: b6:0e:a8:5c:f9:9e:b8:ed:bf:08:8d:d2:59:ec:c0: a8:1f:ec:15:be:e0:b5:d4:77:65:11:07:21:86:cd: ed:43:2b:d0:1f:c3:20:62:5a:64:e9:2c:67:70:27: 82:c2:72:d0:03:41:52:cc:ee:7c:66:76:90:b7:e1: 01:ff:38:05:64:62:d8:81:a4:cd:b1:92:df:55:ad: a0:ab:bc:8b:9e:b5:9a:2d:14:d6:6a:b6:38:3b:13: ea:5a:08:d8:0a:d7:95:91:49:60:30:82:b7:0d:01: 57:6f:05:de:63:f0:1c:09:4f:b8:89:61:14:1d:5e: d7:aa:c6:0e:90:ae:a8:27:91:bf:11:4c:47:12:14: eb:fa:45:dc:81:3d:e7:f2:28:d4:b2:b8:b7:12:3f: c3:55:93:d1:20:af:29:a0:41:fd:6a:e9:11:e7:8f: 5b:40:6e:1f:84:fe:70:3c:ef:3d:e7:27:b6:42:f8: 9d:5b:cc:f7:d2:a3:56:38:eb:41:ea:64:7d:27:7c: 69:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:41:8E:F5:32:E5:6C:93:51:C9:3D:05:69:C3:54:CE:62:1C:70:A3 X509v3 Authority Key Identifier: keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/gkGO9TLlbJNRyT0FacNUzmIccKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.164.0/22 IPv6: 2a09:ec00::/29 Signature Algorithm: sha256WithRSAEncryption b9:bd:1f:38:8c:05:70:22:4c:0a:6a:e3:b4:af:86:6a:0b:74: cf:f1:96:8c:b2:32:54:9d:b3:71:28:b7:b9:8a:0b:9c:32:bf: 95:62:3d:a2:cb:be:d9:28:e5:33:dc:27:98:6a:88:4b:ed:5b: 2e:d0:76:07:d6:4e:21:13:e5:50:9a:14:ab:9c:1e:25:2e:26: f2:a3:bf:da:61:f1:92:03:e7:97:8b:a8:8a:d1:f5:86:79:3c: 69:32:79:d6:6c:f9:44:eb:8f:a0:c4:86:5f:01:ca:94:72:b7: 97:52:91:a5:d5:0f:41:09:58:62:a6:03:8b:17:0e:a9:52:4d: dc:e2:88:f1:52:ef:8c:63:c7:55:2a:a9:27:c4:da:8f:1b:d4: 1a:a5:b8:db:e6:0d:0b:3f:08:81:55:b4:a1:59:a1:25:21:b5: 91:ec:98:34:d0:ea:d2:44:b7:7c:98:34:01:b5:a3:3a:c5:02: 42:a4:fd:fc:89:11:c4:fb:e2:6c:9f:9c:57:25:6c:bf:8d:23: 0b:3f:ca:35:9f:99:3d:02:1f:39:02:e1:05:8e:dc:53:d4:19: 90:e5:cc:00:3e:13:fb:0e:94:7b:4e:91:36:fe:83:6e:1b:1c: 26:96:27:5b:24:e8:21:c6:8d:58:ca:dc:fe:97:7b:a6:4c:90: bb:f5:13:2c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57D89Nwzai92iypsF+KRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz NmZmMTAwHhcNMjYwMTAxMTQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjQxOGVmNTMyZTU2YzkzNTFjOTNkMDU2OWMzNTRjZTYyMWM3MGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUy8yaKJ2vXgfjGgJbnWTCEjijqM N8k/pHhJPitimW3dKB2eFRiActVHn0AdVS+D6UiAE8cujzQlYoW2Dqhc+Z647b8I jdJZ7MCoH+wVvuC11HdlEQchhs3tQyvQH8MgYlpk6SxncCeCwnLQA0FSzO58ZnaQ t+EB/zgFZGLYgaTNsZLfVa2gq7yLnrWaLRTWarY4OxPqWgjYCteVkUlgMIK3DQFX bwXeY/AcCU+4iWEUHV7XqsYOkK6oJ5G/EUxHEhTr+kXcgT3n8ijUsri3Ej/DVZPR IK8poEH9aukR549bQG4fhP5wPO895ye2QvidW8z30qNWOOtB6mR9J3xpywIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIJBjvUy5WyTUck9BWnDVM5iHHCjMB8GA1UdIwQY MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt YjUzYjY0Y2YwZDk1LzEvZ2tHTzlUTGxiSk5SeVQwRmFjTlV6bUljY0tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1 LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC1W2kMA0E AgACMAcDBQMqCewAMA0GCSqGSIb3DQEBCwUAA4IBAQC5vR84jAVwIkwKauO0r4Zq C3TP8ZaMsjJUnbNxKLe5igucMr+VYj2iy77ZKOUz3CeYaohL7Vsu0HYH1k4hE+VQ mhSrnB4lLibyo7/aYfGSA+eXi6iK0fWGeTxpMnnWbPlE64+gxIZfAcqUcreXUpGl 1Q9BCVhipgOLFw6pUk3c4ojxUu+MY8dVKqknxNqPG9Qapbjb5g0LPwiBVbShWaEl IbWR7Jg00OrSRLd8mDQBtaM6xQJCpP38iRHE++Jsn5xXJWy/jSMLP8o1n5k9Ah85 AuEFjtxT1BmQ5cwAPhP7DpR7TpE2/oNuGxwmlidbJOghxo1Yytz+l3umTJC79RMs -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:33 2026 by rpki-client