This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/gdwYYL9CsGDFTkAuG8S2liyK-r0.roa File: gdwYYL9CsGDFTkAuG8S2liyK-r0.roa (raw, json) Hash identifier: S6etNmQi4pEy1ZdQxxbNiQYv530X1B2bmlUtb5h29UQ= Subject key identifier: 81:DC:18:60:BF:42:B0:60:C5:4E:40:2E:1B:C4:B6:96:2C:8A:FA:BD Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498 Certificate serial: 019B7D5BEDFA88533282B56E4B18843C67C7 Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/gdwYYL9CsGDFTkAuG8S2liyK-r0.roa Signing time: Fri 02 Jan 2026 06:18:55 +0000 ROA not before: Fri 02 Jan 2026 06:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215984 IP address blocks: 89.150.43.0/24 maxlen: 24 89.150.56.0/24 maxlen: 24 89.150.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ed:fa:88:53:32:82:b5:6e:4b:18:84:3c:67:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498 Validity Not Before: Jan 2 06:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81dc1860bf42b060c54e402e1bc4b6962c8afabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:6f:93:71:fe:89:43:98:16:ad:f5:b6:bf: 5a:0b:27:75:db:17:64:cb:9a:fa:3a:d0:1c:e8:a9: 6b:d9:ee:fb:0a:cd:07:21:1e:52:fc:9c:55:e6:ca: 36:f0:25:ee:a8:99:55:09:61:c5:b4:36:8a:8d:17: 25:53:54:9f:4e:5f:01:a9:64:cb:c4:65:1b:23:91: 3a:58:31:95:e9:91:77:f9:1f:fb:9b:52:a5:91:bc: 2b:24:08:30:b1:93:46:2c:4d:0e:f0:e1:67:c9:c9: 6d:bf:29:bc:67:25:8b:75:01:63:8c:f8:22:58:fe: 8b:d2:ea:bb:ff:31:c8:0b:1c:a1:e1:63:fb:a9:c4: 26:80:79:d6:38:af:5d:9f:37:85:36:3c:e2:7e:22: 23:88:5d:38:de:0d:cc:ca:31:81:a0:93:fc:8f:db: 2e:a4:cc:ef:1b:95:e4:cb:b3:49:44:ae:a1:26:ec: f2:58:fb:3f:8c:05:ee:4c:c2:9d:ab:8d:16:c4:2f: b5:49:48:42:6c:6a:83:bc:14:05:1e:f3:26:bd:68: a6:a1:04:6c:dd:a0:e5:b4:e5:da:80:7c:52:63:16: 0a:3c:fd:ec:64:5e:bb:d9:08:29:01:5a:9b:5f:7c: ca:28:cd:c6:e2:a8:9a:b2:87:67:f3:00:6b:c6:16: 54:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DC:18:60:BF:42:B0:60:C5:4E:40:2E:1B:C4:B6:96:2C:8A:FA:BD X509v3 Authority Key Identifier: keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/gdwYYL9CsGDFTkAuG8S2liyK-r0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.150.43.0/24 89.150.56.0/24 89.150.61.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:29:7b:d0:49:65:2a:4f:3a:08:54:d3:69:da:6d:cf:cc:b6: dc:dc:a6:8e:76:0b:02:b1:6b:df:58:09:3e:2c:0a:84:5d:97: 2d:8e:1b:40:9a:18:1e:c1:a6:e1:7e:99:f6:8b:8f:39:71:87: ff:d5:fc:6d:d2:3f:21:67:7b:cb:79:bc:0e:07:62:3c:5b:68: e0:ea:0f:70:1f:50:1e:25:db:44:60:cf:07:cc:a7:cb:48:2c: 5e:69:32:a3:df:42:40:9e:8d:86:e6:c2:92:94:ef:8f:b8:cd: 4f:f1:09:29:a4:d9:6f:fe:42:ca:4c:5e:79:b9:72:c0:34:4d: e8:38:c7:be:0c:93:e6:36:ce:ea:eb:1d:17:4d:8d:d6:7d:ae: 04:5c:7e:ec:63:fa:e8:f8:51:da:17:09:70:80:ab:b2:07:9b: 2e:21:f5:3c:ab:cf:b3:4a:d4:37:16:47:af:6c:3e:47:ec:4d: 23:57:82:5e:dc:5a:9c:ee:eb:75:cc:a0:15:5d:a2:65:29:4b: 87:cc:6d:e0:de:fe:30:df:1d:bc:e7:bc:1e:f8:a4:b4:4b:0c: f1:1a:59:ec:80:d6:03:67:10:35:b5:71:c6:61:69:bd:8e:b2: 1d:24:e5:f5:f2:f6:b0:c2:03:2a:a4:3b:e3:f3:41:d2:36:f6: bc:63:ce:c3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9W+36iFMygrVuSxiEPGfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx MzM0OTgwHhcNMjYwMTAyMDYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWRjMTg2MGJmNDJiMDYwYzU0ZTQwMmUxYmM0YjY5NjJjOGFmYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrdvk3H+iUOYFq31tr9aCyd12xdk y5r6OtAc6Klr2e77Cs0HIR5S/JxV5so28CXuqJlVCWHFtDaKjRclU1SfTl8BqWTL xGUbI5E6WDGV6ZF3+R/7m1KlkbwrJAgwsZNGLE0O8OFnycltvym8ZyWLdQFjjPgi WP6L0uq7/zHICxyh4WP7qcQmgHnWOK9dnzeFNjzifiIjiF043g3MyjGBoJP8j9su pMzvG5Xky7NJRK6hJuzyWPs/jAXuTMKdq40WxC+1SUhCbGqDvBQFHvMmvWimoQRs 3aDltOXagHxSYxYKPP3sZF672QgpAVqbX3zKKM3G4qiasodn8wBrxhZU8QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIHcGGC/QrBgxU5ALhvEtpYsivq9MB8GA1UdIwQY MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt NDZhZjNlNTBjMDUyLzEvZ2R3WVlMOUNzR0RGVGtBdUc4UzJsaXlLLXIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWZYrAwQA WZY4AwQAWZY9MA0GCSqGSIb3DQEBCwUAA4IBAQCaKXvQSWUqTzoIVNNp2m3PzLbc 3KaOdgsCsWvfWAk+LAqEXZctjhtAmhgewabhfpn2i485cYf/1fxt0j8hZ3vLebwO B2I8W2jg6g9wH1AeJdtEYM8HzKfLSCxeaTKj30JAno2G5sKSlO+PuM1P8QkppNlv /kLKTF55uXLANE3oOMe+DJPmNs7q6x0XTY3Wfa4EXH7sY/ro+FHaFwlwgKuyB5su IfU8q8+zStQ3FkevbD5H7E0jV4Je3Fqc7ut1zKAVXaJlKUuHzG3g3v4w3x2857we +KS0SwzxGlnsgNYDZxA1tXHGYWm9jrIdJOX18vawwgMqpDvj80HSNva8Y87D -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:49 2026 by rpki-client