This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Gvse7sNANBzJcyMhVrQuM-qrtGE.roa File: Gvse7sNANBzJcyMhVrQuM-qrtGE.roa (raw, json) Hash identifier: hqqRJ4iFz1hezI6wbemgQD3cy0HbR0/r5/7K11Q2FrM= Subject key identifier: 1A:FB:1E:EE:C3:40:34:1C:C9:73:23:21:56:B4:2E:33:EA:AB:B4:61 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019AC0249C2AFA5FF405BCF616252E071EA3 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Gvse7sNANBzJcyMhVrQuM-qrtGE.roa Signing time: Wed 26 Nov 2025 12:30:16 +0000 ROA not before: Wed 26 Nov 2025 12:30:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 80.174.117.0/24 maxlen: 24 80.174.122.0/24 maxlen: 24 80.174.125.0/24 maxlen: 24 80.174.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:24:9c:2a:fa:5f:f4:05:bc:f6:16:25:2e:07:1e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Nov 26 12:30:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1afb1eeec340341cc973232156b42e33eaabb461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:58:79:81:33:23:e5:5c:14:b6:0d:a7:0e:1a: bd:02:3f:cf:02:c9:63:bd:ff:3e:26:14:dd:28:c8: 83:e5:87:01:e9:d0:65:e7:2c:6e:c6:4b:93:da:a1: 5a:8c:d3:61:09:35:99:70:7d:70:dd:6d:04:53:c8: 58:90:0d:a1:d4:7a:c6:de:9b:eb:3c:73:99:7d:d8: f6:e2:00:d3:3c:90:93:4d:1f:81:3c:98:47:ff:2c: 60:8e:2b:2e:75:6b:2b:be:46:8a:32:2d:dd:ff:43: db:7a:b2:21:b6:54:ce:88:a3:6c:0a:fd:4e:d6:ff: 09:4a:36:bc:97:0d:e0:a4:41:af:41:a3:52:43:3e: 3e:80:e7:f6:9c:fd:31:e6:87:05:6f:a6:e5:9d:c5: 30:9b:6c:69:76:f3:52:49:be:6a:10:dc:be:ba:e3: 9f:b2:24:9f:01:64:94:36:c4:d1:21:58:22:83:c8: b6:49:83:bf:ca:dc:fe:1a:ea:c4:86:27:d7:17:3d: 47:8f:56:a7:b1:ed:1a:a8:a5:d8:78:79:7f:ce:20: 15:41:02:59:9d:88:da:14:d9:16:87:c0:bf:e9:cb: 69:70:00:b8:0f:a0:3d:91:35:4b:cc:92:e1:fe:e5: 4e:45:2f:27:f7:bb:9c:a7:25:e1:12:d8:3f:7a:fd: 64:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FB:1E:EE:C3:40:34:1C:C9:73:23:21:56:B4:2E:33:EA:AB:B4:61 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Gvse7sNANBzJcyMhVrQuM-qrtGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.117.0/24 80.174.122.0/24 80.174.125.0-80.174.126.255 Signature Algorithm: sha256WithRSAEncryption 0a:dc:dc:67:39:d1:a1:9e:df:02:2f:62:ed:a6:f3:58:83:93: c9:1c:c0:da:83:ef:15:70:c5:c0:38:c8:6f:3d:43:25:78:bd: e6:e4:bc:4a:6b:e3:a1:ac:d5:20:dd:44:17:7e:cf:21:e5:32: 15:1b:ad:76:9f:9e:a3:5f:b4:41:48:8c:74:3f:f4:7c:d1:18: e5:fb:ef:9e:50:c1:ce:ae:99:74:12:c7:9a:9c:f5:d0:45:aa: ee:6c:f5:a2:44:2d:cf:23:1a:06:e8:4b:27:75:0d:01:30:88: b0:e6:28:71:71:3b:73:a3:c4:80:a8:28:c4:43:8b:2a:94:b3: ef:51:59:1a:13:f0:80:f8:99:a2:c3:c1:bc:4a:6a:19:c9:79: 7e:55:f6:e4:d6:e5:17:b6:f3:b5:41:54:0a:0b:2d:a0:01:6e: 85:4d:86:c5:17:7c:3c:ce:56:13:c2:61:24:f2:75:80:81:5d: a8:24:88:bc:bc:77:cb:be:21:71:78:d8:b1:65:73:b4:7b:ec: b4:18:38:68:ea:9c:2e:65:e7:ac:fa:04:56:a8:35:ad:bb:ab: 9e:04:96:fa:a3:58:a5:3f:57:19:3a:79:60:ec:3d:2d:7e:ec: 34:93:ac:2a:c0:ab:95:e1:d5:6d:c6:35:be:bd:b4:9c:6b:36: f2:62:84:43 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZrAJJwq+l/0Bbz2FiUuBx6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMTI2MTIzMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWZiMWVlZWMzNDAzNDFjYzk3MzIzMjE1NmI0MmUzM2VhYWJiNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+lh5gTMj5VwUtg2nDhq9Aj/PAslj vf8+JhTdKMiD5YcB6dBl5yxuxkuT2qFajNNhCTWZcH1w3W0EU8hYkA2h1HrG3pvr PHOZfdj24gDTPJCTTR+BPJhH/yxgjisudWsrvkaKMi3d/0PberIhtlTOiKNsCv1O 1v8JSja8lw3gpEGvQaNSQz4+gOf2nP0x5ocFb6blncUwm2xpdvNSSb5qENy+uuOf siSfAWSUNsTRIVgig8i2SYO/ytz+GurEhifXFz1Hj1anse0aqKXYeHl/ziAVQQJZ nYjaFNkWh8C/6ctpcAC4D6A9kTVLzJLh/uVORS8n97ucpyXhEtg/ev1k2wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBr7Hu7DQDQcyXMjIVa0LjPqq7RhMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvR3ZzZTdzTkFOQnpKY3lNaFZyUXVNLXFydEdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAUK51AwQA UK56MAwDBABQrn0DBABQrn4wDQYJKoZIhvcNAQELBQADggEBAArc3Gc50aGe3wIv Yu2m81iDk8kcwNqD7xVwxcA4yG89QyV4vebkvEpr46Gs1SDdRBd+zyHlMhUbrXaf nqNftEFIjHQ/9HzRGOX7755Qwc6umXQSx5qc9dBFqu5s9aJELc8jGgboSyd1DQEw iLDmKHFxO3OjxICoKMRDiyqUs+9RWRoT8ID4maLDwbxKahnJeX5V9uTW5Re287VB VAoLLaABboVNhsUXfDzOVhPCYSTydYCBXagkiLy8d8u+IXF42LFlc7R77LQYOGjq nC5l56z6BFaoNa27q54ElvqjWKU/Vxk6eWDsPS1+7DSTrCrAq5Xh1W3GNb69tJxr NvJihEM= -----END CERTIFICATE-----Generated at Sat Dec 6 18:24:11 2025 by rpki-client