This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/GtMCe24ngv6kwkwMfciDCRzIGbc.roa File: GtMCe24ngv6kwkwMfciDCRzIGbc.roa (raw, json) Hash identifier: HPYG+bYgN4LrxtIhEXRuNsczF+K8PHsFJkbYTipolY0= Subject key identifier: 1A:D3:02:7B:6E:27:82:FE:A4:C2:4C:0C:7D:C8:83:09:1C:C8:19:B7 Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80 Certificate serial: 019B7834B7F37588B4D67C4294F6FEB927FD Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/GtMCe24ngv6kwkwMfciDCRzIGbc.roa Signing time: Thu 01 Jan 2026 06:17:59 +0000 ROA not before: Thu 01 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49168 IP address blocks: 91.221.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b7:f3:75:88:b4:d6:7c:42:94:f6:fe:b9:27:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80 Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ad3027b6e2782fea4c24c0c7dc883091cc819b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:d7:c0:cb:5b:ce:1d:a2:65:30:d5:fd:4b: 61:23:5b:af:4f:19:d1:12:c8:2f:20:76:07:cd:bc: 65:4b:b2:4e:44:94:4e:77:44:72:ee:b2:4e:62:5b: f1:bf:6d:5e:c6:67:c2:8d:ae:67:24:98:70:27:fb: d0:d3:b2:68:78:f1:b2:f2:2b:f6:61:3e:d2:ed:fd: 52:ba:20:80:7c:9d:1d:ac:7e:4f:b3:f0:d7:98:a0: bb:a1:45:2a:05:2f:1e:af:13:a6:73:20:e0:2e:f1: c6:d9:51:20:6a:5b:49:e2:7c:e2:34:e9:e9:4e:c8: 60:47:fa:4f:19:94:14:e8:a4:30:7e:7f:b7:fe:3c: c7:54:5f:d9:c2:db:76:41:13:2f:0c:08:ee:9f:b8: 11:b2:74:29:ee:48:e9:99:1a:3a:6f:54:53:ef:c5: 13:24:56:ac:32:93:8b:67:d1:a5:92:b5:b6:3c:f3: b0:1f:87:c1:25:04:5b:7b:16:7d:79:0c:fb:d7:b8: 19:a1:de:12:4e:b9:df:6c:41:b6:f2:5d:5a:cf:4f: 5a:19:e4:a0:87:a3:6a:dc:60:c7:2d:2e:95:dc:bf: a4:41:c1:b6:db:ca:c8:bd:7a:ad:48:c1:1a:0d:4f: f8:fc:95:91:43:9a:4c:ec:c4:f8:be:ac:c9:14:93: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D3:02:7B:6E:27:82:FE:A4:C2:4C:0C:7D:C8:83:09:1C:C8:19:B7 X509v3 Authority Key Identifier: keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/GtMCe24ngv6kwkwMfciDCRzIGbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.74.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:93:62:2a:de:8e:9c:e9:2f:a6:0a:c2:14:8a:95:4a:ca:7f: 9d:7a:b8:58:1d:0c:c0:9a:92:47:ce:45:e8:e6:f9:e7:9e:d9: d2:51:b8:ba:96:73:90:51:31:d0:f6:06:c3:79:5d:ec:62:bb: 61:97:b9:d1:02:be:b8:77:1c:bb:50:84:a7:9b:f0:66:1e:76: a5:fe:4e:92:d6:77:57:81:05:ae:26:cc:9e:9d:45:b4:c4:a2: d6:4a:97:69:91:50:72:db:ea:82:bc:0c:c6:4a:97:60:97:7c: 51:98:11:f1:04:2b:28:3c:2a:0a:e0:cc:71:61:7f:5e:63:6b: e7:be:dc:e6:e3:f6:c1:88:d5:1a:1e:8b:98:7d:47:66:f6:1c: d7:79:2d:cb:55:b2:ac:38:62:57:76:c0:a9:48:26:d5:43:f2: 63:b1:ff:16:7d:b5:99:5c:3b:77:89:cb:96:3e:ae:cc:fe:f0: 1d:aa:da:bd:15:0a:2e:3c:dc:f4:2d:85:b1:79:b1:ab:ff:05: 86:12:3d:fa:77:22:bb:15:16:5f:ea:a2:34:bc:ca:9e:33:54: b0:d0:86:53:ab:bc:05:03:37:29:b4:1f:18:13:d1:5d:20:50: 42:43:61:73:21:96:04:cc:e7:cc:3a:6d:91:e0:20:15:80:88: 0a:5d:d6:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLfzdYi01nxClPb+uSf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MjFjOGZmMDQzN2Y3ZWRkODI5MTY2ZmRlMDM0NDZmODYx MDlkODAwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWQzMDI3YjZlMjc4MmZlYTRjMjRjMGM3ZGM4ODMwOTFjYzgxOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5jXwMtbzh2iZTDV/UthI1uvTxnR EsgvIHYHzbxlS7JORJROd0Ry7rJOYlvxv21exmfCja5nJJhwJ/vQ07JoePGy8iv2 YT7S7f1SuiCAfJ0drH5Ps/DXmKC7oUUqBS8erxOmcyDgLvHG2VEgaltJ4nziNOnp TshgR/pPGZQU6KQwfn+3/jzHVF/Zwtt2QRMvDAjun7gRsnQp7kjpmRo6b1RT78UT JFasMpOLZ9GlkrW2PPOwH4fBJQRbexZ9eQz717gZod4STrnfbEG28l1az09aGeSg h6Nq3GDHLS6V3L+kQcG228rIvXqtSMEaDU/4/JWRQ5pM7MT4vqzJFJNa7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBrTAntuJ4L+pMJMDH3IgwkcyBm3MB8GA1UdIwQY MBaAFGghyP8EN/ft2CkWb94DRG+GEJ2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMt MjVhZTkyOTNmNmI0LzEvR3RNQ2UyNG5ndjZrd2t3TWZjaURDUnpJR2JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMtMjVhZTkyOTNmNmI0 LzEvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW91KMA0G CSqGSIb3DQEBCwUAA4IBAQAqk2Iq3o6c6S+mCsIUipVKyn+derhYHQzAmpJHzkXo 5vnnntnSUbi6lnOQUTHQ9gbDeV3sYrthl7nRAr64dxy7UISnm/BmHnal/k6S1ndX gQWuJsyenUW0xKLWSpdpkVBy2+qCvAzGSpdgl3xRmBHxBCsoPCoK4MxxYX9eY2vn vtzm4/bBiNUaHouYfUdm9hzXeS3LVbKsOGJXdsCpSCbVQ/Jjsf8WfbWZXDt3icuW Pq7M/vAdqtq9FQouPNz0LYWxebGr/wWGEj36dyK7FRZf6qI0vMqeM1Sw0IZTq7wF AzcptB8YE9FdIFBCQ2FzIZYEzOfMOm2R4CAVgIgKXdbT -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:42 2026 by rpki-client