This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GmKQ4bIej-w-dkGD2h7FZEnab1Y.roa File: GmKQ4bIej-w-dkGD2h7FZEnab1Y.roa (raw, json) Hash identifier: f98ZBTnA+GZX9lp5AKC2hPKSXCDy3TP+TV+RxWjYyNQ= Subject key identifier: 1A:62:90:E1:B2:1E:8F:EC:3E:76:41:83:DA:1E:C5:64:49:DA:6F:56 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B7759607C9C5D2772422E113029B3F5F1 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GmKQ4bIej-w-dkGD2h7FZEnab1Y.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60118 IP address blocks: 89.42.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:60:7c:9c:5d:27:72:42:2e:11:30:29:b3:f5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a6290e1b21e8fec3e764183da1ec56449da6f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:83:04:23:24:07:45:da:b9:81:1b:ee:3f: 89:8b:3e:ad:32:53:03:0d:a9:20:c1:6c:3b:05:c7: 4a:02:b3:0a:69:3b:51:59:e1:af:1c:46:bc:af:74: b9:fe:3d:fa:c6:f1:00:8c:a8:39:67:6f:9e:c1:01: 12:b0:f0:e4:ec:3a:55:ca:20:27:44:49:68:97:2b: 82:83:1b:3c:2f:01:71:b7:ce:83:70:dd:d5:d9:be: 89:08:7d:0d:f1:0a:33:13:6a:48:68:20:54:95:ca: 66:bf:f2:27:a9:43:a4:d6:42:d4:ce:33:82:74:75: d7:dc:63:9b:c8:a4:7d:30:e6:b8:4c:cf:a0:cd:33: 04:ed:15:0f:4e:cc:96:d9:24:d8:52:75:2d:84:1a: 5d:4f:f9:66:ba:27:41:10:bb:eb:03:8e:47:b0:e2: 25:5d:57:0b:11:86:6f:79:70:1b:1a:24:27:ff:78: 3f:44:5d:41:e8:ab:b6:26:07:3e:1b:2c:1b:31:34: 30:29:65:da:0e:71:13:56:cd:fc:a3:73:dd:77:d3: 69:ff:47:1f:79:bd:d1:95:41:13:a6:72:7a:1e:6b: c6:53:dc:2c:24:69:47:ea:28:78:6a:0e:75:c4:59: 66:56:35:93:7f:0b:d3:9b:b5:e8:de:3a:dc:35:b1: df:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:62:90:E1:B2:1E:8F:EC:3E:76:41:83:DA:1E:C5:64:49:DA:6F:56 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GmKQ4bIej-w-dkGD2h7FZEnab1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.26.0/24 Signature Algorithm: sha256WithRSAEncryption 76:cb:c0:c2:e5:05:bd:fb:1a:45:00:e2:52:c2:d6:c7:01:42: 8f:e2:a2:a7:e7:99:05:a1:d3:b1:10:bf:df:ca:e7:4e:b5:d3: 5e:cd:b1:11:40:0a:fa:85:df:62:e6:11:a5:98:67:60:8d:45: 78:b8:91:1e:a1:02:9f:65:5f:4f:45:62:68:03:c1:4a:1c:a0: ce:c0:4b:ef:e9:ad:9b:79:c7:24:38:1d:30:0b:c3:32:71:c4: 3f:11:97:9b:a2:a0:57:73:cb:bd:ce:bd:b6:c1:c1:88:f4:c7: d1:e8:15:c6:bd:47:7c:d1:13:7c:2b:2f:09:19:3b:a2:16:b3: 3b:aa:65:93:ab:51:33:04:d0:d3:cd:64:99:7d:dd:07:de:fd: 86:9f:12:f1:73:ca:10:c8:2c:29:7c:4e:39:a5:12:40:ea:9e: 11:4a:4e:72:0e:68:3a:d5:cd:46:0b:7f:bd:87:e4:8a:66:a8: 1a:3d:23:7e:45:3e:34:a2:63:f4:48:46:cc:b4:3b:38:7f:b3: 65:1e:9a:4c:84:d5:59:06:4e:10:3c:95:22:a0:f3:d3:1f:67: 80:d0:0a:b6:75:e8:5d:a0:c2:74:83:70:a1:cc:2c:68:cc:fb: 2e:bd:df:ab:99:c1:4f:a5:3f:d6:6f:ad:16:a5:4c:58:c0:9d: 5b:10:64:3d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WWB8nF0nckIuETAps/XxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTYyOTBlMWIyMWU4ZmVjM2U3NjQxODNkYTFlYzU2NDQ5ZGE2ZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut6DBCMkB0XauYEb7j+Jiz6tMlMD DakgwWw7BcdKArMKaTtRWeGvHEa8r3S5/j36xvEAjKg5Z2+ewQESsPDk7DpVyiAn RElolyuCgxs8LwFxt86DcN3V2b6JCH0N8QozE2pIaCBUlcpmv/InqUOk1kLUzjOC dHXX3GObyKR9MOa4TM+gzTME7RUPTsyW2STYUnUthBpdT/lmuidBELvrA45HsOIl XVcLEYZveXAbGiQn/3g/RF1B6Ku2Jgc+GywbMTQwKWXaDnETVs38o3Pdd9Np/0cf eb3RlUETpnJ6HmvGU9wsJGlH6ih4ag51xFlmVjWTfwvTm7Xo3jrcNbHffQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBpikOGyHo/sPnZBg9oexWRJ2m9WMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0dtS1E0Ykllai13LWRrR0QyaDdGWkVuYWIxWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZKhow DQYJKoZIhvcNAQELBQADggEBAHbLwMLlBb37GkUA4lLC1scBQo/ioqfnmQWh07EQ v9/K5061017NsRFACvqF32LmEaWYZ2CNRXi4kR6hAp9lX09FYmgDwUocoM7AS+/p rZt5xyQ4HTALwzJxxD8Rl5uioFdzy73OvbbBwYj0x9HoFca9R3zRE3wrLwkZO6IW szuqZZOrUTME0NPNZJl93Qfe/YafEvFzyhDILCl8TjmlEkDqnhFKTnIOaDrVzUYL f72H5IpmqBo9I35FPjSiY/RIRsy0Ozh/s2UemkyE1VkGThA8lSKg89MfZ4DQCrZ1 6F2gwnSDcKHMLGjM+y6936uZwU+lP9ZvrRalTFjAnVsQZD0= -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:42 2026 by rpki-client