This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/GtLmij_8lMV4f9doGmHNnDcYdXQ.roa File: GtLmij_8lMV4f9doGmHNnDcYdXQ.roa (raw, json) Hash identifier: 4rP3ji3712NwMTf13O5xXl0bE12eEGoiwj3aLeteuxA= Subject key identifier: 1A:D2:E6:8A:3F:FC:94:C5:78:7F:D7:68:1A:61:CD:9C:37:18:75:74 Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832 Certificate serial: 019AC48C892AFA74787FBEB45DF549027502 Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/GtLmij_8lMV4f9doGmHNnDcYdXQ.roa Signing time: Thu 27 Nov 2025 09:02:15 +0000 ROA not before: Thu 27 Nov 2025 09:02:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2116 IP address blocks: 151.187.0.0/16 maxlen: 16 159.216.0.0/16 maxlen: 16 159.216.119.0/24 maxlen: 24 159.216.220.0/23 maxlen: 23 2a13:6200::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:8c:89:2a:fa:74:78:7f:be:b4:5d:f5:49:02:75:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832 Validity Not Before: Nov 27 09:02:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1ad2e68a3ffc94c5787fd7681a61cd9c37187574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:c1:88:dc:0a:7a:aa:e4:f5:55:ae:50:15: ca:9a:78:64:79:37:80:17:35:ed:cf:48:05:b8:2a: 2b:52:f4:80:87:33:03:76:a9:e7:13:b6:3d:4b:0e: 40:9a:c5:32:83:46:d4:15:42:12:be:70:66:46:7e: 7c:f2:c6:69:8b:a8:8b:c4:c5:23:cf:26:d7:33:f6: 0a:dd:b0:93:d5:3d:c4:f7:95:d2:d5:1e:ab:52:65: 40:a2:2c:a3:43:db:d2:f5:9e:8f:fe:f9:c5:c7:11: a2:df:e7:4f:15:68:d7:24:01:2a:98:86:c4:ee:55: bd:8b:33:1a:70:c8:c2:f5:38:2d:f9:40:0a:6b:9a: 9d:59:af:e9:17:18:1b:18:0f:93:bb:32:ee:be:55: c2:36:5f:92:c0:1c:7d:8a:49:ab:28:6b:24:d2:80: 21:12:90:67:02:81:0c:50:59:32:73:9f:58:2b:c5: 41:f1:73:5b:b9:35:e8:54:fc:b0:ef:17:dc:2c:ca: 69:54:be:71:2b:49:e4:95:3a:9e:a7:4b:0d:2d:a2: 4f:e5:17:1c:2f:1b:49:f2:f3:99:ee:9a:07:3e:70: 99:42:8a:79:1a:07:6d:af:6d:3e:28:f6:81:40:3c: 75:52:54:fe:e6:02:c5:77:1e:d2:45:03:cb:f3:59: d8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D2:E6:8A:3F:FC:94:C5:78:7F:D7:68:1A:61:CD:9C:37:18:75:74 X509v3 Authority Key Identifier: keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/GtLmij_8lMV4f9doGmHNnDcYdXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.187.0.0/16 159.216.0.0/16 IPv6: 2a13:6200::/29 Signature Algorithm: sha256WithRSAEncryption d4:48:f6:42:86:cf:ea:77:8e:1a:d5:97:3f:46:05:d0:3e:20: a6:ce:5c:87:28:f2:62:67:44:6b:28:ec:d5:2f:00:f1:c3:16: 5e:ad:d5:99:4d:f7:98:39:5f:99:b5:f2:d6:43:71:de:f2:90: 84:36:cc:04:99:64:ef:e4:d9:59:0d:35:55:43:26:90:a9:d5: e1:58:f2:93:eb:d0:e2:e6:da:d1:0c:e1:f2:6a:22:6c:07:43: 46:ce:c2:de:4e:26:c6:ad:d9:d5:f6:ba:1c:69:c7:10:d6:e0: 79:d4:cb:ca:a4:4f:f6:46:41:05:5d:62:75:eb:ba:7e:75:2d: a2:93:0e:c9:f9:13:7d:10:9a:ee:81:3d:c8:08:e5:41:b6:0c: 18:75:11:39:96:7c:d7:11:3b:2a:e7:83:1e:3e:2f:ec:18:0c: 0c:bb:fb:1b:4d:71:c0:03:73:d9:c8:33:2f:91:de:8c:9e:cb: d1:63:fc:f9:41:2e:30:e5:af:16:75:23:77:75:f3:d4:d1:b1: 0e:c8:00:e2:35:df:64:73:87:21:f1:a7:05:81:43:d4:d9:02: 55:b3:da:5c:8e:8e:c8:50:28:0b:ab:1f:a7:6f:9b:91:c1:81: 8a:4a:58:c3:22:db:df:eb:71:90:7d:2e:ab:5e:84:ad:65:a1: 2a:d9:a3:bf -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZrEjIkq+nR4f760XfVJAnUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmEwMjNlYmRiMTJlOTcxZTdhODcyOWQ4MjZhNzkyNGNm N2U4MzIwHhcNMjUxMTI3MDkwMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWQyZTY4YTNmZmM5NGM1Nzg3ZmQ3NjgxYTYxY2Q5YzM3MTg3NTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvofBiNwKeqrk9VWuUBXKmnhkeTeA FzXtz0gFuCorUvSAhzMDdqnnE7Y9Sw5AmsUyg0bUFUISvnBmRn588sZpi6iLxMUj zybXM/YK3bCT1T3E95XS1R6rUmVAoiyjQ9vS9Z6P/vnFxxGi3+dPFWjXJAEqmIbE 7lW9izMacMjC9Tgt+UAKa5qdWa/pFxgbGA+TuzLuvlXCNl+SwBx9ikmrKGsk0oAh EpBnAoEMUFkyc59YK8VB8XNbuTXoVPyw7xfcLMppVL5xK0nklTqep0sNLaJP5Rcc LxtJ8vOZ7poHPnCZQop5Ggdtr20+KPaBQDx1UlT+5gLFdx7SRQPL81nYQQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFBrS5oo//JTFeH/XaBphzZw3GHV0MB8GA1UdIwQY MBaAFKgqAj69sS6XHnqHKdgmp5JM9+gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUt MjJmYzU4OGJjNjZmLzEvR3RMbWlqXzhsTVY0Zjlkb0dtSE5uRGNZZFhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUtMjJmYzU4OGJjNjZm LzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAQBAIAATAKAwMAl7sDAwCf 2DANBAIAAjAHAwUDKhNiADANBgkqhkiG9w0BAQsFAAOCAQEA1Ej2QobP6neOGtWX P0YF0D4gps5chyjyYmdEayjs1S8A8cMWXq3VmU33mDlfmbXy1kNx3vKQhDbMBJlk 7+TZWQ01VUMmkKnV4Vjyk+vQ4uba0Qzh8moibAdDRs7C3k4mxq3Z1fa6HGnHENbg edTLyqRP9kZBBV1ideu6fnUtopMOyfkTfRCa7oE9yAjlQbYMGHUROZZ81xE7KueD Hj4v7BgMDLv7G01xwANz2cgzL5HejJ7L0WP8+UEuMOWvFnUjd3Xz1NGxDsgA4jXf ZHOHIfGnBYFD1NkCVbPaXI6OyFAoC6sfp2+bkcGBikpYwyLb3+txkH0uq16ErWWh Ktmjvw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:01 2025 by rpki-client