This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/GXGKIBcqqhQNGnmXFb4-jHoOCEE.roa File: GXGKIBcqqhQNGnmXFb4-jHoOCEE.roa (raw, json) Hash identifier: PlvHrrR/gICbE9juRm1dMuCUlODkxhFuRDveJO5Bh7Q= Subject key identifier: 19:71:8A:20:17:2A:AA:14:0D:1A:79:97:15:BE:3E:8C:7A:0E:08:41 Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Certificate serial: 019B76EB10D221A47FCD6EADD3FEE506C8E0 Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/GXGKIBcqqhQNGnmXFb4-jHoOCEE.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31104 IP address blocks: 62.129.2.0/23 maxlen: 23 185.100.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:10:d2:21:a4:7f:cd:6e:ad:d3:fe:e5:06:c8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19718a20172aaa140d1a799715be3e8c7a0e0841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d7:a5:7f:fa:67:63:2f:88:8e:5e:f3:e3:3f: 22:67:1a:24:cd:9a:f1:9c:6b:80:b4:59:0b:e5:a6: 2d:6a:93:4f:a1:2b:b4:08:cc:d5:de:be:48:c5:19: 99:93:d6:e6:c3:1c:36:cb:d7:4f:c4:b3:7a:2b:8e: 6a:e2:c4:71:4c:27:05:2e:9c:ed:98:7b:de:0d:4d: 90:15:a7:95:cf:e0:46:c6:93:b7:62:60:bc:2d:c6: d8:52:b7:fe:f3:59:a8:c2:f2:89:ca:af:9a:e3:a3: 44:69:b9:8b:ab:88:12:23:35:bb:46:6d:b9:87:a0: 69:55:a2:e5:01:93:b9:c3:39:2c:3a:7f:d6:8f:7b: 85:43:67:89:23:50:37:b1:2d:9c:5c:f5:04:54:a7: 91:36:80:18:bd:b3:bd:fa:eb:02:62:16:02:c1:a3: 54:92:66:68:52:12:fe:6c:b6:66:3d:51:e1:d9:53: 3c:74:89:95:3c:0c:4f:d6:63:d3:4b:60:dd:86:52: 16:79:d6:73:30:ae:00:7c:1a:be:38:a5:a8:5c:e5: e7:41:2b:c5:f5:03:60:0a:cb:d8:e8:d5:f7:1c:29: 76:7a:99:36:44:20:d5:63:ff:df:87:69:07:85:b9: 92:b8:08:24:51:41:f9:04:46:78:d2:70:bb:5f:fb: b1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:71:8A:20:17:2A:AA:14:0D:1A:79:97:15:BE:3E:8C:7A:0E:08:41 X509v3 Authority Key Identifier: keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/GXGKIBcqqhQNGnmXFb4-jHoOCEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.129.2.0/23 185.100.184.0/22 Signature Algorithm: sha256WithRSAEncryption 83:41:cc:d1:7e:9d:59:93:48:ca:35:13:b5:ab:8d:73:1a:eb: 1c:07:56:98:93:bf:2f:ff:5e:7a:95:ca:64:88:c8:ff:d7:08: d6:f6:73:cf:42:17:b5:f4:fb:21:17:c9:36:1a:45:10:31:bc: 0c:84:7f:43:95:60:e2:df:42:e8:f2:f7:a1:c4:c2:d9:76:01: d9:05:46:42:e5:65:28:bf:91:e4:1e:d2:31:8d:e0:84:fe:a9: d6:be:e6:be:74:a5:cf:df:ba:65:b6:ee:9d:41:be:4f:70:0a: 13:e7:98:b4:ae:9c:67:c7:c3:30:ae:d0:b7:2e:04:f1:08:0c: 47:85:87:d3:1b:08:49:63:a4:40:92:2e:d8:4f:dc:ac:3a:d2: 0e:dd:79:16:33:bc:e9:c9:79:11:ee:11:dd:d8:f4:d5:7e:08: 14:8c:c0:02:8e:3d:78:19:21:1f:6e:25:94:f3:f2:0d:34:e6: b0:36:1f:d3:63:71:d8:34:a1:f3:3d:7b:da:12:be:a5:97:f2: c6:ab:85:71:eb:c5:1c:97:d7:48:0b:39:6a:04:33:ec:d3:5a: 06:d7:fa:c5:8d:7d:3f:a3:85:32:d9:06:8f:1f:a7:2d:d2:4b: d2:93:ac:a2:85:f8:1d:95:71:d0:62:4b:61:2b:9b:44:ef:a1: 4d:7a:f3:84 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26xDSIaR/zW6t0/7lBsjgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTViZjljNjFjODVkYjdjOTlhYzRjZGY3OTI1N2U3OTk3 YWI3N2MwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTcxOGEyMDE3MmFhYTE0MGQxYTc5OTcxNWJlM2U4YzdhMGUwODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9elf/pnYy+Ijl7z4z8iZxokzZrx nGuAtFkL5aYtapNPoSu0CMzV3r5IxRmZk9bmwxw2y9dPxLN6K45q4sRxTCcFLpzt mHveDU2QFaeVz+BGxpO3YmC8LcbYUrf+81mowvKJyq+a46NEabmLq4gSIzW7Rm25 h6BpVaLlAZO5wzksOn/Wj3uFQ2eJI1A3sS2cXPUEVKeRNoAYvbO9+usCYhYCwaNU kmZoUhL+bLZmPVHh2VM8dImVPAxP1mPTS2DdhlIWedZzMK4AfBq+OKWoXOXnQSvF 9QNgCsvY6NX3HCl2epk2RCDVY//fh2kHhbmSuAgkUUH5BEZ40nC7X/ux6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBlxiiAXKqoUDRp5lxW+Pox6DghBMB8GA1UdIwQY MBaAFCQVv5xhyF23yZrEzfeSV+eZerd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMt NmExOGRjODgxNmRiLzEvR1hHS0lCY3FxaFFOR25tWEZiNC1qSG9PQ0VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zMzg5ZWItMTg1Ny00OWQyLTg0MWMtNmExOGRjODgxNmRi LzEvSkJXX25HSElYYmZKbXNUTjk1Slg1NWw2dDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPoECAwQC uWS4MA0GCSqGSIb3DQEBCwUAA4IBAQCDQczRfp1Zk0jKNRO1q41zGuscB1aYk78v /156lcpkiMj/1wjW9nPPQhe19PshF8k2GkUQMbwMhH9DlWDi30Lo8vehxMLZdgHZ BUZC5WUov5HkHtIxjeCE/qnWvua+dKXP37pltu6dQb5PcAoT55i0rpxnx8MwrtC3 LgTxCAxHhYfTGwhJY6RAki7YT9ysOtIO3XkWM7zpyXkR7hHd2PTVfggUjMACjj14 GSEfbiWU8/INNOawNh/TY3HYNKHzPXvaEr6ll/LGq4Vx68Ucl9dICzlqBDPs01oG 1/rFjX0/o4Uy2QaPH6ct0kvSk6yihfgdlXHQYkthK5tE76FNevOE -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:14 2026 by rpki-client