This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/GnNRUTaHKbvwp7s1YiOty60yT_4.roa File: GnNRUTaHKbvwp7s1YiOty60yT_4.roa (raw, json) Hash identifier: DPbHniq9Fo7ay7YRJ0huiIByC8Soz9pYUx8L6HOv9sQ= Subject key identifier: 1A:73:51:51:36:87:29:BB:F0:A7:BB:35:62:23:AD:CB:AD:32:4F:FE Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 019ADF1E368B3017BB2CEA8A9A73DE314F71 Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/GnNRUTaHKbvwp7s1YiOty60yT_4.roa Signing time: Tue 02 Dec 2025 12:51:30 +0000 ROA not before: Tue 02 Dec 2025 12:51:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39700 IP address blocks: 78.108.128.0/20 maxlen: 24 80.246.202.0/24 maxlen: 24 81.30.38.0/24 maxlen: 24 91.142.240.0/21 maxlen: 24 141.255.178.0/23 maxlen: 23 176.74.224.0/24 maxlen: 24 2001:4cb8::/29 maxlen: 48 2001:4cb9::/32 maxlen: 32 2a00:c080:101c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:1e:36:8b:30:17:bb:2c:ea:8a:9a:73:de:31:4f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Dec 2 12:51:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a735151368729bbf0a7bb356223adcbad324ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:f7:13:bd:86:21:c6:bf:f3:c9:e7:c9:f2: 08:78:bc:a1:74:a9:2e:dd:3c:0a:f9:dc:9e:54:39: 8c:75:ee:10:ed:ac:3c:03:1a:5d:55:8f:fb:43:8e: 2e:b0:c2:0d:d7:be:76:27:df:96:29:5f:6f:d2:af: 69:97:55:9b:f7:b8:a1:ce:c5:0d:b4:77:b9:f4:b3: 51:69:43:9c:c9:81:66:32:a1:46:03:34:c9:34:61: 73:44:4a:09:96:97:00:24:04:d8:01:f9:ff:c2:7c: 29:3c:b9:ff:a4:1f:be:59:f3:da:94:54:32:63:bd: b6:b2:60:b0:a4:e8:7e:9e:d9:02:17:76:8c:87:a5: 38:e1:b7:bf:1e:f0:22:54:3f:b2:9f:c2:ee:84:ac: ec:e4:ca:4c:6f:cc:46:23:d3:d8:ec:bb:2c:4b:8e: 0a:bd:65:0f:55:ba:48:ae:e5:b1:4e:80:9b:36:0e: 2e:b8:e7:48:e3:91:1d:b5:12:4f:ac:62:c0:53:d6: 25:8e:77:51:97:6c:0a:07:7c:a7:8d:79:43:67:cf: 64:e4:09:16:44:db:d8:fc:d1:6a:6c:35:07:e5:76: af:49:84:a4:63:cf:14:79:5b:18:92:5c:d9:9a:8d: ca:e9:a1:09:eb:37:81:8c:4a:60:d6:cf:a0:79:3e: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:73:51:51:36:87:29:BB:F0:A7:BB:35:62:23:AD:CB:AD:32:4F:FE X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/GnNRUTaHKbvwp7s1YiOty60yT_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.128.0/20 80.246.202.0/24 81.30.38.0/24 91.142.240.0/21 141.255.178.0/23 176.74.224.0/24 IPv6: 2001:4cb8::/29 2a00:c080:101c::/48 Signature Algorithm: sha256WithRSAEncryption 46:d4:3b:e6:33:ab:12:0a:1a:73:d7:3b:08:57:ff:c3:c7:e8: 1a:33:74:18:33:73:5d:f6:7d:20:31:d8:6a:48:d7:f9:3e:b2: 10:67:aa:67:df:ae:74:fb:44:2f:66:84:87:02:15:c0:57:09: 70:26:a9:32:3d:3b:4c:0b:37:38:a1:cd:8a:bf:3c:ca:44:58: 18:b6:ae:b4:7f:47:19:76:63:62:53:08:c4:76:53:6a:15:b6: 48:34:d6:5d:60:4f:bb:07:b8:5b:79:b7:ba:8e:49:8a:da:76: 9e:f8:84:35:9f:43:85:51:31:bf:23:45:c2:6d:85:4d:1e:90: 55:ac:b7:5d:41:68:68:f5:79:e0:1e:5b:ab:54:8e:da:81:80: 32:48:5e:7e:26:69:da:f4:83:a1:41:f8:2e:e7:39:51:4d:98: d1:4a:51:77:a5:12:43:62:b5:cb:fe:7e:9c:ca:56:3e:a7:71: 1c:7a:93:eb:27:3e:83:6f:77:18:8d:11:77:8a:35:d9:80:bb: aa:e0:31:ac:b1:62:d6:11:71:4b:7c:53:c6:b9:f3:0e:81:ec: 4a:f3:c0:6c:87:16:fc:fe:7c:71:38:a7:8d:82:17:52:a5:ef: 21:06:e7:1f:92:62:0a:28:5b:39:1b:ce:52:58:b4:6b:b3:66: d1:d3:b1:d2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZrfHjaLMBe7LOqKmnPeMU9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjUxMjAyMTI1MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTczNTE1MTM2ODcyOWJiZjBhN2JiMzU2MjIzYWRjYmFkMzI0ZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf73E72GIca/88nnyfIIeLyhdKku 3TwK+dyeVDmMde4Q7aw8AxpdVY/7Q44usMIN1752J9+WKV9v0q9pl1Wb97ihzsUN tHe59LNRaUOcyYFmMqFGAzTJNGFzREoJlpcAJATYAfn/wnwpPLn/pB++WfPalFQy Y722smCwpOh+ntkCF3aMh6U44be/HvAiVD+yn8LuhKzs5MpMb8xGI9PY7LssS44K vWUPVbpIruWxToCbNg4uuOdI45EdtRJPrGLAU9YljndRl2wKB3ynjXlDZ89k5AkW RNvY/NFqbDUH5XavSYSkY88UeVsYklzZmo3K6aEJ6zeBjEpg1s+geT5MBwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFBpzUVE2hym78Ke7NWIjrcutMk/+MB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvR25OUlVUYUhLYnZ3cDdzMVlpT3R5NjB5VF80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAqBAIAATAkAwQETmyAAwQA UPbKAwQAUR4mAwQDW47wAwQBjf+yAwQAsErgMBYEAgACMBADBQMgAUy4AwcAKgDA gBAcMA0GCSqGSIb3DQEBCwUAA4IBAQBG1DvmM6sSChpz1zsIV//Dx+gaM3QYM3Nd 9n0gMdhqSNf5PrIQZ6pn3650+0QvZoSHAhXAVwlwJqkyPTtMCzc4oc2KvzzKRFgY tq60f0cZdmNiUwjEdlNqFbZINNZdYE+7B7hbebe6jkmK2nae+IQ1n0OFUTG/I0XC bYVNHpBVrLddQWho9XngHlurVI7agYAySF5+Jmna9IOhQfgu5zlRTZjRSlF3pRJD YrXL/n6cylY+p3EcepPrJz6Db3cYjRF3ijXZgLuq4DGssWLWEXFLfFPGufMOgexK 88Bshxb8/nxxOKeNghdSpe8hBucfkmIKKFs5G85SWLRrs2bR07HS -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:11 2025 by rpki-client