This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/GMfg_IltBAfUi8YQpIPuZWHWPVM.roa File: GMfg_IltBAfUi8YQpIPuZWHWPVM.roa (raw, json) Hash identifier: 88EeE1BLpzbAgAQpYWqHKatkmYfK+ol5tgjxm21cKXI= Subject key identifier: 18:C7:E0:FC:89:6D:04:07:D4:8B:C6:10:A4:83:EE:65:61:D6:3D:53 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019B7FF23931D81B67EED503005CD00C4930 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/GMfg_IltBAfUi8YQpIPuZWHWPVM.roa Signing time: Fri 02 Jan 2026 18:22:19 +0000 ROA not before: Fri 02 Jan 2026 18:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8100 IP address blocks: 45.150.224.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:39:31:d8:1b:67:ee:d5:03:00:5c:d0:0c:49:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jan 2 18:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18c7e0fc896d0407d48bc610a483ee6561d63d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:72:8e:d8:5e:42:f8:13:27:c0:ba:6a:9f:42: 66:dc:13:4e:14:d5:bc:33:13:89:5b:ed:d4:55:fe: fb:97:dd:25:9c:fe:74:21:b6:fc:56:9c:9f:5e:e0: 22:1f:3c:ee:ee:25:2f:9f:9f:d0:96:4f:d2:5e:5d: b1:7c:92:64:f8:17:24:12:dd:29:83:96:bd:b6:d6: fc:01:39:8d:6e:a2:20:06:2a:85:c0:dc:a1:ff:85: 58:1c:b2:2c:b9:5d:41:e5:0b:1f:8b:62:f1:2b:d2: 67:09:c8:af:8d:7a:81:b5:e6:98:1a:95:ce:37:22: 99:28:93:e1:e8:81:73:e4:2d:b7:fa:73:4b:16:a0: aa:85:26:7f:e9:5f:ef:cb:84:75:c0:42:8f:cf:04: b3:4f:63:34:6e:d7:e6:dd:30:a6:5b:f0:ec:93:8c: 34:cf:83:44:92:81:b8:d5:2f:3b:a8:b6:16:59:71: f8:18:97:2b:df:db:b8:d2:f0:d5:1a:ca:14:e0:50: b8:49:d6:1a:af:cf:b8:fa:32:7b:43:bd:a2:6a:b2: 62:05:d7:7f:0f:9a:04:a8:b1:cb:a1:7c:12:2c:97: 3c:3b:59:3c:87:39:44:bc:ee:93:08:08:2f:f5:22: b1:88:19:81:37:98:39:7a:f6:0e:6a:90:b5:66:57: 77:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C7:E0:FC:89:6D:04:07:D4:8B:C6:10:A4:83:EE:65:61:D6:3D:53 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/GMfg_IltBAfUi8YQpIPuZWHWPVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.224.0/24 Signature Algorithm: sha256WithRSAEncryption cb:81:12:c2:8b:2b:fb:38:c6:4f:d9:f7:11:0b:1a:1b:bf:1e: 13:06:9f:e2:71:03:c8:4c:e9:e3:7b:04:e4:15:b3:5b:31:d7: 19:04:35:24:71:a8:5b:b6:84:d9:e2:0a:2c:ee:21:d4:da:96: 89:75:1a:81:d8:c2:7d:68:51:22:35:98:c9:ab:63:15:35:98: 26:82:f2:fb:00:5d:1d:80:90:24:bc:fe:9a:03:d9:2a:52:24: 25:75:52:4b:52:49:df:55:7c:e6:07:1a:2c:b8:b3:cf:71:fa: 0a:1c:0c:80:cd:b0:c2:67:57:b4:72:3c:90:bd:2e:56:bd:d1: 6c:da:cc:dd:fd:8f:19:39:9c:f5:14:a4:d5:56:86:a1:63:dd: c6:0b:56:30:68:af:5b:aa:ff:9d:64:98:ab:ab:ff:92:72:a5: bd:15:ae:e0:d2:a5:42:31:f7:42:b0:3b:b8:91:ab:7c:79:0c: a1:25:e3:b6:6a:bf:de:7a:25:82:78:fe:de:a3:e1:ee:f7:51: cb:3c:7a:cd:4c:e8:1c:26:19:5e:b5:35:c2:88:6e:14:65:7d: fb:dd:51:1e:f6:92:f8:88:43:52:89:16:0d:41:bd:e8:af:47: f6:e9:bb:e8:02:4c:f6:77:c3:e5:4a:a9:a5:06:5e:d7:c1:93: bd:73:d9:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8jkx2Btn7tUDAFzQDEkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwMTAyMTgyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGM3ZTBmYzg5NmQwNDA3ZDQ4YmM2MTBhNDgzZWU2NTYxZDYzZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnKO2F5C+BMnwLpqn0Jm3BNOFNW8 MxOJW+3UVf77l90lnP50Ibb8VpyfXuAiHzzu7iUvn5/Qlk/SXl2xfJJk+BckEt0p g5a9ttb8ATmNbqIgBiqFwNyh/4VYHLIsuV1B5Qsfi2LxK9JnCcivjXqBteaYGpXO NyKZKJPh6IFz5C23+nNLFqCqhSZ/6V/vy4R1wEKPzwSzT2M0btfm3TCmW/Dsk4w0 z4NEkoG41S87qLYWWXH4GJcr39u40vDVGsoU4FC4SdYar8+4+jJ7Q72iarJiBdd/ D5oEqLHLoXwSLJc8O1k8hzlEvO6TCAgv9SKxiBmBN5g5evYOapC1Zld3SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBjH4PyJbQQH1IvGEKSD7mVh1j1TMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvR01mZ19JbHRCQWZVaThZUXBJUHVaV0hXUFZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZbgMA0G CSqGSIb3DQEBCwUAA4IBAQDLgRLCiyv7OMZP2fcRCxobvx4TBp/icQPITOnjewTk FbNbMdcZBDUkcahbtoTZ4gos7iHU2paJdRqB2MJ9aFEiNZjJq2MVNZgmgvL7AF0d gJAkvP6aA9kqUiQldVJLUknfVXzmBxosuLPPcfoKHAyAzbDCZ1e0cjyQvS5WvdFs 2szd/Y8ZOZz1FKTVVoahY93GC1YwaK9bqv+dZJirq/+ScqW9Fa7g0qVCMfdCsDu4 kat8eQyhJeO2ar/eeiWCeP7eo+Hu91HLPHrNTOgcJhletTXCiG4UZX373VEe9pL4 iENSiRYNQb3or0f26bvoAkz2d8PlSqmlBl7XwZO9c9k5 -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:18 2026 by rpki-client