This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gmTYQo9OaI4aLuCu3cFD6LZ9utI.roa File: gmTYQo9OaI4aLuCu3cFD6LZ9utI.roa (raw, json) Hash identifier: uE5MMZz2y6S1sL7zcNtYawPyDUszvD50IZSqqTmtNno= Subject key identifier: 82:64:D8:42:8F:4E:68:8E:1A:2E:E0:AE:DD:C1:43:E8:B6:7D:BA:D2 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAD35ABF55C87EA36F3E77581B763D Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gmTYQo9OaI4aLuCu3cFD6LZ9utI.roa Signing time: Thu 01 Jan 2026 00:17:39 +0000 ROA not before: Thu 01 Jan 2026 00:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210574 IP address blocks: 5.180.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d3:5a:bf:55:c8:7e:a3:6f:3e:77:58:1b:76:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8264d8428f4e688e1a2ee0aeddc143e8b67dbad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:b9:58:74:a6:90:e9:0f:d8:1d:1b:10:ae: b7:cd:df:49:59:7e:68:a4:f7:b4:d2:1a:7f:ca:18: 80:27:20:5c:43:8e:f0:3c:ba:60:f7:6e:b9:c5:bb: 83:f8:7f:eb:b5:4d:90:3e:77:ed:7e:3c:81:ac:f7: c7:0f:4d:cb:a9:af:8c:47:4b:31:05:e5:dc:c3:ed: 1c:c1:a3:32:56:17:fc:8e:c3:b6:11:fc:13:8a:38: 0d:97:e2:3d:cb:60:a9:34:b1:8e:be:1e:10:1d:7e: d6:7d:b8:df:cc:30:25:62:64:0f:6c:36:17:c4:d3: d9:5f:44:78:c2:10:81:e3:fc:a8:ba:a7:eb:36:c0: 6b:2f:5c:45:a3:d4:9b:b8:84:02:e6:16:24:41:00: 55:22:72:a8:ea:47:38:14:e9:9a:48:73:01:57:07: 7c:29:5c:52:26:15:9f:1f:07:fa:05:85:db:24:2a: 1c:ac:0e:09:6c:c3:11:86:75:cd:60:0f:b9:6a:0a: 5c:8d:e7:aa:18:c9:54:45:35:b2:d6:3c:34:64:ea: d3:74:1c:f0:3e:dd:50:f8:63:c0:b6:59:94:72:2b: 7c:d7:8b:9e:0a:5b:41:81:fc:5e:97:4f:43:c8:ea: d7:3f:34:f2:7b:fc:ad:e5:d5:0c:ce:ff:e8:56:e8: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:64:D8:42:8F:4E:68:8E:1A:2E:E0:AE:DD:C1:43:E8:B6:7D:BA:D2 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gmTYQo9OaI4aLuCu3cFD6LZ9utI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.81.0/24 Signature Algorithm: sha256WithRSAEncryption 06:33:bb:c5:6f:26:f5:49:07:2b:f8:2b:e3:3f:6e:47:c7:2d: dd:1d:11:4e:da:24:4d:95:3b:0f:8c:5e:36:27:da:0f:d5:cb: 8c:c4:b4:93:c9:91:3b:18:f4:7e:1c:c1:fe:f2:f9:56:67:5f: ef:b0:53:1e:a2:1c:08:14:f9:7b:37:d9:f1:30:ee:d4:7e:f6: 78:ba:d7:3d:38:1a:d6:f0:d1:b1:06:1a:0f:6b:63:3e:85:41: 5f:77:2f:a9:13:c2:52:cb:05:c2:0f:58:c3:47:cf:f0:be:a2: a3:1e:c8:20:9e:cf:29:77:71:50:06:cb:a7:dc:cc:2a:8b:50: 06:34:5b:04:49:76:ae:e6:9c:a8:41:d5:dd:b8:d5:71:52:02: d2:37:42:90:ed:64:30:97:1e:14:b3:18:c3:1e:00:78:be:79: 1e:d1:1d:67:0c:29:80:db:e2:1c:05:ee:9c:53:b3:0c:e8:90: d3:63:d0:b3:a2:02:9d:c2:fa:44:08:20:a8:d3:c0:22:87:81: fe:14:5e:79:00:0e:c9:e8:6e:bb:f7:43:ad:6f:33:68:58:67: f9:b4:6d:ac:f3:9c:43:9d:4b:47:aa:5b:04:d4:09:e4:34:70: 59:79:41:fb:07:90:b2:50:eb:7d:9d:df:f8:29:18:35:30:56: a4:91:4d:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26tNav1XIfqNvPndYG3Y9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjY0ZDg0MjhmNGU2ODhlMWEyZWUwYWVkZGMxNDNlOGI2N2RiYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vq5WHSmkOkP2B0bEK63zd9JWX5o pPe00hp/yhiAJyBcQ47wPLpg9265xbuD+H/rtU2QPnftfjyBrPfHD03Lqa+MR0sx BeXcw+0cwaMyVhf8jsO2EfwTijgNl+I9y2CpNLGOvh4QHX7WfbjfzDAlYmQPbDYX xNPZX0R4whCB4/youqfrNsBrL1xFo9SbuIQC5hYkQQBVInKo6kc4FOmaSHMBVwd8 KVxSJhWfHwf6BYXbJCocrA4JbMMRhnXNYA+5agpcjeeqGMlURTWy1jw0ZOrTdBzw Pt1Q+GPAtlmUcit814ueCltBgfxel09DyOrXPzTye/yt5dUMzv/oVuhCOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJk2EKPTmiOGi7grt3BQ+i2fbrSMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvZ21UWVFvOU9hSTRhTHVDdTNjRkQ2TFo5dXRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbRRMA0G CSqGSIb3DQEBCwUAA4IBAQAGM7vFbyb1SQcr+CvjP25Hxy3dHRFO2iRNlTsPjF42 J9oP1cuMxLSTyZE7GPR+HMH+8vlWZ1/vsFMeohwIFPl7N9nxMO7UfvZ4utc9OBrW 8NGxBhoPa2M+hUFfdy+pE8JSywXCD1jDR8/wvqKjHsggns8pd3FQBsun3Mwqi1AG NFsESXau5pyoQdXduNVxUgLSN0KQ7WQwlx4UsxjDHgB4vnke0R1nDCmA2+IcBe6c U7MM6JDTY9CzogKdwvpECCCo08Aih4H+FF55AA7J6G6790OtbzNoWGf5tG2s85xD nUtHqlsE1AnkNHBZeUH7B5CyUOt9nd/4KRg1MFakkU3D -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:01 2026 by rpki-client