This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa File: GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa (raw, json) Hash identifier: kNPKoBDHTv7uxrRwNWkfM9yLpH77LlGXaUe+iObPj+0= Subject key identifier: 19:F8:09:2F:E9:6A:47:87:0C:6D:83:97:5B:C8:2A:13:8B:7B:1C:6E Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B7BA51A96429CB5DE68F79734326DDD40 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203004 IP address blocks: 89.223.100.0/24 maxlen: 24 92.255.99.0/24 maxlen: 24 2a04:ac00:2::/48 maxlen: 48 2a04:ac00:9::/48 maxlen: 48 2a04:ac00:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1a:96:42:9c:b5:de:68:f7:97:34:32:6d:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19f8092fe96a47870c6d83975bc82a138b7b1c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:76:31:fb:f9:11:08:5a:fa:11:71:32:7e: d0:3a:17:6e:a4:11:9e:bf:06:4d:f3:73:0c:22:24: b7:a9:50:af:05:9c:1b:30:ea:b3:fb:18:c3:bb:d8: 88:59:28:ae:5c:0c:6d:e2:d6:82:41:f4:ed:7d:0b: d6:30:31:31:62:b7:2c:db:ac:a4:7f:6e:99:b0:4e: 80:81:c7:1e:9d:38:6c:7c:18:61:48:3b:db:81:aa: 8d:c7:c2:1f:6d:a1:d8:08:b4:28:6b:f4:53:98:b6: dd:43:6c:6f:19:33:66:20:8d:d3:42:14:64:dc:ee: ef:54:fb:55:76:e7:99:29:a9:14:ff:55:3c:89:b3: 3a:97:93:69:cc:06:b1:08:e9:5a:08:45:89:9a:2e: c3:56:cb:26:cc:b3:56:33:60:b1:c9:f4:cc:12:4e: 96:5e:73:f1:02:3c:b9:00:8c:70:ec:ad:69:6b:bb: 59:61:dd:1d:c9:de:4e:86:1c:5a:1e:1f:e3:ba:72: 39:e8:f6:4e:9e:53:dd:1a:b7:b6:72:3f:42:42:36: 37:e4:b8:1d:b5:74:1d:8d:d3:01:b5:35:b9:1e:06: bf:a0:fa:d5:92:2d:3d:bf:64:e1:af:d4:a2:7d:58: 26:5d:d3:7a:31:34:88:ed:b7:c8:42:57:40:e0:ed: 9e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F8:09:2F:E9:6A:47:87:0C:6D:83:97:5B:C8:2A:13:8B:7B:1C:6E X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.223.100.0/24 92.255.99.0/24 IPv6: 2a04:ac00:2::/48 2a04:ac00:9::-2a04:ac00:a:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8a:ee:36:fa:0b:45:07:3d:cd:7e:d8:ba:b2:f4:4f:9f:90:9c: da:a2:3a:93:93:36:a7:b9:e2:b7:55:2d:fc:49:a6:be:45:6f: e8:c2:8c:52:90:7d:2c:9d:dc:af:fc:ba:8a:78:90:7b:c5:00: d2:c7:3b:b5:61:a7:42:a6:4b:f8:0b:d9:38:33:1d:04:5b:42: 32:f3:67:22:fe:63:e3:fc:e6:f7:33:33:32:e6:8f:64:ca:2a: 4b:3b:2f:32:2c:bf:51:10:95:95:ba:40:66:84:ea:e6:1b:76: b8:89:c4:c0:12:4c:83:2b:1f:25:30:c8:17:b5:d2:dc:43:c1: 13:24:91:49:ac:f4:6b:ed:dd:62:c6:41:a6:65:c2:38:37:14: 58:9a:5c:f7:72:ea:34:3d:28:0e:aa:79:67:82:bd:1f:fd:ed: a0:fb:b6:83:9e:63:ad:8d:eb:88:c9:74:59:39:17:3b:d9:a7: ff:86:1f:1b:eb:28:33:38:1d:dc:63:c4:2c:5f:aa:8a:6e:28: 0a:1c:72:8a:c7:2d:d8:be:53:0c:d6:1e:61:30:ad:85:9e:f3: 12:e1:e3:2e:2a:b2:08:69:b9:38:c6:19:be:30:4d:4c:d4:b1: e6:34:1d:72:3c:42:4b:85:4d:40:19:12:a4:8f:06:df:0a:23: c2:bc:5f:1f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt7pRqWQpy13mj3lzQybd1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWY4MDkyZmU5NmE0Nzg3MGM2ZDgzOTc1YmM4MmExMzhiN2IxYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaR2Mfv5EQha+hFxMn7QOhdupBGe vwZN83MMIiS3qVCvBZwbMOqz+xjDu9iIWSiuXAxt4taCQfTtfQvWMDExYrcs26yk f26ZsE6AgccenThsfBhhSDvbgaqNx8IfbaHYCLQoa/RTmLbdQ2xvGTNmII3TQhRk 3O7vVPtVdueZKakU/1U8ibM6l5NpzAaxCOlaCEWJmi7DVssmzLNWM2CxyfTMEk6W XnPxAjy5AIxw7K1pa7tZYd0dyd5OhhxaHh/junI56PZOnlPdGre2cj9CQjY35Lgd tXQdjdMBtTW5Hga/oPrVki09v2Thr9SifVgmXdN6MTSI7bfIQldA4O2efQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFBn4CS/pakeHDG2Dl1vIKhOLexxuMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvR2ZnSkwtbHFSNGNNYllPWFc4Z3FFNHQ3SEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTASBAIAATAMAwQAWd9kAwQA XP9jMCMEAgACMB0DBwAqBKwAAAIwEgMHACoErAAACQMHACoErAAACjANBgkqhkiG 9w0BAQsFAAOCAQEAiu42+gtFBz3Nfti6svRPn5Cc2qI6k5M2p7nit1Ut/EmmvkVv 6MKMUpB9LJ3cr/y6iniQe8UA0sc7tWGnQqZL+AvZODMdBFtCMvNnIv5j4/zm9zMz MuaPZMoqSzsvMiy/URCVlbpAZoTq5ht2uInEwBJMgysfJTDIF7XS3EPBEySRSaz0 a+3dYsZBpmXCODcUWJpc93LqND0oDqp5Z4K9H/3toPu2g55jrY3riMl0WTkXO9mn /4YfG+soMzgd3GPELF+qim4oChxyisct2L5TDNYeYTCthZ7zEuHjLiqyCGm5OMYZ vjBNTNSx5jQdcjxCS4VNQBkSpI8G3wojwrxfHw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:06 2026 by rpki-client