This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GjLk-JXzV4LCBuAE_XfkaXw16vM.roa File: GjLk-JXzV4LCBuAE_XfkaXw16vM.roa (raw, json) Hash identifier: WuPTSoS0qyougNrZZYqRCaLwzDYDlBqZgcNOAc8v8nY= Subject key identifier: 1A:32:E4:F8:95:F3:57:82:C2:06:E0:04:FD:77:E4:69:7C:35:EA:F3 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019AF24304CE30376D22FA3DAA19934A6CFF Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GjLk-JXzV4LCBuAE_XfkaXw16vM.roa Signing time: Sat 06 Dec 2025 06:04:29 +0000 ROA not before: Sat 06 Dec 2025 06:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207350 IP address blocks: 45.159.148.0/24 maxlen: 24 2a05:9080:1::/48 maxlen: 48 2a05:9080:15::/48 maxlen: 48 2a05:9080:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:43:04:ce:30:37:6d:22:fa:3d:aa:19:93:4a:6c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 6 06:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a32e4f895f35782c206e004fd77e4697c35eaf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:b2:63:32:5f:cb:08:3f:b7:cf:fa:ff:9b: 79:57:07:eb:9e:7e:48:30:c3:4c:35:d8:fe:19:d2: 6f:3f:da:2a:6e:4e:e6:b4:ee:2d:fc:ec:68:01:5a: d2:40:f2:39:47:3a:cd:a8:9b:ff:92:27:89:35:40: 4a:00:d8:b0:2f:77:43:5b:a6:11:35:a2:e3:5e:b9: cd:54:6c:af:9b:39:b4:54:11:35:b8:46:78:67:1a: 3b:26:77:33:cd:5a:f8:da:03:1e:5d:75:f3:13:5d: ee:de:0d:9f:e1:e1:bf:8f:d3:dd:b9:ff:0a:5b:1b: fb:35:0e:c1:7e:32:dd:78:6e:b2:23:eb:d8:59:4b: a9:a4:da:b0:79:00:fc:26:f8:27:bf:d8:81:b8:97: d5:82:16:30:f6:9c:15:19:8e:f4:6b:69:ab:5e:0e: 71:fd:f1:94:1d:ee:08:09:ee:f5:f6:e0:75:24:60: 63:98:1f:4d:13:10:0e:78:e7:06:57:e4:c0:bc:ec: 4d:6e:c0:7e:73:31:34:a9:9a:5b:75:b2:a7:4f:f9: 35:4e:c0:58:2d:81:1d:36:4a:c0:e6:76:2a:7a:da: 95:73:b2:86:e6:07:e2:c7:c2:f7:94:26:13:62:59: 0c:e6:63:53:aa:f4:29:c5:f0:c6:84:c3:19:61:39: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:E4:F8:95:F3:57:82:C2:06:E0:04:FD:77:E4:69:7C:35:EA:F3 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GjLk-JXzV4LCBuAE_XfkaXw16vM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.148.0/24 IPv6: 2a05:9080:1::/48 2a05:9080:15::-2a05:9080:16:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 72:71:33:5b:8f:b6:5a:2b:ff:7e:d7:dd:cf:c0:46:51:02:4b: fb:8c:d5:34:3b:35:df:52:67:ab:57:bc:27:b5:fa:20:96:b5: 17:0b:5d:76:c2:09:90:73:a3:31:56:b9:08:1d:5c:84:03:ec: e8:ca:da:f0:de:dd:5e:a3:1b:28:7c:ff:04:2b:84:60:87:4c: 31:7a:de:db:a6:5e:b4:6b:a7:d7:63:5e:ad:c9:e8:b7:7a:a6: 96:21:40:74:31:fa:ce:fc:2a:9b:a2:25:ef:5f:d7:11:2f:a0: b5:39:45:fc:3e:22:63:7e:18:d9:d7:dd:25:17:99:99:1a:19: d6:f0:b3:92:44:2d:14:35:c5:4e:79:1f:b1:af:57:6b:a5:56: 60:f6:e0:68:65:51:d4:00:0c:6f:19:72:01:89:ca:f9:68:b8: 78:e7:e9:7b:63:c2:b1:db:de:b1:8c:ca:7d:46:10:48:5a:67: 5e:65:ed:0d:ae:9a:8d:37:0d:04:7c:5e:15:72:a7:ad:c1:9c: 1c:a5:c3:68:cc:e9:38:fe:1d:b8:0f:71:40:31:6f:79:8f:c4: 90:90:9b:a9:5a:24:12:7c:69:3e:2b:2a:d5:9f:86:d5:6a:46: de:65:cf:e9:80:7a:8d:ff:17:ed:19:1d:86:0a:fe:0a:12:ab: 5d:cd:8d:4b -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZryQwTOMDdtIvo9qhmTSmz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjA2MDYwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTMyZTRmODk1ZjM1NzgyYzIwNmUwMDRmZDc3ZTQ2OTdjMzVlYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLKyYzJfywg/t8/6/5t5Vwfrnn5I MMNMNdj+GdJvP9oqbk7mtO4t/OxoAVrSQPI5RzrNqJv/kieJNUBKANiwL3dDW6YR NaLjXrnNVGyvmzm0VBE1uEZ4Zxo7JnczzVr42gMeXXXzE13u3g2f4eG/j9Pduf8K Wxv7NQ7BfjLdeG6yI+vYWUuppNqweQD8Jvgnv9iBuJfVghYw9pwVGY70a2mrXg5x /fGUHe4ICe719uB1JGBjmB9NExAOeOcGV+TAvOxNbsB+czE0qZpbdbKnT/k1TsBY LYEdNkrA5nYqetqVc7KG5gfix8L3lCYTYlkM5mNTqvQpxfDGhMMZYTkNCwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFBoy5PiV81eCwgbgBP135Gl8NerzMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvR2pMay1KWHpWNExDQnVBRV9YZmthWHcxNnZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAMBAIAATAGAwQALZ+UMCME AgACMB0DBwAqBZCAAAEwEgMHACoFkIAAFQMHACoFkIAAFjANBgkqhkiG9w0BAQsF AAOCAQEAcnEzW4+2Wiv/ftfdz8BGUQJL+4zVNDs131Jnq1e8J7X6IJa1FwtddsIJ kHOjMVa5CB1chAPs6Mra8N7dXqMbKHz/BCuEYIdMMXre26ZetGun12Nercnot3qm liFAdDH6zvwqm6Il71/XES+gtTlF/D4iY34Y2dfdJReZmRoZ1vCzkkQtFDXFTnkf sa9Xa6VWYPbgaGVR1AAMbxlyAYnK+Wi4eOfpe2PCsdvesYzKfUYQSFpnXmXtDa6a jTcNBHxeFXKnrcGcHKXDaMzpOP4duA9xQDFveY/EkJCbqVokEnxpPisq1Z+G1WpG 3mXP6YB6jf8X7Rkdhgr+ChKrXc2NSw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:44 2025 by rpki-client