This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/GS12T19X33XYAhf098NVhyXx3j4.roa File: GS12T19X33XYAhf098NVhyXx3j4.roa (raw, json) Hash identifier: 2sPtA3M8U954wEjtNrs6ONRJ78QRH5zWAILMakv6ILg= Subject key identifier: 19:2D:76:4F:5F:57:DF:75:D8:02:17:F4:F7:C3:55:87:25:F1:DE:3E Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b Certificate serial: 019B7759162FAB2761EE5A949EEC532D47F4 Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/GS12T19X33XYAhf098NVhyXx3j4.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199652 IP address blocks: 94.177.148.0/23 maxlen: 23 188.214.151.0/24 maxlen: 24 188.241.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:16:2f:ab:27:61:ee:5a:94:9e:ec:53:2d:47:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=192d764f5f57df75d80217f4f7c3558725f1de3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:23:26:42:ac:fd:8f:a1:c6:1e:98:dd:d3:3e: 13:d9:e8:91:ed:30:02:bc:ed:0e:91:8a:45:67:ff: 38:ab:72:af:04:36:8a:0a:0c:27:ee:85:7f:d2:bc: c6:32:f4:ca:c3:01:c8:fb:aa:ad:6e:ce:35:bb:bd: 9a:50:9b:7a:7b:bc:59:f4:ac:46:79:c1:13:e7:37: 28:93:cb:b4:57:00:1a:ec:c5:68:00:06:8a:1d:7b: 64:a4:c9:81:50:2a:d4:4e:51:83:63:0a:d5:ea:04: 2e:59:95:4c:bd:fc:28:32:4a:82:75:64:7b:16:14: fd:da:c1:70:15:02:7e:41:9a:a8:5a:47:34:62:3c: 9d:22:51:13:73:6a:65:7a:85:82:19:9a:36:02:19: d8:79:3f:bc:15:2a:f5:ab:f4:3b:c3:67:41:32:a3: 65:0f:44:db:e3:e8:1f:66:29:20:21:1f:ca:c3:23: ba:bd:9c:55:8c:1e:00:5b:94:64:11:9b:60:31:ae: 96:cf:08:72:4e:37:42:93:56:d4:06:35:33:79:f8: 9a:c7:e4:86:59:bd:fa:99:f3:b2:a7:e4:bb:1a:43: d1:7a:0f:24:31:2d:46:42:71:18:c3:a2:64:a0:e1: f3:43:0e:78:f8:a5:5e:2c:43:c7:26:00:68:ba:76: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2D:76:4F:5F:57:DF:75:D8:02:17:F4:F7:C3:55:87:25:F1:DE:3E X509v3 Authority Key Identifier: keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/GS12T19X33XYAhf098NVhyXx3j4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.177.148.0/23 188.214.151.0/24 188.241.69.0/24 Signature Algorithm: sha256WithRSAEncryption ae:74:a4:64:ac:16:6e:5d:40:be:96:a3:f5:1c:a2:06:3d:1a: e4:b8:78:8e:94:94:ce:37:e3:ed:0e:6c:6a:a2:f7:0f:61:bb: a8:93:f1:d0:11:c7:d0:27:2b:6d:d0:04:5e:c9:a7:d0:35:d2: b1:0c:89:09:8c:e7:dc:a0:eb:51:10:55:ca:7d:01:d9:37:08: 78:57:ea:43:d7:fc:96:c2:3b:4a:55:ac:0e:7a:75:b2:ba:98: f8:1a:4c:59:53:49:0c:42:69:88:fa:f4:c4:fe:41:ea:00:6a: 07:51:26:b2:ca:e1:b3:d4:ac:a6:f3:0a:7a:e9:a2:20:f3:b8: 5e:e8:93:4c:e5:94:82:da:b0:3b:2f:95:6c:7d:7c:3d:ac:8f: fe:b4:a3:55:12:48:e5:6f:ca:b2:76:b7:9e:4c:a2:fc:40:8e: d3:0e:0c:b8:b5:f9:e9:91:24:f8:3e:7a:42:90:e8:f1:d1:24: 4b:09:c1:de:7f:d9:cd:c5:44:e0:20:06:13:33:70:5c:eb:a2: 91:a6:5a:b4:00:2e:44:18:d4:b2:69:2a:b0:39:87:19:4a:81: e9:0d:6c:1e:4d:4d:d7:04:29:92:e9:01:f3:6f:50:56:ba:9e: 8f:f5:b6:bd:73:f3:fc:1f:27:af:e5:57:d7:18:be:cf:a2:1d: 4c:1d:cc:d9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WRYvqydh7lqUnuxTLUf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YTg1NTA2NTliYjY4ZTc3MGQ4YjAxMjZiNzI2MWZiODdk ODI0MGIwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTJkNzY0ZjVmNTdkZjc1ZDgwMjE3ZjRmN2MzNTU4NzI1ZjFkZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSMmQqz9j6HGHpjd0z4T2eiR7TAC vO0OkYpFZ/84q3KvBDaKCgwn7oV/0rzGMvTKwwHI+6qtbs41u72aUJt6e7xZ9KxG ecET5zcok8u0VwAa7MVoAAaKHXtkpMmBUCrUTlGDYwrV6gQuWZVMvfwoMkqCdWR7 FhT92sFwFQJ+QZqoWkc0YjydIlETc2pleoWCGZo2AhnYeT+8FSr1q/Q7w2dBMqNl D0Tb4+gfZikgIR/KwyO6vZxVjB4AW5RkEZtgMa6WzwhyTjdCk1bUBjUzefiax+SG Wb36mfOyp+S7GkPReg8kMS1GQnEYw6JkoOHzQw54+KVeLEPHJgBounZeLQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBktdk9fV9912AIX9PfDVYcl8d4+MB8GA1UdIwQY MBaAFDioVQZZu2jncNiwEmtyYfuH2CQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEt MWQ3MDNiNDk2NjM0LzEvR1MxMlQxOVgzM1hZQWhmMDk4TlZoeVh4M2o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEtMWQ3MDNiNDk2NjM0 LzEvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXrGUAwQA vNaXAwQAvPFFMA0GCSqGSIb3DQEBCwUAA4IBAQCudKRkrBZuXUC+lqP1HKIGPRrk uHiOlJTON+PtDmxqovcPYbuok/HQEcfQJytt0AReyafQNdKxDIkJjOfcoOtREFXK fQHZNwh4V+pD1/yWwjtKVawOenWyupj4GkxZU0kMQmmI+vTE/kHqAGoHUSayyuGz 1Kym8wp66aIg87he6JNM5ZSC2rA7L5VsfXw9rI/+tKNVEkjlb8qydreeTKL8QI7T Dgy4tfnpkST4PnpCkOjx0SRLCcHef9nNxUTgIAYTM3Bc66KRplq0AC5EGNSyaSqw OYcZSoHpDWweTU3XBCmS6QHzb1BWup6P9ba9c/P8Hyev5VfXGL7Poh1MHczZ -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:46 2026 by rpki-client