This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/GsroAK5IWq3NdNiW9BwK5WuY-VE.roa File: GsroAK5IWq3NdNiW9BwK5WuY-VE.roa (raw, json) Hash identifier: H3yE7psnQWokNhBsDlT4htqiP5CFlu91pIZ4Z5Ln4rg= Subject key identifier: 1A:CA:E8:00:AE:48:5A:AD:CD:74:D8:96:F4:1C:0A:E5:6B:98:F9:51 Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Certificate serial: 019B7C135346C25DF08FB57CCBA3AC36EA56 Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/GsroAK5IWq3NdNiW9BwK5WuY-VE.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15096 IP address blocks: 204.99.132.0/24 maxlen: 24 2a07:e480:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:53:46:c2:5d:f0:8f:b5:7c:cb:a3:ac:36:ea:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1acae800ae485aadcd74d896f41c0ae56b98f951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:b1:27:96:d5:cd:11:a2:0a:66:63:9a:89: 07:9e:42:33:3c:8f:b8:17:78:59:05:75:be:e1:4f: d7:76:4a:8f:fb:f6:0b:95:20:24:14:f2:e1:ba:81: 99:e6:8c:56:62:be:a3:b0:11:bb:65:bf:4d:12:3b: 69:12:b3:b4:ad:3e:aa:5a:14:1c:76:58:50:a3:71: ae:88:31:a3:40:5e:67:44:d9:a4:44:00:00:9e:3d: 6d:df:58:6c:53:38:a8:b0:8f:f9:8b:b6:48:c9:e4: 67:00:f4:1f:d2:69:63:bb:5f:cb:a6:4a:a6:64:15: a3:10:24:91:21:71:a5:52:1c:a1:71:71:75:78:82: f8:db:96:a2:d5:0a:0a:c4:dc:cf:74:32:c1:85:0e: bb:f4:e0:89:92:9c:57:58:dc:81:08:3a:56:77:ed: d9:02:98:61:51:ab:02:93:00:14:ef:a6:2c:8b:cd: 5c:d2:be:2c:5a:a4:31:49:0e:82:87:f8:da:7d:42: 5b:92:ef:c9:da:2b:26:0b:3f:f9:80:74:1d:a4:7b: 50:17:0e:94:12:20:9b:86:37:96:d8:dd:71:04:1d: 8e:96:49:28:64:52:38:f6:7b:02:dc:ba:38:eb:b2: f1:87:29:21:e0:39:82:f0:e8:67:ff:63:1f:e5:1c: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CA:E8:00:AE:48:5A:AD:CD:74:D8:96:F4:1C:0A:E5:6B:98:F9:51 X509v3 Authority Key Identifier: keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/GsroAK5IWq3NdNiW9BwK5WuY-VE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.99.132.0/24 IPv6: 2a07:e480:200::/48 Signature Algorithm: sha256WithRSAEncryption 6c:c9:4d:bb:80:c1:9e:d4:be:a6:d7:13:a4:09:02:e9:38:ff: 93:78:44:55:bb:26:26:d9:3e:9b:df:8b:66:83:e7:47:71:f0: 12:12:a8:f6:56:37:66:e5:fb:58:53:5d:54:e9:d6:6a:f8:22: 36:03:a0:b7:54:42:41:d4:a9:66:15:29:6d:ab:f5:86:b9:36: a5:0c:f6:00:6a:e8:d7:40:19:38:1b:d1:3e:e6:cb:9b:7f:65: cc:0f:ea:08:57:6d:96:15:4b:79:9f:9b:38:8e:b1:5d:e1:be: 37:fe:bf:59:15:6f:24:77:cd:68:a2:3e:b2:38:27:6f:40:76: e7:cd:a2:0d:2f:42:34:ed:d6:a0:5c:10:82:e0:d8:55:a5:a2: 61:b4:c0:6f:b4:48:d0:e8:36:08:0e:89:0f:43:f4:23:64:2e: fc:5e:b0:e6:56:9a:f4:cf:ce:9a:9a:2c:6a:dc:db:03:e7:46: d2:6f:7e:1c:4f:e5:ff:71:b3:c3:94:00:f3:df:e4:a1:ca:95: 53:e4:e5:48:63:e6:c7:29:cc:6f:c7:e5:5d:85:1b:b9:34:65: 45:e0:69:6e:52:0c:19:c7:7b:fe:7c:f5:70:39:a1:be:45:ce: f4:29:c4:c5:ea:0b:7e:44:e7:73:2d:da:48:f4:68:f4:8c:20: 1a:45:e7:23 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8E1NGwl3wj7V8y6OsNupWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy N2M2YzMwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWNhZTgwMGFlNDg1YWFkY2Q3NGQ4OTZmNDFjMGFlNTZiOThmOTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj+xJ5bVzRGiCmZjmokHnkIzPI+4 F3hZBXW+4U/XdkqP+/YLlSAkFPLhuoGZ5oxWYr6jsBG7Zb9NEjtpErO0rT6qWhQc dlhQo3GuiDGjQF5nRNmkRAAAnj1t31hsUziosI/5i7ZIyeRnAPQf0mlju1/Lpkqm ZBWjECSRIXGlUhyhcXF1eIL425ai1QoKxNzPdDLBhQ679OCJkpxXWNyBCDpWd+3Z AphhUasCkwAU76Ysi81c0r4sWqQxSQ6Ch/jafUJbku/J2ismCz/5gHQdpHtQFw6U EiCbhjeW2N1xBB2OlkkoZFI49nsC3Lo467Lxhykh4DmC8Ohn/2Mf5RzqmwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBrK6ACuSFqtzXTYlvQcCuVrmPlRMB8GA1UdIwQY MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt NDBlYTgwODkyZjAzLzEvR3Nyb0FLNUlXcTNOZE5pVzlCd0s1V3VZLVZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzGOEMA8E AgACMAkDBwAqB+SAAgAwDQYJKoZIhvcNAQELBQADggEBAGzJTbuAwZ7UvqbXE6QJ Auk4/5N4RFW7JibZPpvfi2aD50dx8BISqPZWN2bl+1hTXVTp1mr4IjYDoLdUQkHU qWYVKW2r9Ya5NqUM9gBq6NdAGTgb0T7my5t/ZcwP6ghXbZYVS3mfmziOsV3hvjf+ v1kVbyR3zWiiPrI4J29AdufNog0vQjTt1qBcEILg2FWlomG0wG+0SNDoNggOiQ9D 9CNkLvxesOZWmvTPzpqaLGrc2wPnRtJvfhxP5f9xs8OUAPPf5KHKlVPk5Uhj5scp zG/H5V2FG7k0ZUXgaW5SDBnHe/589XA5ob5FzvQpxMXqC35E53Mt2kj0aPSMIBpF 5yM= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:20 2026 by rpki-client