This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa File: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (raw, json) Hash identifier: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg= Subject key identifier: 1A:D1:A5:F8:10:6F:14:50:5C:76:92:A9:BA:24:18:0C:15:C2:01:DC Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Certificate serial: 019B7DCAD3811F95A07940B1E8FF8C40964F Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa Signing time: Fri 02 Jan 2026 08:20:02 +0000 ROA not before: Fri 02 Jan 2026 08:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60555 IP address blocks: 91.217.114.0/23 maxlen: 23 93.113.254.0/24 maxlen: 24 185.13.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d3:81:1f:95:a0:79:40:b1:e8:ff:8c:40:96:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ad1a5f8106f14505c7692a9ba24180c15c201dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:ee:cf:53:85:fb:b1:9d:9a:54:f6:54:ad: 27:f8:4e:97:40:47:b6:f6:d8:cc:2d:7f:b5:cb:4d: 12:99:e4:9a:a9:8d:f1:4f:1f:50:2c:75:21:57:9e: 2e:ea:a8:45:03:09:d2:33:dd:4f:77:b8:82:a8:c2: f2:cb:0c:01:61:03:ed:eb:8c:ca:b0:22:38:80:9f: 3c:aa:cd:56:b7:2e:6d:79:a8:cd:c4:79:a3:18:a6: 95:ec:e7:f3:26:a1:d8:18:9b:e5:91:b0:3d:56:9f: ec:92:43:22:e3:27:0d:87:69:d7:a6:b0:4b:e1:f3: 57:7f:19:1d:b6:5e:40:fa:00:77:60:07:19:99:7d: 85:bd:87:39:14:79:28:e1:e2:6b:45:9b:b5:ca:c7: d4:25:a1:de:40:3d:4d:49:24:b4:6a:d7:1e:1c:3a: a8:92:a1:79:24:0a:02:62:11:9a:62:83:12:6d:3f: 4f:95:4d:ce:68:48:87:11:ed:fb:63:de:64:df:bd: 97:8b:b5:c0:f4:1e:db:39:7f:55:4f:8a:b7:9b:ee: fd:d0:f7:2a:af:8e:cc:8d:94:66:d7:9f:dd:90:91: 71:38:17:40:ac:d8:d7:60:6c:31:fe:45:db:83:15: 29:d4:1c:89:ba:fe:e1:2e:e8:9e:7b:cc:16:40:2f: 93:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D1:A5:F8:10:6F:14:50:5C:76:92:A9:BA:24:18:0C:15:C2:01:DC X509v3 Authority Key Identifier: keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.114.0/23 93.113.254.0/24 185.13.212.0/23 Signature Algorithm: sha256WithRSAEncryption 17:e9:7a:e3:0d:55:7d:b4:07:b3:68:d4:b2:55:ae:27:d5:9e: 64:54:1a:23:25:97:18:84:cb:df:b1:e9:2d:a4:21:00:9b:70: b7:6e:66:95:0b:f7:b8:af:2b:e9:25:29:c4:4b:8b:2a:ed:8e: 01:08:94:6c:8a:7c:05:8a:01:f4:9a:6b:53:65:0c:c4:4a:b9: 87:0d:8e:02:60:7e:8a:4e:4a:fe:50:04:b3:6f:de:9c:6b:4f: 1a:81:c9:a4:13:b6:81:27:fe:c3:1c:cb:c0:47:70:c8:70:8e: 1a:f1:9b:7b:33:6e:e3:76:50:11:aa:d7:73:87:3f:38:95:81: c0:bd:16:35:0b:df:20:ca:38:bb:0a:c0:11:7a:89:2d:5c:3d: 9f:3c:22:3b:32:15:46:cb:c4:cc:79:83:1a:57:43:f4:bd:60: 40:35:e3:58:9a:0a:93:d8:7a:fe:71:5b:e0:e7:42:e1:f1:fb: 7c:11:f5:46:41:53:01:44:92:88:90:fb:8d:1a:1a:f0:38:68: 4d:a8:3f:c0:39:2e:20:7c:1f:34:78:4e:08:58:af:86:49:43: 62:5e:a8:cd:fe:62:66:f1:6a:67:56:44:7c:68:15:18:f1:7a: f3:22:74:28:00:3c:ba:ba:f7:8d:b1:cc:34:8b:29:cc:97:73: 88:45:4c:ff -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9ytOBH5WgeUCx6P+MQJZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3N2MyMDczNzExNmJjNmQ1ZTViMjI0OTMxY2YxM2RkN2Y3 OWY5NWIwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWQxYTVmODEwNmYxNDUwNWM3NjkyYTliYTI0MTgwYzE1YzIwMWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTzuz1OF+7GdmlT2VK0n+E6XQEe2 9tjMLX+1y00SmeSaqY3xTx9QLHUhV54u6qhFAwnSM91Pd7iCqMLyywwBYQPt64zK sCI4gJ88qs1Wty5teajNxHmjGKaV7OfzJqHYGJvlkbA9Vp/skkMi4ycNh2nXprBL 4fNXfxkdtl5A+gB3YAcZmX2FvYc5FHko4eJrRZu1ysfUJaHeQD1NSSS0atceHDqo kqF5JAoCYhGaYoMSbT9PlU3OaEiHEe37Y95k372Xi7XA9B7bOX9VT4q3m+790Pcq r47MjZRm15/dkJFxOBdArNjXYGwx/kXbgxUp1ByJuv7hLuiee8wWQC+TxQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBrRpfgQbxRQXHaSqbokGAwVwgHcMB8GA1UdIwQY MBaAFId8IHNxFrxtXlsiSTHPE91/eflbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgt ZTcyMzJmODQ0OGIwLzEvR3RHbC1CQnZGRkJjZHBLcHVpUVlEQlhDQWR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgtZTcyMzJmODQ0OGIw LzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW9lyAwQA XXH+AwQBuQ3UMA0GCSqGSIb3DQEBCwUAA4IBAQAX6XrjDVV9tAezaNSyVa4n1Z5k VBojJZcYhMvfsektpCEAm3C3bmaVC/e4ryvpJSnES4sq7Y4BCJRsinwFigH0mmtT ZQzESrmHDY4CYH6KTkr+UASzb96ca08agcmkE7aBJ/7DHMvAR3DIcI4a8Zt7M27j dlARqtdzhz84lYHAvRY1C98gyji7CsAReoktXD2fPCI7MhVGy8TMeYMaV0P0vWBA NeNYmgqT2Hr+cVvg50Lh8ft8EfVGQVMBRJKIkPuNGhrwOGhNqD/AOS4gfB80eE4I WK+GSUNiXqjN/mJm8WpnVkR8aBUY8XrzInQoADy6uveNscw0iynMl3OIRUz/ -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:52 2026 by rpki-client