This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/GNvJW18bYA7Iq3h7nGvfqYocolI.roa File: GNvJW18bYA7Iq3h7nGvfqYocolI.roa (raw, json) Hash identifier: FgGibrDdMqKVVsL/e+tMDlZ3wp8xt85KBE6mvBGDeGA= Subject key identifier: 18:DB:C9:5B:5F:1B:60:0E:C8:AB:78:7B:9C:6B:DF:A9:8A:1C:A2:52 Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Certificate serial: 019B7B35CD22E5B2194BE0D730CCA9E528FA Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/GNvJW18bYA7Iq3h7nGvfqYocolI.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28809 IP address blocks: 62.113.48.0/21 maxlen: 24 62.113.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cd:22:e5:b2:19:4b:e0:d7:30:cc:a9:e5:28:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18dbc95b5f1b600ec8ab787b9c6bdfa98a1ca252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:5c:01:69:a6:da:55:4b:ed:e5:f0:d9:a6: 33:ca:a7:40:43:30:e0:f5:ff:2d:65:ec:06:78:fb: dd:15:97:6e:90:0a:1a:ee:c9:84:0f:27:a5:bb:09: 30:82:a6:03:dd:33:12:a1:45:fb:3d:e8:33:90:c5: 61:fe:cb:a5:2b:6c:89:17:35:5b:c1:bc:80:fa:f3: 71:35:c8:3c:31:48:4e:10:a0:f4:b4:23:fe:3c:45: f6:79:de:ed:00:e5:b8:c2:14:a3:2e:f2:5b:27:c9: 70:be:16:bc:bb:b2:7a:5e:7d:50:2a:b0:99:79:03: 98:f2:0b:db:24:a1:4e:0b:e7:95:8d:a8:9c:7f:2a: 1c:e6:76:46:f6:fd:27:a3:f2:16:5b:62:92:ce:bf: 6c:16:9d:d5:13:bc:41:00:5f:e8:ac:1f:4f:13:ca: 70:49:2a:fd:5a:57:5a:3b:98:9b:be:be:4e:8c:6e: 79:c2:06:8d:87:36:a8:d8:aa:d1:d5:96:48:0c:8d: e1:79:67:03:63:2c:a9:40:3a:32:99:e1:0a:93:4e: a7:6e:dc:34:1e:20:de:1d:9e:29:1c:9b:f2:fb:89: 71:f7:ae:83:36:d9:3f:ed:c9:62:16:2f:86:49:37: 3d:c8:bf:c8:7f:3e:64:eb:b1:79:ae:63:ab:61:36: 72:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DB:C9:5B:5F:1B:60:0E:C8:AB:78:7B:9C:6B:DF:A9:8A:1C:A2:52 X509v3 Authority Key Identifier: keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/GNvJW18bYA7Iq3h7nGvfqYocolI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.48.0-62.113.57.255 Signature Algorithm: sha256WithRSAEncryption 8b:03:11:55:86:7a:e0:c7:05:5b:8d:38:26:a2:11:95:bf:b8: 04:c8:12:e5:5d:7a:72:c6:57:08:0a:87:2f:42:b3:4e:3d:54: 27:ce:ab:05:cb:9b:45:26:11:89:8d:8d:0d:5d:00:3c:aa:fc: 0e:36:5b:db:7f:e5:79:06:c2:b8:0f:1a:60:10:91:59:19:6a: 51:1b:4e:c5:39:9b:54:84:a6:f3:8c:46:ec:23:0e:7e:3f:87: ea:3e:40:20:aa:75:ff:96:4b:4e:eb:9d:d9:e1:53:e9:4b:3f: 60:a7:6f:32:64:52:0a:60:ba:a0:d9:78:07:bb:fb:ae:40:42: c3:9f:f9:85:ec:87:25:8b:24:28:c6:b2:73:07:6c:f2:08:99: 10:9d:61:1f:53:3f:99:02:b9:9f:12:a7:ed:eb:39:a3:2d:5d: af:7a:c5:22:2d:84:0c:73:d4:3e:39:65:3c:5a:2f:3e:44:b1: 87:fd:78:a9:6b:1c:0a:bb:0d:d2:97:c9:88:79:e9:e8:f1:b2: 2a:01:65:db:21:f9:fb:a8:1c:7c:fc:c2:5b:73:e7:7b:c7:2a: 18:11:f9:07:7a:1f:59:e3:39:df:cf:d4:9d:6f:c9:25:c5:0c: ef:8c:c6:c1:c1:78:e4:98:0a:4e:65:89:90:44:53:97:56:84: 92:ee:70:5c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7Nc0i5bIZS+DXMMyp5Sj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0 ZDgzMDAwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGRiYzk1YjVmMWI2MDBlYzhhYjc4N2I5YzZiZGZhOThhMWNhMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhlcAWmm2lVL7eXw2aYzyqdAQzDg 9f8tZewGePvdFZdukAoa7smEDyeluwkwgqYD3TMSoUX7PegzkMVh/sulK2yJFzVb wbyA+vNxNcg8MUhOEKD0tCP+PEX2ed7tAOW4whSjLvJbJ8lwvha8u7J6Xn1QKrCZ eQOY8gvbJKFOC+eVjaicfyoc5nZG9v0no/IWW2KSzr9sFp3VE7xBAF/orB9PE8pw SSr9WldaO5ibvr5OjG55wgaNhzao2KrR1ZZIDI3heWcDYyypQDoymeEKk06nbtw0 HiDeHZ4pHJvy+4lx966DNtk/7cliFi+GSTc9yL/Ifz5k67F5rmOrYTZyIQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBjbyVtfG2AOyKt4e5xr36mKHKJSMB8GA1UdIwQY MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt YTk4ZWYzMDA4NTgwLzEvR052SlcxOGJZQTdJcTNoN25HdmZxWW9jb2xJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQ+cTAD BAE+cTgwDQYJKoZIhvcNAQELBQADggEBAIsDEVWGeuDHBVuNOCaiEZW/uATIEuVd enLGVwgKhy9Cs049VCfOqwXLm0UmEYmNjQ1dADyq/A42W9t/5XkGwrgPGmAQkVkZ alEbTsU5m1SEpvOMRuwjDn4/h+o+QCCqdf+WS07rndnhU+lLP2CnbzJkUgpguqDZ eAe7+65AQsOf+YXshyWLJCjGsnMHbPIImRCdYR9TP5kCuZ8Sp+3rOaMtXa96xSIt hAxz1D45ZTxaLz5EsYf9eKlrHAq7DdKXyYh56ejxsioBZdsh+fuoHHz8wltz53vH KhgR+Qd6H1njOd/P1J1vySXFDO+MxsHBeOSYCk5liZBEU5dWhJLucFw= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:58 2026 by rpki-client