This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/GFld6khnEFpi6gQW0hMwMmLlwl0.roa File: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (raw, json) Hash identifier: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM= Subject key identifier: 18:59:5D:EA:48:67:10:5A:62:EA:04:16:D2:13:30:32:62:E5:C2:5D Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019B7F15774F015DBB08E68757989CAAC255 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/GFld6khnEFpi6gQW0hMwMmLlwl0.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213873 IP address blocks: 203.55.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:77:4f:01:5d:bb:08:e6:87:57:98:9c:aa:c2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18595dea4867105a62ea0416d213303262e5c25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:e5:25:61:80:f1:4d:ac:ba:b4:82:b5:14: 8d:9a:c5:03:9c:5c:db:10:b4:54:94:94:9e:86:23: eb:8f:3e:58:31:82:0e:12:49:64:f5:6b:9a:c4:63: 5b:6a:71:25:db:09:d0:f2:3c:44:2e:e2:dd:f5:6a: 00:f5:fd:da:0f:72:a4:81:f7:2b:02:6b:4b:c8:3e: ae:e7:3c:e8:a8:2c:c0:83:26:65:48:67:12:8c:b2: 3c:77:2a:50:1b:de:2a:d5:d2:fa:e6:a1:a3:c6:e2: d4:a6:70:af:ca:82:33:69:40:8f:6f:dc:ff:3c:be: e0:23:88:87:c7:7e:a2:70:d6:f6:82:2d:05:7a:09: e7:d9:20:9c:0d:28:b6:3a:70:fe:e6:cf:81:57:d4: 55:e3:31:80:9f:2b:1a:e9:3e:96:4f:51:6a:84:a4: 97:5d:92:9c:05:24:63:12:29:74:b9:67:d7:f2:50: a9:67:70:cb:d5:96:97:63:65:d6:63:27:5b:29:56: 16:a3:0d:15:91:cb:95:ba:f2:5c:3f:ec:14:11:b5: 08:59:d8:3f:24:c6:15:ed:5a:88:f2:e6:8e:bf:94: 74:88:f7:6b:90:e1:66:70:b9:a4:7d:e2:a4:95:9c: 7b:64:01:b1:73:97:0a:c3:3d:f4:54:71:3c:4e:9b: bd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:59:5D:EA:48:67:10:5A:62:EA:04:16:D2:13:30:32:62:E5:C2:5D X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/GFld6khnEFpi6gQW0hMwMmLlwl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.55.81.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:ff:46:65:2f:c8:d0:ed:df:71:e3:ef:01:a6:dd:b9:ec:0d: c9:f3:b1:2a:7d:77:e6:bf:ef:ff:63:62:6e:67:be:03:6d:b6: ae:7d:c3:ce:3f:f9:54:84:05:05:fc:b3:93:97:49:6e:7a:c4: 42:ec:96:2c:e3:d1:a9:67:68:ad:27:0f:03:cf:96:7a:d0:59: e7:89:3f:6f:c4:5f:b2:b7:08:81:0f:96:04:6c:1d:af:bc:17: c0:0d:cd:e3:a7:0a:8f:0b:d6:36:70:76:ac:a5:b6:9d:38:c2: 8b:80:12:38:b4:80:b5:db:6b:38:e2:11:d9:af:bd:53:44:97: 21:f4:14:75:6e:ec:8b:bd:27:85:6e:4e:d3:06:54:a4:58:0c: c4:11:b3:af:48:84:e8:7b:7d:b8:b5:fc:ff:ee:e8:1a:5c:d2: 94:91:eb:02:99:c4:b1:3a:5a:28:9f:7c:a3:9a:82:54:da:41: a7:f6:59:c8:f6:35:b7:0c:20:fd:ff:3c:0f:ab:2e:56:21:1a: a1:2d:b0:e2:da:05:39:0e:27:84:ed:7b:49:82:bb:d5:6b:b1: 37:19:94:f5:37:a4:e4:dd:ff:d8:17:2c:0d:32:44:1e:9d:40: 1c:ac:fe:4c:dd:4c:ee:a0:cb:aa:12:e5:54:61:60:aa:c8:88: 69:5e:73:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXdPAV27COaHV5icqsJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODU5NWRlYTQ4NjcxMDVhNjJlYTA0MTZkMjEzMzAzMjYyZTVjMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHTlJWGA8U2surSCtRSNmsUDnFzb ELRUlJSehiPrjz5YMYIOEklk9WuaxGNbanEl2wnQ8jxELuLd9WoA9f3aD3Kkgfcr AmtLyD6u5zzoqCzAgyZlSGcSjLI8dypQG94q1dL65qGjxuLUpnCvyoIzaUCPb9z/ PL7gI4iHx36icNb2gi0Fegnn2SCcDSi2OnD+5s+BV9RV4zGAnysa6T6WT1FqhKSX XZKcBSRjEil0uWfX8lCpZ3DL1ZaXY2XWYydbKVYWow0VkcuVuvJcP+wUEbUIWdg/ JMYV7VqI8uaOv5R0iPdrkOFmcLmkfeKklZx7ZAGxc5cKwz30VHE8Tpu9RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBhZXepIZxBaYuoEFtITMDJi5cJdMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvR0ZsZDZraG5FRnBpNmdRVzBoTXdNbUxsd2wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyzdRMA0G CSqGSIb3DQEBCwUAA4IBAQCf/0ZlL8jQ7d9x4+8Bpt257A3J87EqfXfmv+//Y2Ju Z74DbbaufcPOP/lUhAUF/LOTl0luesRC7JYs49GpZ2itJw8Dz5Z60FnniT9vxF+y twiBD5YEbB2vvBfADc3jpwqPC9Y2cHaspbadOMKLgBI4tIC122s44hHZr71TRJch 9BR1buyLvSeFbk7TBlSkWAzEEbOvSIToe324tfz/7ugaXNKUkesCmcSxOloon3yj moJU2kGn9lnI9jW3DCD9/zwPqy5WIRqhLbDi2gU5DieE7XtJgrvVa7E3GZT1N6Tk 3f/YFywNMkQenUAcrP5M3UzuoMuqEuVUYWCqyIhpXnNJ -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:27 2026 by rpki-client