This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/gtpYoJbtNUbM5h2hVTX2u4RVxHA.roa File: gtpYoJbtNUbM5h2hVTX2u4RVxHA.roa (raw, json) Hash identifier: uwFs+ntpEpr7/UBaudkPVGUVUFUf6CMRlVjfLGBN6kI= Subject key identifier: 82:DA:58:A0:96:ED:35:46:CC:E6:1D:A1:55:35:F6:BB:84:55:C4:70 Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Certificate serial: 019B7BA3D81C28DE4868DC2A3AE686F8B03C Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/gtpYoJbtNUbM5h2hVTX2u4RVxHA.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31287 IP address blocks: 109.121.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d8:1c:28:de:48:68:dc:2a:3a:e6:86:f8:b0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82da58a096ed3546cce61da15535f6bb8455c470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f5:e2:ad:89:bb:d4:2c:59:92:f3:42:22:6a: bf:7c:bf:48:6b:46:64:b8:e3:16:f4:52:3f:3c:5e: 4e:c7:4c:f3:27:f5:9a:32:58:43:80:2e:e7:35:d6: 58:96:fd:c5:0e:c2:73:af:f9:77:29:a8:be:3e:d6: 25:e9:37:2d:0a:4d:40:cc:be:ee:45:8c:30:1a:22: 1a:04:76:ea:6f:86:78:f5:95:5c:7d:3d:74:75:f8: 27:df:1a:9a:b6:94:5b:c6:dc:35:a9:b3:ff:b3:92: a7:dd:da:d3:43:ff:77:5b:f0:f4:55:28:41:89:2a: f4:c6:e2:84:fa:74:34:ea:5d:74:fb:28:c9:05:63: 25:29:4f:3d:28:f8:47:06:3a:92:6f:44:84:24:34: d0:23:3b:b6:77:fe:58:c5:53:64:8d:31:38:b6:be: de:ea:99:77:cf:1e:d4:be:03:3e:b1:dd:4d:a9:33: b9:b2:a5:46:75:e5:b8:75:28:04:37:c7:be:e3:f9: 7a:50:f6:4b:c3:28:c5:eb:00:65:bd:ea:c2:95:1f: 93:85:c4:be:82:a5:c5:e9:42:2c:90:77:86:7a:bc: cb:d6:c7:2c:16:99:2e:84:5e:b5:42:48:ac:29:d1: 02:d0:2f:94:ab:36:08:6e:ed:e1:30:3b:88:b0:4e: f5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DA:58:A0:96:ED:35:46:CC:E6:1D:A1:55:35:F6:BB:84:55:C4:70 X509v3 Authority Key Identifier: keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/gtpYoJbtNUbM5h2hVTX2u4RVxHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.153.0/24 Signature Algorithm: sha256WithRSAEncryption aa:61:b6:f9:4b:4d:c6:29:3f:4d:e2:d2:5e:92:b5:e2:15:57: 46:20:d0:70:95:dd:9b:7c:bc:a2:f7:93:af:c8:aa:f7:8e:0b: 76:12:43:5e:63:52:20:6f:e9:19:72:10:46:1e:fe:7a:0d:22: 24:0b:e7:ab:e0:40:ca:fa:17:66:b9:9e:15:c3:4a:1e:ce:9d: 2f:8a:6b:00:f0:1f:b1:d6:a3:e5:b0:13:46:bd:85:a5:60:6a: 9f:8a:fe:84:19:5a:61:42:ff:8d:f9:c3:fe:92:00:c4:47:44: 1a:56:32:e7:a5:1a:e3:e6:1f:2d:d2:73:e9:e9:df:95:e0:9e: a4:b8:d6:3b:df:2d:9c:fb:af:43:be:23:b9:2b:90:a5:69:5d: f8:02:b9:a5:3a:26:f2:51:31:55:f9:89:c8:79:6f:93:2f:7d: 5a:d0:63:bb:1f:45:7a:39:74:17:20:3d:58:a1:b5:80:b9:f3: 17:fd:bb:39:3b:01:6d:27:6c:60:bd:e0:79:1d:26:59:87:a8: 84:d7:a2:d0:be:61:f2:1e:da:61:32:59:b5:23:95:ff:29:70: ea:8e:c9:45:d0:cf:ac:25:3e:e2:98:60:70:41:77:89:bb:74: 7b:86:19:66:17:47:de:e0:60:be:aa:56:b5:69:60:9f:0b:b2: 76:0c:90:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9gcKN5IaNwqOuaG+LA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz YjcxYzUwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmRhNThhMDk2ZWQzNTQ2Y2NlNjFkYTE1NTM1ZjZiYjg0NTVjNDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvXirYm71CxZkvNCImq/fL9Ia0Zk uOMW9FI/PF5Ox0zzJ/WaMlhDgC7nNdZYlv3FDsJzr/l3Kai+PtYl6TctCk1AzL7u RYwwGiIaBHbqb4Z49ZVcfT10dfgn3xqatpRbxtw1qbP/s5Kn3drTQ/93W/D0VShB iSr0xuKE+nQ06l10+yjJBWMlKU89KPhHBjqSb0SEJDTQIzu2d/5YxVNkjTE4tr7e 6pl3zx7UvgM+sd1NqTO5sqVGdeW4dSgEN8e+4/l6UPZLwyjF6wBlverClR+ThcS+ gqXF6UIskHeGerzL1scsFpkuhF61QkisKdEC0C+UqzYIbu3hMDuIsE71SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFILaWKCW7TVGzOYdoVU19ruEVcRwMB8GA1UdIwQY MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt MWQ1ZDk0NWEwNWEzLzEvZ3RwWW9KYnROVWJNNWgyaFZUWDJ1NFJWeEhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmZMA0G CSqGSIb3DQEBCwUAA4IBAQCqYbb5S03GKT9N4tJekrXiFVdGINBwld2bfLyi95Ov yKr3jgt2EkNeY1Igb+kZchBGHv56DSIkC+er4EDK+hdmuZ4Vw0oezp0vimsA8B+x 1qPlsBNGvYWlYGqfiv6EGVphQv+N+cP+kgDER0QaVjLnpRrj5h8t0nPp6d+V4J6k uNY73y2c+69DviO5K5ClaV34ArmlOibyUTFV+YnIeW+TL31a0GO7H0V6OXQXID1Y obWAufMX/bs5OwFtJ2xgveB5HSZZh6iE16LQvmHyHtphMlm1I5X/KXDqjslF0M+s JT7imGBwQXeJu3R7hhlmF0fe4GC+qla1aWCfC7J2DJDm -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:46 2026 by rpki-client