This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/GJGcFx0xGAuamOa3lmo_7TyCIas.roa File: GJGcFx0xGAuamOa3lmo_7TyCIas.roa (raw, json) Hash identifier: qw0UBzd9Mkc6V2U3rQ/Tp5ymNOy4O3f5at2SdO5Hyh4= Subject key identifier: 18:91:9C:17:1D:31:18:0B:9A:98:E6:B7:96:6A:3F:ED:3C:82:21:AB Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b Certificate serial: 019B7C7FCDB3DC500A9CD3AACC58F3B69364 Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/GJGcFx0xGAuamOa3lmo_7TyCIas.roa Signing time: Fri 02 Jan 2026 02:18:29 +0000 ROA not before: Fri 02 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47764 IP address blocks: 31.177.104.0/22 maxlen: 22 2a14:25c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:cd:b3:dc:50:0a:9c:d3:aa:cc:58:f3:b6:93:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b Validity Not Before: Jan 2 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18919c171d31180b9a98e6b7966a3fed3c8221ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:71:07:fd:50:81:eb:de:1b:a7:f9:46:61:d8: 59:56:01:43:27:f4:ee:02:9e:09:53:cc:68:00:61: 0e:f3:1c:53:68:57:ba:c4:81:7a:6b:37:57:71:84: 8e:4d:93:be:ca:99:87:36:1d:04:48:09:3f:50:90: ed:ae:51:ef:ac:e4:87:a4:d9:d2:0f:a6:d8:a7:b7: b0:37:9d:84:6d:88:59:be:24:b8:36:d0:06:51:a7: 8e:dc:38:92:26:16:46:3e:f8:13:55:b8:65:d1:fe: 55:cc:f7:d9:46:02:c0:71:48:1f:39:58:51:b0:12: 25:64:33:60:94:00:6e:71:b3:66:07:64:11:85:34: 40:62:be:7a:a3:37:7b:ae:44:96:c4:e7:78:ab:39: 15:57:0b:d3:09:38:b3:92:ff:56:91:f8:e8:ff:3e: 9a:75:4a:7d:36:75:58:e7:46:9a:af:df:a5:b4:60: 46:60:b9:fc:b4:bf:09:2b:e8:ad:5c:6f:bc:86:c4: ec:6b:d2:1a:45:46:02:50:17:42:86:6d:6f:2a:b0: 2c:df:5c:2c:ef:06:fe:05:d4:d3:49:a5:3e:75:2c: ab:ad:2b:53:76:23:a0:a3:8e:e9:a9:d9:39:4f:46: 18:9c:5c:5c:f1:86:23:87:03:ea:97:eb:4b:02:5f: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:9C:17:1D:31:18:0B:9A:98:E6:B7:96:6A:3F:ED:3C:82:21:AB X509v3 Authority Key Identifier: keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/GJGcFx0xGAuamOa3lmo_7TyCIas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.104.0/22 IPv6: 2a14:25c0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:99:75:82:cd:57:26:e3:b8:9b:ea:c0:48:43:d2:51:0e:8b: 7b:ce:79:56:9a:1a:25:c4:be:86:ac:56:5f:d7:27:50:00:da: 98:a3:44:00:84:f0:d5:f0:56:3d:3a:dc:a6:80:a0:a8:a7:bf: ab:eb:33:8f:13:a1:7c:01:c0:c8:ba:29:d6:5c:fe:fe:e1:4c: 01:e5:55:eb:87:d5:e5:04:d5:97:59:c8:b5:cf:3b:ef:db:f3: dd:98:e9:95:46:2c:45:f7:30:83:66:84:d5:c6:55:c4:38:db: df:c8:ea:8c:56:6b:2c:7a:6f:0e:c9:ee:c4:4b:ea:f4:4b:76: 1b:5e:dd:5b:f5:25:27:98:35:95:77:dd:79:2a:7a:70:62:58: 5e:0d:10:75:ae:ab:3b:5d:eb:81:6f:1c:55:4e:38:55:8b:84: ae:c7:00:c2:71:b5:a3:b2:99:63:9f:9f:f9:64:58:ef:83:db: 77:ee:6e:0b:18:60:02:9b:6e:5c:af:10:e0:e3:bb:16:69:b0: 31:5b:98:3d:8f:72:43:1e:57:23:d3:c6:fc:09:70:50:f5:19: 43:b9:8f:8e:8f:57:d4:7c:00:c3:99:94:f1:b9:b6:12:16:da: 84:7c:0c:04:90:e0:14:0d:76:91:dd:7d:8a:c2:8b:85:d5:83: 54:1d:19:fd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f82z3FAKnNOqzFjztpNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1Y2IyYjVlYWYzY2MxNWRkNGIzYjIzYWQ4Yjk0NzJhNTI0 MGMwM2IwHhcNMjYwMTAyMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODkxOWMxNzFkMzExODBiOWE5OGU2Yjc5NjZhM2ZlZDNjODIyMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nEH/VCB694bp/lGYdhZVgFDJ/Tu Ap4JU8xoAGEO8xxTaFe6xIF6azdXcYSOTZO+ypmHNh0ESAk/UJDtrlHvrOSHpNnS D6bYp7ewN52EbYhZviS4NtAGUaeO3DiSJhZGPvgTVbhl0f5VzPfZRgLAcUgfOVhR sBIlZDNglABucbNmB2QRhTRAYr56ozd7rkSWxOd4qzkVVwvTCTizkv9Wkfjo/z6a dUp9NnVY50aar9+ltGBGYLn8tL8JK+itXG+8hsTsa9IaRUYCUBdChm1vKrAs31ws 7wb+BdTTSaU+dSyrrStTdiOgo47pqdk5T0YYnFxc8YYjhwPql+tLAl8sDwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBiRnBcdMRgLmpjmt5ZqP+08giGrMB8GA1UdIwQY MBaAFLXLK16vPMFd1LOyOti5RypSQMA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMt MDZjYTcwOWEzYzU5LzEvR0pHY0Z4MHhHQXVhbU9hM2xtb183VHlDSWFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMtMDZjYTcwOWEzYzU5 LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCH7FoMA0E AgACMAcDBQAqFCXAMA0GCSqGSIb3DQEBCwUAA4IBAQB9mXWCzVcm47ib6sBIQ9JR Dot7znlWmholxL6GrFZf1ydQANqYo0QAhPDV8FY9OtymgKCop7+r6zOPE6F8AcDI uinWXP7+4UwB5VXrh9XlBNWXWci1zzvv2/PdmOmVRixF9zCDZoTVxlXEONvfyOqM Vmssem8Oye7ES+r0S3YbXt1b9SUnmDWVd915KnpwYlheDRB1rqs7XeuBbxxVTjhV i4SuxwDCcbWjspljn5/5ZFjvg9t37m4LGGACm25crxDg47sWabAxW5g9j3JDHlcj 08b8CXBQ9RlDuY+Oj1fUfADDmZTxubYSFtqEfAwEkOAUDXaR3X2KwouF1YNUHRn9 -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:03 2026 by rpki-client