This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/GXO8Va2YLC7V7aizd3BeOTuhN-4.roa File: GXO8Va2YLC7V7aizd3BeOTuhN-4.roa (raw, json) Hash identifier: 0nWtOx7eW6IHu//MDqpxa/7ugR36Yc+2OMdqguEZeBc= Subject key identifier: 19:73:BC:55:AD:98:2C:2E:D5:ED:A8:B3:77:70:5E:39:3B:A1:37:EE Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Certificate serial: 019B7758CCD7302B4980C61984A56DBAFBBE Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/GXO8Va2YLC7V7aizd3BeOTuhN-4.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201814 IP address blocks: 185.252.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cc:d7:30:2b:49:80:c6:19:84:a5:6d:ba:fb:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1973bc55ad982c2ed5eda8b377705e393ba137ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:f1:cd:66:ae:41:8b:f0:92:45:68:f4:29: d4:f5:53:79:d3:2f:c5:47:0e:93:50:2e:0c:c3:ab: 67:22:47:e0:6e:1a:b5:99:cd:59:e8:ee:d9:4b:93: 14:55:f2:52:08:23:97:f2:f2:bb:ac:7b:51:54:e6: b4:e6:b4:4c:97:20:bc:59:97:2b:6e:5c:78:4a:67: aa:d7:23:ea:62:45:a5:bd:b1:95:0a:4a:8b:b3:f1: 2d:fd:cd:85:3a:d5:c8:fb:88:61:5b:51:53:d2:60: e0:71:db:b2:46:0a:26:cf:b3:14:c7:41:9b:84:d0: 6f:29:21:d8:52:48:35:74:07:0b:4e:e1:39:ee:83: 79:00:70:23:8d:cf:35:9b:48:41:14:18:9e:72:27: 89:a1:98:f9:69:15:af:5b:1b:17:70:7b:9b:4e:83: 12:22:80:c7:bd:a6:7f:d9:f0:34:07:b2:24:eb:e8: d7:c4:f4:aa:74:f5:e1:0c:7e:d6:20:f6:72:3f:cb: 23:eb:db:2b:2a:57:6a:7b:8b:f4:c0:0a:99:44:93: b0:06:49:eb:d3:bb:e8:a9:9b:25:3d:7d:d3:3d:bf: 45:8c:42:10:4a:45:cd:13:24:c8:7f:02:24:9c:65: 98:07:64:37:ec:be:1a:93:69:1f:bf:6f:a5:45:cd: 36:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:73:BC:55:AD:98:2C:2E:D5:ED:A8:B3:77:70:5E:39:3B:A1:37:EE X509v3 Authority Key Identifier: keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/GXO8Va2YLC7V7aizd3BeOTuhN-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.132.0/24 Signature Algorithm: sha256WithRSAEncryption c5:94:53:65:87:07:3d:70:07:78:83:4e:7d:a1:7b:69:9b:14: ab:e0:51:e2:9b:74:ba:d5:f0:fa:4b:58:61:a6:22:b1:62:27: 52:3f:1f:ff:60:41:bb:21:c1:57:f2:88:53:e8:30:88:59:a7: 46:c5:4c:59:1f:1f:3a:28:6b:48:d9:62:f5:2e:f4:24:5a:6c: 60:37:fd:fb:f8:d0:3b:93:7a:09:93:cb:20:c3:08:ca:91:fa: 3a:d2:71:f3:0c:62:31:e5:94:40:de:52:02:e7:35:b8:0b:96: b4:37:56:ab:da:b8:3b:33:02:3e:7c:1c:6c:81:19:c9:be:8b: 3a:74:89:b1:8e:a4:1f:b3:3a:f0:70:69:d3:1a:b3:6c:2d:e9: 31:7d:1c:3f:ee:58:21:10:79:e3:5e:90:d0:ea:75:53:82:47: df:e9:f7:71:ec:52:f4:a7:89:a8:93:70:e8:28:e7:60:bf:85: bb:9d:3e:83:2c:3e:21:89:47:67:63:3b:c3:30:e3:dd:3c:57: 82:c9:e9:61:76:78:ae:a2:84:75:c7:4d:76:f6:7c:5f:3d:68: 08:01:8c:7e:d4:de:7e:f9:07:f5:37:40:52:fd:55:c7:e9:bb: b7:49:1f:3f:f6:62:8b:d6:ef:a8:6e:8b:2e:c9:01:51:1c:54: 00:a8:38:21 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WMzXMCtJgMYZhKVtuvu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMmU3MmFiZjdiMTcyOGZkYTZhYTBiMDQxM2Q4ODU0ODEy ZWEzNjEwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTczYmM1NWFkOTgyYzJlZDVlZGE4YjM3NzcwNWUzOTNiYTEzN2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsvxzWauQYvwkkVo9CnU9VN50y/F Rw6TUC4Mw6tnIkfgbhq1mc1Z6O7ZS5MUVfJSCCOX8vK7rHtRVOa05rRMlyC8WZcr blx4Smeq1yPqYkWlvbGVCkqLs/Et/c2FOtXI+4hhW1FT0mDgcduyRgomz7MUx0Gb hNBvKSHYUkg1dAcLTuE57oN5AHAjjc81m0hBFBiecieJoZj5aRWvWxsXcHubToMS IoDHvaZ/2fA0B7Ik6+jXxPSqdPXhDH7WIPZyP8sj69srKldqe4v0wAqZRJOwBknr 07voqZslPX3TPb9FjEIQSkXNEyTIfwIknGWYB2Q37L4ak2kfv2+lRc02uwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBlzvFWtmCwu1e2os3dwXjk7oTfuMB8GA1UdIwQY MBaAFPoucqv3sXKP2mqgsEE9iFSBLqNhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pNXlxX2V4Y29fYWFxQ3dRVDJJVklFdW8yRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlm LWEzNjZkYTI1MWE4My8xL0dYTzhWYTJZTEM3VjdhaXpkM0JlT1R1aE4tNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlmLWEzNjZkYTI1MWE4 My8xLzEtaTV5cV9leGNvX2FhcUN3UVQySVZJRXVvMkUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5/IQw DQYJKoZIhvcNAQELBQADggEBAMWUU2WHBz1wB3iDTn2he2mbFKvgUeKbdLrV8PpL WGGmIrFiJ1I/H/9gQbshwVfyiFPoMIhZp0bFTFkfHzooa0jZYvUu9CRabGA3/fv4 0DuTegmTyyDDCMqR+jrScfMMYjHllEDeUgLnNbgLlrQ3VqvauDszAj58HGyBGcm+ izp0ibGOpB+zOvBwadMas2wt6TF9HD/uWCEQeeNekNDqdVOCR9/p93HsUvSniaiT cOgo52C/hbudPoMsPiGJR2djO8Mw4908V4LJ6WF2eK6ihHXHTXb2fF89aAgBjH7U 3n75B/U3QFL9Vcfpu7dJHz/2YovW76huiy7JAVEcVACoOCE= -----END CERTIFICATE-----Generated at Fri Jan 23 12:53:34 2026 by rpki-client