This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GgpKUJ7qYfvTjVxwjygion0ZLrs.roa File: GgpKUJ7qYfvTjVxwjygion0ZLrs.roa (raw, json) Hash identifier: 4fGHSLZM1mXFixEjWZtsc8EV0/XJASDEB0idG6SdXbg= Subject key identifier: 1A:0A:4A:50:9E:EA:61:FB:D3:8D:5C:70:8F:28:22:A2:7D:19:2E:BB Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C09B39A75E5C2C3768B68D7F6DFF54F59 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GgpKUJ7qYfvTjVxwjygion0ZLrs.roa Signing time: Thu 29 Jan 2026 12:21:31 +0000 ROA not before: Thu 29 Jan 2026 12:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 5.253.64.0/24 maxlen: 24 87.120.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:b3:9a:75:e5:c2:c3:76:8b:68:d7:f6:df:f5:4f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 29 12:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a0a4a509eea61fbd38d5c708f2822a27d192ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:53:be:94:6f:7b:42:72:0d:e3:13:81:39: 6a:2e:41:69:b6:90:ee:cf:12:57:12:86:4a:c1:a1: 83:35:27:8f:2a:1d:c5:6f:74:67:34:bc:e4:8c:f8: fe:20:7b:ce:b5:57:c2:a6:28:45:66:5b:b0:e2:26: 6f:7a:e1:5a:6b:b4:7e:08:c5:2a:01:b8:ea:fe:0b: b2:4a:3e:60:80:37:84:1f:ed:af:f7:91:b1:b4:d8: 83:03:8a:93:23:03:d7:c6:af:63:da:14:47:3f:a2: c2:c6:9a:c1:26:e8:7a:16:ed:7d:db:63:88:32:61: 33:72:d8:e0:f8:f6:f5:51:ef:da:ac:b6:7a:b6:b6: 04:8a:68:5e:e1:b6:1a:75:0e:15:96:05:9d:78:ad: e5:3c:18:14:91:ba:d8:b4:53:38:fb:a8:c9:62:6d: 80:8d:c0:e2:33:17:05:b1:f1:fb:98:3d:95:d9:6c: 90:5a:91:7e:2b:28:b9:56:74:ef:64:21:c5:6f:be: f3:92:96:ad:b1:be:f8:4e:b2:50:c1:02:8a:ef:dc: 2f:b7:ef:c3:38:a9:79:ce:1b:66:c2:10:fd:d8:31: 23:86:69:09:df:3e:24:76:7e:b7:51:c0:90:c6:fa: ba:76:9b:b3:5a:43:8b:d8:ef:e5:70:65:73:b8:c7: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0A:4A:50:9E:EA:61:FB:D3:8D:5C:70:8F:28:22:A2:7D:19:2E:BB X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GgpKUJ7qYfvTjVxwjygion0ZLrs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.64.0/24 87.120.158.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:7f:a6:fa:0a:8a:5f:bd:15:b7:4e:02:54:0b:4e:8d:ec:63: d8:d6:ca:2c:dc:b6:4f:dd:e3:31:b7:0e:1a:8a:2a:3b:3e:a9: e4:c1:e0:57:29:78:89:27:49:fc:ce:e3:7b:ad:0f:2e:5f:9e: b3:d2:24:27:d2:7a:b8:26:cd:69:3e:e6:fb:af:96:0d:a6:a7: 5e:2c:71:3a:2b:18:2a:11:5d:87:2b:c2:6f:9b:56:81:63:dc: c7:10:a1:84:00:84:34:77:01:92:99:31:c0:bc:d3:fb:dd:71: 2a:fa:4e:d4:bb:ec:15:bd:90:52:64:ee:1f:e6:e9:2c:14:a5: cc:cf:5f:5a:5e:20:d5:0f:a8:7b:5e:87:b4:c6:2c:9f:bc:41: 57:a0:59:e1:7e:d5:cd:5e:cf:1a:8c:43:bd:8e:9f:fa:cd:f9: 92:ea:d2:0b:df:cd:0d:00:4e:63:7d:03:5e:d7:0f:2c:26:50: 1e:a0:1a:83:c5:c3:f8:9c:2c:c8:55:94:3b:2e:83:41:86:b4: a6:a9:93:7f:4d:b2:83:02:c0:eb:b0:40:ef:e5:09:ce:22:c1: b7:51:c5:4b:72:ad:7f:53:f9:68:c6:9c:a4:a9:9e:a3:4b:4e: 97:9d:d3:af:53:e5:20:57:2f:a0:ba:c6:19:f6:c1:66:a1:db: 73:12:25:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwJs5p15cLDdoto1/bf9U9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTI5MTIyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTBhNGE1MDllZWE2MWZiZDM4ZDVjNzA4ZjI4MjJhMjdkMTkyZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouNTvpRve0JyDeMTgTlqLkFptpDu zxJXEoZKwaGDNSePKh3Fb3RnNLzkjPj+IHvOtVfCpihFZluw4iZveuFaa7R+CMUq Abjq/guySj5ggDeEH+2v95GxtNiDA4qTIwPXxq9j2hRHP6LCxprBJuh6Fu1922OI MmEzctjg+Pb1Ue/arLZ6trYEimhe4bYadQ4VlgWdeK3lPBgUkbrYtFM4+6jJYm2A jcDiMxcFsfH7mD2V2WyQWpF+Kyi5VnTvZCHFb77zkpatsb74TrJQwQKK79wvt+/D OKl5zhtmwhD92DEjhmkJ3z4kdn63UcCQxvq6dpuzWkOL2O/lcGVzuMeSSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBoKSlCe6mH7041ccI8oIqJ9GS67MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvR2dwS1VKN3FZZnZUalZ4d2p5Z2lvbjBaTHJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABf1AAwQB V3ieMA0GCSqGSIb3DQEBCwUAA4IBAQBsf6b6CopfvRW3TgJUC06N7GPY1sos3LZP 3eMxtw4aiio7PqnkweBXKXiJJ0n8zuN7rQ8uX56z0iQn0nq4Js1pPub7r5YNpqde LHE6KxgqEV2HK8Jvm1aBY9zHEKGEAIQ0dwGSmTHAvNP73XEq+k7Uu+wVvZBSZO4f 5uksFKXMz19aXiDVD6h7Xoe0xiyfvEFXoFnhftXNXs8ajEO9jp/6zfmS6tIL380N AE5jfQNe1w8sJlAeoBqDxcP4nCzIVZQ7LoNBhrSmqZN/TbKDAsDrsEDv5QnOIsG3 UcVLcq1/U/loxpykqZ6jS06XndOvU+UgVy+gusYZ9sFmodtzEiUt -----END CERTIFICATE-----Generated at Thu Jan 29 17:49:32 2026 by rpki-client