This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GkCkz5AGn-T0k_hG1pxdBXj1UUA.roa File: GkCkz5AGn-T0k_hG1pxdBXj1UUA.roa (raw, json) Hash identifier: q5UEFjiZVnhu6w6DadCwC41b5AskTUbMG75THeRjhf8= Subject key identifier: 1A:40:A4:CF:90:06:9F:E4:F4:93:F8:46:D6:9C:5D:05:78:F5:51:40 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3514343736D245271EB06171CFA9B Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GkCkz5AGn-T0k_hG1pxdBXj1UUA.roa Signing time: Thu 01 Jan 2026 08:18:47 +0000 ROA not before: Thu 01 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215667 IP address blocks: 185.254.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:51:43:43:73:6d:24:52:71:eb:06:17:1c:fa:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a40a4cf90069fe4f493f846d69c5d0578f55140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ae:57:a3:ce:0d:ba:3b:bf:5b:dc:f0:94:15: e5:2a:fd:10:74:ae:0f:17:14:b5:a3:88:4b:7e:eb: f1:28:e4:cb:cc:1f:db:3b:de:82:76:92:79:f0:f3: 1c:f1:c2:c4:39:c5:3a:2f:66:e8:4e:32:ec:1d:67: 22:e3:b7:cf:81:ff:38:4d:c6:46:0d:73:f0:85:5b: 80:ab:df:f3:dd:8a:84:23:55:f4:55:4f:22:df:c0: 2c:7d:60:d2:d0:5c:74:57:05:23:7b:7e:cd:ad:89: 4f:31:13:97:f4:1a:6f:c3:22:a4:b1:00:8b:d8:78: 02:0e:93:4c:6f:e6:4b:e9:ec:10:9f:de:1e:d0:00: f5:93:5f:32:db:fc:7d:5b:ce:aa:48:46:32:11:ee: 51:eb:1b:30:8f:ab:cf:7d:79:4c:b0:be:b9:a3:50: a8:04:eb:d2:12:81:21:d5:bc:f0:17:1f:37:b7:c6: 7d:9c:bb:66:b2:6b:10:36:a0:1e:7d:46:a2:e0:d6: 24:b3:46:05:ca:c9:37:63:3a:d2:cb:b1:b7:91:6d: 75:63:d7:a0:69:2d:2a:39:0a:7e:4d:a6:52:d9:76: a3:01:08:db:10:1f:9a:e6:dd:75:bd:d6:64:ee:ca: 05:01:f2:a5:25:3a:e0:0e:77:26:8b:84:a4:45:99: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:40:A4:CF:90:06:9F:E4:F4:93:F8:46:D6:9C:5D:05:78:F5:51:40 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GkCkz5AGn-T0k_hG1pxdBXj1UUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.37.0/24 Signature Algorithm: sha256WithRSAEncryption 52:e5:16:f8:73:62:97:00:11:31:78:e2:25:45:db:4f:b2:fd: 28:4d:24:79:a8:c8:3b:73:ac:77:3b:25:9a:f2:67:73:f9:0a: d9:1a:94:eb:4a:06:78:0c:83:51:e0:cb:9a:97:b8:02:2b:1e: 48:84:84:3e:80:66:fb:76:15:73:cd:50:b9:e7:53:aa:29:d8: 30:a7:4a:09:61:64:1c:32:b5:3a:5e:a8:7c:47:d4:36:0e:5e: 5d:ef:2f:3d:f7:e9:4d:a3:f3:ad:4c:08:79:c0:24:ca:bf:fe: 38:7e:7e:5c:46:16:4b:c2:74:d4:0d:8e:99:88:7f:a7:11:d5: 47:e2:3b:d2:9a:46:63:f1:b1:7c:72:bf:91:02:d5:d9:88:9d: 15:d3:34:19:cb:f8:2e:30:22:e6:32:ae:fc:0e:7b:fa:95:90: 69:ad:81:06:5d:f6:fb:f1:f0:ff:25:0a:ad:4b:7f:6d:23:c7: 28:7e:40:07:79:12:ce:b1:cc:94:4d:63:f6:9c:43:80:2b:c7: e7:7a:eb:3c:a0:cb:8a:f5:8d:0a:b8:f7:81:d3:ad:f2:a4:df: 83:53:b2:d2:3d:7e:6b:9d:b1:81:46:63:65:2d:78:0b:9a:21: 98:05:59:e0:7f:2e:c7:c9:17:2c:7a:06:02:ae:6e:5c:30:23: 57:04:ba:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1FDQ3NtJFJx6wYXHPqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTQwYTRjZjkwMDY5ZmU0ZjQ5M2Y4NDZkNjljNWQwNTc4ZjU1MTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q5Xo84Nuju/W9zwlBXlKv0QdK4P FxS1o4hLfuvxKOTLzB/bO96CdpJ58PMc8cLEOcU6L2boTjLsHWci47fPgf84TcZG DXPwhVuAq9/z3YqEI1X0VU8i38AsfWDS0Fx0VwUje37NrYlPMROX9BpvwyKksQCL 2HgCDpNMb+ZL6ewQn94e0AD1k18y2/x9W86qSEYyEe5R6xswj6vPfXlMsL65o1Co BOvSEoEh1bzwFx83t8Z9nLtmsmsQNqAefUai4NYks0YFysk3YzrSy7G3kW11Y9eg aS0qOQp+TaZS2XajAQjbEB+a5t11vdZk7soFAfKlJTrgDncmi4SkRZknjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpApM+QBp/k9JP4RtacXQV49VFAMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvR2tDa3o1QUduLVQwa19oRzFweGRCWGoxVVVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf4lMA0G CSqGSIb3DQEBCwUAA4IBAQBS5Rb4c2KXABExeOIlRdtPsv0oTSR5qMg7c6x3OyWa 8mdz+QrZGpTrSgZ4DINR4Mual7gCKx5IhIQ+gGb7dhVzzVC551OqKdgwp0oJYWQc MrU6Xqh8R9Q2Dl5d7y899+lNo/OtTAh5wCTKv/44fn5cRhZLwnTUDY6ZiH+nEdVH 4jvSmkZj8bF8cr+RAtXZiJ0V0zQZy/guMCLmMq78Dnv6lZBprYEGXfb78fD/JQqt S39tI8cofkAHeRLOscyUTWP2nEOAK8fneus8oMuK9Y0KuPeB063ypN+DU7LSPX5r nbGBRmNlLXgLmiGYBVngfy7HyRcsegYCrm5cMCNXBLp5 -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:01 2026 by rpki-client