This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GK7YlJBDnljXg2q4mBBUGO72RR4.roa File: GK7YlJBDnljXg2q4mBBUGO72RR4.roa (raw, json) Hash identifier: o8OVWD3n+QtA+q/7k3B1VBm4HgeC53O0RKUx/8cZYWw= Subject key identifier: 18:AE:D8:94:90:43:9E:58:D7:83:6A:B8:98:10:54:18:EE:F6:45:1E Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019ABF369307487C405DDBB136F0A8445885 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GK7YlJBDnljXg2q4mBBUGO72RR4.roa Signing time: Wed 26 Nov 2025 08:10:16 +0000 ROA not before: Wed 26 Nov 2025 08:10:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44486 IP address blocks: 5.83.145.0/24 maxlen: 24 77.90.3.0/24 maxlen: 24 77.90.28.0/24 maxlen: 24 89.144.33.0/24 maxlen: 24 89.144.42.0/24 maxlen: 24 94.103.172.0/24 maxlen: 24 94.103.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:36:93:07:48:7c:40:5d:db:b1:36:f0:a8:44:58:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 26 08:10:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=18aed89490439e58d7836ab898105418eef6451e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:ca:cd:a1:45:99:af:68:fe:24:1d:2d:9b: 12:32:13:39:4f:af:06:4b:e5:35:f5:ea:5c:26:f0: 24:72:f9:8f:dd:67:71:17:bf:de:8c:dc:5c:28:e6: 01:d2:e7:20:42:d3:83:a2:c0:48:6a:11:bc:52:c4: 9d:bd:7f:09:c1:8b:75:7a:a4:44:d7:0f:3c:5f:13: 1b:29:65:b1:9e:3e:8f:80:f2:ec:0c:c1:8b:ba:54: 4d:8a:eb:40:47:b3:86:8f:03:a9:bf:45:55:f9:6b: 15:6d:d7:12:bb:b2:6a:aa:d5:c6:94:cb:ca:15:7c: 42:67:42:25:bc:06:9d:1b:4a:39:28:37:b0:57:b9: 46:40:cb:69:7b:29:f3:ce:f7:76:dc:89:54:c7:8e: 49:98:11:49:4b:92:98:32:bf:0d:71:ef:45:e6:47: b8:e2:c2:08:b9:3a:6c:31:7c:2a:47:81:3e:ca:87: 70:2a:b7:49:ae:cc:08:3c:eb:8c:9e:7f:65:a1:90: a4:f6:5b:3b:01:07:d6:6d:31:b5:40:d9:25:48:65: 4d:ba:75:aa:77:bc:9e:a4:4e:d0:81:b8:38:16:8b: 4c:a7:b7:93:de:23:bc:91:e1:20:5b:b2:42:41:dc: af:3d:b1:4b:f1:7f:fc:09:9c:89:c6:f3:22:cd:20: ea:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AE:D8:94:90:43:9E:58:D7:83:6A:B8:98:10:54:18:EE:F6:45:1E X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GK7YlJBDnljXg2q4mBBUGO72RR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.145.0/24 77.90.3.0/24 77.90.28.0/24 89.144.33.0/24 89.144.42.0/24 94.103.172.0/23 Signature Algorithm: sha256WithRSAEncryption 60:5f:b9:ab:8a:f0:b0:19:13:b2:21:3d:08:ff:52:f9:a3:35: 27:5e:6a:1d:dd:01:96:eb:27:ad:79:cf:95:29:76:6e:1e:e9: ae:b0:ef:4f:14:ea:30:19:ea:06:d7:18:7f:aa:1e:bf:e2:41: 5d:3b:41:28:37:57:10:c4:14:3e:84:2e:79:88:34:b1:50:81: 2f:9f:d1:cf:cc:88:8b:1c:4c:c7:44:ae:da:ce:3b:1e:53:41: fd:ed:38:f9:5f:65:7f:5c:e0:b9:ac:5b:5e:4b:98:5b:bc:99: d3:56:3f:95:05:c5:0b:ab:39:3c:12:af:a2:77:e8:4b:93:3a: d8:cc:ff:5b:32:54:70:95:e1:35:39:3e:50:8b:47:c5:02:be: 43:c6:c0:a6:88:2f:3b:15:80:c9:46:81:a5:0b:52:27:09:ed: 93:d6:64:87:53:24:7b:5e:b7:2a:73:f4:e2:9b:05:69:94:16: 51:15:2a:6d:ba:15:79:6b:24:ce:2b:26:f7:68:cb:45:19:d5: e9:f8:f1:ae:2b:73:72:2b:5e:ad:da:75:42:8b:e1:ef:13:ed: 33:dc:67:cc:aa:62:13:ef:32:c8:3e:8a:a4:85:b7:2c:e1:1a: 20:f1:f7:1d:96:01:21:03:68:f3:c5:91:30:8d:71:a6:48:b7: 9c:4b:c0:5d -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZq/NpMHSHxAXduxNvCoRFiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI2MDgxMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGFlZDg5NDkwNDM5ZTU4ZDc4MzZhYjg5ODEwNTQxOGVlZjY0NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCfKzaFFma9o/iQdLZsSMhM5T68G S+U19epcJvAkcvmP3WdxF7/ejNxcKOYB0ucgQtODosBIahG8UsSdvX8JwYt1eqRE 1w88XxMbKWWxnj6PgPLsDMGLulRNiutAR7OGjwOpv0VV+WsVbdcSu7JqqtXGlMvK FXxCZ0IlvAadG0o5KDewV7lGQMtpeynzzvd23IlUx45JmBFJS5KYMr8Nce9F5ke4 4sIIuTpsMXwqR4E+yodwKrdJrswIPOuMnn9loZCk9ls7AQfWbTG1QNklSGVNunWq d7yepE7Qgbg4FotMp7eT3iO8keEgW7JCQdyvPbFL8X/8CZyJxvMizSDqZQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFBiu2JSQQ55Y14NquJgQVBju9kUeMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvR0s3WWxKQkRubGpYZzJxNG1CQlVHTzcyUlI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABVORAwQA TVoDAwQATVocAwQAWZAhAwQAWZAqAwQBXmesMA0GCSqGSIb3DQEBCwUAA4IBAQBg X7mrivCwGROyIT0I/1L5ozUnXmod3QGW6yetec+VKXZuHumusO9PFOowGeoG1xh/ qh6/4kFdO0EoN1cQxBQ+hC55iDSxUIEvn9HPzIiLHEzHRK7azjseU0H97Tj5X2V/ XOC5rFteS5hbvJnTVj+VBcULqzk8Eq+id+hLkzrYzP9bMlRwleE1OT5Qi0fFAr5D xsCmiC87FYDJRoGlC1InCe2T1mSHUyR7Xrcqc/TimwVplBZRFSptuhV5ayTOKyb3 aMtFGdXp+PGuK3NyK16t2nVCi+HvE+0z3GfMqmIT7zLIPoqkhbcs4Rog8fcdlgEh A2jzxZEwjXGmSLecS8Bd -----END CERTIFICATE-----Generated at Fri Nov 28 22:12:52 2025 by rpki-client