This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GkonKuaF0Yg7UsqRuXQTNuUbj7c.roa File: GkonKuaF0Yg7UsqRuXQTNuUbj7c.roa (raw, json) Hash identifier: bwTk+ItK8iaCl+09dJcEVpklubHa+ZqLVXm4b1tXRH8= Subject key identifier: 1A:4A:27:2A:E6:85:D1:88:3B:52:CA:91:B9:74:13:36:E5:1B:8F:B7 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A594FDFA52AF39AD0685B631CC33A388E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GkonKuaF0Yg7UsqRuXQTNuUbj7c.roa Signing time: Thu 06 Nov 2025 13:16:37 +0000 ROA not before: Thu 06 Nov 2025 13:16:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45815 IP address blocks: 94.103.163.0/24 maxlen: 24 94.249.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:4f:df:a5:2a:f3:9a:d0:68:5b:63:1c:c3:3a:38:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 6 13:16:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a4a272ae685d1883b52ca91b9741336e51b8fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:ea:a6:6c:63:2d:8f:e5:59:56:86:3b:7f: d5:b9:0a:74:6d:ab:d6:55:19:8f:4c:0b:fd:ef:ca: 89:2f:21:6f:ee:15:75:fd:67:15:6e:bc:c5:cd:8a: 70:ab:01:58:24:eb:60:86:2c:5b:60:41:d1:bb:0f: 94:60:55:99:c1:e8:af:c9:ba:b7:04:ed:88:70:6f: 8d:77:c1:17:b5:78:ef:21:68:fc:95:99:c1:17:02: 65:f5:09:83:f3:9d:40:30:b6:63:49:0a:12:c3:1e: aa:d6:32:49:0c:d1:53:da:6e:a4:f8:ea:59:7b:c7: ca:5b:ff:4c:21:6a:1a:0f:78:5d:a1:66:aa:f2:92: c4:9d:f8:b6:3d:4c:ff:14:4d:e6:9b:00:63:6b:f0: ca:0a:df:74:8c:b4:3f:b7:00:4a:8e:29:c8:ba:8c: d9:5c:e7:64:76:7a:4a:4f:76:49:68:9a:8a:e8:49: f8:b3:d8:23:ea:5a:fc:03:b7:96:3b:4f:72:96:41: 1d:12:79:c3:6e:2d:77:60:2a:7e:81:95:2c:91:8b: 93:07:5b:1b:6c:a5:05:d2:57:ad:d5:2a:23:df:e3: e1:b6:4c:de:26:65:e9:26:ec:fc:29:92:06:b4:71: 95:a0:d3:4b:54:95:50:e5:74:64:21:3c:c1:2b:8b: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4A:27:2A:E6:85:D1:88:3B:52:CA:91:B9:74:13:36:E5:1B:8F:B7 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GkonKuaF0Yg7UsqRuXQTNuUbj7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.103.163.0/24 94.249.213.0/24 Signature Algorithm: sha256WithRSAEncryption 08:ba:b9:a1:d9:0a:a6:e9:c8:e8:f7:04:9e:67:e9:e8:bf:de: 54:a0:7d:74:e9:f7:7b:78:d8:b9:55:b3:f0:92:71:a8:07:f3: 0b:f6:7b:a4:fa:7d:cb:b9:85:7f:3f:7d:7f:01:30:eb:21:d9: 80:c2:fe:29:69:d0:e6:f0:0b:12:fc:a1:30:25:20:d2:15:fd: af:7b:a7:2e:95:5c:7e:35:ac:2e:98:b3:b8:ee:48:6d:ad:85: 46:f1:aa:ed:1d:ce:db:7b:28:03:eb:1c:6d:fb:31:df:be:f2: 24:c8:83:60:b0:a9:f7:b1:8e:39:16:df:ef:de:3c:4c:d1:2c: a2:0d:0b:0d:b0:ef:10:17:20:a9:9c:e6:f3:a1:34:66:76:b1: f6:8b:b9:4d:17:49:a3:38:e1:f0:2a:e6:7d:5c:45:16:ac:4d: 1e:e5:21:91:4b:bb:2f:5b:13:0d:83:ef:66:69:94:5f:a8:9e: 99:a5:d6:89:e7:9f:cd:7c:29:4f:9c:f2:5b:90:7e:d0:ba:dc: f0:b7:e0:72:c0:cf:cf:99:95:84:51:34:91:02:6e:d3:cb:3c: a2:72:56:e3:b5:84:a3:16:ca:63:be:17:b0:f3:88:b5:ac:db: 43:cf:84:9d:d5:16:32:c7:e4:bb:73:98:31:5f:a0:03:7f:88: af:78:3c:00 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpZT9+lKvOa0GhbYxzDOjiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTA2MTMxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTRhMjcyYWU2ODVkMTg4M2I1MmNhOTFiOTc0MTMzNmU1MWI4ZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFvqpmxjLY/lWVaGO3/VuQp0bavW VRmPTAv978qJLyFv7hV1/WcVbrzFzYpwqwFYJOtghixbYEHRuw+UYFWZweivybq3 BO2IcG+Nd8EXtXjvIWj8lZnBFwJl9QmD851AMLZjSQoSwx6q1jJJDNFT2m6k+OpZ e8fKW/9MIWoaD3hdoWaq8pLEnfi2PUz/FE3mmwBja/DKCt90jLQ/twBKjinIuozZ XOdkdnpKT3ZJaJqK6En4s9gj6lr8A7eWO09ylkEdEnnDbi13YCp+gZUskYuTB1sb bKUF0let1Soj3+PhtkzeJmXpJuz8KZIGtHGVoNNLVJVQ5XRkITzBK4tfIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBpKJyrmhdGIO1LKkbl0EzblG4+3MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvR2tvbkt1YUYwWWc3VXNxUnVYUVROdVViajdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXmejAwQA XvnVMA0GCSqGSIb3DQEBCwUAA4IBAQAIurmh2Qqm6cjo9wSeZ+nov95UoH106fd7 eNi5VbPwknGoB/ML9nuk+n3LuYV/P31/ATDrIdmAwv4padDm8AsS/KEwJSDSFf2v e6culVx+NawumLO47khtrYVG8artHc7beygD6xxt+zHfvvIkyINgsKn3sY45Ft/v 3jxM0SyiDQsNsO8QFyCpnObzoTRmdrH2i7lNF0mjOOHwKuZ9XEUWrE0e5SGRS7sv WxMNg+9maZRfqJ6ZpdaJ55/NfClPnPJbkH7Qutzwt+BywM/PmZWEUTSRAm7Tyzyi clbjtYSjFspjvhew84i1rNtDz4Sd1RYyx+S7c5gxX6ADf4iveDwA -----END CERTIFICATE-----Generated at Fri Dec 5 17:07:20 2025 by rpki-client