This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GvnLgo9mgObcGEV3wYr4r7m3HBE.roa File: GvnLgo9mgObcGEV3wYr4r7m3HBE.roa (raw, json) Hash identifier: E9lQSjAS7Fftj1NJ5bcQAUdqACRBbZfP1LgXxj5kIdI= Subject key identifier: 1A:F9:CB:82:8F:66:80:E6:DC:18:45:77:C1:8A:F8:AF:B9:B7:1C:11 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A54D78B338657E42E1F170D8A2C98AD3F Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GvnLgo9mgObcGEV3wYr4r7m3HBE.roa Signing time: Wed 05 Nov 2025 16:26:43 +0000 ROA not before: Wed 05 Nov 2025 16:26:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206264 IP address blocks: 5.175.194.0/24 maxlen: 24 5.231.254.0/24 maxlen: 24 178.18.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:d7:8b:33:86:57:e4:2e:1f:17:0d:8a:2c:98:ad:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 5 16:26:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1af9cb828f6680e6dc184577c18af8afb9b71c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ba:c9:66:f3:99:3a:59:78:b7:71:1d:5b:90: d4:19:26:96:5e:62:1e:59:37:9b:75:80:d5:c3:11: 65:f5:a0:3a:e7:03:72:13:11:10:0d:ad:f2:a5:2e: cb:17:e6:fa:e1:ef:e6:48:a9:0e:40:47:49:c3:dd: 0d:7f:e1:f6:9e:95:0f:6a:2d:c5:5a:5d:a1:49:73: fd:a4:8c:29:cd:7c:87:92:9a:ee:46:db:76:5b:a8: 71:39:2e:e0:79:52:8f:43:6e:c2:76:26:a1:ae:c8: 5f:da:a8:a5:23:ca:a0:9c:85:c2:2d:2e:64:c8:c1: 29:7e:7d:4f:cb:60:aa:13:17:5f:46:13:ee:f9:94: 1f:03:23:4b:f9:83:5c:58:2f:e7:92:8d:13:e8:30: 32:d8:1c:cb:fc:30:12:b1:6a:22:02:0e:b0:57:3b: 08:ef:27:01:42:51:10:c6:0f:ec:01:c5:9b:13:38: 69:c0:0e:5d:23:6b:89:1d:f2:a6:98:35:ed:62:00: 96:4f:e3:16:24:56:bf:13:d8:95:39:9e:42:98:71: 14:6d:42:5f:48:a2:28:6a:67:cc:99:43:7b:8e:f2: 93:fc:d3:fc:f0:b7:7e:ad:b1:c2:8f:05:40:dc:54: aa:63:22:54:e1:7c:68:97:14:3e:95:06:3d:d9:12: b7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F9:CB:82:8F:66:80:E6:DC:18:45:77:C1:8A:F8:AF:B9:B7:1C:11 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GvnLgo9mgObcGEV3wYr4r7m3HBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.194.0/24 5.231.254.0/24 178.18.149.0/24 Signature Algorithm: sha256WithRSAEncryption 78:3d:be:74:3c:67:e6:c4:85:ce:db:5b:48:46:7c:b1:c1:03: 06:f9:e9:4f:01:a4:97:7d:6d:05:4d:75:af:9a:ef:c3:f0:10: dd:63:6d:d9:b8:85:22:69:e2:df:23:4f:72:aa:cb:20:ba:f1: e2:a3:ff:60:5b:ed:cd:77:fc:96:d0:2e:6a:3b:92:62:5f:ca: 73:9d:d7:1e:be:e2:58:56:17:7e:54:18:1e:9c:64:5e:47:9a: 34:36:0a:e2:ac:ac:b5:93:05:1c:7c:33:11:de:b6:23:bb:82: 54:7c:77:db:ba:e4:ad:f1:25:2b:68:fa:b9:b4:1c:17:7b:37: 84:b5:a6:72:44:65:a7:24:90:a9:f2:c0:e5:c6:ba:06:4b:71: 7a:b3:06:81:fc:0c:79:f6:10:6c:0f:d6:24:ef:8f:3a:df:1e: 6e:97:4f:ec:e5:d0:6c:4a:5e:fc:a0:08:7d:bf:c9:f5:01:74: 07:1a:e9:c0:23:48:0b:db:1c:41:95:3f:2f:a1:b1:6c:fc:8d: 35:07:67:c0:e5:10:7e:88:19:d3:0a:99:38:a2:19:7c:79:94: 52:2e:46:51:c8:1e:eb:6d:a6:60:32:2b:13:42:9b:46:3d:3c: 94:8a:b0:60:c4:12:bd:bc:b2:7f:91:dc:e1:29:e7:c2:cc:c3: 17:d1:e5:c1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpU14szhlfkLh8XDYosmK0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTA1MTYyNjQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWY5Y2I4MjhmNjY4MGU2ZGMxODQ1NzdjMThhZjhhZmI5YjcxYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3brJZvOZOll4t3EdW5DUGSaWXmIe WTebdYDVwxFl9aA65wNyExEQDa3ypS7LF+b64e/mSKkOQEdJw90Nf+H2npUPai3F Wl2hSXP9pIwpzXyHkpruRtt2W6hxOS7geVKPQ27Cdiahrshf2qilI8qgnIXCLS5k yMEpfn1Py2CqExdfRhPu+ZQfAyNL+YNcWC/nko0T6DAy2BzL/DASsWoiAg6wVzsI 7ycBQlEQxg/sAcWbEzhpwA5dI2uJHfKmmDXtYgCWT+MWJFa/E9iVOZ5CmHEUbUJf SKIoamfMmUN7jvKT/NP88Ld+rbHCjwVA3FSqYyJU4XxolxQ+lQY92RK3YwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBr5y4KPZoDm3BhFd8GK+K+5txwRMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvR3ZuTGdvOW1nT2JjR0VWM3dZcjRyN20zSEJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABa/CAwQA Bef+AwQAshKVMA0GCSqGSIb3DQEBCwUAA4IBAQB4Pb50PGfmxIXO21tIRnyxwQMG +elPAaSXfW0FTXWvmu/D8BDdY23ZuIUiaeLfI09yqssguvHio/9gW+3Nd/yW0C5q O5JiX8pzndcevuJYVhd+VBgenGReR5o0NgrirKy1kwUcfDMR3rYju4JUfHfbuuSt 8SUraPq5tBwXezeEtaZyRGWnJJCp8sDlxroGS3F6swaB/Ax59hBsD9Yk74863x5u l0/s5dBsSl78oAh9v8n1AXQHGunAI0gL2xxBlT8vobFs/I01B2fA5RB+iBnTCpk4 ohl8eZRSLkZRyB7rbaZgMisTQptGPTyUirBgxBK9vLJ/kdzhKefCzMMX0eXB -----END CERTIFICATE-----Generated at Fri Dec 5 17:05:20 2025 by rpki-client