This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa File: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (raw, json) Hash identifier: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q= Subject key identifier: 18:42:0A:16:48:1F:A7:AF:DE:22:A4:6F:0A:E6:09:0F:EB:ED:0E:B8 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B7C7EFCDACB9A805D423AD46C1CB4093A Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa Signing time: Fri 02 Jan 2026 02:17:35 +0000 ROA not before: Fri 02 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206804 IP address blocks: 45.133.192.0/22 maxlen: 24 45.138.84.0/22 maxlen: 24 45.146.220.0/22 maxlen: 24 141.98.212.0/22 maxlen: 24 193.36.116.0/22 maxlen: 24 195.80.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 20:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:fc:da:cb:9a:80:5d:42:3a:d4:6c:1c:b4:09:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jan 2 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18420a16481fa7afde22a46f0ae6090febed0eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:f6:a4:a2:48:93:0b:fa:37:68:96:97:80: 51:e6:4c:3f:27:64:39:c4:24:fc:3a:c4:7f:07:a0: f2:58:47:de:c5:34:63:92:0b:a7:28:a7:6d:8d:8e: 0b:03:5c:98:17:5a:c5:91:c5:e3:fc:e6:79:67:30: b2:a9:3b:5b:69:5f:9c:c7:cb:48:98:17:e7:56:85: be:51:94:29:0e:6d:3c:ef:ef:1d:cf:f5:79:ee:1b: 43:39:91:c0:e8:aa:c3:c3:01:30:2e:7b:e8:c7:fe: 93:4a:57:35:ec:11:87:9e:4c:1a:c7:6f:d0:ef:d6: 67:31:96:0f:30:e3:f3:46:3f:29:f1:4a:07:f2:f0: 76:9c:6a:d3:51:96:a3:ac:4d:ba:ed:0f:05:f2:de: 4b:d7:7b:95:eb:a0:ae:f7:0f:83:15:e4:53:b6:d6: f7:4a:8c:30:eb:e7:cc:10:df:b5:34:91:cf:43:67: 0b:45:5d:81:e3:8f:70:1d:23:f1:c9:67:24:b3:67: 11:fe:b9:37:91:89:6b:77:27:2c:e5:cd:93:5b:a7: 99:55:c1:6d:ed:cd:6a:81:d7:f0:c4:de:5e:65:27: 82:79:ed:0b:43:34:71:bc:83:b7:cc:30:ea:fd:86: af:57:46:a8:6c:bd:27:ba:4e:5b:20:54:cb:63:c4: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:42:0A:16:48:1F:A7:AF:DE:22:A4:6F:0A:E6:09:0F:EB:ED:0E:B8 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.192.0/22 45.138.84.0/22 45.146.220.0/22 141.98.212.0/22 193.36.116.0/22 195.80.148.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:a0:2e:89:12:f5:5c:3e:aa:95:ba:d4:4d:43:d2:0d:69:dd: 16:92:6c:b1:19:32:36:ff:5f:06:e7:09:24:e1:3f:d6:92:56: 06:37:88:70:30:7f:c1:b7:6b:63:ad:a7:17:0c:74:67:50:09: 97:a2:44:cc:05:86:39:c3:3c:77:1d:f2:7f:c3:dc:e2:35:c6: 7e:75:50:e3:2c:59:b9:94:7b:f8:de:20:9d:7c:52:38:fb:cc: 13:53:16:ca:6b:73:d6:f2:2c:60:1d:26:61:99:f7:8f:8f:70: f7:9c:ce:0a:dc:5c:f2:1e:ec:13:e5:9c:a2:9e:8b:bf:2b:a7: 2b:93:7e:e0:ab:07:73:34:91:26:ff:b0:62:ff:b4:86:e4:fe: 5e:4c:08:79:b2:74:b3:50:c0:e2:e3:c4:14:45:17:9a:6e:34: ef:02:15:6d:22:c2:58:82:66:69:66:e4:12:27:29:bb:76:00: 3e:29:dd:93:cd:ae:17:1d:00:09:88:00:a5:6a:e3:a3:eb:b6: 39:c9:04:65:a7:92:de:21:d9:bf:18:2b:c7:66:f2:3e:2f:ef: b3:34:1c:4a:cd:e7:59:6d:3d:83:0c:e4:05:61:4c:e5:78:65: 4e:bf:73:05:ac:69:c4:31:88:b5:9e:f2:ae:ff:6c:4d:8b:4f: c9:27:b4:35 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8fvzay5qAXUI61GwctAk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMTAyMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODQyMGExNjQ4MWZhN2FmZGUyMmE0NmYwYWU2MDkwZmViZWQwZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumv2pKJIkwv6N2iWl4BR5kw/J2Q5 xCT8OsR/B6DyWEfexTRjkgunKKdtjY4LA1yYF1rFkcXj/OZ5ZzCyqTtbaV+cx8tI mBfnVoW+UZQpDm087+8dz/V57htDOZHA6KrDwwEwLnvox/6TSlc17BGHnkwax2/Q 79ZnMZYPMOPzRj8p8UoH8vB2nGrTUZajrE267Q8F8t5L13uV66Cu9w+DFeRTttb3 Soww6+fMEN+1NJHPQ2cLRV2B449wHSPxyWcks2cR/rk3kYlrdycs5c2TW6eZVcFt 7c1qgdfwxN5eZSeCee0LQzRxvIO3zDDq/YavV0aobL0nuk5bIFTLY8RdPQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFBhCChZIH6ev3iKkbwrmCQ/r7Q64MB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvR0VJS0ZrZ2ZwNl9lSXFSdkN1WUpELXZ0RHJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLYXAAwQC LYpUAwQCLZLcAwQCjWLUAwQCwSR0AwQCw1CUMA0GCSqGSIb3DQEBCwUAA4IBAQCN oC6JEvVcPqqVutRNQ9INad0WkmyxGTI2/18G5wkk4T/WklYGN4hwMH/Bt2tjracX DHRnUAmXokTMBYY5wzx3HfJ/w9ziNcZ+dVDjLFm5lHv43iCdfFI4+8wTUxbKa3PW 8ixgHSZhmfePj3D3nM4K3FzyHuwT5Zyinou/K6crk37gqwdzNJEm/7Bi/7SG5P5e TAh5snSzUMDi48QURReabjTvAhVtIsJYgmZpZuQSJym7dgA+Kd2Tza4XHQAJiACl auOj67Y5yQRlp5LeIdm/GCvHZvI+L++zNBxKzedZbT2DDOQFYUzleGVOv3MFrGnE MYi1nvKu/2xNi0/JJ7Q1 -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:46 2026 by rpki-client