This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/GDYQT_SfN5tMHZpuub3a8jDMqOU.roa File: GDYQT_SfN5tMHZpuub3a8jDMqOU.roa (raw, json) Hash identifier: H7jT70GlU7Stcvy2ABi9zYCoyueoBEvW2I5oAX+8wHc= Subject key identifier: 18:36:10:4F:F4:9F:37:9B:4C:1D:9A:6E:B9:BD:DA:F2:30:CC:A8:E5 Certificate issuer: /CN=8d843b57d0afcc112fe389668bf675d80d8223da Certificate serial: 019B7F83D61B05F24E07FAE4B5E99C8B22AB Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/GDYQT_SfN5tMHZpuub3a8jDMqOU.roa Signing time: Fri 02 Jan 2026 16:21:45 +0000 ROA not before: Fri 02 Jan 2026 16:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199979 IP address blocks: 193.22.131.0/24 maxlen: 24 212.11.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d6:1b:05:f2:4e:07:fa:e4:b5:e9:9c:8b:22:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da Validity Not Before: Jan 2 16:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1836104ff49f379b4c1d9a6eb9bddaf230cca8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:35:2f:f4:22:c2:08:a5:3d:75:2f:dc:63: e7:0d:50:21:f4:fe:63:87:c6:7f:0b:42:63:65:d3: 3f:2f:ca:28:a0:f0:21:87:d3:89:c7:c1:e0:7e:3a: 5c:94:23:b4:dd:7d:df:3f:f1:23:0f:e5:80:8a:e0: f0:e5:95:3c:ce:15:5b:55:4d:f3:fa:01:cd:3e:d1: 8d:51:72:3c:47:a1:7e:87:5d:5e:26:95:b3:b7:7a: d6:32:13:2a:7f:ee:81:dd:fb:a0:21:1c:77:89:74: 0c:26:d3:08:ab:db:5d:cd:20:f0:8a:75:2e:65:a1: 1f:58:bf:d7:b6:e5:84:f5:bd:dd:18:65:7f:6f:60: 87:4a:39:13:61:7e:03:ea:74:ae:27:52:1c:30:e8: 0f:68:a5:99:54:96:c6:a0:02:a2:1d:05:c0:cf:4c: 41:e4:bb:56:f7:6c:0e:49:1b:d7:97:89:b2:6a:ba: 5e:d8:95:c9:ca:b6:a0:be:eb:32:b3:5c:c4:f3:bd: 01:ee:a0:2e:a0:33:0d:e9:05:ff:09:5a:55:20:4b: 4f:40:57:fc:9e:d8:31:f6:82:3f:4e:31:86:53:b5: 59:33:e4:04:cc:5d:97:0b:eb:20:f6:70:a9:be:39: 7a:ae:5d:5b:47:5a:36:69:a0:fe:b1:7c:cf:6b:94: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:36:10:4F:F4:9F:37:9B:4C:1D:9A:6E:B9:BD:DA:F2:30:CC:A8:E5 X509v3 Authority Key Identifier: keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/GDYQT_SfN5tMHZpuub3a8jDMqOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.131.0/24 212.11.92.0/24 Signature Algorithm: sha256WithRSAEncryption 83:e8:bb:18:cf:63:d8:28:48:7c:ad:e8:be:23:20:73:45:1d: 3b:44:58:96:12:14:76:90:47:1f:9e:50:ff:be:f9:6a:f0:d4: 01:03:40:ca:34:b2:81:b4:48:80:da:a6:c0:3b:b9:01:f7:cb: 51:84:72:90:15:54:2a:92:8e:c8:e3:12:a8:86:eb:eb:56:2b: 9d:68:eb:b5:74:e0:fa:e5:94:d4:10:e7:b6:30:dd:d6:e2:06: 94:f7:e6:b8:a4:19:90:cc:7c:c0:7c:45:89:ae:44:40:cd:de: ab:52:5d:ff:31:6e:43:38:20:76:08:3c:4a:0c:ad:ae:00:fb: 6b:53:e5:a3:ee:13:74:1f:00:98:c9:f6:8e:b0:81:76:30:16: 84:cb:df:1e:0f:1c:eb:9e:51:8c:9d:44:3e:97:45:14:44:1f: 9b:ca:96:eb:52:d6:93:af:d0:76:36:a2:c5:20:b4:8a:95:70: 3d:da:cb:b7:17:3b:90:96:c3:98:ff:50:07:09:6c:5a:1b:4c: 46:fd:89:9a:27:45:86:b3:6c:d8:b1:36:69:07:59:2c:4c:d9: 5a:0b:5e:f8:e2:4e:9e:fa:c5:e2:53:70:40:02:4d:67:98:bb: 3a:37:5b:29:58:1e:b3:61:08:cf:7d:87:75:7c:a4:f0:bf:60: 51:1f:b9:40 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g9YbBfJOB/rktemciyKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQzYjU3ZDBhZmNjMTEyZmUzODk2NjhiZjY3NWQ4MGQ4 MjIzZGEwHhcNMjYwMTAyMTYyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODM2MTA0ZmY0OWYzNzliNGMxZDlhNmViOWJkZGFmMjMwY2NhOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQI1L/QiwgilPXUv3GPnDVAh9P5j h8Z/C0JjZdM/L8oooPAhh9OJx8HgfjpclCO03X3fP/EjD+WAiuDw5ZU8zhVbVU3z +gHNPtGNUXI8R6F+h11eJpWzt3rWMhMqf+6B3fugIRx3iXQMJtMIq9tdzSDwinUu ZaEfWL/XtuWE9b3dGGV/b2CHSjkTYX4D6nSuJ1IcMOgPaKWZVJbGoAKiHQXAz0xB 5LtW92wOSRvXl4myarpe2JXJyragvusys1zE870B7qAuoDMN6QX/CVpVIEtPQFf8 ntgx9oI/TjGGU7VZM+QEzF2XC+sg9nCpvjl6rl1bR1o2aaD+sXzPa5StRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBg2EE/0nzebTB2abrm92vIwzKjlMB8GA1UdIwQY MBaAFI2EO1fQr8wRL+OJZov2ddgNgiPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallRN1Y5Q3Z6QkV2NDRsbWlfWjEyQTJDSTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYWMyNzEtNmJlOS00YTE0LTg2MTYt NDY1YTMzM2FiNDQ0LzEvR0RZUVRfU2ZONXRNSFpwdXViM2E4akRNcU9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xYWMyNzEtNmJlOS00YTE0LTg2MTYtNDY1YTMzM2FiNDQ0 LzEvallRN1Y5Q3Z6QkV2NDRsbWlfWjEyQTJDSTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRaDAwQA 1AtcMA0GCSqGSIb3DQEBCwUAA4IBAQCD6LsYz2PYKEh8rei+IyBzRR07RFiWEhR2 kEcfnlD/vvlq8NQBA0DKNLKBtEiA2qbAO7kB98tRhHKQFVQqko7I4xKohuvrViud aOu1dOD65ZTUEOe2MN3W4gaU9+a4pBmQzHzAfEWJrkRAzd6rUl3/MW5DOCB2CDxK DK2uAPtrU+Wj7hN0HwCYyfaOsIF2MBaEy98eDxzrnlGMnUQ+l0UURB+bypbrUtaT r9B2NqLFILSKlXA92su3FzuQlsOY/1AHCWxaG0xG/YmaJ0WGs2zYsTZpB1ksTNla C1744k6e+sXiU3BAAk1nmLs6N1spWB6zYQjPfYd1fKTwv2BRH7lA -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:44 2026 by rpki-client