This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GmqEOKBl0o8fjkfXXnhI7WN_Y1E.roa File: GmqEOKBl0o8fjkfXXnhI7WN_Y1E.roa (raw, json) Hash identifier: 1AkHmNV2H+TXIH+GnOXmtbMcCW9x68LumAshb1dvg2A= Subject key identifier: 1A:6A:84:38:A0:65:D2:8F:1F:8E:47:D7:5E:78:48:ED:63:7F:63:51 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E6F10F6FB521CFD25CD10A14BCC34 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GmqEOKBl0o8fjkfXXnhI7WN_Y1E.roa Signing time: Thu 01 Jan 2026 12:18:07 +0000 ROA not before: Thu 01 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136557 IP address blocks: 91.200.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6f:10:f6:fb:52:1c:fd:25:cd:10:a1:4b:cc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a6a8438a065d28f1f8e47d75e7848ed637f6351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:74:11:e5:78:d5:9b:d5:7a:65:50:93:55:13: 93:4c:f3:94:df:1e:96:a5:7f:33:13:20:00:c6:6e: 80:46:f2:71:34:7e:90:7b:12:f4:b0:3e:47:38:32: f8:3c:f1:ec:55:21:d9:fd:53:90:a2:2e:91:60:f5: f4:5c:84:6d:7f:56:ee:67:e0:02:6e:07:8a:10:91: 23:ba:44:b7:66:45:22:eb:dd:85:aa:d9:9b:3f:fb: 4f:a6:79:72:fa:ac:a2:2b:89:ab:f5:cb:7f:c1:d7: 27:46:50:e7:c4:c8:74:48:bf:22:2d:61:a1:5b:8a: 30:f8:1d:9e:40:aa:f2:f7:7e:e1:ae:7a:f3:24:0e: eb:15:0a:b9:34:c5:ca:2b:a4:12:9a:73:85:d1:93: 24:2b:d1:d2:f7:b0:de:ea:98:cf:cc:3d:42:f4:aa: ff:cd:76:68:4f:2e:68:f6:fe:c0:84:b3:6b:d2:b6: 28:4a:d6:5f:38:32:04:7f:d7:30:e4:fd:49:c3:30: b9:d1:8a:56:49:17:f7:00:f5:34:d4:6e:c0:1d:24: 27:77:c6:37:93:71:e3:59:ef:77:88:ef:86:c4:26: 76:fb:a5:e2:fb:61:28:10:21:22:36:32:a2:5f:be: f9:4b:b8:50:14:20:3a:95:84:9a:c0:7a:88:20:6b: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6A:84:38:A0:65:D2:8F:1F:8E:47:D7:5E:78:48:ED:63:7F:63:51 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GmqEOKBl0o8fjkfXXnhI7WN_Y1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.222.0/24 Signature Algorithm: sha256WithRSAEncryption 81:ba:db:ed:ae:08:90:19:9b:64:a7:39:4b:97:a9:0c:23:90: 45:61:37:0e:94:ed:49:ac:93:64:34:86:53:3a:66:44:5e:63: 4a:e4:61:ae:d6:d7:c4:e5:68:ca:e5:fa:ff:21:d2:b5:d8:6e: 0e:62:99:f3:b5:0b:a6:98:fa:54:ec:41:60:02:60:94:f8:77: 39:94:c9:50:18:e4:84:20:0e:3d:78:fa:d8:bf:76:5d:fd:b6: d9:22:32:4b:79:45:39:8f:69:b1:bd:76:3e:bf:5e:10:bf:3a: ef:7a:e5:f7:d1:72:14:d0:32:8c:94:27:da:46:9e:7a:eb:75: c2:63:02:fb:38:76:2f:22:69:ca:cf:dd:5f:12:9f:32:8f:5b: 78:45:0c:49:5d:41:6d:71:c8:bd:93:b9:59:67:31:73:47:af: 71:85:47:ca:ad:02:cd:aa:f0:69:6c:13:25:8a:1e:71:ce:b0: 74:e8:8b:95:49:8d:4f:29:5c:0f:b8:ba:f0:3b:ac:03:b4:d7: df:93:b4:9d:9e:de:0d:b3:01:ea:66:be:59:a6:a0:ee:c0:dd: 89:6f:3a:20:c1:7a:f0:17:fd:ac:1d:03:46:bb:4c:b2:29:3d: 78:bf:1c:30:6f:7d:ea:d8:a3:74:90:81:83:67:14:08:9c:6e: 49:d1:48:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fm8Q9vtSHP0lzRChS8w0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTZhODQzOGEwNjVkMjhmMWY4ZTQ3ZDc1ZTc4NDhlZDYzN2Y2MzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnQR5XjVm9V6ZVCTVROTTPOU3x6W pX8zEyAAxm6ARvJxNH6QexL0sD5HODL4PPHsVSHZ/VOQoi6RYPX0XIRtf1buZ+AC bgeKEJEjukS3ZkUi692FqtmbP/tPpnly+qyiK4mr9ct/wdcnRlDnxMh0SL8iLWGh W4ow+B2eQKry937hrnrzJA7rFQq5NMXKK6QSmnOF0ZMkK9HS97De6pjPzD1C9Kr/ zXZoTy5o9v7AhLNr0rYoStZfODIEf9cw5P1JwzC50YpWSRf3APU01G7AHSQnd8Y3 k3HjWe93iO+GxCZ2+6Xi+2EoECEiNjKiX775S7hQFCA6lYSawHqIIGvrdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpqhDigZdKPH45H1154SO1jf2NRMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvR21xRU9LQmwwbzhmamtmWFhuaEk3V05fWTFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8jeMA0G CSqGSIb3DQEBCwUAA4IBAQCButvtrgiQGZtkpzlLl6kMI5BFYTcOlO1JrJNkNIZT OmZEXmNK5GGu1tfE5WjK5fr/IdK12G4OYpnztQummPpU7EFgAmCU+Hc5lMlQGOSE IA49ePrYv3Zd/bbZIjJLeUU5j2mxvXY+v14QvzrveuX30XIU0DKMlCfaRp5663XC YwL7OHYvImnKz91fEp8yj1t4RQxJXUFtcci9k7lZZzFzR69xhUfKrQLNqvBpbBMl ih5xzrB06IuVSY1PKVwPuLrwO6wDtNffk7Sdnt4NswHqZr5ZpqDuwN2JbzogwXrw F/2sHQNGu0yyKT14vxwwb33q2KN0kIGDZxQInG5J0Uhi -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:12 2026 by rpki-client