This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/GILkzrnW-WLXBiCMka03WJecbH4.roa File: GILkzrnW-WLXBiCMka03WJecbH4.roa (raw, json) Hash identifier: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI= Subject key identifier: 18:82:E4:CE:B9:D6:F9:62:D7:06:20:8C:91:AD:37:58:97:9C:6C:7E Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Certificate serial: 019B797E21A0EBFF359C686CF4B415706BE1 Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/GILkzrnW-WLXBiCMka03WJecbH4.roa Signing time: Thu 01 Jan 2026 12:17:47 +0000 ROA not before: Thu 01 Jan 2026 12:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 62.3.56.0/24 maxlen: 24 2a12:100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:21:a0:eb:ff:35:9c:68:6c:f4:b4:15:70:6b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Validity Not Before: Jan 1 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1882e4ceb9d6f962d706208c91ad3758979c6c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:da:63:78:29:fd:02:2c:17:cc:bf:93:80:b2: 1b:7d:31:dd:ee:5f:1d:e8:c4:72:31:b7:b9:13:ea: ad:9a:01:0c:bc:3e:a6:2c:cf:a7:e8:1b:5e:c7:f6: d2:23:c4:77:b6:18:bb:ff:76:a2:d3:13:ba:05:3b: a0:87:ca:e2:52:0f:65:2c:5d:42:af:d2:70:57:63: 44:ca:6c:f8:05:34:e8:3b:78:42:28:a2:37:03:6e: 93:12:5c:f1:21:95:9c:60:b9:d0:55:de:07:a9:f6: 98:8b:96:63:62:8d:3f:f2:d1:62:6e:4b:4f:3e:5d: 19:d4:06:77:96:86:c2:80:6f:f5:58:84:ec:3a:cf: ee:79:49:75:36:6b:a2:86:f2:b1:82:70:d6:8b:b4: 69:a4:e9:d9:20:48:03:40:ee:be:21:88:a0:f4:b0: 5e:cd:a4:73:8f:31:c7:9a:86:8c:41:66:9b:28:81: bd:49:5a:36:cf:75:89:01:6c:d8:b4:3a:62:08:fe: 18:af:6a:e4:3c:eb:65:64:b8:f4:23:3a:cb:00:f3: c0:73:8e:85:a9:74:1a:4c:ae:d4:ed:d5:56:3a:13: 75:54:07:33:4a:39:35:f4:2f:bb:8a:ed:d1:5c:b8: 9b:a5:3a:eb:1c:a5:a0:91:ee:40:ce:bc:a3:ec:26: 03:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:82:E4:CE:B9:D6:F9:62:D7:06:20:8C:91:AD:37:58:97:9C:6C:7E X509v3 Authority Key Identifier: keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/GILkzrnW-WLXBiCMka03WJecbH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.56.0/24 IPv6: 2a12:100::/29 Signature Algorithm: sha256WithRSAEncryption 2a:b4:cd:7a:da:ea:ce:01:5b:3c:0d:68:8c:6a:c1:67:86:d5: ec:10:cf:fa:cc:54:21:c5:43:c7:ae:b7:c7:f8:b0:49:25:ef: c5:63:ce:42:ca:c7:3b:97:3f:9d:9d:fa:bd:de:d7:b9:10:b6: b2:bd:f3:1d:33:95:b7:04:ad:54:1e:09:0b:81:91:fd:5d:98: 24:b0:8b:87:f1:5b:f1:b3:96:9b:b0:3c:10:53:e7:84:65:3b: 8f:ea:00:87:83:d7:2f:70:cb:20:93:79:5f:f9:49:c6:2e:ca: ec:16:63:f1:7c:63:bf:0b:65:69:6d:c2:05:7c:f5:05:89:27: 91:c8:af:b9:af:4a:6c:08:34:3e:13:e7:8f:df:2a:18:4a:34: 8d:d3:02:47:3f:55:7d:f1:05:f2:7b:80:e7:6a:d3:7f:8d:5e: 19:4b:31:a3:f3:2e:8c:bc:8a:76:de:e0:22:73:15:5b:8d:dd: 7a:6c:b4:51:c4:ac:bb:a5:40:07:a4:1f:21:b5:76:45:95:0a: f8:a9:e1:c3:8d:52:e2:60:15:4b:b9:06:02:f9:ee:9f:0f:89: d4:f8:eb:5f:ef:29:b4:e7:1e:43:c8:2e:91:70:c4:bf:ad:f2: e4:6c:f0:9b:34:c6:8f:f8:10:16:9e:74:6d:f8:0c:e9:81:19: 41:88:0b:47 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fiGg6/81nGhs9LQVcGvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx MDc1OGMwHhcNMjYwMTAxMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODgyZTRjZWI5ZDZmOTYyZDcwNjIwOGM5MWFkMzc1ODk3OWM2YzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tpjeCn9AiwXzL+TgLIbfTHd7l8d 6MRyMbe5E+qtmgEMvD6mLM+n6Btex/bSI8R3thi7/3ai0xO6BTugh8riUg9lLF1C r9JwV2NEymz4BTToO3hCKKI3A26TElzxIZWcYLnQVd4HqfaYi5ZjYo0/8tFibktP Pl0Z1AZ3lobCgG/1WITsOs/ueUl1NmuihvKxgnDWi7RppOnZIEgDQO6+IYig9LBe zaRzjzHHmoaMQWabKIG9SVo2z3WJAWzYtDpiCP4Yr2rkPOtlZLj0IzrLAPPAc46F qXQaTK7U7dVWOhN1VAczSjk19C+7iu3RXLibpTrrHKWgke5Azryj7CYD9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBiC5M651vli1wYgjJGtN1iXnGx+MB8GA1UdIwQY MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt Nzk0NDk3NjU5OWQ4LzEvR0lMa3pyblctV0xYQmlDTWthMDNXSmVjYkg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4 LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAPgM4MA0E AgACMAcDBQMqEgEAMA0GCSqGSIb3DQEBCwUAA4IBAQAqtM162urOAVs8DWiMasFn htXsEM/6zFQhxUPHrrfH+LBJJe/FY85Cysc7lz+dnfq93te5ELayvfMdM5W3BK1U HgkLgZH9XZgksIuH8Vvxs5absDwQU+eEZTuP6gCHg9cvcMsgk3lf+UnGLsrsFmPx fGO/C2VpbcIFfPUFiSeRyK+5r0psCDQ+E+eP3yoYSjSN0wJHP1V98QXye4DnatN/ jV4ZSzGj8y6MvIp23uAicxVbjd16bLRRxKy7pUAHpB8htXZFlQr4qeHDjVLiYBVL uQYC+e6fD4nU+Otf7ym05x5DyC6RcMS/rfLkbPCbNMaP+BAWnnRt+AzpgRlBiAtH -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:50 2026 by rpki-client