This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/GXSdlb0pDGF2EMIzDHAuIESnvAg.roa File: GXSdlb0pDGF2EMIzDHAuIESnvAg.roa (raw, json) Hash identifier: 7pDXY4rFOt7+nFMHto42qoEt09ttor/c72tHXsLA3yo= Subject key identifier: 19:74:9D:95:BD:29:0C:61:76:10:C2:33:0C:70:2E:20:44:A7:BC:08 Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d Certificate serial: 019B7C131DBCE6E41D88D041CFE9B7629B74 Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/GXSdlb0pDGF2EMIzDHAuIESnvAg.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29203 IP address blocks: 192.162.76.0/22 maxlen: 22 2001:67c:1370::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1d:bc:e6:e4:1d:88:d0:41:cf:e9:b7:62:9b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19749d95bd290c617610c2330c702e2044a7bc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:02:3f:ba:cf:b6:96:46:c8:19:63:0e:66:02: c8:4b:95:cd:29:ac:b8:b2:0d:a6:97:ce:47:85:ba: 16:37:95:41:3a:70:94:3a:e4:e5:2f:6e:e6:63:a8: a2:0e:22:f4:a2:2a:2b:2b:0a:b9:f2:4b:f2:7a:c4: f7:b3:1e:d7:ce:fa:1a:69:00:31:a3:e0:13:72:65: 15:80:d4:7b:78:6d:ff:58:5b:a5:88:0a:d0:6c:2c: 6d:db:10:28:43:7d:cc:4f:81:cb:d0:c7:b2:39:57: a8:68:f2:f1:d7:5c:c2:88:21:91:12:82:83:82:f0: 1c:e0:24:87:49:dd:5b:a4:01:5c:30:c7:e1:9b:d8: ae:5d:d3:9a:0d:3e:4f:76:96:33:47:52:a7:46:bd: 47:b9:97:ec:c2:ad:38:71:27:27:7f:be:d1:bd:93: 8e:13:6e:64:3e:28:66:b7:89:2a:6c:6f:e1:44:58: 64:d8:b2:f2:47:09:60:86:4f:3f:bb:45:19:b6:9c: 1c:88:03:a3:78:d6:f4:c5:63:c1:9a:0d:74:e8:ff: f8:f0:8a:c3:6f:43:03:86:65:40:68:52:4a:03:37: 3a:1f:ab:a9:d4:61:da:52:2a:22:14:ab:30:c4:29: 64:7e:63:f4:ea:7c:e1:df:b2:0e:d1:63:8a:a6:48: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:74:9D:95:BD:29:0C:61:76:10:C2:33:0C:70:2E:20:44:A7:BC:08 X509v3 Authority Key Identifier: keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/GXSdlb0pDGF2EMIzDHAuIESnvAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.76.0/22 IPv6: 2001:67c:1370::/48 Signature Algorithm: sha256WithRSAEncryption 74:15:e4:20:ac:4a:fb:39:12:9b:09:39:7c:19:a5:f3:e4:5a: 9c:7d:57:47:75:b8:a0:df:a7:02:5f:ac:69:2e:b5:8d:0a:58: b2:4c:fb:4d:96:44:e5:86:77:13:ec:d4:64:aa:7e:93:75:c1: 65:05:f3:29:bb:5b:4d:a2:20:15:be:0a:29:33:db:89:95:56: 85:a5:55:44:8f:bf:64:b4:7e:53:f5:a7:5c:ba:f6:36:f1:24: 41:0b:8d:fe:ab:85:d7:a4:38:c7:8e:6b:3d:0f:83:fa:3d:57: 37:0c:4a:a5:61:97:c2:06:bc:c5:8f:42:e1:c4:3d:aa:66:a0: 0c:bd:ff:a0:0f:61:52:4c:bf:b6:dd:bf:76:30:de:66:da:d5: e8:4d:dc:2f:1c:34:7e:39:0b:72:ec:85:c0:54:a8:93:0e:37: ca:a5:63:6d:20:d2:7b:12:77:fa:ed:12:e6:a9:7c:d9:7b:ca: 0a:a0:66:92:ed:a8:b3:f6:d2:10:ae:93:6c:d9:60:a6:9a:5f: 60:16:cb:51:79:a8:37:a9:16:a6:fc:07:ca:d0:6e:cd:c2:f0: 3c:a2:21:9e:48:96:78:97:3b:5b:90:5d:fc:8b:42:b2:f1:ce: f6:7f:8d:a0:dc:0e:60:76:9c:fb:70:d8:fa:67:73:1b:33:59: f5:d0:5a:7d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Ex285uQdiNBBz+m3Ypt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGQ3NTkyNDhiZDk0NWM2Y2UzODQyZThkNjQyZGNkMjcz MTMzNGQwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTc0OWQ5NWJkMjkwYzYxNzYxMGMyMzMwYzcwMmUyMDQ0YTdiYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wI/us+2lkbIGWMOZgLIS5XNKay4 sg2ml85HhboWN5VBOnCUOuTlL27mY6iiDiL0oiorKwq58kvyesT3sx7XzvoaaQAx o+ATcmUVgNR7eG3/WFuliArQbCxt2xAoQ33MT4HL0MeyOVeoaPLx11zCiCGREoKD gvAc4CSHSd1bpAFcMMfhm9iuXdOaDT5PdpYzR1KnRr1HuZfswq04cScnf77RvZOO E25kPihmt4kqbG/hRFhk2LLyRwlghk8/u0UZtpwciAOjeNb0xWPBmg106P/48IrD b0MDhmVAaFJKAzc6H6up1GHaUioiFKswxClkfmP06nzh37IO0WOKpkhk6QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBl0nZW9KQxhdhDCMwxwLiBEp7wIMB8GA1UdIwQY MBaAFHeNdZJIvZRcbOOELo1kLc0nMTNNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAt ZGZhMWM5YjNmZDFmLzEvR1hTZGxiMHBER0YyRU1JekRIQXVJRVNudkFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAtZGZhMWM5YjNmZDFm LzEvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwKJMMA8E AgACMAkDBwAgAQZ8E3AwDQYJKoZIhvcNAQELBQADggEBAHQV5CCsSvs5EpsJOXwZ pfPkWpx9V0d1uKDfpwJfrGkutY0KWLJM+02WROWGdxPs1GSqfpN1wWUF8ym7W02i IBW+Cikz24mVVoWlVUSPv2S0flP1p1y69jbxJEELjf6rhdekOMeOaz0Pg/o9VzcM SqVhl8IGvMWPQuHEPapmoAy9/6APYVJMv7bdv3Yw3mba1ehN3C8cNH45C3LshcBU qJMON8qlY20g0nsSd/rtEuapfNl7ygqgZpLtqLP20hCuk2zZYKaaX2AWy1F5qDep Fqb8B8rQbs3C8DyiIZ5IlniXO1uQXfyLQrLxzvZ/jaDcDmB2nPtw2PpncxszWfXQ Wn0= -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:27 2026 by rpki-client