This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/GTNj1uopxhcFHlYEIMNdLURp3bo.roa File: GTNj1uopxhcFHlYEIMNdLURp3bo.roa (raw, json) Hash identifier: sNXrtC73S3XHslCegvtHnqUIQVTOhSUYsSYlbuOfH4o= Subject key identifier: 19:33:63:D6:EA:29:C6:17:05:1E:56:04:20:C3:5D:2D:44:69:DD:BA Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5 Certificate serial: 019B7BA53D78E9F92F66FC35E82B44F11BFA Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/GTNj1uopxhcFHlYEIMNdLURp3bo.roa Signing time: Thu 01 Jan 2026 22:19:45 +0000 ROA not before: Thu 01 Jan 2026 22:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 185.84.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3d:78:e9:f9:2f:66:fc:35:e8:2b:44:f1:1b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5 Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=193363d6ea29c617051e560420c35d2d4469ddba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c9:62:79:64:a6:ad:5a:c5:43:ae:4f:1a:25: 64:a4:66:0e:1a:50:db:ad:73:2b:28:7a:d7:43:08: 61:66:67:8c:d5:86:1b:f9:f5:81:11:2c:7b:4f:d0: 9e:3f:f9:62:cd:0e:6e:20:13:51:c1:ef:ff:7a:b0: 26:16:2b:a2:4d:f4:84:2b:cc:f9:7c:3c:ad:e0:9d: 38:e4:13:cc:bd:95:83:88:dd:c3:12:46:e9:b2:90: c5:f6:6f:c6:de:4a:1d:6f:15:9b:6f:cf:af:97:3b: 96:4d:80:0b:2e:f2:6a:e7:8a:d7:72:5c:29:d1:c7: 24:0e:87:fc:9f:d4:0b:74:9a:46:20:26:02:28:65: 97:a0:44:5f:e0:8e:1d:74:a3:9d:dd:80:fd:05:50: eb:57:87:9e:a7:b9:07:38:d3:64:76:c6:c8:00:82: 1b:c1:6b:67:0b:77:a5:bb:fc:28:3a:66:b6:7f:89: b0:ec:83:3d:d6:12:f3:08:46:6b:60:a1:4f:bf:9a: 25:32:e2:10:d2:41:8e:d2:ac:10:a2:63:d0:8f:0d: 9b:2d:19:f4:b4:7c:b2:a6:ac:9d:6f:c5:69:9a:d9: 8d:f7:76:7d:04:55:7d:5d:ae:5f:4e:f8:d2:c0:fa: df:be:b9:68:6d:74:ad:89:09:26:a2:6c:47:f5:27: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:33:63:D6:EA:29:C6:17:05:1E:56:04:20:C3:5D:2D:44:69:DD:BA X509v3 Authority Key Identifier: keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/GTNj1uopxhcFHlYEIMNdLURp3bo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.124.0/22 Signature Algorithm: sha256WithRSAEncryption 43:2f:1d:5f:f2:bb:a8:07:79:0e:27:94:0b:a0:07:78:e8:e6: 59:01:3a:53:a5:20:2f:7f:4c:bf:5a:60:83:65:38:3e:eb:37: 03:92:52:f5:16:12:ae:ef:f4:c3:02:e3:82:04:1c:81:9d:1e: 52:75:76:32:0e:05:a4:c1:58:7b:fd:a2:c2:12:cc:68:c4:a5: 2f:12:08:51:b7:e4:c8:04:8c:c5:32:1a:ad:0a:b6:85:2c:84: de:55:51:b2:4d:26:81:19:d4:10:d1:f0:67:73:d0:b1:e2:43: 40:15:05:53:5d:54:0f:8d:ae:96:8d:92:6c:0b:78:dd:48:26: 2c:f8:c8:7a:1c:e4:bc:85:55:82:4b:56:b7:f6:b2:2a:3f:14: 4f:e8:35:77:26:16:34:92:e6:79:89:5f:7a:33:21:c1:0a:66: 47:bd:8d:1e:a6:ba:f7:33:6c:22:48:4e:69:a2:e0:2a:88:15: db:ce:1f:d4:71:d2:ee:42:47:f4:c7:27:4b:6b:01:50:0b:22: b9:57:54:8a:92:9d:11:12:55:95:ea:69:af:b2:2c:7d:05:70: 55:86:93:d3:83:12:f9:34:2e:44:7d:ec:d2:82:01:5d:9a:e6: 65:c9:8e:cc:0a:2c:63:99:3c:c9:d6:fa:d0:b6:92:0f:e4:15: d2:0e:26:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pT146fkvZvw16CtE8Rv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTM0MzIzNTU4MWNmNDEwNDE5MGRhN2EwY2ExNzRiOWMw ZDBiZDUwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTMzNjNkNmVhMjljNjE3MDUxZTU2MDQyMGMzNWQyZDQ0NjlkZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8lieWSmrVrFQ65PGiVkpGYOGlDb rXMrKHrXQwhhZmeM1YYb+fWBESx7T9CeP/lizQ5uIBNRwe//erAmFiuiTfSEK8z5 fDyt4J045BPMvZWDiN3DEkbpspDF9m/G3kodbxWbb8+vlzuWTYALLvJq54rXclwp 0cckDof8n9QLdJpGICYCKGWXoERf4I4ddKOd3YD9BVDrV4eep7kHONNkdsbIAIIb wWtnC3elu/woOma2f4mw7IM91hLzCEZrYKFPv5olMuIQ0kGO0qwQomPQjw2bLRn0 tHyypqydb8VpmtmN93Z9BFV9Xa5fTvjSwPrfvrlobXStiQkmomxH9Sf53wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBkzY9bqKcYXBR5WBCDDXS1Ead26MB8GA1UdIwQY MBaAFFKTQyNVgc9BBBkNp6DKF0ucDQvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2Qt ZmNjMjIwNjQ0NTU4LzEvR1ROajF1b3B4aGNGSGxZRUlNTmRMVVJwM2JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2QtZmNjMjIwNjQ0NTU4 LzEvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVR8MA0G CSqGSIb3DQEBCwUAA4IBAQBDLx1f8ruoB3kOJ5QLoAd46OZZATpTpSAvf0y/WmCD ZTg+6zcDklL1FhKu7/TDAuOCBByBnR5SdXYyDgWkwVh7/aLCEsxoxKUvEghRt+TI BIzFMhqtCraFLITeVVGyTSaBGdQQ0fBnc9Cx4kNAFQVTXVQPja6WjZJsC3jdSCYs +Mh6HOS8hVWCS1a39rIqPxRP6DV3JhY0kuZ5iV96MyHBCmZHvY0eprr3M2wiSE5p ouAqiBXbzh/UcdLuQkf0xydLawFQCyK5V1SKkp0RElWV6mmvsix9BXBVhpPTgxL5 NC5EfezSggFdmuZlyY7MCixjmTzJ1vrQtpIP5BXSDiYJ -----END CERTIFICATE-----Generated at Tue Jan 27 02:51:37 2026 by rpki-client