This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/GWCQDoCj1EnoGr4G4aQGE_yERiw.roa File: GWCQDoCj1EnoGr4G4aQGE_yERiw.roa (raw, json) Hash identifier: jbmBzxR3cM82xnuqQI0lxiYS+XoV+IrgikeHq5X9ZmM= Subject key identifier: 19:60:90:0E:80:A3:D4:49:E8:1A:BE:06:E1:A4:06:13:FC:84:46:2C Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Certificate serial: 019B7A5B81B38468F758E1CA5C402B8ACDB3 Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/GWCQDoCj1EnoGr4G4aQGE_yERiw.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 216.25.124.0/24 maxlen: 24 216.25.125.0/24 maxlen: 24 216.25.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:81:b3:84:68:f7:58:e1:ca:5c:40:2b:8a:cd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1960900e80a3d449e81abe06e1a40613fc84462c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:77:56:e1:5c:8f:18:ef:3c:b0:b4:fb:ea:71: 11:ab:60:aa:a0:6b:31:5d:a5:c8:8d:fb:10:71:37: 7b:9e:36:47:c8:26:9e:46:0b:ed:5b:80:62:0f:c2: 0e:2d:9a:95:52:65:9a:83:d8:00:1f:89:9e:61:3f: 18:22:62:32:e2:f4:72:31:fd:1d:48:d1:24:59:59: a5:90:19:77:d5:76:62:a0:81:c2:23:c8:6e:8a:df: 86:bf:80:3c:33:d7:33:82:23:3d:7e:c2:a7:97:fb: dd:c5:76:72:68:81:42:61:df:36:1b:6e:bb:ca:53: 39:4a:54:7f:1e:79:82:f9:3d:c7:78:9f:1e:66:38: 34:ad:0a:12:c0:0b:c0:4d:8b:8b:8f:0b:c6:08:6c: fb:b7:7a:8d:f0:54:2d:67:fd:fe:84:2d:71:17:c6: da:f2:2f:00:57:df:90:98:f2:3e:96:ae:dc:18:04: 2d:d7:19:38:7c:f4:77:69:92:28:2a:c0:35:28:96: 09:37:77:07:00:61:25:bb:1d:34:c8:10:80:79:70: 65:a7:88:b3:65:23:84:40:da:0f:d3:ac:c7:21:37: 4b:9e:08:7d:21:37:85:da:0d:43:88:c6:50:da:c5: 59:17:1d:6c:5b:92:73:24:1c:14:01:fa:66:b6:1a: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:60:90:0E:80:A3:D4:49:E8:1A:BE:06:E1:A4:06:13:FC:84:46:2C X509v3 Authority Key Identifier: keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/GWCQDoCj1EnoGr4G4aQGE_yERiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.25.124.0-216.25.126.255 Signature Algorithm: sha256WithRSAEncryption 0b:de:1f:1f:a9:49:07:bb:02:64:3a:8b:77:55:b6:19:70:07: 4d:fc:5e:39:13:af:3b:42:89:74:68:a2:08:65:73:96:4c:53: ce:f3:22:fe:cd:e9:5d:8f:50:7d:18:be:fe:34:21:c8:e5:ee: dd:0c:80:c3:b9:85:bf:b2:f0:a2:d0:b6:80:54:11:bc:18:46: 7b:92:e0:2e:bc:18:1f:4c:24:31:ec:f9:15:64:5a:45:73:4d: 59:de:4e:e3:4d:a7:36:51:02:e7:a6:7e:4d:02:f5:50:48:28: 06:b1:d8:dd:de:bf:1d:4e:f9:19:6d:bc:8f:f6:46:73:af:0d: ef:06:44:b9:b8:73:b2:ce:b1:88:98:5e:8d:92:00:92:13:77: 75:18:72:5b:7b:57:18:09:4f:ab:65:f7:8b:63:af:0b:c3:a7: f4:e3:d1:3c:41:7b:31:3c:c7:2c:14:c2:29:7e:f1:c7:25:4d: d4:bd:81:13:ec:89:16:cc:11:49:fa:76:fe:b3:ff:46:a4:aa: 50:a8:b5:94:cf:cc:81:70:34:df:bd:92:f6:dd:a1:d1:e6:b8: d5:cd:2f:ec:dd:06:2b:6f:76:1e:34:c9:45:e9:8e:e2:ff:77: 0e:bf:e8:06:7d:6b:16:29:85:87:3f:6b:0c:fb:9f:83:ec:7f: 15:bf:cc:77 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6W4GzhGj3WOHKXEAris2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOWZjOGEwNjdmYTZkMjQ3NmJkY2UyNGFmZmZhZDE3MTMx ZDllODYwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTYwOTAwZTgwYTNkNDQ5ZTgxYWJlMDZlMWE0MDYxM2ZjODQ0NjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHdW4VyPGO88sLT76nERq2CqoGsx XaXIjfsQcTd7njZHyCaeRgvtW4BiD8IOLZqVUmWag9gAH4meYT8YImIy4vRyMf0d SNEkWVmlkBl31XZioIHCI8huit+Gv4A8M9czgiM9fsKnl/vdxXZyaIFCYd82G267 ylM5SlR/HnmC+T3HeJ8eZjg0rQoSwAvATYuLjwvGCGz7t3qN8FQtZ/3+hC1xF8ba 8i8AV9+QmPI+lq7cGAQt1xk4fPR3aZIoKsA1KJYJN3cHAGElux00yBCAeXBlp4iz ZSOEQNoP06zHITdLngh9ITeF2g1DiMZQ2sVZFx1sW5JzJBwUAfpmthpoMwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBlgkA6Ao9RJ6Bq+BuGkBhP8hEYsMB8GA1UdIwQY MBaAFMCfyKBn+m0kdr3OJK//rRcTHZ6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYt OGU5MjRmZmJlNTg0LzEvR1dDUURvQ2oxRW5vR3I0RzRhUUdFX3lFUml3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYtOGU5MjRmZmJlNTg0 LzEvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALYGXwD BADYGX4wDQYJKoZIhvcNAQELBQADggEBAAveHx+pSQe7AmQ6i3dVthlwB038XjkT rztCiXRooghlc5ZMU87zIv7N6V2PUH0Yvv40Icjl7t0MgMO5hb+y8KLQtoBUEbwY RnuS4C68GB9MJDHs+RVkWkVzTVneTuNNpzZRAuemfk0C9VBIKAax2N3evx1O+Rlt vI/2RnOvDe8GRLm4c7LOsYiYXo2SAJITd3UYclt7VxgJT6tl94tjrwvDp/Tj0TxB ezE8xywUwil+8cclTdS9gRPsiRbMEUn6dv6z/0akqlCotZTPzIFwNN+9kvbdodHm uNXNL+zdBitvdh40yUXpjuL/dw6/6AZ9axYphYc/awz7n4PsfxW/zHc= -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:03 2026 by rpki-client