This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/GNro08ls-pT206e9IMDTj-wSUvs.roa File: GNro08ls-pT206e9IMDTj-wSUvs.roa (raw, json) Hash identifier: kclIH/rlbAN40ur+c1T1kwmNtPdYhK81dIGAMdeBKeg= Subject key identifier: 18:DA:E8:D3:C9:6C:FA:94:F6:D3:A7:BD:20:C0:D3:8F:EC:12:52:FB Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1 Certificate serial: 019B7A5B407F5D7E6040F520FAF78BD1678D Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/GNro08ls-pT206e9IMDTj-wSUvs.roa Signing time: Thu 01 Jan 2026 16:19:19 +0000 ROA not before: Thu 01 Jan 2026 16:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197835 IP address blocks: 195.94.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:40:7f:5d:7e:60:40:f5:20:fa:f7:8b:d1:67:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1 Validity Not Before: Jan 1 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18dae8d3c96cfa94f6d3a7bd20c0d38fec1252fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:a2:9b:4d:16:f7:3b:b4:0e:f7:83:1f:bd: 9d:16:2f:69:ea:7a:85:17:42:f1:c4:fb:f2:56:07: 97:69:25:62:92:4e:e0:f4:48:82:b5:fc:52:0a:6d: 63:82:2f:5f:af:d7:70:d2:9a:cd:e6:47:cb:bf:69: e9:4b:8b:44:b9:4c:6a:92:40:7a:9a:a7:d8:5a:f0: 6a:9b:eb:82:01:35:2e:e8:3b:5b:fd:8b:b0:46:fb: 0a:15:6c:ab:75:ec:43:78:fe:86:23:99:1b:a5:51: f7:10:37:4f:2e:79:82:68:05:56:d9:0f:ea:64:57: 45:49:d9:d4:74:d2:06:79:0d:0b:db:8d:fa:15:22: dd:da:f1:44:ed:3b:58:07:b8:05:2f:f5:8e:cf:22: 96:bb:7b:30:84:fe:e3:fd:3e:16:1b:0f:03:5a:a7: d4:80:b1:e8:53:6e:05:f8:fa:be:18:dd:31:b6:5d: ec:ba:26:c9:0a:f3:32:49:fa:39:c1:de:79:9e:67: d0:46:41:a2:0f:af:89:ae:4d:5b:3d:a9:7d:95:44: 9f:84:c7:67:f6:5a:7d:02:f6:fa:b4:82:ae:7b:df: eb:89:6e:01:24:ee:f8:c2:77:13:4e:a7:d8:36:f2: 56:4f:da:82:e1:77:da:33:a3:16:e6:28:35:6e:11: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DA:E8:D3:C9:6C:FA:94:F6:D3:A7:BD:20:C0:D3:8F:EC:12:52:FB X509v3 Authority Key Identifier: keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/GNro08ls-pT206e9IMDTj-wSUvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.94.134.0/24 Signature Algorithm: sha256WithRSAEncryption 65:70:83:5a:03:68:18:fa:1b:19:2e:06:98:38:59:57:8b:42: 62:9d:3d:01:3c:31:90:32:c1:43:05:e5:2d:f0:97:14:7e:e4: 74:2b:ef:4a:5e:68:91:c7:99:65:ce:25:35:e4:6e:0c:c9:06: 83:ff:44:b7:84:eb:02:87:58:2c:34:9d:11:06:d7:fb:6e:00: 6c:6a:a3:d8:2f:3e:ad:6a:3e:94:3a:6b:95:fb:f0:54:b6:a4: c6:ea:c6:07:7f:9f:16:af:83:1d:ed:49:d0:ed:e3:c0:8a:db: f0:5b:f4:5f:d8:34:33:37:b6:76:f8:fb:5f:79:ca:e1:ff:f5: b2:72:30:2d:00:c5:69:6a:c6:ff:20:0a:be:4f:e9:51:a5:49: 6a:2f:7d:24:09:50:fe:22:c5:ad:38:ff:07:a8:bf:77:d8:4f: e4:19:a6:78:93:c1:06:d4:b1:05:a0:e3:a9:cb:db:02:66:7e: bf:f8:a8:ba:8c:cc:41:f5:14:24:9f:3d:dd:20:96:a9:81:73: 82:a7:0c:89:f3:02:c1:80:0f:b4:4c:e3:07:f9:21:8d:9a:cd: bd:7d:7e:ad:f4:8f:3c:81:c4:e1:59:27:33:cb:bb:76:47:82: 7a:0b:8e:c4:8d:43:41:30:1e:0d:95:e1:51:81:87:0e:11:a5: ae:aa:78:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0B/XX5gQPUg+veL0WeNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2I1MGU3OGEzYTMxZTMzNzVjZjJhYWI4NjVlODQ1ZmYy ZTk5YzEwHhcNMjYwMTAxMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGRhZThkM2M5NmNmYTk0ZjZkM2E3YmQyMGMwZDM4ZmVjMTI1MmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCOim00W9zu0DveDH72dFi9p6nqF F0LxxPvyVgeXaSVikk7g9EiCtfxSCm1jgi9fr9dw0prN5kfLv2npS4tEuUxqkkB6 mqfYWvBqm+uCATUu6Dtb/YuwRvsKFWyrdexDeP6GI5kbpVH3EDdPLnmCaAVW2Q/q ZFdFSdnUdNIGeQ0L2436FSLd2vFE7TtYB7gFL/WOzyKWu3swhP7j/T4WGw8DWqfU gLHoU24F+Pq+GN0xtl3suibJCvMySfo5wd55nmfQRkGiD6+Jrk1bPal9lUSfhMdn 9lp9Avb6tIKue9/riW4BJO74wncTTqfYNvJWT9qC4XfaM6MW5ig1bhGDkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBja6NPJbPqU9tOnvSDA04/sElL7MB8GA1UdIwQY MBaAFKTLUOeKOjHjN1zyqrhl6EX/LpnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iMWYyZTAtOGE2MC00YzhhLTkwZGMt NGJlNzk0ZDY0MDZkLzEvR05ybzA4bHMtcFQyMDZlOUlNRFRqLXdTVXZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iMWYyZTAtOGE2MC00YzhhLTkwZGMtNGJlNzk0ZDY0MDZk LzEvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw16GMA0G CSqGSIb3DQEBCwUAA4IBAQBlcINaA2gY+hsZLgaYOFlXi0JinT0BPDGQMsFDBeUt 8JcUfuR0K+9KXmiRx5llziU15G4MyQaD/0S3hOsCh1gsNJ0RBtf7bgBsaqPYLz6t aj6UOmuV+/BUtqTG6sYHf58Wr4Md7UnQ7ePAitvwW/Rf2DQzN7Z2+Ptfecrh//Wy cjAtAMVpasb/IAq+T+lRpUlqL30kCVD+IsWtOP8HqL932E/kGaZ4k8EG1LEFoOOp y9sCZn6/+Ki6jMxB9RQknz3dIJapgXOCpwyJ8wLBgA+0TOMH+SGNms29fX6t9I88 gcThWSczy7t2R4J6C47EjUNBMB4NleFRgYcOEaWuqngr -----END CERTIFICATE-----Generated at Tue Jan 27 11:30:27 2026 by rpki-client