This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/GCkGsS1uz9XBVQQhijBaSLbxwTE.roa File: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (raw, json) Hash identifier: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA= Subject key identifier: 18:29:06:B1:2D:6E:CF:D5:C1:55:04:21:8A:30:5A:48:B6:F1:C1:31 Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8 Certificate serial: 019B78A233E436B04B12F77485B90A182C99 Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/GCkGsS1uz9XBVQQhijBaSLbxwTE.roa Signing time: Thu 01 Jan 2026 08:17:34 +0000 ROA not before: Thu 01 Jan 2026 08:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 194.76.2.0/23 maxlen: 23 194.76.4.0/22 maxlen: 22 2001:67c:424::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:33:e4:36:b0:4b:12:f7:74:85:b9:0a:18:2c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8 Validity Not Before: Jan 1 08:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=182906b12d6ecfd5c15504218a305a48b6f1c131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:97:78:94:be:02:07:1e:d0:fc:2f:91:df: a9:5f:99:98:70:9e:45:16:0d:8e:32:39:56:77:c7: 93:64:7a:e3:a5:ff:9d:8b:96:7c:9c:a7:f6:4c:ad: 34:d2:0c:78:61:f1:a1:7c:53:9a:91:a3:9d:0c:6a: fd:c7:ff:27:c8:8e:05:22:db:d2:64:10:63:16:c7: b2:5f:e3:fc:c5:47:7b:1b:54:46:d5:b5:c9:90:8d: 41:e3:f6:f4:bc:bc:20:df:50:89:95:0d:b4:9a:2e: 7d:46:43:bb:7d:9e:14:14:0d:72:12:0d:1b:34:5c: 9e:20:a6:9a:7f:64:4d:2d:03:4b:b2:c3:c0:ab:d2: 19:6d:e2:b0:63:9a:18:0f:bb:ad:44:f6:d4:3d:11: 48:8e:74:6e:c3:cc:2d:71:55:74:8d:64:2e:59:f2: 1e:b1:26:5b:fa:15:e9:32:73:ce:cc:40:0a:d6:7b: 9a:82:8e:7f:6d:24:bd:71:53:1f:13:f9:81:4d:bc: 4b:26:dd:31:4f:9e:91:55:15:8a:49:da:2f:0f:fe: b7:0f:50:70:d3:f8:88:9d:ae:78:3e:60:26:f3:e7: f4:8b:58:f2:00:80:a0:81:93:83:09:be:ff:4c:61: 5a:e8:54:9a:1d:d7:8e:cb:e9:c9:86:0b:bd:1f:3b: 2a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:29:06:B1:2D:6E:CF:D5:C1:55:04:21:8A:30:5A:48:B6:F1:C1:31 X509v3 Authority Key Identifier: keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/GCkGsS1uz9XBVQQhijBaSLbxwTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.2.0-194.76.7.255 IPv6: 2001:67c:424::/48 Signature Algorithm: sha256WithRSAEncryption 10:42:b5:2b:d7:74:00:e2:2e:aa:5b:bf:9f:c8:7a:7c:57:b9: 07:9e:29:0e:21:6d:32:cb:b9:82:31:d1:94:07:2f:f7:4b:1f: 16:31:9e:a9:9f:47:65:81:45:18:34:8d:a0:32:7c:b3:d7:09: cc:73:bb:51:01:ea:54:7f:da:bf:f5:6d:af:a7:10:8e:e2:20: f8:3f:ff:b7:2a:dd:d2:33:01:cf:cb:76:6a:5e:eb:08:7a:3a: ec:3d:7c:9e:ea:cc:50:a0:e4:60:7f:06:8f:64:4f:83:d4:45: 1c:4e:28:9b:87:e8:6f:2b:2d:0a:60:94:ea:39:cc:46:5d:81: 6a:6e:8d:8b:6d:31:1e:00:d1:60:37:8a:e0:3f:bb:77:44:88: db:ed:3b:46:c3:45:63:fb:0a:c8:f0:d5:46:e0:2f:25:43:08: 68:0c:58:b8:8f:d8:a4:cc:27:30:ab:f8:62:bc:ae:7e:b0:14: 7e:9a:ab:da:a5:e0:f0:6c:6a:79:97:13:7f:fc:81:1c:f4:e1: 06:e5:c1:cf:6c:39:92:13:8f:b6:4c:53:38:be:20:cf:cc:7b: 32:a1:c3:0e:62:d0:ef:15:f5:ac:76:06:a1:61:4c:06:32:90: 67:e8:6e:9b:cb:ee:da:b6:11:28:09:39:a5:ec:d0:9b:51:0d: f1:fc:f3:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4ojPkNrBLEvd0hbkKGCyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ4NzQ3MmQzN2NiZDcyNjE4MWY5ZjNhMjAzODZmMDM5 YjNiYTgwHhcNMjYwMTAxMDgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODI5MDZiMTJkNmVjZmQ1YzE1NTA0MjE4YTMwNWE0OGI2ZjFjMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX+XeJS+Agce0Pwvkd+pX5mYcJ5F Fg2OMjlWd8eTZHrjpf+di5Z8nKf2TK000gx4YfGhfFOakaOdDGr9x/8nyI4FItvS ZBBjFseyX+P8xUd7G1RG1bXJkI1B4/b0vLwg31CJlQ20mi59RkO7fZ4UFA1yEg0b NFyeIKaaf2RNLQNLssPAq9IZbeKwY5oYD7utRPbUPRFIjnRuw8wtcVV0jWQuWfIe sSZb+hXpMnPOzEAK1nuago5/bSS9cVMfE/mBTbxLJt0xT56RVRWKSdovD/63D1Bw 0/iIna54PmAm8+f0i1jyAICggZODCb7/TGFa6FSaHdeOy+nJhgu9HzsqUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgpBrEtbs/VwVUEIYowWki28cExMB8GA1UdIwQY MBaAFFl0h0ctN8vXJhgfnzogOG8DmzuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMt MDM1MjgxMjg5YmIwLzEvR0NrR3NTMXV6OVhCVlFRaGlqQmFTTGJ4d1RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMtMDM1MjgxMjg5YmIw LzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAHCTAID BAPCTAAwDwQCAAIwCQMHACABBnwEJDANBgkqhkiG9w0BAQsFAAOCAQEAEEK1K9d0 AOIuqlu/n8h6fFe5B54pDiFtMsu5gjHRlAcv90sfFjGeqZ9HZYFFGDSNoDJ8s9cJ zHO7UQHqVH/av/Vtr6cQjuIg+D//tyrd0jMBz8t2al7rCHo67D18nurMUKDkYH8G j2RPg9RFHE4om4fobystCmCU6jnMRl2Bam6Ni20xHgDRYDeK4D+7d0SI2+07RsNF Y/sKyPDVRuAvJUMIaAxYuI/YpMwnMKv4YryufrAUfpqr2qXg8GxqeZcTf/yBHPTh BuXBz2w5khOPtkxTOL4gz8x7MqHDDmLQ7xX1rHYGoWFMBjKQZ+hum8vu2rYRKAk5 pezQm1EN8fzzYQ== -----END CERTIFICATE-----Generated at Wed Jan 21 12:20:24 2026 by rpki-client