This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/GT10PWWk40LjIYF15OP2Wd_xt-I.roa File: GT10PWWk40LjIYF15OP2Wd_xt-I.roa (raw, json) Hash identifier: loBYBLOnVHrWiz+2I6Up0zBWAHuCROfUTDMKwTlcM6s= Subject key identifier: 19:3D:74:3D:65:A4:E3:42:E3:21:81:75:E4:E3:F6:59:DF:F1:B7:E2 Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019B76EAEF482E25F6F256C9B5C168FC70A1 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/GT10PWWk40LjIYF15OP2Wd_xt-I.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214238 IP address blocks: 138.124.5.0/24 maxlen: 24 138.124.6.0/24 maxlen: 24 138.124.7.0/24 maxlen: 24 138.124.36.0/24 maxlen: 24 138.124.37.0/24 maxlen: 24 138.124.40.0/24 maxlen: 24 138.124.41.0/24 maxlen: 24 138.124.42.0/24 maxlen: 24 138.124.43.0/24 maxlen: 24 138.124.44.0/24 maxlen: 24 138.124.79.0/24 maxlen: 24 138.124.80.0/24 maxlen: 24 138.124.81.0/24 maxlen: 24 138.124.82.0/24 maxlen: 24 138.124.83.0/24 maxlen: 24 138.124.84.0/24 maxlen: 24 138.124.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ef:48:2e:25:f6:f2:56:c9:b5:c1:68:fc:70:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=193d743d65a4e342e3218175e4e3f659dff1b7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:d0:84:64:5a:e4:59:7f:4f:04:b1:3f:f9: ad:14:9e:88:4c:94:16:79:50:3f:44:84:54:15:d6: dc:c3:4d:28:91:82:41:49:87:c0:21:f2:31:66:5f: 47:31:34:a9:1c:45:82:5e:4f:6f:a1:e0:e4:c3:e0: 52:1b:17:3c:2d:8b:97:ce:fc:13:f4:ff:d8:65:37: 3f:44:c6:28:a7:26:fd:44:19:6d:9f:5e:06:cc:9f: 38:89:19:ca:00:5e:f7:6c:c7:a9:d6:67:a2:38:0e: 83:d8:e7:57:3c:41:78:e2:0e:aa:4b:a8:f7:5d:9f: 8f:e0:bc:a1:a0:3e:b6:64:c5:8f:9f:cf:48:96:7b: b1:f9:56:a7:64:38:c4:b7:33:89:11:e3:44:f4:98: 49:64:41:c9:9b:5d:70:7e:81:bc:41:22:32:5d:39: 70:98:1e:e4:e0:e3:80:41:4a:a3:42:af:4d:a2:dd: 03:c2:55:0a:c5:bd:21:4a:b6:25:f1:18:1e:c7:ce: 3d:11:84:b2:9a:9a:83:c7:9b:f4:0c:c4:11:81:30: c4:54:a0:9f:c5:c1:b0:1c:be:c7:b2:f2:f5:38:cc: dd:38:e9:e0:85:99:ba:16:84:c0:d4:3d:01:51:be: 17:3b:1f:af:27:4c:9a:23:9e:13:5b:33:f5:ab:cc: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3D:74:3D:65:A4:E3:42:E3:21:81:75:E4:E3:F6:59:DF:F1:B7:E2 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/GT10PWWk40LjIYF15OP2Wd_xt-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.5.0-138.124.7.255 138.124.36.0/23 138.124.40.0-138.124.44.255 138.124.79.0-138.124.85.255 Signature Algorithm: sha256WithRSAEncryption 00:88:22:cf:34:1f:01:92:0b:eb:56:80:1a:88:49:47:0d:ba: 3f:b0:0e:2d:80:2d:4b:36:12:87:3d:94:c8:df:ce:e8:72:7f: ba:56:f3:c6:d1:8d:92:58:27:80:47:30:f9:2b:a2:a9:81:e0: ed:51:6d:41:9e:b4:76:c6:57:60:16:23:84:bc:20:7e:c0:a5: 92:1c:4b:2a:55:ca:f1:f6:bc:d2:d4:94:d2:1c:38:a6:01:95: fc:9c:fa:44:ef:8d:3b:ed:4f:40:0e:39:3b:cb:9b:d1:72:17: 19:3d:85:a4:6a:74:44:d9:aa:0b:f2:7a:6f:03:26:6e:9f:0c: d5:af:80:4d:30:a7:ae:8e:f7:21:d2:99:ef:55:bf:34:7d:f2: 5d:a2:77:7f:1d:3b:3d:7a:04:2b:16:1d:10:ec:2c:f7:1a:29: 22:60:89:6d:31:44:36:78:d2:12:af:40:c4:41:73:b3:84:cc: ad:42:6d:5d:a0:93:b7:e1:6c:12:88:3d:fe:bc:c6:9e:2f:a4: 36:08:be:ae:09:fb:54:a7:4e:db:f3:b3:8a:9c:c1:3e:9f:73: 12:64:11:74:f2:af:03:8f:4a:2f:ff:9e:d8:81:c4:13:ae:ce: 88:eb:02:6a:83:af:c8:41:9b:43:a4:0a:9c:42:47:89:0e:31: b4:51:22:2c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt26u9ILiX28lbJtcFo/HChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTNkNzQzZDY1YTRlMzQyZTMyMTgxNzVlNGUzZjY1OWRmZjFiN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEDQhGRa5Fl/TwSxP/mtFJ6ITJQW eVA/RIRUFdbcw00okYJBSYfAIfIxZl9HMTSpHEWCXk9voeDkw+BSGxc8LYuXzvwT 9P/YZTc/RMYopyb9RBltn14GzJ84iRnKAF73bMep1meiOA6D2OdXPEF44g6qS6j3 XZ+P4LyhoD62ZMWPn89Ilnux+VanZDjEtzOJEeNE9JhJZEHJm11wfoG8QSIyXTlw mB7k4OOAQUqjQq9Not0DwlUKxb0hSrYl8Rgex849EYSympqDx5v0DMQRgTDEVKCf xcGwHL7HsvL1OMzdOOnghZm6FoTA1D0BUb4XOx+vJ0yaI54TWzP1q8yPmQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFBk9dD1lpONC4yGBdeTj9lnf8bfiMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvR1QxMFBXV2s0MExqSVlGMTVPUDJXZF94dC1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBACKfAUD BAOKfAADBAGKfCQwDAMEA4p8KAMEAIp8LDAMAwQAinxPAwQBinxUMA0GCSqGSIb3 DQEBCwUAA4IBAQAAiCLPNB8BkgvrVoAaiElHDbo/sA4tgC1LNhKHPZTI387ocn+6 VvPG0Y2SWCeARzD5K6KpgeDtUW1BnrR2xldgFiOEvCB+wKWSHEsqVcrx9rzS1JTS HDimAZX8nPpE74077U9ADjk7y5vRchcZPYWkanRE2aoL8npvAyZunwzVr4BNMKeu jvch0pnvVb80ffJdond/HTs9egQrFh0Q7Cz3GikiYIltMUQ2eNISr0DEQXOzhMyt Qm1doJO34WwSiD3+vMaeL6Q2CL6uCftUp07b87OKnME+n3MSZBF08q8Dj0ov/57Y gcQTrs6I6wJqg6/IQZtDpAqcQkeJDjG0USIs -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:39 2026 by rpki-client