This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GexU4ahRrMNYGUamM22Heo8Js_U.roa File: GexU4ahRrMNYGUamM22Heo8Js_U.roa (raw, json) Hash identifier: jb5j5Rve1p9aSccZGKrtZpwstKt5RPam0TA7t8Gnc1A= Subject key identifier: 19:EC:54:E1:A8:51:AC:C3:58:19:46:A6:33:6D:87:7A:8F:09:B3:F5 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B3A7784934A0DA6AA677C719C8610484D Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GexU4ahRrMNYGUamM22Heo8Js_U.roa Signing time: Sat 20 Dec 2025 06:34:29 +0000 ROA not before: Sat 20 Dec 2025 06:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 155.2.218.0/24 maxlen: 24 155.2.219.0/24 maxlen: 24 158.173.202.0/24 maxlen: 24 192.253.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:77:84:93:4a:0d:a6:aa:67:7c:71:9c:86:10:48:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Dec 20 06:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=19ec54e1a851acc3581946a6336d877a8f09b3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:6b:d7:31:dc:3d:cd:d4:57:bd:1c:0a:98: c8:09:d9:87:b1:2a:74:52:9e:5d:2f:54:3c:34:2a: 3c:eb:d2:4f:e4:87:07:26:ef:28:7e:10:07:b6:df: ed:3a:46:04:99:05:65:e1:ce:89:d7:57:4f:92:e5: 2a:5c:a8:44:f2:b5:64:c7:25:28:45:e7:b6:63:8a: e2:04:35:f3:89:ec:b7:20:ba:7a:05:a9:6b:f5:83: 2a:70:9a:7b:45:9f:11:77:0d:9e:a1:3e:d3:fd:cb: c9:2b:70:8e:66:c7:6e:c5:94:db:17:5d:d7:7f:6b: 9f:b5:6a:ab:af:21:19:a7:a8:d7:4b:69:4d:2e:64: b3:41:73:e0:42:94:60:4d:e1:13:ae:d2:a1:2c:84: 89:ba:d1:67:a5:1b:8e:58:72:ab:be:66:f0:f6:1a: b1:a0:15:9b:bf:22:4b:7a:ca:61:92:7b:0a:04:37: c4:d5:f8:2d:00:79:cc:b3:42:e8:fe:4f:0a:ff:c8: 1d:c3:67:a0:94:ed:ff:65:12:da:15:6b:84:6e:07: 34:5d:1c:15:7a:e1:71:92:2b:1e:25:83:12:b9:33: d7:b3:56:8b:65:c2:15:ab:7f:38:2b:b3:34:3a:95: 91:8d:e7:a3:b6:d2:1f:f5:4f:f2:05:6f:b6:c9:40: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EC:54:E1:A8:51:AC:C3:58:19:46:A6:33:6D:87:7A:8F:09:B3:F5 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GexU4ahRrMNYGUamM22Heo8Js_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.2.218.0/23 158.173.202.0/24 192.253.210.0/24 Signature Algorithm: sha256WithRSAEncryption 34:8b:ce:a1:cc:cf:a0:f3:64:cc:10:c4:f0:fc:7f:90:4d:04: a6:aa:72:fd:5c:7c:25:64:51:3c:a0:8d:9e:91:f8:01:2f:fa: 7c:6b:0d:80:25:08:19:c2:9c:bd:db:5c:68:cf:71:3e:90:1b: 51:3e:aa:3c:a9:02:fb:f7:8c:4f:36:ce:6a:c5:ac:e5:a6:7c: 29:20:6d:51:e3:58:47:45:d9:f8:99:ec:01:57:c9:1d:e8:84: fa:47:0c:55:5d:66:02:af:6a:c8:c8:63:13:d9:61:15:f5:d8: b8:b4:5c:89:f5:7d:b5:2a:e5:2c:c1:51:38:bc:2c:32:59:aa: a5:48:53:87:85:63:6f:77:aa:e4:e6:73:73:dc:24:71:1c:85: 0d:ce:cc:e4:ee:e6:b4:05:05:96:24:be:60:33:bb:a0:d6:ea: f8:0f:1c:43:eb:4f:09:a8:e5:bd:9b:ea:fb:b7:56:ee:5d:43: de:31:83:7f:c1:59:a9:47:28:73:69:80:a2:db:51:af:fa:d5: 64:a3:d3:2a:13:a0:34:da:9b:2b:7f:dd:55:41:5a:21:5d:bd: 56:ad:0f:3f:67:b6:d3:a7:05:91:be:4c:3d:a8:2b:b1:59:cc: 40:a8:4c:c9:d5:7d:68:27:64:4b:cb:ed:7d:d0:60:43:89:d8: 72:dc:50:b0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZs6d4STSg2mqmd8cZyGEEhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMjIwMDYzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWVjNTRlMWE4NTFhY2MzNTgxOTQ2YTYzMzZkODc3YThmMDliM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Nr1zHcPc3UV70cCpjICdmHsSp0 Up5dL1Q8NCo869JP5IcHJu8ofhAHtt/tOkYEmQVl4c6J11dPkuUqXKhE8rVkxyUo Ree2Y4riBDXziey3ILp6Balr9YMqcJp7RZ8Rdw2eoT7T/cvJK3COZsduxZTbF13X f2uftWqrryEZp6jXS2lNLmSzQXPgQpRgTeETrtKhLISJutFnpRuOWHKrvmbw9hqx oBWbvyJLesphknsKBDfE1fgtAHnMs0Lo/k8K/8gdw2eglO3/ZRLaFWuEbgc0XRwV euFxkiseJYMSuTPXs1aLZcIVq384K7M0OpWRjeejttIf9U/yBW+2yUCXzQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBnsVOGoUazDWBlGpjNth3qPCbP1MB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvR2V4VTRhaFJyTU5ZR1VhbU0yMkhlbzhKc19VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmwLaAwQA nq3KAwQAwP3SMA0GCSqGSIb3DQEBCwUAA4IBAQA0i86hzM+g82TMEMTw/H+QTQSm qnL9XHwlZFE8oI2ekfgBL/p8aw2AJQgZwpy921xoz3E+kBtRPqo8qQL794xPNs5q xazlpnwpIG1R41hHRdn4mewBV8kd6IT6RwxVXWYCr2rIyGMT2WEV9di4tFyJ9X21 KuUswVE4vCwyWaqlSFOHhWNvd6rk5nNz3CRxHIUNzszk7ua0BQWWJL5gM7ug1ur4 DxxD608JqOW9m+r7t1buXUPeMYN/wVmpRyhzaYCi21Gv+tVko9MqE6A02psrf91V QVohXb1WrQ8/Z7bTpwWRvkw9qCuxWcxAqEzJ1X1oJ2RLy+190GBDidhy3FCw -----END CERTIFICATE-----Generated at Sun Dec 21 18:52:45 2025 by rpki-client