This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/GQl03C1S1hI0HbICNLvSVYRMhCo.roa File: GQl03C1S1hI0HbICNLvSVYRMhCo.roa (raw, json) Hash identifier: B7vKLAvLEs/o5C0LdLwtJq4khMi0IAFQNppOYcAmx/s= Subject key identifier: 19:09:74:DC:2D:52:D6:12:34:1D:B2:02:34:BB:D2:55:84:4C:84:2A Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B7F14679A1EF467E1078774FAB6D962AC Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/GQl03C1S1hI0HbICNLvSVYRMhCo.roa Signing time: Fri 02 Jan 2026 14:20:02 +0000 ROA not before: Fri 02 Jan 2026 14:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212165 IP address blocks: 109.120.147.0/24 maxlen: 24 109.120.159.0/24 maxlen: 24 176.98.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:67:9a:1e:f4:67:e1:07:87:74:fa:b6:d9:62:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Jan 2 14:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=190974dc2d52d612341db20234bbd255844c842a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:d8:4a:3b:bf:c4:fa:14:7e:81:5c:a6:32: 04:43:47:00:e1:3e:8e:56:20:1a:2c:10:cd:5d:dd: 10:a0:38:15:d6:b1:f0:a9:ee:3f:cf:cb:40:8b:d9: 02:f6:01:f7:bd:d4:bf:d4:c1:fc:5c:d5:c6:40:00: 83:98:a5:87:3b:e3:d9:b1:0b:98:b9:42:3a:ad:4a: 3b:52:44:49:2f:86:d4:bb:0e:08:a7:c1:66:7f:7e: 31:d7:c4:75:7f:1b:2d:6f:74:ad:7a:ff:32:e2:34: c6:b9:c8:9e:cd:e8:22:c9:a5:32:ea:12:61:41:13: 16:63:d7:34:ed:c7:cc:1e:9f:31:ec:bd:13:c4:0a: 52:5b:fc:ae:a3:5d:26:ca:2e:f8:35:5d:18:32:20: 88:f8:b1:54:01:68:79:24:d6:ad:83:ac:bb:f8:58: f5:d4:ff:23:95:91:e4:86:d6:c4:b3:d2:39:f2:b8: a4:d2:8b:34:6d:2a:6f:9e:82:f6:01:dc:4a:41:f1: 5f:38:e1:3c:89:50:74:32:a6:67:63:cd:44:27:af: 8e:8b:37:07:b9:e9:45:52:8b:39:3b:4d:1b:9d:44: aa:e9:8b:ce:a8:39:da:ff:91:0d:03:a1:40:32:2f: cc:8a:7b:78:45:ef:c0:fe:ce:33:0f:7e:5c:0d:4b: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:09:74:DC:2D:52:D6:12:34:1D:B2:02:34:BB:D2:55:84:4C:84:2A X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/GQl03C1S1hI0HbICNLvSVYRMhCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.120.147.0/24 109.120.159.0/24 176.98.188.0/24 Signature Algorithm: sha256WithRSAEncryption 96:2a:96:62:df:3f:c2:69:e6:bb:d5:0f:3f:3d:02:70:59:4c: 0c:b7:bf:3a:8b:51:7f:05:bf:fd:b1:73:60:6c:62:14:41:f7: 25:d2:32:3e:b4:a3:f2:39:42:ba:b8:d1:8f:b1:2a:d5:c0:76: 4a:c8:53:47:b3:68:95:55:e4:5c:14:9f:ee:2c:61:2c:df:b5: 36:40:50:22:78:1e:64:57:0e:48:44:32:6a:06:47:7d:29:0d: a0:41:95:b2:dc:83:0b:ca:b5:8d:c3:ee:4e:4e:9b:6e:9b:fb: c2:f9:9e:7a:cc:64:59:0c:ea:38:a2:ae:8b:b2:f0:e5:c1:14: 46:8f:dd:cb:dc:f0:8e:2f:ac:32:d6:b4:51:6f:75:e8:4a:9d: 07:01:69:8c:ac:d9:30:00:99:dd:fe:10:4e:ee:b7:b0:99:d1: e4:b0:f3:92:02:1d:e8:0d:4c:4e:68:6d:e8:16:46:52:22:fd: 3c:0c:4b:5f:77:5b:57:11:33:c1:d5:fc:30:f8:9d:38:b3:06: a9:f8:2d:e6:29:1f:e8:3d:0e:26:3d:13:23:05:39:90:12:b9: 3c:32:be:7e:da:c2:df:f7:09:4d:7d:26:a6:59:14:0a:3c:40: 9f:91:06:67:8c:b9:1d:b6:b6:df:42:ef:da:e4:23:6e:ef:f7: 22:cb:3f:ab -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FGeaHvRn4QeHdPq22WKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjYwMTAyMTQyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTA5NzRkYzJkNTJkNjEyMzQxZGIyMDIzNGJiZDI1NTg0NGM4NDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqjYSju/xPoUfoFcpjIEQ0cA4T6O ViAaLBDNXd0QoDgV1rHwqe4/z8tAi9kC9gH3vdS/1MH8XNXGQACDmKWHO+PZsQuY uUI6rUo7UkRJL4bUuw4Ip8Fmf34x18R1fxstb3Stev8y4jTGuciezegiyaUy6hJh QRMWY9c07cfMHp8x7L0TxApSW/yuo10myi74NV0YMiCI+LFUAWh5JNatg6y7+Fj1 1P8jlZHkhtbEs9I58rik0os0bSpvnoL2AdxKQfFfOOE8iVB0MqZnY81EJ6+OizcH uelFUos5O00bnUSq6YvOqDna/5ENA6FAMi/Mint4Re/A/s4zD35cDUs19QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBkJdNwtUtYSNB2yAjS70lWETIQqMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvR1FsMDNDMVMxaEkwSGJJQ05MdlNWWVJNaENvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXiTAwQA bXifAwQAsGK8MA0GCSqGSIb3DQEBCwUAA4IBAQCWKpZi3z/Caea71Q8/PQJwWUwM t786i1F/Bb/9sXNgbGIUQfcl0jI+tKPyOUK6uNGPsSrVwHZKyFNHs2iVVeRcFJ/u LGEs37U2QFAieB5kVw5IRDJqBkd9KQ2gQZWy3IMLyrWNw+5OTptum/vC+Z56zGRZ DOo4oq6LsvDlwRRGj93L3PCOL6wy1rRRb3XoSp0HAWmMrNkwAJnd/hBO7rewmdHk sPOSAh3oDUxOaG3oFkZSIv08DEtfd1tXETPB1fww+J04swap+C3mKR/oPQ4mPRMj BTmQErk8Mr5+2sLf9wlNfSamWRQKPECfkQZnjLkdtrbfQu/a5CNu7/ciyz+r -----END CERTIFICATE-----Generated at Wed Jan 21 17:06:38 2026 by rpki-client