This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/GpAYSqSBnbVI2jkqmZjF4cqN00c.roa File: GpAYSqSBnbVI2jkqmZjF4cqN00c.roa (raw, json) Hash identifier: watcT2RtTX9xWmhyi/0Z0eqDamt+a0rTkZyma9vwbuw= Subject key identifier: 1A:90:18:4A:A4:81:9D:B5:48:DA:39:2A:99:98:C5:E1:CA:8D:D3:47 Certificate issuer: /CN=5134d1320645644e2eaf3685879d693f72522c76 Certificate serial: 019B78A2FD9F977B3F19914D0CB52BE3236A Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/GpAYSqSBnbVI2jkqmZjF4cqN00c.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.194.25.0/24 maxlen: 24 91.194.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fd:9f:97:7b:3f:19:91:4d:0c:b5:2b:e3:23:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a90184aa4819db548da392a9998c5e1ca8dd347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:01:a1:5f:db:8a:84:09:7a:86:50:a7:5b: 62:06:4c:ad:d1:4b:66:f3:b5:0f:96:ec:e9:b9:ff: 4c:a6:28:18:32:71:77:fb:13:5d:fa:f4:12:7b:ed: cd:e3:8a:76:01:33:68:16:c8:5a:0d:b3:e8:81:8c: 21:98:3d:75:4b:df:ee:d7:61:a7:c0:d6:2c:a9:54: 65:26:91:20:2b:53:a9:ce:4a:60:9b:f6:f6:04:71: d6:e6:81:f8:1e:22:51:1f:c4:51:ec:6b:21:de:f7: 90:06:fe:3a:bf:cc:a5:1f:8f:3a:df:7c:8d:5b:bb: 6a:93:eb:9f:97:73:03:2f:bc:3b:39:38:f5:32:96: 42:11:2d:37:f0:df:10:ea:0f:92:8d:97:39:a0:52: 95:bc:f3:cc:ad:80:ae:37:e8:35:7b:97:dd:7d:7d: cc:f2:95:3e:d9:7b:d9:0e:27:9a:7a:87:f3:df:ba: 5a:35:28:32:6f:7b:e6:e8:a2:81:98:c2:79:5e:81: 0e:e0:9d:93:64:a2:00:52:9f:69:a4:f1:0d:ff:af: 71:ed:39:7a:43:6f:a7:8c:c0:ee:ee:48:38:ec:c8: f0:da:a9:75:fa:74:c8:08:dd:bd:2c:2b:15:c4:02: d3:c6:98:f3:3d:90:60:10:f1:06:a4:cb:bd:0c:28: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:90:18:4A:A4:81:9D:B5:48:DA:39:2A:99:98:C5:E1:CA:8D:D3:47 X509v3 Authority Key Identifier: keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/GpAYSqSBnbVI2jkqmZjF4cqN00c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.25.0/24 91.194.104.0/23 Signature Algorithm: sha256WithRSAEncryption 66:98:4d:24:8d:ac:4e:9e:f0:a0:8a:59:bd:77:2b:ed:09:c8: 68:da:a8:21:e4:f5:bc:42:84:22:c0:ff:85:d8:ba:de:a8:ee: 70:f2:44:ec:a5:78:a0:4b:f3:a2:d8:ab:c4:1c:9b:3a:87:fa: 31:32:7b:4a:20:f8:28:4b:f1:a7:82:f1:84:4a:6f:de:23:ed: 9d:ab:7c:d4:c2:f8:dd:90:86:87:88:22:8b:e7:2e:00:ff:a7: c3:4d:1d:7a:88:5d:55:c7:ba:1d:25:a4:64:81:9d:ec:02:e5: 4b:f2:74:8c:f3:fc:a8:05:5e:99:59:ee:90:38:0d:39:07:76: 4c:de:ae:d8:3f:e0:07:7a:8b:8e:7c:99:ef:f1:ea:19:63:e8: ca:32:22:51:39:44:cb:0d:5b:f0:e6:af:6c:eb:1a:e0:9c:35: fe:a9:6b:46:84:ec:ab:0d:79:31:e3:83:c9:be:ec:25:34:2a: 1f:da:88:ae:52:fc:13:54:01:9c:e0:fe:f4:77:d1:de:74:72: 00:88:44:13:dd:94:f0:8f:c2:15:2f:95:b5:e0:51:fe:69:58: 41:23:d2:b6:dc:1f:d5:10:7a:85:7c:1e:c8:66:c0:da:3f:36: b2:39:12:52:ea:31:12:91:d1:2e:59:06:e4:12:45:c6:81:25: e5:8b:b1:ea -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ov2fl3s/GZFNDLUr4yNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMzRkMTMyMDY0NTY0NGUyZWFmMzY4NTg3OWQ2OTNmNzI1 MjJjNzYwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTkwMTg0YWE0ODE5ZGI1NDhkYTM5MmE5OTk4YzVlMWNhOGRkMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAMBoV/bioQJeoZQp1tiBkyt0Utm 87UPluzpuf9MpigYMnF3+xNd+vQSe+3N44p2ATNoFshaDbPogYwhmD11S9/u12Gn wNYsqVRlJpEgK1Opzkpgm/b2BHHW5oH4HiJRH8RR7Gsh3veQBv46v8ylH48633yN W7tqk+ufl3MDL7w7OTj1MpZCES038N8Q6g+SjZc5oFKVvPPMrYCuN+g1e5fdfX3M 8pU+2XvZDieaeofz37paNSgyb3vm6KKBmMJ5XoEO4J2TZKIAUp9ppPEN/69x7Tl6 Q2+njMDu7kg47Mjw2ql1+nTICN29LCsVxALTxpjzPZBgEPEGpMu9DCjrKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBqQGEqkgZ21SNo5KpmYxeHKjdNHMB8GA1UdIwQY MBaAFFE00TIGRWROLq82hYedaT9yUix2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2It MmY1MWVjZDFhYTBlLzEvR3BBWVNxU0JuYlZJMmprcW1aakY0Y3FOMDBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2ItMmY1MWVjZDFhYTBl LzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8IZAwQB W8JoMA0GCSqGSIb3DQEBCwUAA4IBAQBmmE0kjaxOnvCgilm9dyvtCcho2qgh5PW8 QoQiwP+F2LreqO5w8kTspXigS/Oi2KvEHJs6h/oxMntKIPgoS/GngvGESm/eI+2d q3zUwvjdkIaHiCKL5y4A/6fDTR16iF1Vx7odJaRkgZ3sAuVL8nSM8/yoBV6ZWe6Q OA05B3ZM3q7YP+AHeouOfJnv8eoZY+jKMiJROUTLDVvw5q9s6xrgnDX+qWtGhOyr DXkx44PJvuwlNCof2oiuUvwTVAGc4P70d9HedHIAiEQT3ZTwj8IVL5W14FH+aVhB I9K23B/VEHqFfB7IZsDaPzayORJS6jESkdEuWQbkEkXGgSXli7Hq -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:11 2026 by rpki-client