This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GnGhIU6om8ueGrh77faENakQ2FU.roa File: GnGhIU6om8ueGrh77faENakQ2FU.roa (raw, json) Hash identifier: vdDwbOfl3bVAlXxHBWkDNDqG2bpqPq36AzvVv32wT8U= Subject key identifier: 1A:71:A1:21:4E:A8:9B:CB:9E:1A:B8:7B:ED:F6:84:35:A9:10:D8:55 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AFD66E3F92497DE8861999A485288D066 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GnGhIU6om8ueGrh77faENakQ2FU.roa Signing time: Mon 08 Dec 2025 09:59:29 +0000 ROA not before: Mon 08 Dec 2025 09:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24669 IP address blocks: 212.134.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:66:e3:f9:24:97:de:88:61:99:9a:48:52:88:d0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 8 09:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a71a1214ea89bcb9e1ab87bedf68435a910d855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:bd:8a:67:e9:8b:e7:f4:2b:c6:ad:c7:b1: 4a:a9:35:a7:f7:9f:04:b1:da:f5:54:54:39:00:d4: 27:c8:a1:c4:38:d7:d9:d3:20:36:88:82:92:f2:7b: 29:50:2d:02:29:97:4b:d7:56:9a:16:56:e3:46:b8: 02:32:27:db:e0:e4:16:3f:2a:77:1d:b7:79:56:ff: fd:a8:1e:20:8e:35:f1:b4:49:3b:4f:50:7f:d7:ef: 49:14:ec:c0:13:b1:33:5c:af:8c:d9:6e:50:58:d2: 1c:a8:96:4f:aa:43:5f:4e:91:71:83:87:67:5b:f6: 9f:90:f4:3f:4d:67:f5:f9:17:db:70:13:1f:85:26: 55:07:7a:c5:15:3e:9e:1e:87:85:9e:83:50:38:fd: 93:d6:3d:b5:b3:73:85:02:e7:7a:18:9d:d9:a7:13: 02:7c:31:5e:8e:0b:54:63:91:7c:26:4b:01:06:b3: 7b:75:06:08:73:2e:89:bb:d5:38:3b:df:58:b1:9c: b7:e3:3c:d1:18:94:25:32:ac:0f:9f:89:9f:36:7d: 04:81:de:cb:75:df:ed:8d:d2:e2:68:de:0c:37:3c: 5f:dc:cd:98:66:1b:5b:b1:0c:ad:a7:9b:2b:74:b3: c7:c0:f5:d9:fc:f3:4a:08:0d:ab:02:8b:c6:46:fb: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:71:A1:21:4E:A8:9B:CB:9E:1A:B8:7B:ED:F6:84:35:A9:10:D8:55 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GnGhIU6om8ueGrh77faENakQ2FU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.131.0/24 Signature Algorithm: sha256WithRSAEncryption dc:44:67:d5:67:91:2c:5b:ec:a6:94:52:86:f0:60:63:a6:10: 56:b8:a3:5b:aa:77:20:2d:79:20:90:98:0c:81:45:9e:c5:04: 8d:5b:43:a4:8f:80:a3:84:0c:27:de:a3:90:7a:7a:d6:2a:52: 64:9d:a5:a0:aa:a9:fe:82:97:c4:cf:a8:35:f5:dd:5e:8f:1e: cb:16:9e:cf:50:36:07:05:7f:64:54:94:1f:b1:88:7f:81:b2: 0d:ef:ed:3b:c9:5f:5d:58:40:7a:60:33:d8:c7:5e:2f:9b:fc: 1e:1f:1e:35:46:24:a2:d6:6d:40:8c:ce:ac:f6:2f:37:e7:51: 83:fe:42:0d:16:f8:94:e1:04:c8:8a:59:42:bb:40:67:53:c3: 69:6d:60:ea:73:82:33:81:a6:07:3e:77:2c:83:22:5e:27:d3: b9:e9:83:54:bb:be:e1:d1:a2:b0:2c:bc:d5:0c:bc:2a:d5:1e: b3:6a:25:f7:68:be:05:23:5d:d1:30:b6:e5:d9:5f:40:50:37: ab:f3:2b:c4:66:58:22:db:be:ef:ca:8c:c6:2a:fb:89:d4:bb: be:a8:20:88:78:ec:df:31:52:02:4b:3b:f1:0e:30:fe:a6:d1: b1:04:8e:6b:6b:f6:9d:ea:70:e3:b8:31:3a:93:6d:0a:57:e0: 40:da:f8:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr9ZuP5JJfeiGGZmkhSiNBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjA4MDk1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTcxYTEyMTRlYTg5YmNiOWUxYWI4N2JlZGY2ODQzNWE5MTBkODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotS9imfpi+f0K8atx7FKqTWn958E sdr1VFQ5ANQnyKHEONfZ0yA2iIKS8nspUC0CKZdL11aaFlbjRrgCMifb4OQWPyp3 Hbd5Vv/9qB4gjjXxtEk7T1B/1+9JFOzAE7EzXK+M2W5QWNIcqJZPqkNfTpFxg4dn W/afkPQ/TWf1+RfbcBMfhSZVB3rFFT6eHoeFnoNQOP2T1j21s3OFAud6GJ3ZpxMC fDFejgtUY5F8JksBBrN7dQYIcy6Ju9U4O99YsZy34zzRGJQlMqwPn4mfNn0Egd7L dd/tjdLiaN4MNzxf3M2YZhtbsQytp5srdLPHwPXZ/PNKCA2rAovGRvvAiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpxoSFOqJvLnhq4e+32hDWpENhVMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvR25HaElVNm9tOHVlR3JoNzdmYUVOYWtRMkZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IaDMA0G CSqGSIb3DQEBCwUAA4IBAQDcRGfVZ5EsW+ymlFKG8GBjphBWuKNbqncgLXkgkJgM gUWexQSNW0Okj4CjhAwn3qOQenrWKlJknaWgqqn+gpfEz6g19d1ejx7LFp7PUDYH BX9kVJQfsYh/gbIN7+07yV9dWEB6YDPYx14vm/weHx41RiSi1m1AjM6s9i8351GD /kINFviU4QTIillCu0BnU8NpbWDqc4IzgaYHPncsgyJeJ9O56YNUu77h0aKwLLzV DLwq1R6zaiX3aL4FI13RMLbl2V9AUDer8yvEZlgi277vyozGKvuJ1Lu+qCCIeOzf MVICSzvxDjD+ptGxBI5ra/ad6nDjuDE6k20KV+BA2vj0 -----END CERTIFICATE-----Generated at Fri Dec 12 11:51:17 2025 by rpki-client