This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GnRu5kn-GyS1KgW1BvytFoLiykc.roa File: GnRu5kn-GyS1KgW1BvytFoLiykc.roa (raw, json) Hash identifier: /4IgJhL0kAR1OWizuF3Nv4fEIm2Ca8urBzpyxP44qYg= Subject key identifier: 1A:74:6E:E6:49:FE:1B:24:B5:2A:05:B5:06:FC:AD:16:82:E2:CA:47 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B8A4F660F52B3D2F2834A656A77541D00 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GnRu5kn-GyS1KgW1BvytFoLiykc.roa Signing time: Sun 04 Jan 2026 18:40:17 +0000 ROA not before: Sun 04 Jan 2026 18:40:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 212.135.128.0/24 maxlen: 24 212.135.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:4f:66:0f:52:b3:d2:f2:83:4a:65:6a:77:54:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 4 18:40:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a746ee649fe1b24b52a05b506fcad1682e2ca47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:2a:04:48:8f:94:7b:15:b5:4a:3f:74:8e: 04:28:34:a2:4c:22:77:7a:64:b8:ee:df:26:34:48: 5e:87:17:69:d1:6d:97:90:29:2e:b1:80:6e:d8:f2: 01:78:e6:e8:c0:f0:e1:3e:38:d1:aa:46:3f:0a:e9: 76:36:59:ef:3a:52:42:dd:c0:66:16:e8:04:03:52: da:22:86:5d:06:3c:43:70:03:ff:84:9d:cd:1e:12: 6c:b4:3b:bb:04:f9:2c:a8:7b:f9:33:e0:ab:bf:89: e3:8f:05:43:4b:7a:f6:85:9c:31:d5:c8:c0:72:b9: 6a:7c:71:fd:3f:53:b4:69:1c:7b:44:a8:42:d5:50: 88:cf:89:f0:f9:59:f8:12:58:b8:d5:d7:b6:de:e7: ab:76:c2:14:2d:3b:77:b8:f2:30:57:44:fd:a4:ca: e5:92:c7:cc:0b:8e:a7:4a:b1:b5:60:8c:cc:bf:07: 05:c1:db:b0:2b:21:78:69:34:2d:4b:45:8b:0a:a9: 3c:3a:ce:e3:9e:89:9b:3e:ff:82:42:e5:b5:b7:83: 14:da:37:00:7b:d4:cc:59:c8:48:e1:02:ec:81:b6: 1d:4e:1d:06:38:b8:33:4c:61:69:81:9e:24:60:c7: ab:99:e6:f1:4e:87:b8:97:84:c0:c5:30:72:74:a3: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:74:6E:E6:49:FE:1B:24:B5:2A:05:B5:06:FC:AD:16:82:E2:CA:47 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GnRu5kn-GyS1KgW1BvytFoLiykc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.128.0/23 Signature Algorithm: sha256WithRSAEncryption 82:32:02:52:cf:10:f7:52:aa:90:84:b7:a7:f4:b3:d8:74:d8: af:19:21:e3:35:2e:92:87:4f:81:fb:85:7b:d4:3b:43:71:48: 24:3c:1a:75:58:31:e5:29:b9:d9:90:1d:a1:4d:46:0a:86:87: 3d:93:89:8f:99:03:ae:b7:21:08:d2:b5:b7:25:15:24:4e:50: be:a4:da:cf:86:c6:e4:15:8f:49:89:7a:1c:d8:17:89:eb:14: 3d:9b:7d:11:ec:db:e2:0a:dd:de:87:6b:4f:30:cc:90:9e:aa: 41:36:04:5b:40:ac:d4:e8:fb:1f:49:41:db:3e:38:a4:4c:38: 13:46:1d:1d:ea:2f:47:86:64:dc:37:1d:27:fd:70:73:51:41: f6:5b:01:fb:38:0b:52:ba:6b:3c:ae:c1:38:e3:f6:c8:63:e9: 2c:5c:3e:8f:4d:f7:c2:36:ac:ad:6a:5c:a5:7e:82:c0:58:1e: ae:93:cb:4b:3a:ba:fb:e8:a0:56:14:6d:d8:78:dd:22:61:43: 68:02:73:df:21:32:dd:b3:5f:06:36:89:55:2a:06:27:89:b7: 24:e5:10:2e:bc:fa:38:3d:12:31:64:7f:88:61:ad:8a:1a:80: 09:dd:ae:df:b4:5a:7e:2a:ae:f8:a5:2d:55:61:2a:1f:8a:36: 5f:8d:9e:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuKT2YPUrPS8oNKZWp3VB0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTA0MTg0MDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTc0NmVlNjQ5ZmUxYjI0YjUyYTA1YjUwNmZjYWQxNjgyZTJjYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5cqBEiPlHsVtUo/dI4EKDSiTCJ3 emS47t8mNEhehxdp0W2XkCkusYBu2PIBeObowPDhPjjRqkY/Cul2NlnvOlJC3cBm FugEA1LaIoZdBjxDcAP/hJ3NHhJstDu7BPksqHv5M+Crv4njjwVDS3r2hZwx1cjA crlqfHH9P1O0aRx7RKhC1VCIz4nw+Vn4Eli41de23uerdsIULTt3uPIwV0T9pMrl ksfMC46nSrG1YIzMvwcFwduwKyF4aTQtS0WLCqk8Os7jnombPv+CQuW1t4MU2jcA e9TMWchI4QLsgbYdTh0GOLgzTGFpgZ4kYMermebxToe4l4TAxTBydKMImQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBp0buZJ/hsktSoFtQb8rRaC4spHMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvR25SdTVrbi1HeVMxS2dXMUJ2eXRGb0xpeWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1IeAMA0G CSqGSIb3DQEBCwUAA4IBAQCCMgJSzxD3UqqQhLen9LPYdNivGSHjNS6Sh0+B+4V7 1DtDcUgkPBp1WDHlKbnZkB2hTUYKhoc9k4mPmQOutyEI0rW3JRUkTlC+pNrPhsbk FY9JiXoc2BeJ6xQ9m30R7NviCt3eh2tPMMyQnqpBNgRbQKzU6PsfSUHbPjikTDgT Rh0d6i9HhmTcNx0n/XBzUUH2WwH7OAtSums8rsE44/bIY+ksXD6PTffCNqytalyl foLAWB6uk8tLOrr76KBWFG3YeN0iYUNoAnPfITLds18GNolVKgYnibck5RAuvPo4 PRIxZH+IYa2KGoAJ3a7ftFp+Kq74pS1VYSofijZfjZ7e -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:32 2026 by rpki-client