This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GJDoTxaKrVSWgzs_oN1PNeU2qJ0.roa File: GJDoTxaKrVSWgzs_oN1PNeU2qJ0.roa (raw, json) Hash identifier: En1Yav/DfrRSHBkXXWhb752R4Dc82ptWL0FrR60075o= Subject key identifier: 18:90:E8:4F:16:8A:AD:54:96:83:3B:3F:A0:DD:4F:35:E5:36:A8:9D Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019AA0AF9F1032313E535FA54BF08C8DF06E Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GJDoTxaKrVSWgzs_oN1PNeU2qJ0.roa Signing time: Thu 20 Nov 2025 09:54:15 +0000 ROA not before: Thu 20 Nov 2025 09:54:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 178.211.159.0/24 maxlen: 24 2001:3080::/29 maxlen: 29 2a0b:3e00::/29 maxlen: 29 2a0c:8340::/29 maxlen: 29 2a10:9600::/29 maxlen: 29 2a13:8000::/29 maxlen: 29 2a13:b840::/29 maxlen: 29 2a13:de40::/29 maxlen: 29 2a14:35c0::/29 maxlen: 29 2a14:6bc0::/29 maxlen: 29 2a14:72c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:af:9f:10:32:31:3e:53:5f:a5:4b:f0:8c:8d:f0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Nov 20 09:54:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1890e84f168aad5496833b3fa0dd4f35e536a89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:34:85:b3:40:5b:a5:b8:92:f9:1f:ec:74:3c: 46:77:63:46:4d:d3:f2:06:ea:91:a7:1a:88:b7:96: e1:4c:82:6e:f1:7e:68:41:95:6c:77:68:f3:d5:3c: 2f:d1:8b:0a:c5:3e:c8:66:d0:ae:67:8b:bf:1d:42: bc:db:7f:36:00:af:50:e1:1e:3b:06:18:d6:9e:f5: f5:67:27:c3:9e:68:16:9d:a9:7a:54:fd:ed:b1:be: 86:f3:72:89:dc:66:1f:86:58:72:4e:ec:17:45:f9: 4c:c3:29:0f:21:e7:d2:aa:35:73:a7:8d:4c:99:50: d4:80:e1:84:1c:97:e0:4d:9e:21:a5:0d:d4:ec:84: 91:a9:df:4f:3b:4d:1b:c5:6f:77:bf:2b:4c:48:75: 9f:98:37:e8:f1:6e:f4:d6:de:ed:0a:af:7b:e9:b5: 8f:04:b3:fb:16:a3:8b:1b:92:77:85:cc:9f:6b:f8: db:28:91:42:2e:13:8f:fe:29:fc:77:d2:93:36:fd: a1:fc:4e:01:ae:95:e5:a8:3e:aa:dc:a0:35:b5:de: 9c:99:65:49:74:ce:d1:ff:cd:49:21:22:5c:0e:92: d9:87:51:35:5c:62:51:d7:a5:84:63:09:a9:ff:a9: 9a:58:f9:8c:55:58:ef:ce:56:75:04:5e:73:65:8b: e7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:90:E8:4F:16:8A:AD:54:96:83:3B:3F:A0:DD:4F:35:E5:36:A8:9D X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GJDoTxaKrVSWgzs_oN1PNeU2qJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.211.159.0/24 IPv6: 2001:3080::/29 2a0b:3e00::/29 2a0c:8340::/29 2a10:9600::/29 2a13:8000::/29 2a13:b840::/29 2a13:de40::/29 2a14:35c0::/29 2a14:6bc0::/29 2a14:72c0::/29 Signature Algorithm: sha256WithRSAEncryption 50:4e:b7:8a:ba:86:5a:f8:9a:7e:22:51:0a:c4:a4:1e:23:0e: 42:f0:50:a7:5d:5f:f5:46:cc:a8:b1:98:82:31:fd:d3:da:d0: 77:d1:85:e5:0f:4f:bd:9e:81:c1:c0:81:d7:97:e2:08:80:6b: d1:6e:b9:91:32:ad:2e:9e:59:75:22:1a:b7:16:ef:e3:b0:8b: 42:cc:19:b3:1f:8a:19:70:ea:9c:94:36:62:97:7a:e7:6b:7c: 7c:41:07:eb:03:b6:53:f0:50:1f:d6:16:63:b2:d0:3f:0a:9d: ca:a9:f5:bd:30:ff:56:40:0a:78:6a:8e:9d:82:a3:1c:9f:a1: 8a:eb:2b:54:a5:e1:65:9e:5b:7e:00:e4:21:04:42:20:9e:38: 7c:2f:ef:6f:60:53:de:d6:a2:52:ed:a1:08:76:41:f5:0f:11: 63:c4:62:5c:c2:a5:28:ec:93:54:51:4c:93:b9:e9:72:f6:27: 78:70:02:e7:14:0f:4e:3f:49:3b:77:84:82:87:47:d4:9c:52: 32:0a:f4:c4:11:7d:d0:c4:bf:a1:96:c6:9d:20:2a:0f:d5:8b: f0:1d:c2:ae:94:d9:0c:db:a1:3b:87:41:6b:06:15:b7:61:57: 11:36:65:7e:b6:e1:8f:74:ba:65:5f:7d:68:6a:f1:a7:bb:1b: b5:f4:b9:fa -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZqgr58QMjE+U1+lS/CMjfBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjUxMTIwMDk1NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODkwZTg0ZjE2OGFhZDU0OTY4MzNiM2ZhMGRkNGYzNWU1MzZhODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDSFs0BbpbiS+R/sdDxGd2NGTdPy BuqRpxqIt5bhTIJu8X5oQZVsd2jz1Twv0YsKxT7IZtCuZ4u/HUK82382AK9Q4R47 BhjWnvX1ZyfDnmgWnal6VP3tsb6G83KJ3GYfhlhyTuwXRflMwykPIefSqjVzp41M mVDUgOGEHJfgTZ4hpQ3U7ISRqd9PO00bxW93vytMSHWfmDfo8W701t7tCq976bWP BLP7FqOLG5J3hcyfa/jbKJFCLhOP/in8d9KTNv2h/E4BrpXlqD6q3KA1td6cmWVJ dM7R/81JISJcDpLZh1E1XGJR16WEYwmp/6maWPmMVVjvzlZ1BF5zZYvnpwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFBiQ6E8Wiq1UloM7P6DdTzXlNqidMB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvR0pEb1R4YUtyVlNXZ3pzX29OMVBOZVUycUowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDAMBAIAATAGAwQAstOfMEwE AgACMEYDBQMgATCAAwUDKgs+AAMFAyoMg0ADBQMqEJYAAwUDKhOAAAMFAyoTuEAD BQMqE95AAwUDKhQ1wAMFAyoUa8ADBQMqFHLAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ TreKuoZa+Jp+IlEKxKQeIw5C8FCnXV/1RsyosZiCMf3T2tB30YXlD0+9noHBwIHX l+IIgGvRbrmRMq0unll1Ihq3Fu/jsItCzBmzH4oZcOqclDZil3rna3x8QQfrA7ZT 8FAf1hZjstA/Cp3KqfW9MP9WQAp4ao6dgqMcn6GK6ytUpeFlnlt+AOQhBEIgnjh8 L+9vYFPe1qJS7aEIdkH1DxFjxGJcwqUo7JNUUUyTuely9id4cALnFA9OP0k7d4SC h0fUnFIyCvTEEX3QxL+hlsadICoP1YvwHcKulNkM26E7h0FrBhW3YVcRNmV+tuGP dLplX31oavGnuxu19Ln6 -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:41 2025 by rpki-client