This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa File: GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa (raw, json) Hash identifier: lAj5QKk8rG4fdrfzMU388++vVHlAtgmU+Tql0pzD1s4= Subject key identifier: 19:60:0C:F0:B6:86:78:BA:D8:4F:5E:4D:4A:AD:DD:27:9A:51:94:21 Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756 Certificate serial: 019B7F15A9B950B9565F1462747794080218 Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa Signing time: Fri 02 Jan 2026 14:21:24 +0000 ROA not before: Fri 02 Jan 2026 14:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209879 IP address blocks: 45.148.88.0/22 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a9:b9:50:b9:56:5f:14:62:74:77:94:08:02:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756 Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19600cf0b68678bad84f5e4d4aaddd279a519421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:f0:ec:2a:6a:1b:5b:23:9f:3b:e7:8f:27: 2c:fb:a4:f0:49:20:d8:8f:39:28:65:05:f8:eb:6c: 81:3e:56:ea:60:41:26:0c:44:fd:ec:9a:d6:3d:73: 5e:6a:16:99:10:6e:d8:8e:2e:33:96:d6:88:94:42: ea:a2:b1:a9:e0:92:38:04:41:8e:e8:de:e2:b9:43: bd:4b:5e:64:3b:6c:50:c2:9f:e6:f8:c1:ef:5f:72: fb:e3:e5:c6:13:64:2e:72:e3:01:fb:63:9d:0a:a5: 0d:3b:20:e4:2a:94:5f:43:48:77:17:e4:b6:f6:32: 27:9e:cf:5a:54:cc:80:34:69:90:90:ba:04:6c:ac: 13:e0:ef:50:23:78:a0:1d:5e:fd:c2:0d:d3:0f:1f: c1:7d:5b:c6:02:50:2f:f9:4c:c4:31:8b:9f:62:82: d4:c2:13:c6:4a:6c:f4:80:21:34:ab:9a:77:e4:1c: 93:7a:1e:bb:3b:5a:7d:22:42:80:c2:cf:25:55:f5: c4:1b:1f:50:3f:b7:bf:26:88:c4:77:9d:d5:ec:a4: 25:91:36:a2:e0:17:2c:c5:f8:68:a6:20:0b:29:11: 0d:53:fb:54:ab:ae:4b:36:1a:28:94:ad:ee:6e:4a: 43:d8:1b:3f:6d:3e:7a:bf:1d:d0:ac:ab:2e:b5:e0: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:60:0C:F0:B6:86:78:BA:D8:4F:5E:4D:4A:AD:DD:27:9A:51:94:21 X509v3 Authority Key Identifier: keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.88.0/22 Signature Algorithm: sha256WithRSAEncryption 24:92:07:9e:d0:a8:7e:68:96:23:c8:c9:76:d9:80:58:84:0f: 1c:85:30:8d:b3:4d:e3:f1:1d:ea:3c:3f:db:eb:9d:1a:4a:1d: d5:2b:08:cd:f0:d1:04:9e:fc:3f:86:af:2e:b2:fc:5d:fa:43: de:f2:0b:7b:ed:4f:33:bf:7b:65:ec:29:26:70:00:d0:c8:0f: ed:f6:58:dd:e0:96:ec:68:26:ee:3a:23:bd:b7:a4:4e:4f:52: 27:16:7b:13:1b:e2:e2:83:04:f4:55:77:16:cc:b6:f9:74:3e: 9d:3e:2e:a7:72:80:1e:23:03:27:00:ab:06:1e:bc:a5:2f:36: 18:c0:76:2f:7e:d3:24:ea:b8:04:bf:89:84:1e:6b:14:80:1f: cb:c9:ef:9b:79:a2:b9:7f:24:d6:0c:de:b7:c9:bb:ef:20:c3: 1f:09:43:03:dd:c4:6f:96:7a:1f:f1:06:d1:9d:d1:07:90:db: 3d:0c:73:80:71:8d:9d:b0:ab:03:0c:69:e0:d3:56:f6:13:01: 04:05:f0:55:0c:49:11:35:d2:05:4c:a5:99:45:e8:a8:cb:c0: 38:88:3b:ad:3b:dc:7f:d1:02:68:fe:23:8e:30:c9:7e:35:a7: 86:ce:be:ee:45:55:37:14:7f:dc:35:38:c1:45:37:e1:48:56: 8e:14:ba:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fam5ULlWXxRidHeUCAIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYTdjM2JlMDZiYzQ1YzNmMTJiOTBiMTg1Mjc4YWQ0ZWM5 MTk3NTYwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTYwMGNmMGI2ODY3OGJhZDg0ZjVlNGQ0YWFkZGQyNzlhNTE5NDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwADw7CpqG1sjnzvnjycs+6TwSSDY jzkoZQX462yBPlbqYEEmDET97JrWPXNeahaZEG7Yji4zltaIlELqorGp4JI4BEGO 6N7iuUO9S15kO2xQwp/m+MHvX3L74+XGE2QucuMB+2OdCqUNOyDkKpRfQ0h3F+S2 9jInns9aVMyANGmQkLoEbKwT4O9QI3igHV79wg3TDx/BfVvGAlAv+UzEMYufYoLU whPGSmz0gCE0q5p35ByTeh67O1p9IkKAws8lVfXEGx9QP7e/JojEd53V7KQlkTai 4BcsxfhopiALKRENU/tUq65LNhoolK3ubkpD2Bs/bT56vx3QrKsuteAJKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBlgDPC2hni62E9eTUqt3SeaUZQhMB8GA1UdIwQY MBaAFNOnw74GvEXD8SuQsYUnitTskZdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEt OGFhNTBkNjcwMzdjLzEvR1dBTThMYUdlTHJZVDE1TlNxM2RKNXBSbENFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEtOGFhNTBkNjcwMzdj LzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZRYMA0G CSqGSIb3DQEBCwUAA4IBAQAkkgee0Kh+aJYjyMl22YBYhA8chTCNs03j8R3qPD/b 650aSh3VKwjN8NEEnvw/hq8usvxd+kPe8gt77U8zv3tl7CkmcADQyA/t9ljd4Jbs aCbuOiO9t6ROT1InFnsTG+LigwT0VXcWzLb5dD6dPi6ncoAeIwMnAKsGHrylLzYY wHYvftMk6rgEv4mEHmsUgB/Lye+beaK5fyTWDN63ybvvIMMfCUMD3cRvlnof8QbR ndEHkNs9DHOAcY2dsKsDDGng01b2EwEEBfBVDEkRNdIFTKWZReioy8A4iDutO9x/ 0QJo/iOOMMl+NaeGzr7uRVU3FH/cNTjBRTfhSFaOFLp7 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:28 2026 by rpki-client