This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GYMLbi76VJisHCIT26OVA3nMLh8.roa File: GYMLbi76VJisHCIT26OVA3nMLh8.roa (raw, json) Hash identifier: 9X3dRg6cs3Ru+6rAXvl1wdVM5azb6FCKqXq72OWZWII= Subject key identifier: 19:83:0B:6E:2E:FA:54:98:AC:1C:22:13:DB:A3:95:03:79:CC:2E:1F Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AE482835C7CB6B04F3AD8070ABF9FD9EB Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GYMLbi76VJisHCIT26OVA3nMLh8.roa Signing time: Wed 03 Dec 2025 13:59:09 +0000 ROA not before: Wed 03 Dec 2025 13:59:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215304 IP address blocks: 82.152.142.0/24 maxlen: 24 213.210.52.0/24 maxlen: 24 213.210.53.0/24 maxlen: 24 217.145.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:82:83:5c:7c:b6:b0:4f:3a:d8:07:0a:bf:9f:d9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 3 13:59:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=19830b6e2efa5498ac1c2213dba3950379cc2e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:71:8a:ab:0d:1b:f2:7e:d7:d2:1b:96:95: 12:32:95:31:e0:6b:e7:d0:35:20:54:47:b9:84:4d: 6a:1a:cc:5d:a8:82:86:56:4e:52:4b:5d:1f:1a:61: e1:f4:b9:96:c8:fc:77:bc:cb:83:da:3f:8a:9a:26: 81:fa:4d:94:45:46:61:94:46:e9:2a:2c:c1:de:b1: 88:f7:5d:c7:e5:ae:1c:e7:84:cf:c6:78:db:f3:43: 8e:0c:6c:72:3b:48:2f:fc:1d:e4:31:13:88:24:75: 4d:bb:0a:a4:e1:6b:7f:9d:47:a9:db:67:7a:e0:10: 35:00:6b:2c:2d:c4:0e:d2:b0:ae:6d:c9:f8:3a:b0: 54:f3:3f:c6:57:a0:86:c5:b3:10:41:cb:21:b7:2f: 4f:3a:fe:fb:46:be:c9:a1:c2:af:fd:16:4f:a7:1c: e2:f0:b2:40:84:24:23:cd:ce:97:82:da:2f:94:b6: 82:62:2c:dc:e7:27:18:c2:64:c5:6d:3a:7d:69:48: e3:d5:f8:47:ee:07:d5:89:be:7d:a1:12:31:b3:7a: 62:ad:0f:38:af:47:e4:c5:7c:ff:b9:93:09:05:6a: de:68:6c:71:76:41:57:25:b9:76:34:bb:35:28:78: 6c:dd:fe:23:67:f2:7b:37:f4:57:35:e0:44:8e:d5: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:83:0B:6E:2E:FA:54:98:AC:1C:22:13:DB:A3:95:03:79:CC:2E:1F X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GYMLbi76VJisHCIT26OVA3nMLh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.142.0/24 213.210.52.0/23 217.145.75.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:07:08:c0:87:6e:26:cc:09:60:37:71:ca:fc:b5:65:f9:d6: 8f:34:ff:57:78:48:aa:05:05:0e:35:84:07:7c:7a:e1:8e:fe: ea:52:06:15:7c:24:4f:89:a0:00:82:9b:2c:0a:b9:3a:b1:be: b1:4e:2e:c3:72:2c:92:c4:39:ef:77:95:75:1c:c4:15:be:43: 90:f0:be:60:63:76:19:bc:3a:e0:61:8f:ad:57:01:a2:c1:40: ef:b9:98:f8:b3:54:0a:f0:d1:69:84:a7:b1:26:68:89:06:4a: 36:f5:28:f2:a9:3c:91:b3:cc:18:3f:52:5c:5b:97:57:3a:48: 3c:8f:39:0d:27:43:23:62:3f:32:50:74:b8:2e:76:ea:b2:e4: ce:4f:fa:ab:50:57:57:81:ba:66:15:c1:de:70:8a:3d:72:9d: 3e:ff:da:be:4a:98:70:6f:4a:ca:2d:c8:0e:5a:83:a2:18:2d: 3e:7e:b7:0e:b7:73:29:1e:5d:43:49:f9:67:4e:0b:46:91:b6: 1b:49:fa:fa:ec:fb:65:70:f7:3a:60:d6:8a:d3:81:75:05:ba: c5:28:c7:08:2b:d4:50:41:2b:5b:4e:34:5a:14:33:4e:fd:31: e0:45:84:f4:9e:af:0a:59:a0:13:51:b8:44:e1:e7:6d:08:35: f3:c1:28:ba -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrkgoNcfLawTzrYBwq/n9nrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAzMTM1OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTgzMGI2ZTJlZmE1NDk4YWMxYzIyMTNkYmEzOTUwMzc5Y2MyZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSJxiqsNG/J+19IblpUSMpUx4Gvn 0DUgVEe5hE1qGsxdqIKGVk5SS10fGmHh9LmWyPx3vMuD2j+KmiaB+k2URUZhlEbp KizB3rGI913H5a4c54TPxnjb80OODGxyO0gv/B3kMROIJHVNuwqk4Wt/nUep22d6 4BA1AGssLcQO0rCubcn4OrBU8z/GV6CGxbMQQcshty9POv77Rr7JocKv/RZPpxzi 8LJAhCQjzc6XgtovlLaCYizc5ycYwmTFbTp9aUjj1fhH7gfVib59oRIxs3pirQ84 r0fkxXz/uZMJBWreaGxxdkFXJbl2NLs1KHhs3f4jZ/J7N/RXNeBEjtVQHwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBmDC24u+lSYrBwiE9ujlQN5zC4fMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvR1lNTGJpNzZWSmlzSENJVDI2T1ZBM25NTGg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUpiOAwQB 1dI0AwQA2ZFLMA0GCSqGSIb3DQEBCwUAA4IBAQB8BwjAh24mzAlgN3HK/LVl+daP NP9XeEiqBQUONYQHfHrhjv7qUgYVfCRPiaAAgpssCrk6sb6xTi7DciySxDnvd5V1 HMQVvkOQ8L5gY3YZvDrgYY+tVwGiwUDvuZj4s1QK8NFphKexJmiJBko29SjyqTyR s8wYP1JcW5dXOkg8jzkNJ0MjYj8yUHS4LnbqsuTOT/qrUFdXgbpmFcHecIo9cp0+ /9q+Sphwb0rKLcgOWoOiGC0+frcOt3MpHl1DSflnTgtGkbYbSfr67PtlcPc6YNaK 04F1BbrFKMcIK9RQQStbTjRaFDNO/THgRYT0nq8KWaATUbhE4edtCDXzwSi6 -----END CERTIFICATE-----Generated at Sat Dec 6 06:14:25 2025 by rpki-client