This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gkXIqGgLcWXVlBQYw3QeiYmnqgY.roa File: gkXIqGgLcWXVlBQYw3QeiYmnqgY.roa (raw, json) Hash identifier: G5hsxHExnkiDzl9ezyLrA+oJS9uPRnli3alyCatnL8w= Subject key identifier: 82:45:C8:A8:68:0B:71:65:D5:94:14:18:C3:74:1E:89:89:A7:AA:06 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A4415CB078C772EE2DDCEE433A9A Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gkXIqGgLcWXVlBQYw3QeiYmnqgY.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209768 IP address blocks: 31.58.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a4:41:5c:b0:78:c7:72:ee:2d:dc:ee:43:3a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8245c8a8680b7165d5941418c3741e8989a7aa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:6d:88:9f:7b:17:32:a4:36:7e:52:80:b8: 4d:cf:94:23:d8:48:70:5c:82:f3:5a:af:cb:d6:1c: e5:ca:0f:6e:f3:a2:26:92:e9:06:03:1a:48:45:71: b5:89:6f:40:70:f5:55:24:8e:6b:44:ea:a2:af:3b: 3a:07:24:0a:0f:da:ea:b2:d7:c6:0b:9e:58:91:d2: 64:ae:55:4c:da:65:a6:34:ea:49:3d:ec:32:e8:1b: ba:95:08:4c:a4:b9:05:55:92:f8:6d:57:1e:7d:01: e9:49:41:f6:7a:63:b5:be:6d:a4:2d:89:dc:7e:ac: 01:b4:76:1a:c3:bf:27:d9:82:4f:51:00:ad:f6:76: 6b:14:65:97:dc:2a:08:3f:5a:8a:e0:8b:1f:54:e8: e9:d7:f4:e8:b6:6d:21:67:fb:a8:29:78:a5:44:53: 32:6b:33:b1:9e:e3:78:65:55:29:97:d8:53:8e:90: 38:b2:f9:02:12:34:3d:91:3e:63:a5:04:3b:5f:95: 60:db:1e:31:80:c2:91:30:f1:55:02:40:62:07:6f: 0d:e2:1f:6b:5d:0d:d7:49:66:71:08:49:26:0b:93: 47:c9:1b:64:56:86:9c:5b:64:45:35:33:2d:19:4e: e7:57:b8:e6:c4:a8:8d:f5:1b:cc:e1:08:49:13:c2: dd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:45:C8:A8:68:0B:71:65:D5:94:14:18:C3:74:1E:89:89:A7:AA:06 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gkXIqGgLcWXVlBQYw3QeiYmnqgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.161.0/24 Signature Algorithm: sha256WithRSAEncryption 17:43:1a:1b:d6:e1:69:ef:1d:88:ee:2c:74:35:db:00:14:55: 7d:9f:e4:c6:49:c8:23:21:4d:f6:f6:e9:bf:59:bb:9e:81:e3: 2b:a9:ef:3b:98:08:39:5b:9c:f3:1f:9f:54:a1:7c:ee:cd:7c: ed:15:58:38:93:7a:7a:fc:d1:d6:2a:8d:73:49:35:98:c5:8a: 87:c0:12:17:f4:12:5e:95:cf:a7:e7:9e:ab:72:22:98:3d:6b: 27:66:0e:1f:14:5e:a7:54:f1:03:97:8b:08:f8:fb:b7:d1:02: 20:0b:ca:03:d5:fc:94:bf:63:96:b9:06:76:ae:f1:6e:9c:c5: 04:0c:a0:1b:49:64:ec:11:fd:97:fc:22:df:ac:31:db:7b:ef: 60:33:87:d8:9a:bc:f4:85:db:a9:4c:ef:b7:24:ff:46:d9:eb: db:ca:c4:3c:23:43:16:f2:68:b4:73:ed:0e:ac:7d:39:06:ff: 5f:e1:54:51:75:25:bf:aa:07:76:66:42:50:6c:57:f8:4a:cd: 58:7a:20:15:91:0e:a7:89:33:f2:33:20:49:c3:25:b8:6c:5f: 3e:df:9d:39:9f:15:5e:ef:b6:19:c5:17:a5:0e:11:ee:ea:4c: 5d:72:7b:a2:92:89:5f:41:52:02:c9:7a:04:96:79:18:02:8c: 2e:8b:b7:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKRBXLB4x3LuLdzuQzqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjQ1YzhhODY4MGI3MTY1ZDU5NDE0MThjMzc0MWU4OTg5YTdhYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGltiJ97FzKkNn5SgLhNz5Qj2Ehw XILzWq/L1hzlyg9u86ImkukGAxpIRXG1iW9AcPVVJI5rROqirzs6ByQKD9rqstfG C55YkdJkrlVM2mWmNOpJPewy6Bu6lQhMpLkFVZL4bVcefQHpSUH2emO1vm2kLYnc fqwBtHYaw78n2YJPUQCt9nZrFGWX3CoIP1qK4IsfVOjp1/Totm0hZ/uoKXilRFMy azOxnuN4ZVUpl9hTjpA4svkCEjQ9kT5jpQQ7X5Vg2x4xgMKRMPFVAkBiB28N4h9r XQ3XSWZxCEkmC5NHyRtkVoacW2RFNTMtGU7nV7jmxKiN9RvM4QhJE8LdyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJFyKhoC3Fl1ZQUGMN0HomJp6oGMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvZ2tYSXFHZ0xjV1hWbEJRWXczUWVpWW1ucWdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzqhMA0G CSqGSIb3DQEBCwUAA4IBAQAXQxob1uFp7x2I7ix0NdsAFFV9n+TGScgjIU329um/ WbuegeMrqe87mAg5W5zzH59UoXzuzXztFVg4k3p6/NHWKo1zSTWYxYqHwBIX9BJe lc+n556rciKYPWsnZg4fFF6nVPEDl4sI+Pu30QIgC8oD1fyUv2OWuQZ2rvFunMUE DKAbSWTsEf2X/CLfrDHbe+9gM4fYmrz0hdupTO+3JP9G2evbysQ8I0MW8mi0c+0O rH05Bv9f4VRRdSW/qgd2ZkJQbFf4Ss1YeiAVkQ6niTPyMyBJwyW4bF8+3505nxVe 77YZxRelDhHu6kxdcnuikolfQVICyXoElnkYAowui7do -----END CERTIFICATE-----Generated at Mon Jan 5 14:38:00 2026 by rpki-client