This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/GPPNPmR8KUY_sEY8Xyw8dhEolxg.roa File: GPPNPmR8KUY_sEY8Xyw8dhEolxg.roa (raw, json) Hash identifier: JjmXr+ibRaRGfx0pfBbomv1IH9Jgiuy25aSKoWiXJmg= Subject key identifier: 18:F3:CD:3E:64:7C:29:46:3F:B0:46:3C:5F:2C:3C:76:11:28:97:18 Certificate issuer: /CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02 Certificate serial: 019B78352BC3F28E9200D0931239B29BDB8F Authority key identifier: 84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/GPPNPmR8KUY_sEY8Xyw8dhEolxg.roa Signing time: Thu 01 Jan 2026 06:18:29 +0000 ROA not before: Thu 01 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209847 IP address blocks: 146.19.247.0/24 maxlen: 24 212.52.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2b:c3:f2:8e:92:00:d0:93:12:39:b2:9b:db:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02 Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18f3cd3e647c29463fb0463c5f2c3c7611289718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:82:c9:c2:e0:7a:79:07:f6:62:85:4d:b1: 39:9c:a5:6a:09:bd:58:92:ac:82:f2:be:a1:78:db: 01:17:23:9b:37:b9:f4:7f:0e:5c:50:fa:d8:5e:8f: 11:52:50:f1:68:3b:e0:9d:30:60:36:55:be:2a:77: 19:da:3d:dd:00:dc:e5:5c:1c:8b:a0:24:67:89:9c: 82:74:70:f5:6d:43:6b:39:47:fb:64:8f:fd:24:a5: 4b:d2:8d:bb:07:5e:54:15:d4:ee:44:18:39:00:e3: 66:8f:e3:e6:a5:e5:d6:d1:2e:7d:b2:87:1d:0c:5d: db:d8:7d:de:cc:86:c8:35:ac:05:26:a3:55:4d:83: 4f:aa:bc:cd:f3:d6:d0:f8:28:f5:b3:77:28:ea:f2: 71:94:c4:72:80:f1:68:a7:56:27:88:99:a6:d5:e6: af:df:f1:2a:fa:55:f7:87:8b:0e:f5:1b:2c:0f:63: 7d:eb:eb:31:51:1b:d0:58:87:a0:93:8b:cd:3e:13: bb:40:5e:32:48:bb:a5:e2:c7:c5:47:df:86:ca:d1: de:d5:3f:35:bc:a9:4f:da:cc:77:d8:94:6e:ff:90: 4b:3d:9a:a5:ed:b2:5f:c3:c4:63:84:00:83:6a:ab: 77:1b:a9:af:7a:56:92:3b:ec:c6:05:a4:8d:83:0f: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F3:CD:3E:64:7C:29:46:3F:B0:46:3C:5F:2C:3C:76:11:28:97:18 X509v3 Authority Key Identifier: keyid:84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/GPPNPmR8KUY_sEY8Xyw8dhEolxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.247.0/24 212.52.1.0/24 Signature Algorithm: sha256WithRSAEncryption 07:95:47:5b:89:18:84:72:99:ab:c7:ab:91:80:27:7d:bc:41: 18:51:1c:60:ad:5a:9a:b5:73:c8:a2:a6:82:76:52:d6:8d:0b: f3:00:87:5e:0e:ff:87:17:1f:b0:01:71:77:99:40:01:8d:ef: e1:e3:82:7e:10:48:97:8b:50:10:a3:26:a4:9c:be:13:30:ce: 43:b9:fb:4d:4c:56:9c:07:14:d5:82:0b:15:e8:9e:02:79:9e: 50:db:c9:1d:1d:11:5d:b0:3d:e6:87:6c:ef:ae:b4:95:0c:20: 6e:8b:ac:d6:fa:8c:94:00:eb:52:1f:e6:df:e5:8a:8e:cf:70: 87:f8:d1:3e:19:e8:4b:30:52:a8:54:ed:ef:f6:e5:d3:c6:e3: 70:1b:ce:e7:be:07:b7:aa:60:fb:e3:95:bf:87:89:f3:e0:2e: 3c:70:66:bd:45:e3:b8:cd:b9:27:e9:61:32:91:54:a4:af:47: df:29:b1:d0:01:13:9d:c2:1d:e5:14:96:6c:3f:63:8b:0c:46: 47:dc:27:c6:8b:28:fe:1d:4a:35:dc:96:0b:9d:33:9d:e8:3b: 68:94:35:b5:63:54:98:2b:90:44:cc:1e:f4:79:11:7f:89:97: ea:2f:1f:f0:67:34:30:a4:81:05:db:f0:e6:22:8e:28:40:1a: 0a:93:e2:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NSvD8o6SANCTEjmym9uPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZDYwMWE4YjBlYTVjYjI0YzVlYzRmODVkMjI2N2Q4MjE5 MzFjMDIwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGYzY2QzZTY0N2MyOTQ2M2ZiMDQ2M2M1ZjJjM2M3NjExMjg5NzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeeCycLgenkH9mKFTbE5nKVqCb1Y kqyC8r6heNsBFyObN7n0fw5cUPrYXo8RUlDxaDvgnTBgNlW+KncZ2j3dANzlXByL oCRniZyCdHD1bUNrOUf7ZI/9JKVL0o27B15UFdTuRBg5AONmj+PmpeXW0S59socd DF3b2H3ezIbINawFJqNVTYNPqrzN89bQ+Cj1s3co6vJxlMRygPFop1YniJmm1eav 3/Eq+lX3h4sO9RssD2N96+sxURvQWIegk4vNPhO7QF4ySLul4sfFR9+GytHe1T81 vKlP2sx32JRu/5BLPZql7bJfw8RjhACDaqt3G6mvelaSO+zGBaSNgw/6xwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBjzzT5kfClGP7BGPF8sPHYRKJcYMB8GA1UdIwQY MBaAFITWAaiw6lyyTF7E+F0iZ9ghkxwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE5ZQnFMRHFYTEpNWHNUNFhTSm4yQ0dUSEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yNTA5NDYtZGE2Ni00YTk0LWJhZTYt ZWU3N2Q3NWMzMjVlLzEvR1BQTlBtUjhLVVlfc0VZOFh5dzhkaEVvbHhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8yNTA5NDYtZGE2Ni00YTk0LWJhZTYtZWU3N2Q3NWMzMjVl LzEvaE5ZQnFMRHFYTEpNWHNUNFhTSm4yQ0dUSEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhP3AwQA 1DQBMA0GCSqGSIb3DQEBCwUAA4IBAQAHlUdbiRiEcpmrx6uRgCd9vEEYURxgrVqa tXPIoqaCdlLWjQvzAIdeDv+HFx+wAXF3mUABje/h44J+EEiXi1AQoyaknL4TMM5D uftNTFacBxTVggsV6J4CeZ5Q28kdHRFdsD3mh2zvrrSVDCBui6zW+oyUAOtSH+bf 5YqOz3CH+NE+GehLMFKoVO3v9uXTxuNwG87nvge3qmD745W/h4nz4C48cGa9ReO4 zbkn6WEykVSkr0ffKbHQAROdwh3lFJZsP2OLDEZH3CfGiyj+HUo13JYLnTOd6Dto lDW1Y1SYK5BEzB70eRF/iZfqLx/wZzQwpIEF2/DmIo4oQBoKk+Jj -----END CERTIFICATE-----Generated at Wed Jan 21 09:57:09 2026 by rpki-client