This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GFTEkTutG4d6uFPO455nWQnl0Tw.roa File: GFTEkTutG4d6uFPO455nWQnl0Tw.roa (raw, json) Hash identifier: uOXTSuXxJbdWkDQaYJrwczvVBC2RqQsCx+ElrdmkNR0= Subject key identifier: 18:54:C4:91:3B:AD:1B:87:7A:B8:53:CE:E3:9E:67:59:09:E5:D1:3C Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA56634C551546668BEF159E2D0E923 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GFTEkTutG4d6uFPO455nWQnl0Tw.roa Signing time: Thu 01 Jan 2026 22:19:55 +0000 ROA not before: Thu 01 Jan 2026 22:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 274044 IP address blocks: 45.145.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:66:34:c5:51:54:66:68:be:f1:59:e2:d0:e9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1854c4913bad1b877ab853cee39e675909e5d13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:ac:6c:80:1d:30:57:63:ed:3b:37:57:f9: 7a:fd:a9:7f:6c:3a:17:28:5e:0b:21:8a:e2:59:7d: 1b:24:7f:29:7a:1a:fd:45:2d:15:52:6f:68:bc:f7: 18:21:dc:94:a8:a1:3a:d5:bf:2e:54:ab:68:17:ca: b5:56:2c:bc:84:1c:c8:1c:c3:90:6d:0c:13:bf:d0: b7:91:be:09:6a:bf:3d:3b:21:00:1a:1f:3e:d8:10: b6:6f:54:e7:0f:50:8b:69:00:1d:b1:03:7d:4f:b1: 0e:da:f1:b4:51:47:a6:33:de:4e:dd:b5:16:4a:d9: 51:24:1d:02:40:eb:88:b6:a5:51:b4:0a:4d:ad:b4: 9f:65:0e:49:aa:b6:23:ad:4f:dc:76:dc:36:5e:44: dc:a6:69:63:2c:d2:47:63:90:1c:ab:8e:19:34:f7: 29:5b:b7:11:12:e2:dd:f7:0b:f7:64:da:37:55:ad: de:dd:d7:f9:53:ab:9d:57:75:c3:29:a7:48:75:6a: 06:a8:2c:77:3a:05:7c:ec:06:1a:cf:5e:5d:a6:50: 60:15:2b:1c:3b:ee:2e:8b:08:9c:48:5e:8e:3c:60: 3e:ff:4b:74:c1:c6:9e:96:3a:b7:ce:cc:50:b2:d1: db:33:e3:31:3f:6a:cd:dc:16:58:9f:93:8c:24:5c: 0e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:54:C4:91:3B:AD:1B:87:7A:B8:53:CE:E3:9E:67:59:09:E5:D1:3C X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GFTEkTutG4d6uFPO455nWQnl0Tw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.248.0/24 Signature Algorithm: sha256WithRSAEncryption b7:47:b4:48:19:6d:19:1d:62:c9:f9:1c:f7:37:ed:58:71:8e: 9e:d4:15:ce:ac:76:96:71:fa:51:d7:98:f5:14:3e:94:88:94: 3e:eb:42:a9:22:98:0f:00:fe:02:33:eb:1c:ec:e0:43:ca:23: 1a:29:0e:14:d8:4e:31:39:d0:22:7a:7a:b7:73:fa:42:5b:32: 89:c2:b5:10:ec:ff:44:7b:8a:22:33:5c:b9:45:c3:40:ad:08: 64:4b:d1:e3:41:b0:85:40:f0:bc:da:25:62:23:9f:5e:03:6b: b4:cd:c4:6f:ef:59:02:98:42:4a:4d:45:03:70:3e:ec:17:9f: 49:8f:6a:9d:e9:7c:ef:37:e7:ed:5a:1d:ed:db:d9:33:7d:90: 7d:1e:b8:4a:41:40:6a:20:82:a1:92:0f:29:91:c9:75:2c:3d: e1:00:43:e4:a2:ee:23:e8:72:9a:9d:58:2f:4a:f2:7a:e6:6f: 84:22:89:2f:8f:05:99:61:6d:4c:a0:f7:fb:38:ab:f4:cb:d3: c0:56:60:0b:3b:6d:3c:20:bb:ed:d4:27:f0:03:0c:65:12:59: 6e:33:ea:9a:78:24:ae:bd:ba:58:ae:eb:76:d7:dc:d5:b7:7c: 81:29:ac:bc:2b:c8:c4:2c:4c:55:88:04:91:22:49:09:96:af: 17:65:9f:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pWY0xVFUZmi+8Vni0OkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODU0YzQ5MTNiYWQxYjg3N2FiODUzY2VlMzllNjc1OTA5ZTVkMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptmsbIAdMFdj7Ts3V/l6/al/bDoX KF4LIYriWX0bJH8pehr9RS0VUm9ovPcYIdyUqKE61b8uVKtoF8q1Viy8hBzIHMOQ bQwTv9C3kb4Jar89OyEAGh8+2BC2b1TnD1CLaQAdsQN9T7EO2vG0UUemM95O3bUW StlRJB0CQOuItqVRtApNrbSfZQ5JqrYjrU/cdtw2XkTcpmljLNJHY5Acq44ZNPcp W7cREuLd9wv3ZNo3Va3e3df5U6udV3XDKadIdWoGqCx3OgV87AYaz15dplBgFSsc O+4uiwicSF6OPGA+/0t0wcaeljq3zsxQstHbM+MxP2rN3BZYn5OMJFwOLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBhUxJE7rRuHerhTzuOeZ1kJ5dE8MB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvR0ZURWtUdXRHNGQ2dUZQTzQ1NW5XUW5sMFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZH4MA0G CSqGSIb3DQEBCwUAA4IBAQC3R7RIGW0ZHWLJ+Rz3N+1YcY6e1BXOrHaWcfpR15j1 FD6UiJQ+60KpIpgPAP4CM+sc7OBDyiMaKQ4U2E4xOdAienq3c/pCWzKJwrUQ7P9E e4oiM1y5RcNArQhkS9HjQbCFQPC82iViI59eA2u0zcRv71kCmEJKTUUDcD7sF59J j2qd6XzvN+ftWh3t29kzfZB9HrhKQUBqIIKhkg8pkcl1LD3hAEPkou4j6HKanVgv SvJ65m+EIokvjwWZYW1MoPf7OKv0y9PAVmALO208ILvt1CfwAwxlElluM+qaeCSu vbpYrut219zVt3yBKay8K8jELExViASRIkkJlq8XZZ9z -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:19 2026 by rpki-client