This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/GtRmGH4bGG6oOP8kzT17gVxixR0.roa File: GtRmGH4bGG6oOP8kzT17gVxixR0.roa (raw, json) Hash identifier: vabTUX5Qd4MvYjPie5N9mfB497dNe6aI2rUnS9Qyx28= Subject key identifier: 1A:D4:66:18:7E:1B:18:6E:A8:38:FF:24:CD:3D:7B:81:5C:62:C5:1D Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861 Certificate serial: 019B7910620ACF4CEACC7B1C46FD04DB62BD Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/GtRmGH4bGG6oOP8kzT17gVxixR0.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43341 IP address blocks: 193.46.36.0/22 maxlen: 22 2a0c:d240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:62:0a:cf:4c:ea:cc:7b:1c:46:fd:04:db:62:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861 Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ad466187e1b186ea838ff24cd3d7b815c62c51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:20:ba:38:5f:42:1b:5e:ce:bd:03:18:0b: 59:0a:18:2d:16:0b:1b:42:0e:c4:35:48:9e:13:ae: 4a:46:d8:d0:f3:d3:be:90:ee:16:c2:dd:d8:b0:7e: 13:ea:38:5f:57:24:9d:11:f5:b9:45:3a:10:5e:8d: 74:e1:a0:01:20:13:e0:58:8d:2e:af:a5:44:f0:bc: eb:14:b9:7d:0d:74:44:79:a7:e5:3b:ad:a4:02:b7: 37:9c:ad:bd:95:6b:65:59:31:04:17:0b:78:9a:e8: 33:4e:e6:21:cd:70:bc:4a:e6:a2:3c:d4:75:e9:13: 3c:d1:af:c0:72:b4:28:1b:46:4b:9b:f6:5c:ca:cd: a5:75:bd:e3:20:99:50:fb:36:3b:ea:f0:64:42:ba: ca:17:22:0f:23:3d:ed:af:f5:43:86:4c:14:af:16: 51:c9:18:4f:9d:95:8b:ff:db:f6:33:b7:2a:93:71: 3f:f3:2c:2d:22:30:b8:d7:3c:ab:70:f3:a8:8b:b3: da:6f:27:23:50:ea:6d:09:c1:9e:ad:5f:ff:da:ac: f3:54:fb:4d:19:0b:67:6a:80:59:14:71:e3:56:5e: 05:e5:3a:41:56:3b:17:88:2a:75:02:8d:0d:c9:5a: 6b:a0:b6:04:2d:39:3f:d6:68:be:ba:13:c0:71:86: 40:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D4:66:18:7E:1B:18:6E:A8:38:FF:24:CD:3D:7B:81:5C:62:C5:1D X509v3 Authority Key Identifier: keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/GtRmGH4bGG6oOP8kzT17gVxixR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.36.0/22 IPv6: 2a0c:d240::/29 Signature Algorithm: sha256WithRSAEncryption 79:ee:f4:c0:0c:08:4f:b5:02:da:0d:5a:e7:a0:32:d6:8d:66: 52:af:f7:5d:7b:45:ae:02:9c:3b:4a:56:dd:fe:da:d5:71:cf: ac:48:12:c7:c5:b9:32:f7:b6:ad:45:cc:cb:6a:c0:eb:31:86: e2:ec:3d:85:d3:23:45:da:4e:4b:91:9b:b9:15:d9:6b:b6:63: cc:c4:88:c1:92:c9:ba:6a:59:47:f4:8e:50:de:a2:af:8d:13: 70:3b:0e:27:2e:57:dc:f0:11:37:94:2f:c8:e5:d5:e2:e4:de: c5:ab:0e:9e:fe:bd:26:ef:04:23:5f:bf:57:49:8a:ba:7a:2c: 2d:7b:dc:13:36:c0:48:4e:fe:fa:a8:90:d3:75:b2:93:5c:af: 61:42:cd:37:66:ac:1f:63:ab:52:c7:f7:d1:85:e7:20:76:66: 54:c0:3a:4a:e8:fe:ea:69:21:b7:ed:cb:09:11:d8:af:6d:24: c6:bd:57:90:f2:ec:0e:44:29:d9:ba:96:d9:80:79:06:99:a4: a5:a3:e9:a8:98:29:72:ed:d4:1b:68:aa:d6:43:25:72:63:b3: cd:29:b2:50:04:b7:aa:8c:82:a3:98:a0:04:53:ed:5b:f6:58: 52:4a:e5:19:2e:b1:7a:76:1d:ff:c7:e7:1b:62:a2:7b:75:2d: 90:8a:90:12 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EGIKz0zqzHscRv0E22K9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjNmODI1OWIzMGVjMDM3MjJmOTQyMDM1YTk0ZTIwOWY4 ODI4NjEwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWQ0NjYxODdlMWIxODZlYTgzOGZmMjRjZDNkN2I4MTVjNjJjNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKggujhfQhtezr0DGAtZChgtFgsb Qg7ENUieE65KRtjQ89O+kO4Wwt3YsH4T6jhfVySdEfW5RToQXo104aABIBPgWI0u r6VE8LzrFLl9DXREeaflO62kArc3nK29lWtlWTEEFwt4mugzTuYhzXC8SuaiPNR1 6RM80a/AcrQoG0ZLm/Zcys2ldb3jIJlQ+zY76vBkQrrKFyIPIz3tr/VDhkwUrxZR yRhPnZWL/9v2M7cqk3E/8ywtIjC41zyrcPOoi7PabycjUOptCcGerV//2qzzVPtN GQtnaoBZFHHjVl4F5TpBVjsXiCp1Ao0NyVproLYELTk/1mi+uhPAcYZAZQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBrUZhh+GxhuqDj/JM09e4FcYsUdMB8GA1UdIwQY MBaAFAPz+CWbMOwDci+UIDWpTiCfiChhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQt YWIxMzM1NmU1ZmVjLzEvR3RSbUdINGJHRzZvT1A4a3pUMTdnVnhpeFIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQtYWIxMzM1NmU1ZmVj LzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwS4kMA0E AgACMAcDBQMqDNJAMA0GCSqGSIb3DQEBCwUAA4IBAQB57vTADAhPtQLaDVrnoDLW jWZSr/dde0WuApw7Slbd/trVcc+sSBLHxbky97atRczLasDrMYbi7D2F0yNF2k5L kZu5FdlrtmPMxIjBksm6allH9I5Q3qKvjRNwOw4nLlfc8BE3lC/I5dXi5N7Fqw6e /r0m7wQjX79XSYq6eiwte9wTNsBITv76qJDTdbKTXK9hQs03ZqwfY6tSx/fRhecg dmZUwDpK6P7qaSG37csJEdivbSTGvVeQ8uwORCnZupbZgHkGmaSlo+momCly7dQb aKrWQyVyY7PNKbJQBLeqjIKjmKAEU+1b9lhSSuUZLrF6dh3/x+cbYqJ7dS2QipAS -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:07 2026 by rpki-client