This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/GeKF_o_PfrSG_Hb_I-53-eabGPA.roa File: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (raw, json) Hash identifier: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0= Subject key identifier: 19:E2:85:FE:8F:CF:7E:B4:86:FC:76:FF:23:EE:77:F9:E6:9B:18:F0 Certificate issuer: /CN=4d849861f30c8f1c62cadb88958446ba620021ed Certificate serial: 019C33CBFEBF60B431162B85BC058E2EB88F Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/GeKF_o_PfrSG_Hb_I-53-eabGPA.roa Signing time: Fri 06 Feb 2026 16:32:12 +0000 ROA not before: Fri 06 Feb 2026 16:32:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51048 IP address blocks: 91.207.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:33:cb:fe:bf:60:b4:31:16:2b:85:bc:05:8e:2e:b8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed Validity Not Before: Feb 6 16:32:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19e285fe8fcf7eb486fc76ff23ee77f9e69b18f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:bd:bf:c6:c4:8e:11:be:65:34:59:09:08: 20:ad:ad:99:40:67:a7:75:6d:00:af:16:f0:65:18: f6:f7:f1:66:28:09:4f:e1:b9:96:3d:25:95:75:f0: 93:b6:6c:dc:e8:aa:b9:7e:13:a5:12:4d:80:10:01: 08:d3:3f:e5:44:44:1c:ef:56:52:2f:4d:d0:52:5f: 16:9d:a7:cb:d6:07:2f:ae:f4:80:db:52:fa:0a:48: 71:40:19:87:83:ce:25:08:cc:94:f3:55:eb:4b:24: c0:2b:7a:93:52:0d:64:86:45:59:d8:c3:e9:d5:60: 8e:7e:60:e3:b1:81:5c:10:08:c4:df:ea:1f:20:ff: e5:f3:b0:d2:70:5a:19:df:ab:59:04:9b:15:cc:24: 07:28:e3:86:0f:50:c3:f9:27:f1:1b:07:8b:f7:0a: 9a:51:64:e7:5a:7d:11:7b:3c:27:94:67:a5:2b:4b: 03:c3:da:00:cc:6a:e1:3d:6a:8b:68:f0:3a:d5:2f: 7a:73:25:c8:c1:16:b0:3e:c9:7c:d1:a6:4a:ee:eb: e2:6d:db:38:d7:6e:3c:56:bc:e6:6c:ab:a0:47:79: 4b:3b:6f:59:9d:c4:78:e2:f7:0a:64:88:71:98:4c: ca:41:c3:89:75:3e:cd:30:09:b4:59:9b:e0:ed:df: 05:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E2:85:FE:8F:CF:7E:B4:86:FC:76:FF:23:EE:77:F9:E6:9B:18:F0 X509v3 Authority Key Identifier: keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/GeKF_o_PfrSG_Hb_I-53-eabGPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.110.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:6c:86:74:f2:87:f5:ca:8d:32:aa:5d:ab:cc:2f:30:23:a8: 48:f2:c5:f5:90:9f:98:90:71:a1:78:b2:92:1b:73:39:9f:ce: 76:80:f0:83:2e:ec:a8:80:05:38:2d:a0:a7:47:38:88:4e:a9: 63:96:31:95:87:de:15:74:95:ae:a7:4b:53:f7:dc:66:eb:ab: 02:96:46:70:e3:60:be:f1:c7:7e:fe:05:b4:91:5a:41:4f:26: 54:87:fa:81:e2:f2:93:45:e9:6b:b2:fa:fa:ae:41:53:32:5f: 7c:01:08:af:3f:ff:c5:a8:01:94:53:2c:5d:13:7c:0f:9d:1c: 0e:f3:b9:03:b9:c1:1b:54:72:52:4c:1d:b0:b8:96:21:b7:d4: cf:68:4d:d7:54:69:e3:11:b9:de:29:f1:9c:4e:7b:1c:47:fc: cd:58:1b:8e:f8:5d:0a:61:c9:0d:56:e7:c0:ec:9a:b6:07:22: c4:0a:74:7b:17:a8:7c:a9:4b:23:a7:ed:51:29:32:58:13:22: 7e:eb:8c:68:98:f8:dc:1a:39:b6:0b:68:e3:55:49:b3:bb:19: 06:64:3e:f0:55:5b:62:b3:ac:d9:ae:7c:8e:15:c9:07:9d:09: 38:0f:0c:17:a2:7a:0c:b9:f7:06:d7:66:fe:b4:44:9e:04:58: 3c:a3:c0:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwzy/6/YLQxFiuFvAWOLriPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODQ5ODYxZjMwYzhmMWM2MmNhZGI4ODk1ODQ0NmJhNjIw MDIxZWQwHhcNMjYwMjA2MTYzMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWUyODVmZThmY2Y3ZWI0ODZmYzc2ZmYyM2VlNzdmOWU2OWIxOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcm9v8bEjhG+ZTRZCQggra2ZQGen dW0ArxbwZRj29/FmKAlP4bmWPSWVdfCTtmzc6Kq5fhOlEk2AEAEI0z/lREQc71ZS L03QUl8WnafL1gcvrvSA21L6CkhxQBmHg84lCMyU81XrSyTAK3qTUg1khkVZ2MPp 1WCOfmDjsYFcEAjE3+ofIP/l87DScFoZ36tZBJsVzCQHKOOGD1DD+SfxGweL9wqa UWTnWn0RezwnlGelK0sDw9oAzGrhPWqLaPA61S96cyXIwRawPsl80aZK7uvibds4 1248VrzmbKugR3lLO29ZncR44vcKZIhxmEzKQcOJdT7NMAm0WZvg7d8F3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBnihf6Pz360hvx2/yPud/nmmxjwMB8GA1UdIwQY MBaAFE2EmGHzDI8cYsrbiJWERrpiACHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlTWVlmTU1qeHhpeXR1SWxZUkd1bUlBSWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS82M2M2NDgtMWFhZC00OWU2LWE4MTct NmQ2ODU2ZmQxZTdmLzEvR2VLRl9vX1BmclNHX0hiX0ktNTMtZWFiR1BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS82M2M2NDgtMWFhZC00OWU2LWE4MTctNmQ2ODU2ZmQxZTdm LzEvVFlTWVlmTU1qeHhpeXR1SWxZUkd1bUlBSWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW89uMA0G CSqGSIb3DQEBCwUAA4IBAQAabIZ08of1yo0yql2rzC8wI6hI8sX1kJ+YkHGheLKS G3M5n852gPCDLuyogAU4LaCnRziITqljljGVh94VdJWup0tT99xm66sClkZw42C+ 8cd+/gW0kVpBTyZUh/qB4vKTRelrsvr6rkFTMl98AQivP//FqAGUUyxdE3wPnRwO 87kDucEbVHJSTB2wuJYht9TPaE3XVGnjEbneKfGcTnscR/zNWBuO+F0KYckNVufA 7Jq2ByLECnR7F6h8qUsjp+1RKTJYEyJ+64xomPjcGjm2C2jjVUmzuxkGZD7wVVti s6zZrnyOFckHnQk4DwwXonoMufcG12b+tESeBFg8o8Cu -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:05 2026 by rpki-client