This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa File: GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa (raw, json) Hash identifier: 4K7A1g6E595/Yprg9eFeVpmlN6yEQaZZKljRzX+WHN4= Subject key identifier: 1A:3A:46:9B:5B:F7:C1:24:40:69:4B:6C:8E:B1:D0:9F:A6:8A:88:9D Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9 Certificate serial: 019B7AC83B78E28187AEC61273DE740FB8EB Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa Signing time: Thu 01 Jan 2026 18:18:21 +0000 ROA not before: Thu 01 Jan 2026 18:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48362 IP address blocks: 92.249.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3b:78:e2:81:87:ae:c6:12:73:de:74:0f:b8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9 Validity Not Before: Jan 1 18:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a3a469b5bf7c12440694b6c8eb1d09fa68a889d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9b:74:5c:42:0a:23:a6:6e:a0:de:bd:6a:ef: b2:6c:2d:3a:49:36:1c:25:95:7e:7a:01:8f:b0:34: 5f:c2:b2:de:0e:c3:88:74:98:b5:e6:39:3b:39:df: 30:6c:11:73:3f:0f:99:50:31:a2:0e:99:fc:9d:7a: 31:03:c2:d2:83:4b:9a:97:3f:42:57:4c:f6:b2:88: 15:66:dc:82:51:a5:f6:55:53:8f:74:1d:3a:3b:51: 4f:31:59:64:f1:a0:83:ac:46:64:44:f6:cb:8a:96: 04:3e:e9:27:28:b9:0a:c5:a3:77:20:4d:90:56:d9: cb:bc:88:02:cd:85:e5:c4:6a:9d:3c:78:79:70:93: a3:d0:cd:fb:8f:ba:9b:fe:d0:4e:da:9d:c0:68:c3: 7b:76:70:19:b7:dd:82:b5:40:c1:7b:a8:14:a7:83: d9:63:89:ba:76:bc:79:8d:e7:5e:bd:6b:c0:8f:42: 50:3e:53:09:45:47:eb:62:07:54:83:0f:6f:ff:e0: de:71:fd:89:9f:91:40:6b:2f:91:b1:fb:f2:2b:30: 41:ff:88:e8:7e:07:7c:b4:35:c6:5e:51:73:be:53: 96:60:4c:ac:1c:d7:b9:90:0e:e7:a7:08:7e:d0:60: ad:b7:83:bb:62:47:b3:63:4f:1c:96:f0:de:43:a4: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3A:46:9B:5B:F7:C1:24:40:69:4B:6C:8E:B1:D0:9F:A6:8A:88:9D X509v3 Authority Key Identifier: keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/GjpGm1v3wSRAaUtsjrHQn6aKiJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.20.0/22 Signature Algorithm: sha256WithRSAEncryption 79:1e:4b:de:91:0c:c9:e7:27:b6:c0:4a:c6:ba:50:ec:45:e6: 6a:7b:cd:de:ba:4f:5b:4a:dc:c1:52:1a:1a:cc:53:49:f9:c3: d9:6f:b8:76:81:54:bf:33:d8:38:ca:3e:d9:ec:a1:04:76:53: a9:7f:ae:43:4e:1a:1e:2b:73:21:1f:42:b8:6d:67:d9:5d:53: 70:2f:b6:e9:80:2c:89:e5:9b:01:29:d5:2e:4a:ec:05:9a:c5: f6:e4:63:a6:fe:9d:7d:81:c3:6f:9e:fd:c0:78:ce:f6:01:41: c9:ac:f4:ab:22:8f:c6:95:fa:b5:67:ab:38:65:c1:fb:95:b1: 65:58:3f:b9:6a:ed:d9:6e:7b:19:3b:84:a5:96:e3:74:08:57: 84:fc:ed:cf:c5:ff:5c:76:c5:4a:39:5d:2b:ba:5e:74:3a:94: 11:2e:79:c0:ce:1f:8a:56:10:64:76:38:ca:63:7e:e1:0c:3d: f5:d4:77:8c:2c:77:63:01:24:ed:7e:ea:c1:5e:8f:d6:cb:dd: b9:07:52:55:04:d5:f6:67:d6:de:ea:f5:80:74:d7:b8:32:08: d0:c4:cf:48:d7:8f:36:5d:ff:b5:dd:03:9c:72:25:12:46:14: 71:8f:f7:bf:8a:5e:5e:a1:81:41:fd:27:15:2c:9d:4c:33:2f: bc:67:cd:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDt44oGHrsYSc950D7jrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj ZGI0YTkwHhcNMjYwMTAxMTgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTNhNDY5YjViZjdjMTI0NDA2OTRiNmM4ZWIxZDA5ZmE2OGE4ODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85t0XEIKI6ZuoN69au+ybC06STYc JZV+egGPsDRfwrLeDsOIdJi15jk7Od8wbBFzPw+ZUDGiDpn8nXoxA8LSg0ualz9C V0z2sogVZtyCUaX2VVOPdB06O1FPMVlk8aCDrEZkRPbLipYEPuknKLkKxaN3IE2Q VtnLvIgCzYXlxGqdPHh5cJOj0M37j7qb/tBO2p3AaMN7dnAZt92CtUDBe6gUp4PZ Y4m6drx5jedevWvAj0JQPlMJRUfrYgdUgw9v/+Decf2Jn5FAay+RsfvyKzBB/4jo fgd8tDXGXlFzvlOWYEysHNe5kA7npwh+0GCtt4O7YkezY08clvDeQ6RM4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBo6Rptb98EkQGlLbI6x0J+mioidMB8GA1UdIwQY MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt MDRmOWU2MTZhZjYwLzEvR2pwR20xdjN3U1JBYVV0c2pySFFuNmFLaUowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXPkUMA0G CSqGSIb3DQEBCwUAA4IBAQB5HkvekQzJ5ye2wErGulDsReZqe83euk9bStzBUhoa zFNJ+cPZb7h2gVS/M9g4yj7Z7KEEdlOpf65DThoeK3MhH0K4bWfZXVNwL7bpgCyJ 5ZsBKdUuSuwFmsX25GOm/p19gcNvnv3AeM72AUHJrPSrIo/Glfq1Z6s4ZcH7lbFl WD+5au3ZbnsZO4SlluN0CFeE/O3Pxf9cdsVKOV0rul50OpQRLnnAzh+KVhBkdjjK Y37hDD311HeMLHdjASTtfurBXo/Wy925B1JVBNX2Z9be6vWAdNe4MgjQxM9I1482 Xf+13QOcciUSRhRxj/e/il5eoYFB/ScVLJ1MMy+8Z82I -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:21 2026 by rpki-client