This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gfi-rQmWj6vCyD9Y7Mqln0dRKmE.roa File: gfi-rQmWj6vCyD9Y7Mqln0dRKmE.roa (raw, json) Hash identifier: zAq+qSGR0FkUUdU8iVk1vqOP1LS8V4zoEEGbXPTnhRs= Subject key identifier: 81:F8:BE:AD:09:96:8F:AB:C2:C8:3F:58:EC:CA:A5:9F:47:51:2A:61 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019C0A795A1C5456FD0A97B16819D2BC4C62 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gfi-rQmWj6vCyD9Y7Mqln0dRKmE.roa Signing time: Thu 29 Jan 2026 15:57:30 +0000 ROA not before: Thu 29 Jan 2026 15:57:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 81.22.139.0/24 maxlen: 24 81.22.142.0/24 maxlen: 24 81.22.143.0/24 maxlen: 24 109.72.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0a:79:5a:1c:54:56:fd:0a:97:b1:68:19:d2:bc:4c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 29 15:57:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81f8bead09968fabc2c83f58eccaa59f47512a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:e4:c1:e7:9e:c6:71:b6:57:57:4f:de:c9: ff:a3:8d:20:01:78:e9:fa:12:4c:6c:f5:02:bc:de: 91:1c:c6:e8:a2:d1:2b:80:90:2e:8f:c6:d4:6e:fd: 34:75:c9:fb:a0:58:fa:f8:b6:6f:91:04:65:25:f0: 58:3c:01:a5:c4:de:b9:39:eb:e6:95:fe:71:3a:00: 6a:ee:bc:04:6d:4e:a3:0f:bd:44:87:4d:8d:61:a8: 10:83:34:81:e3:5f:33:51:d0:e6:96:d0:87:83:df: 45:48:90:14:15:20:b7:b2:7d:76:1a:fb:10:6f:ce: db:36:df:59:0f:87:44:7d:7f:be:88:ea:bc:29:21: ba:a3:0f:67:66:83:3e:77:cd:6c:db:e6:81:42:d9: 19:da:d8:88:1b:d6:d3:a3:53:f8:bf:59:ba:ce:9c: 15:7c:5e:5a:f5:76:d2:68:ff:8f:38:76:25:44:07: 57:ac:a9:ac:1e:99:4d:e7:9b:4e:ec:ea:5a:42:45: 97:3f:19:f3:18:87:01:c5:d3:13:81:50:4b:a8:35: f2:ab:40:9b:4f:5a:22:ab:89:23:d3:e2:a1:fe:99: 14:f3:09:81:41:48:75:6b:f6:2c:b3:49:3a:d7:37: db:4c:07:56:54:d1:f4:a3:70:54:fd:60:e7:3f:ec: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F8:BE:AD:09:96:8F:AB:C2:C8:3F:58:EC:CA:A5:9F:47:51:2A:61 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gfi-rQmWj6vCyD9Y7Mqln0dRKmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.139.0/24 81.22.142.0/23 109.72.120.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:31:98:e3:4f:c3:2e:15:e1:0e:ec:f5:87:6d:78:fd:c9:c9: ad:71:1e:8b:95:73:11:e2:1f:33:53:2b:dd:ee:68:0b:ce:f4: 35:3f:86:c4:0c:1f:5b:85:86:00:d3:b0:18:72:98:80:0d:38: e1:44:11:75:f9:4e:37:02:e6:48:cb:df:f4:47:db:14:46:d5: 4f:b8:ac:1f:e2:77:21:56:43:f4:8f:fc:d9:89:c1:42:b7:43: e9:61:4a:48:60:29:18:83:b1:e8:84:0a:ea:f4:7f:b1:ff:ba: 6b:44:b9:fc:ac:07:f6:f3:62:3b:03:57:4e:11:c8:55:2a:58: 3e:49:cf:9d:ce:a8:e9:dc:3a:8d:b6:38:87:f8:fe:ee:46:3d: f6:be:a3:1f:d3:ee:41:95:f7:0d:15:ae:fc:b7:33:f5:49:70: 34:fb:87:97:40:a7:ce:64:63:06:c0:f3:25:72:47:6f:22:67: f2:55:7b:9e:fa:a1:06:46:7c:4e:87:4a:6d:d1:82:ec:2f:52: 9f:51:f6:18:12:c9:9a:cd:d1:5d:52:85:85:ac:fe:5d:02:07: 55:8a:43:7e:8c:02:93:c6:a3:67:86:a2:90:35:96:f0:32:80: 44:48:dd:5f:0d:f5:6c:89:57:79:38:8f:17:3e:ef:ac:3b:75: f8:86:61:76 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwKeVocVFb9CpexaBnSvExiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTI5MTU1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWY4YmVhZDA5OTY4ZmFiYzJjODNmNThlY2NhYTU5ZjQ3NTEyYTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGvkweeexnG2V1dP3sn/o40gAXjp +hJMbPUCvN6RHMbootErgJAuj8bUbv00dcn7oFj6+LZvkQRlJfBYPAGlxN65Oevm lf5xOgBq7rwEbU6jD71Eh02NYagQgzSB418zUdDmltCHg99FSJAUFSC3sn12GvsQ b87bNt9ZD4dEfX++iOq8KSG6ow9nZoM+d81s2+aBQtkZ2tiIG9bTo1P4v1m6zpwV fF5a9XbSaP+POHYlRAdXrKmsHplN55tO7OpaQkWXPxnzGIcBxdMTgVBLqDXyq0Cb T1oiq4kj0+Kh/pkU8wmBQUh1a/Yss0k61zfbTAdWVNH0o3BU/WDnP+zY8QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIH4vq0Jlo+rwsg/WOzKpZ9HUSphMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvZ2ZpLXJRbVdqNnZDeUQ5WTdNcWxuMGRSS21FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAURaLAwQB URaOAwQAbUh4MA0GCSqGSIb3DQEBCwUAA4IBAQCfMZjjT8MuFeEO7PWHbXj9ycmt cR6LlXMR4h8zUyvd7mgLzvQ1P4bEDB9bhYYA07AYcpiADTjhRBF1+U43AuZIy9/0 R9sURtVPuKwf4nchVkP0j/zZicFCt0PpYUpIYCkYg7HohArq9H+x/7prRLn8rAf2 82I7A1dOEchVKlg+Sc+dzqjp3DqNtjiH+P7uRj32vqMf0+5BlfcNFa78tzP1SXA0 +4eXQKfOZGMGwPMlckdvImfyVXue+qEGRnxOh0pt0YLsL1KfUfYYEsmazdFdUoWF rP5dAgdVikN+jAKTxqNnhqKQNZbwMoBESN1fDfVsiVd5OI8XPu+sO3X4hmF2 -----END CERTIFICATE-----Generated at Thu Jan 29 20:58:59 2026 by rpki-client