This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GsVxdkbVuo71rP-6ThVYsdpr8pM.roa File: GsVxdkbVuo71rP-6ThVYsdpr8pM.roa (raw, json) Hash identifier: 8dWhuq1IzgAYAZJ3/LLrstWv9red0mxoypOBzQHFyv0= Subject key identifier: 1A:C5:71:76:46:D5:BA:8E:F5:AC:FF:BA:4E:15:58:B1:DA:6B:F2:93 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019AB0CD6CD9CB2B3B742B658B94E6EA8A25 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GsVxdkbVuo71rP-6ThVYsdpr8pM.roa Signing time: Sun 23 Nov 2025 13:00:44 +0000 ROA not before: Sun 23 Nov 2025 13:00:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 185.199.159.0/24 maxlen: 24 185.220.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 01:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:cd:6c:d9:cb:2b:3b:74:2b:65:8b:94:e6:ea:8a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Nov 23 13:00:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1ac5717646d5ba8ef5acffba4e1558b1da6bf293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:58:a9:84:b9:3d:2b:2b:40:87:de:e5:35:c6: 9c:8b:2d:9d:15:10:6c:a3:68:10:9d:b9:25:68:5d: 3d:55:5c:21:a4:96:c0:1c:54:16:35:e9:30:36:de: 01:db:24:f8:63:a7:93:36:bd:74:2a:5b:cb:f5:6c: 6e:44:ad:84:1f:55:62:b7:a3:4d:d1:2c:3d:de:b8: dc:1a:6b:95:63:e2:28:1c:28:4b:15:dd:5a:bc:cc: ac:c3:ee:0a:96:e8:ac:7a:7c:f2:53:fa:8c:af:d1: 0a:f1:83:f9:0a:4e:c5:e2:71:88:33:07:7c:fe:c8: 16:25:38:3c:b8:0d:96:c7:e3:b9:bd:80:2d:40:cc: 6b:90:6c:73:0a:59:db:98:0f:fa:31:d2:d6:05:1e: 30:84:09:c0:c7:4c:09:43:96:9f:6c:e2:8e:cf:cb: 79:cb:e9:b6:bd:23:8a:3f:0f:e4:90:ef:8b:ed:26: 54:7a:ca:c0:25:5a:42:7c:25:dc:47:bd:08:96:5e: 2e:0f:77:37:22:c6:b4:3a:f3:ff:5c:f8:ef:35:f2: 96:5d:3c:49:fe:44:2b:97:28:80:4c:5d:f3:53:2e: 4a:ef:a2:1c:c0:34:d2:3b:dd:a5:a4:e7:83:66:69: 62:85:e8:1d:93:a0:69:73:08:1f:88:4b:95:d2:e6: f4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C5:71:76:46:D5:BA:8E:F5:AC:FF:BA:4E:15:58:B1:DA:6B:F2:93 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GsVxdkbVuo71rP-6ThVYsdpr8pM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.159.0/24 185.220.249.0/24 Signature Algorithm: sha256WithRSAEncryption 25:88:df:eb:4e:e0:b3:3d:91:11:ce:3c:d1:04:c8:18:88:15: ad:37:f2:90:d7:71:17:ae:bf:7e:9e:bc:ae:af:a0:b1:45:d3: 52:7d:6c:00:28:38:0a:ca:f2:58:ef:95:8e:9b:66:9b:57:e0: 79:08:6f:83:c8:f9:54:cb:48:b0:ff:15:79:00:dc:ba:96:5c: 03:c0:e8:c1:a7:49:38:62:8f:69:35:16:ad:3f:fd:43:c4:94: d6:e3:fb:24:0f:40:6b:0c:e6:31:9f:ef:08:51:79:19:b2:95: c8:67:85:e0:d2:5c:f2:74:a4:57:09:e8:b8:dd:df:b6:e7:ee: 39:1a:25:bd:01:1c:2d:da:3a:cc:8e:ac:2c:ff:8f:74:9a:a7: b3:e3:a6:90:ba:5b:3b:af:78:c7:82:20:18:2f:a3:f4:1f:0b: 40:6b:e8:af:f9:d3:f6:0e:5d:23:c6:45:9a:1e:1c:7b:56:40: 28:7a:d0:4f:9a:24:c2:35:40:32:a8:75:19:bb:6f:09:90:e7: 3e:eb:44:37:25:7e:8f:84:3d:61:5f:e3:21:8e:e3:c8:79:21: 68:7a:fd:40:aa:dd:12:71:50:32:7b:5e:5b:6c:b8:ed:2a:4e: a9:73:11:c3:c0:73:0b:23:73:f3:4d:16:b3:e2:21:83:0f:29: e2:83:b0:fb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqwzWzZyys7dCtli5Tm6oolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMTIzMTMwMDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWM1NzE3NjQ2ZDViYThlZjVhY2ZmYmE0ZTE1NThiMWRhNmJmMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ViphLk9KytAh97lNcaciy2dFRBs o2gQnbklaF09VVwhpJbAHFQWNekwNt4B2yT4Y6eTNr10KlvL9WxuRK2EH1Vit6NN 0Sw93rjcGmuVY+IoHChLFd1avMysw+4KluisenzyU/qMr9EK8YP5Ck7F4nGIMwd8 /sgWJTg8uA2Wx+O5vYAtQMxrkGxzClnbmA/6MdLWBR4whAnAx0wJQ5afbOKOz8t5 y+m2vSOKPw/kkO+L7SZUesrAJVpCfCXcR70Ill4uD3c3Isa0OvP/XPjvNfKWXTxJ /kQrlyiATF3zUy5K76IcwDTSO92lpOeDZmlihegdk6BpcwgfiEuV0ub0sQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBrFcXZG1bqO9az/uk4VWLHaa/KTMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvR3NWeGRrYlZ1bzcxclAtNlRoVllzZHByOHBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucefAwQA udz5MA0GCSqGSIb3DQEBCwUAA4IBAQAliN/rTuCzPZERzjzRBMgYiBWtN/KQ13EX rr9+nryur6CxRdNSfWwAKDgKyvJY75WOm2abV+B5CG+DyPlUy0iw/xV5ANy6llwD wOjBp0k4Yo9pNRatP/1DxJTW4/skD0BrDOYxn+8IUXkZspXIZ4Xg0lzydKRXCei4 3d+25+45GiW9ARwt2jrMjqws/490mqez46aQuls7r3jHgiAYL6P0HwtAa+iv+dP2 Dl0jxkWaHhx7VkAoetBPmiTCNUAyqHUZu28JkOc+60Q3JX6PhD1hX+MhjuPIeSFo ev1Aqt0ScVAye15bbLjtKk6pcxHDwHMLI3PzTRaz4iGDDynig7D7 -----END CERTIFICATE-----Generated at Tue Nov 25 08:36:22 2025 by rpki-client