This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/GKl8FqSVDPmpChpGmQc4RQcWOCM.roa File: GKl8FqSVDPmpChpGmQc4RQcWOCM.roa (raw, json) Hash identifier: kVZjFAZi5fzvK9Vx11I9UI6LxV6XcWgOwzkWK5QvC8c= Subject key identifier: 18:A9:7C:16:A4:95:0C:F9:A9:0A:1A:46:99:07:38:45:07:16:38:23 Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019B03D5EB10886A73D730EEBD87A4ECBD75 Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/GKl8FqSVDPmpChpGmQc4RQcWOCM.roa Signing time: Tue 09 Dec 2025 15:58:29 +0000 ROA not before: Tue 09 Dec 2025 15:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15731 IP address blocks: 185.133.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:d5:eb:10:88:6a:73:d7:30:ee:bd:87:a4:ec:bd:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Dec 9 15:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=18a97c16a4950cf9a90a1a469907384507163823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b8:9d:ae:00:80:66:2c:e6:2a:09:60:ab:69: dd:89:2b:37:90:ef:e2:86:d4:c0:53:12:57:72:e1: c3:a7:5a:ee:f6:10:8a:d3:01:56:be:cd:74:6f:ed: a3:a7:46:2e:85:e3:88:26:ad:97:f2:cf:c4:fe:00: 78:77:ff:0b:2f:bb:b0:22:3b:e4:d7:d8:35:97:c6: e2:7d:2b:17:86:27:eb:13:ec:8d:d8:dd:ce:30:03: d1:ed:2d:9a:93:0e:f6:d8:ee:fd:18:b7:f1:63:fe: aa:ae:9b:4f:c5:27:05:38:aa:8b:f5:a0:d8:8f:25: c1:d3:63:a3:d4:cb:96:64:07:48:71:40:24:fc:24: 0f:b3:db:cd:58:09:30:5f:a2:06:24:3c:d1:4e:e0: b7:b6:ae:ad:d9:d6:d0:bf:2b:0f:de:8a:1f:a0:08: 45:1c:b4:86:18:65:f2:cd:f0:5f:c7:39:01:98:d1: 4b:30:b6:2d:44:e4:a4:38:38:77:69:fd:f6:5f:8d: 4a:c9:5a:54:1f:12:a5:eb:23:2f:50:f0:59:34:8c: 56:29:19:07:27:16:09:21:2d:28:0d:6a:f5:31:cd: f3:ca:65:6e:4f:9d:76:0a:17:60:72:73:dd:8f:2d: 6f:90:90:71:43:ad:ef:b5:c2:ac:24:eb:24:fb:f4: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A9:7C:16:A4:95:0C:F9:A9:0A:1A:46:99:07:38:45:07:16:38:23 X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/GKl8FqSVDPmpChpGmQc4RQcWOCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.175.0/24 Signature Algorithm: sha256WithRSAEncryption 94:39:ae:68:77:ce:bc:ef:14:e9:98:a2:b1:69:7c:6f:50:bd: db:55:dc:35:10:3a:6d:ca:26:e3:4a:93:17:2f:dd:ec:59:bd: f2:96:e0:d2:ed:ad:03:4d:87:88:a7:dd:8c:6f:09:00:5f:79: d6:cb:e5:17:45:c2:d8:34:50:5a:82:ac:b1:0b:d4:0b:d7:15: aa:ee:50:ca:30:cd:83:32:c9:93:06:a8:93:92:87:b0:7d:61: 9a:3a:64:de:f3:c5:c8:35:f2:01:5e:4f:79:c1:a2:71:b2:48: ac:52:a6:fa:a5:2d:80:6f:d0:e6:8c:73:de:b6:0c:47:ac:56: 61:d4:e3:38:aa:d3:c8:f0:19:dd:b5:ea:38:05:e6:37:a1:9b: 5c:1c:f2:28:35:80:4e:e5:28:e2:1f:b3:be:47:e3:7f:55:e3: 9f:01:89:3b:19:9d:f3:ca:76:e8:9a:76:22:99:59:32:d2:fe: 8e:ec:c7:ce:6c:46:67:7a:87:c6:15:6d:17:e4:bc:e9:f9:6e: d1:f1:2d:0f:5f:e4:c5:49:85:95:1f:31:78:3e:b9:06:46:cc: a3:4b:96:0d:7f:35:e7:02:60:77:83:10:4d:ac:ce:57:e4:a2: 18:b6:44:f8:88:37:4d:f8:93:20:a5:3f:53:63:f4:f1:dd:4d: f8:c8:0f:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsD1esQiGpz1zDuvYek7L11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjUxMjA5MTU1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGE5N2MxNmE0OTUwY2Y5YTkwYTFhNDY5OTA3Mzg0NTA3MTYzODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LidrgCAZizmKglgq2ndiSs3kO/i htTAUxJXcuHDp1ru9hCK0wFWvs10b+2jp0YuheOIJq2X8s/E/gB4d/8LL7uwIjvk 19g1l8bifSsXhifrE+yN2N3OMAPR7S2akw722O79GLfxY/6qrptPxScFOKqL9aDY jyXB02Oj1MuWZAdIcUAk/CQPs9vNWAkwX6IGJDzRTuC3tq6t2dbQvysP3oofoAhF HLSGGGXyzfBfxzkBmNFLMLYtROSkODh3af32X41KyVpUHxKl6yMvUPBZNIxWKRkH JxYJIS0oDWr1Mc3zymVuT512ChdgcnPdjy1vkJBxQ63vtcKsJOsk+/SMyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBipfBaklQz5qQoaRpkHOEUHFjgjMB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvR0tsOEZxU1ZEUG1wQ2hwR21RYzRSUWNXT0NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYWvMA0G CSqGSIb3DQEBCwUAA4IBAQCUOa5od8687xTpmKKxaXxvUL3bVdw1EDptyibjSpMX L93sWb3yluDS7a0DTYeIp92MbwkAX3nWy+UXRcLYNFBagqyxC9QL1xWq7lDKMM2D MsmTBqiTkoewfWGaOmTe88XINfIBXk95waJxskisUqb6pS2Ab9DmjHPetgxHrFZh 1OM4qtPI8Bndteo4BeY3oZtcHPIoNYBO5SjiH7O+R+N/VeOfAYk7GZ3zynbomnYi mVky0v6O7MfObEZneofGFW0X5Lzp+W7R8S0PX+TFSYWVHzF4PrkGRsyjS5YNfzXn AmB3gxBNrM5X5KIYtkT4iDdN+JMgpT9TY/Tx3U34yA+T -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:25 2025 by rpki-client