This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/GTic-MQ5tjMwB87XapipECuOaNo.roa File: GTic-MQ5tjMwB87XapipECuOaNo.roa (raw, json) Hash identifier: OAjAKLqBUkKM9qmV4HtnwZI6RlKw3QQt+qVs91Rbq9g= Subject key identifier: 19:38:9C:F8:C4:39:B6:33:30:07:CE:D7:6A:98:A9:10:2B:8E:68:DA Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c Certificate serial: 019B7910F5F683C9A631D316D33773AC5742 Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/GTic-MQ5tjMwB87XapipECuOaNo.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16138 IP address blocks: 185.69.192.0/22 maxlen: 22 217.74.64.0/22 maxlen: 22 217.74.68.0/22 maxlen: 22 217.74.72.0/22 maxlen: 22 217.74.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f5:f6:83:c9:a6:31:d3:16:d3:37:73:ac:57:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19389cf8c439b6333007ced76a98a9102b8e68da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9e:26:d8:a9:39:ce:de:e5:31:ca:5d:f4:3d: 41:ef:ca:59:00:7a:02:f6:c0:0e:e3:88:9b:90:7a: 26:a7:17:47:e3:d7:32:b7:69:b4:53:12:46:ab:ed: eb:0b:bf:15:0d:f6:b6:d2:fe:1a:08:9c:ef:ee:7a: a1:7a:0f:f9:9e:f1:4c:73:d0:58:cc:95:d4:e6:ce: b2:89:2f:0f:f9:9e:9c:89:e8:a5:e0:28:06:da:cd: 16:73:68:66:2c:8d:8e:a1:33:14:fc:07:be:f0:cc: 91:7f:58:d7:7d:08:ca:0d:a5:74:68:c7:be:68:87: 3c:b0:1c:50:d6:f7:6f:c4:b4:32:e0:da:bf:c6:a3: f7:5b:53:dc:1a:18:00:c2:82:cf:c1:e4:92:36:a4: 4c:d6:e7:33:83:d3:d8:2b:51:07:d0:bd:7d:f6:a7: 04:ff:78:93:05:1f:26:4f:66:16:63:36:a4:f4:f3: 6d:ca:1b:57:9a:e8:2e:e7:d9:43:1f:42:5b:6c:62: 92:90:7d:4f:f8:69:35:b7:97:04:5b:eb:45:cf:bc: 6d:70:a2:98:05:e6:eb:38:b5:24:c9:0d:05:be:e3: 01:55:ea:db:0c:af:39:c6:0b:4c:6c:b9:df:09:c5: de:de:d4:15:54:21:ce:c8:38:92:4e:8f:00:8e:92: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:38:9C:F8:C4:39:B6:33:30:07:CE:D7:6A:98:A9:10:2B:8E:68:DA X509v3 Authority Key Identifier: keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/GTic-MQ5tjMwB87XapipECuOaNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.192.0/22 217.74.64.0/20 Signature Algorithm: sha256WithRSAEncryption c2:f6:da:89:a7:44:c4:c2:25:cd:50:bf:f4:e0:a7:a4:4a:86: e6:ae:3f:0c:83:40:a6:9b:91:7d:19:11:56:15:87:2e:17:a8: 21:6b:57:75:83:4a:3a:37:16:e4:e7:14:7a:22:02:73:a2:9b: 74:05:94:52:a2:58:08:cf:6e:c0:8b:12:5e:5c:f9:45:92:0f: 24:42:50:a9:53:fe:df:be:f5:bf:59:4a:83:0a:a5:13:ab:eb: b8:3f:0c:d7:3a:e2:42:41:7d:12:49:88:a6:1e:46:a2:be:90: bc:bb:96:a2:56:9f:e0:f7:89:22:f1:d3:0c:b5:73:0e:9f:0f: 80:76:69:cd:ca:9f:4c:cf:36:b6:1e:b6:b7:72:d1:72:16:9b: 70:cc:a0:0d:08:c3:3e:c2:3c:b7:fe:43:f3:b3:34:f0:aa:15: f7:cc:74:e9:a3:81:5c:c9:e7:1e:37:7a:54:69:c9:32:57:f7: a6:29:70:8f:03:04:52:86:f2:28:51:09:73:f3:c6:f7:d0:2d: bf:6c:d5:56:16:88:a2:c5:f4:69:6c:44:32:cf:b6:17:cd:40: 39:4c:9c:e1:79:18:97:de:c0:11:d5:9f:bd:4f:7f:77:0b:da: 8b:89:04:f2:0c:10:94:f6:a0:3a:70:9b:a6:a3:76:f5:9e:6f: 37:89:80:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EPX2g8mmMdMW0zdzrFdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDgxOGY0ZGY0YTZiZDEyNWQ1ZjIyMTI0MTQ1YTY5ZjVi NmEzNGMwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTM4OWNmOGM0MzliNjMzMzAwN2NlZDc2YTk4YTkxMDJiOGU2OGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z4m2Kk5zt7lMcpd9D1B78pZAHoC 9sAO44ibkHompxdH49cyt2m0UxJGq+3rC78VDfa20v4aCJzv7nqheg/5nvFMc9BY zJXU5s6yiS8P+Z6cieil4CgG2s0Wc2hmLI2OoTMU/Ae+8MyRf1jXfQjKDaV0aMe+ aIc8sBxQ1vdvxLQy4Nq/xqP3W1PcGhgAwoLPweSSNqRM1uczg9PYK1EH0L199qcE /3iTBR8mT2YWYzak9PNtyhtXmugu59lDH0JbbGKSkH1P+Gk1t5cEW+tFz7xtcKKY BebrOLUkyQ0FvuMBVerbDK85xgtMbLnfCcXe3tQVVCHOyDiSTo8AjpKiYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBk4nPjEObYzMAfO12qYqRArjmjaMB8GA1UdIwQY MBaAFCkIGPTfSmvRJdXyISQUWmn1tqNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FnWTlOOUthOUVsMWZJaEpCUmFhZlcybzB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lNTdlZmItODYxYi00OTMxLTg4ZDMt ZGQ5NzNkYTQyNzIxLzEvR1RpYy1NUTV0ak13Qjg3WGFwaXBFQ3VPYU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9lNTdlZmItODYxYi00OTMxLTg4ZDMtZGQ5NzNkYTQyNzIx LzEvS1FnWTlOOUthOUVsMWZJaEpCUmFhZlcybzB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuUXAAwQE 2UpAMA0GCSqGSIb3DQEBCwUAA4IBAQDC9tqJp0TEwiXNUL/04KekSobmrj8Mg0Cm m5F9GRFWFYcuF6gha1d1g0o6Nxbk5xR6IgJzopt0BZRSolgIz27AixJeXPlFkg8k QlCpU/7fvvW/WUqDCqUTq+u4PwzXOuJCQX0SSYimHkaivpC8u5aiVp/g94ki8dMM tXMOnw+AdmnNyp9Mzza2Hra3ctFyFptwzKANCMM+wjy3/kPzszTwqhX3zHTpo4Fc yeceN3pUackyV/emKXCPAwRShvIoUQlz88b30C2/bNVWFoiixfRpbEQyz7YXzUA5 TJzheRiX3sAR1Z+9T393C9qLiQTyDBCU9qA6cJumo3b1nm83iYAM -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:54 2026 by rpki-client