This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GwQiMyQGn8EdarlT8MYsZ42C4RQ.roa File: GwQiMyQGn8EdarlT8MYsZ42C4RQ.roa (raw, json) Hash identifier: +ggwjyo/AkiBfa71xDRkXFDRzfU18cYpdsxugjtx8gY= Subject key identifier: 1B:04:22:33:24:06:9F:C1:1D:6A:B9:53:F0:C6:2C:67:8D:82:E1:14 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B0291D7F80E4F24E4E405A06E116FD47F Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GwQiMyQGn8EdarlT8MYsZ42C4RQ.roa Signing time: Tue 09 Dec 2025 10:04:31 +0000 ROA not before: Tue 09 Dec 2025 10:04:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36530 IP address blocks: 82.152.142.0/24 maxlen: 24 217.145.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:91:d7:f8:0e:4f:24:e4:e4:05:a0:6e:11:6f:d4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 9 10:04:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1b04223324069fc11d6ab953f0c62c678d82e114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:74:87:8b:28:28:f4:1e:8d:72:d5:63:e8: 01:96:e1:d7:02:3c:96:1c:5f:df:03:0a:45:32:d5: 89:b1:c6:9c:38:ea:fe:a1:b8:a3:8b:0e:45:bd:68: d1:4a:56:1c:ae:1a:14:6d:18:58:8e:cf:36:66:c9: ff:9d:9a:c6:ed:b1:f0:21:46:28:b2:52:06:98:07: 28:96:d5:18:6e:a2:7f:bc:ac:3c:01:5f:a2:a0:ec: bb:65:b3:56:e5:ae:d8:c6:1d:fa:97:e5:f3:8c:4d: 77:5b:57:42:7b:16:47:d5:6f:af:eb:51:8c:ca:b8: e2:21:8a:e7:ef:51:6b:08:c6:66:af:af:66:7c:dc: ab:92:1d:24:be:0c:a7:65:b7:6d:f9:06:7c:18:83: 89:28:a8:c1:10:12:c5:05:59:85:a0:2a:05:68:99: 9b:d0:8f:64:58:ef:3c:3d:c6:df:40:6c:e8:f0:02: 90:2d:b6:96:fb:42:23:e8:c5:1c:ea:b0:8f:e9:c8: 24:52:52:19:04:68:58:24:ca:1b:85:6e:22:10:87: 30:95:fc:1c:f6:50:c9:4f:7b:3b:d0:14:de:28:6b: 3a:f6:6b:95:5e:38:0b:9f:ac:3a:8b:3c:f9:ee:b8: b4:94:c9:26:4c:3f:ab:b6:70:fd:95:d1:0e:3c:a7: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:04:22:33:24:06:9F:C1:1D:6A:B9:53:F0:C6:2C:67:8D:82:E1:14 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GwQiMyQGn8EdarlT8MYsZ42C4RQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.142.0/24 217.145.75.0/24 Signature Algorithm: sha256WithRSAEncryption 79:97:42:ec:d0:a8:0f:d4:56:50:9f:c1:e0:76:d0:25:30:23: b1:9b:06:19:0e:86:2f:a6:ae:cb:3a:71:46:60:01:7c:b7:97: 51:37:61:45:f7:aa:74:74:c0:48:ec:41:56:63:a6:8d:77:ae: 64:4c:77:ba:a7:91:e0:28:b6:3d:80:90:42:20:44:6d:d4:5b: 85:29:4b:e2:17:ff:5c:b9:ce:19:9b:69:bf:c8:9e:a6:0b:2e: 89:37:0a:11:39:b0:6a:8e:54:d5:c3:ab:ef:a1:ce:32:15:6f: fc:25:52:3f:55:6f:16:bd:24:d1:bd:e1:27:00:19:76:01:61: 7c:dc:54:c9:ff:4a:d9:06:88:70:fb:d6:55:9c:7d:48:5f:ca: 13:1e:a7:e0:de:a0:90:8d:44:5c:cc:f4:47:c9:b1:46:63:2a: 8f:14:1a:bc:53:30:d7:b7:ff:85:f6:cc:3f:79:4a:63:d5:85: 64:4a:c1:da:17:5a:f4:eb:9e:f9:bb:fe:af:e1:97:4b:4e:70: 2c:9b:31:75:20:0b:eb:b3:1d:9d:bd:6b:55:d8:1f:31:c7:2e: 92:3a:34:d2:06:dc:56:d3:75:01:0b:7b:b0:b2:5f:80:ed:7a: f8:3b:d8:f4:d1:e7:df:19:24:dd:05:65:89:f0:16:17:07:7d: 13:a8:a7:e0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsCkdf4Dk8k5OQFoG4Rb9R/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjA5MTAwNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjA0MjIzMzI0MDY5ZmMxMWQ2YWI5NTNmMGM2MmM2NzhkODJlMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugp0h4soKPQejXLVY+gBluHXAjyW HF/fAwpFMtWJscacOOr+obijiw5FvWjRSlYcrhoUbRhYjs82Zsn/nZrG7bHwIUYo slIGmAcoltUYbqJ/vKw8AV+ioOy7ZbNW5a7Yxh36l+XzjE13W1dCexZH1W+v61GM yrjiIYrn71FrCMZmr69mfNyrkh0kvgynZbdt+QZ8GIOJKKjBEBLFBVmFoCoFaJmb 0I9kWO88PcbfQGzo8AKQLbaW+0Ij6MUc6rCP6cgkUlIZBGhYJMobhW4iEIcwlfwc 9lDJT3s70BTeKGs69muVXjgLn6w6izz57ri0lMkmTD+rtnD9ldEOPKff6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBsEIjMkBp/BHWq5U/DGLGeNguEUMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvR3dRaU15UUduOEVkYXJsVDhNWXNaNDJDNFJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpiOAwQA 2ZFLMA0GCSqGSIb3DQEBCwUAA4IBAQB5l0Ls0KgP1FZQn8HgdtAlMCOxmwYZDoYv pq7LOnFGYAF8t5dRN2FF96p0dMBI7EFWY6aNd65kTHe6p5HgKLY9gJBCIERt1FuF KUviF/9cuc4Zm2m/yJ6mCy6JNwoRObBqjlTVw6vvoc4yFW/8JVI/VW8WvSTRveEn ABl2AWF83FTJ/0rZBohw+9ZVnH1IX8oTHqfg3qCQjURczPRHybFGYyqPFBq8UzDX t/+F9sw/eUpj1YVkSsHaF1r06575u/6v4ZdLTnAsmzF1IAvrsx2dvWtV2B8xxy6S OjTSBtxW03UBC3uwsl+A7Xr4O9j00effGSTdBWWJ8BYXB30TqKfg -----END CERTIFICATE-----Generated at Fri Dec 19 12:46:32 2025 by rpki-client