This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/GFZcD-SiqJlzeu5I4CSkb1OREjw.roa File: GFZcD-SiqJlzeu5I4CSkb1OREjw.roa (raw, json) Hash identifier: XxnmUWyfzPzcdobUtDhD16hiBtaiKFeoObHAgaQYHmk= Subject key identifier: 18:56:5C:0F:E4:A2:A8:99:73:7A:EE:48:E0:24:A4:6F:53:91:12:3C Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee Certificate serial: 019B79EC310070BD5B581E3C84E94C36F727 Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/GFZcD-SiqJlzeu5I4CSkb1OREjw.roa Signing time: Thu 01 Jan 2026 14:18:00 +0000 ROA not before: Thu 01 Jan 2026 14:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207646 IP address blocks: 194.31.224.0/24 maxlen: 24 194.31.226.0/24 maxlen: 24 2a0f:aa40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 14:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:31:00:70:bd:5b:58:1e:3c:84:e9:4c:36:f7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee Validity Not Before: Jan 1 14:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18565c0fe4a2a899737aee48e024a46f5391123c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:31:1b:87:73:53:79:28:28:88:07:54:bb: 06:d0:8c:90:cc:8d:db:6b:a6:96:25:04:a4:9b:3e: d0:90:54:78:4b:6f:7b:f2:09:61:c5:4f:3a:08:ec: 94:a0:ab:c3:a7:93:ff:be:1e:e7:4e:ff:4d:2d:26: e5:31:68:4d:a6:fe:0c:66:a8:24:eb:73:7a:58:0c: 04:31:23:2d:7b:a7:29:a3:89:ae:83:1c:15:15:4d: 22:55:8f:7c:2b:8b:e1:41:d5:3b:c1:ff:9d:7f:4a: 7c:37:96:6d:90:7b:3f:15:c8:f6:84:72:5d:5e:f8: e2:ca:1d:ad:e5:30:07:12:43:cc:16:27:c3:75:65: 23:0a:93:11:c7:4a:cd:12:5b:4a:d8:cc:8e:3c:03: 07:ba:39:18:46:8a:f7:48:51:2f:b0:ed:44:6b:f9: 8b:f3:24:95:8f:44:e6:06:f9:88:2a:c3:ac:87:13: 27:cd:7d:8a:4b:f4:a3:58:b8:f8:d5:70:45:5c:0c: a5:cf:16:4c:68:2d:6d:fb:54:8c:77:3e:84:e5:78: e1:47:34:8e:d0:0f:35:92:a4:01:16:f8:f5:06:db: 5f:e9:b7:66:4a:83:ce:1d:2a:90:d1:58:45:67:34: 23:b3:dc:e6:bb:ca:02:6c:97:14:2a:c9:42:8b:31: e9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:56:5C:0F:E4:A2:A8:99:73:7A:EE:48:E0:24:A4:6F:53:91:12:3C X509v3 Authority Key Identifier: keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/GFZcD-SiqJlzeu5I4CSkb1OREjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.224.0/24 194.31.226.0/24 IPv6: 2a0f:aa40::/29 Signature Algorithm: sha256WithRSAEncryption 1d:a2:4d:8b:53:09:28:ec:bb:b2:ba:52:b1:2c:af:7d:47:60: 3b:d6:4f:48:f8:ed:32:41:60:2a:b3:f6:38:19:59:ed:e6:0c: 34:32:8d:88:53:00:3f:f2:4b:6f:38:79:df:99:23:e2:b1:c5: dc:16:08:70:89:c0:17:6e:29:99:3f:7a:6a:c4:db:05:95:19: e7:33:5a:0d:6c:6e:34:21:b5:e3:3c:7a:14:e5:f7:d7:4d:7e: 09:66:fe:0f:8b:34:37:ee:42:3f:87:3d:dc:a7:b3:3c:f3:76: 6f:f5:88:99:93:a6:b9:4e:f7:51:bc:10:21:15:13:a1:2c:80: 52:19:65:7e:19:87:af:78:1a:d9:a3:01:1a:4e:4c:3f:41:4a: d0:cb:99:af:75:28:b5:0e:4b:c4:e2:3a:c6:91:1f:f6:f3:22: 91:5a:68:1a:41:ea:eb:16:48:35:06:85:2e:f7:92:4b:51:af: 81:36:a8:86:3f:75:8f:c1:bb:14:55:2e:76:5d:7b:84:54:28: 22:32:e8:43:8c:0d:57:81:23:c0:18:ae:d6:8d:a0:11:97:c7: 6d:2e:27:fa:de:02:24:5c:69:b9:be:9e:e8:4a:21:63:19:d1: 33:61:52:b5:8c:4b:a4:8a:76:e9:8e:8f:94:75:00:ca:05:ce: 19:fc:b9:a4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57DEAcL1bWB48hOlMNvcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NzFlNjY4NDMwNmI3NDgxNTZjMmFlM2Y0MjBiYjM2NmIy ZWZjZWUwHhcNMjYwMTAxMTQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODU2NWMwZmU0YTJhODk5NzM3YWVlNDhlMDI0YTQ2ZjUzOTExMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nkxG4dzU3koKIgHVLsG0IyQzI3b a6aWJQSkmz7QkFR4S2978glhxU86COyUoKvDp5P/vh7nTv9NLSblMWhNpv4MZqgk 63N6WAwEMSMte6cpo4mugxwVFU0iVY98K4vhQdU7wf+df0p8N5ZtkHs/Fcj2hHJd Xvjiyh2t5TAHEkPMFifDdWUjCpMRx0rNEltK2MyOPAMHujkYRor3SFEvsO1Ea/mL 8ySVj0TmBvmIKsOshxMnzX2KS/SjWLj41XBFXAylzxZMaC1t+1SMdz6E5XjhRzSO 0A81kqQBFvj1Bttf6bdmSoPOHSqQ0VhFZzQjs9zmu8oCbJcUKslCizHpmwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBhWXA/koqiZc3ruSOAkpG9TkRI8MB8GA1UdIwQY MBaAFBVx5mhDBrdIFWwq4/QguzZrLvzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYt NzM4YzBiZjhlYTk4LzEvR0ZaY0QtU2lxSmx6ZXU1STRDU2tiMU9SRWp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYtNzM4YzBiZjhlYTk4 LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwh/gAwQA wh/iMA0EAgACMAcDBQMqD6pAMA0GCSqGSIb3DQEBCwUAA4IBAQAdok2LUwko7Luy ulKxLK99R2A71k9I+O0yQWAqs/Y4GVnt5gw0Mo2IUwA/8ktvOHnfmSPiscXcFghw icAXbimZP3pqxNsFlRnnM1oNbG40IbXjPHoU5ffXTX4JZv4PizQ37kI/hz3cp7M8 83Zv9YiZk6a5TvdRvBAhFROhLIBSGWV+GYeveBrZowEaTkw/QUrQy5mvdSi1DkvE 4jrGkR/28yKRWmgaQerrFkg1BoUu95JLUa+BNqiGP3WPwbsUVS52XXuEVCgiMuhD jA1XgSPAGK7WjaARl8dtLif63gIkXGm5vp7oSiFjGdEzYVK1jEukinbpjo+UdQDK Bc4Z/Lmk -----END CERTIFICATE-----Generated at Thu Jan 1 21:24:01 2026 by rpki-client