This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GHZGmMnbn6OifmtuQcPKJBHNmm8.roa File: GHZGmMnbn6OifmtuQcPKJBHNmm8.roa (raw, json) Hash identifier: yCqXlMhY21HbtOj2bHDJ1sLMYDnayO78An9PY8i2Gss= Subject key identifier: 18:76:46:98:C9:DB:9F:A3:A2:7E:6B:6E:41:C3:CA:24:11:CD:9A:6F Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F857B5DF09A1D2A170109F9A24DC4F4 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GHZGmMnbn6OifmtuQcPKJBHNmm8.roa Signing time: Fri 02 Jan 2026 16:23:32 +0000 ROA not before: Fri 02 Jan 2026 16:23:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395839 IP address blocks: 195.133.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:7b:5d:f0:9a:1d:2a:17:01:09:f9:a2:4d:c4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18764698c9db9fa3a27e6b6e41c3ca2411cd9a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:77:cc:80:0b:83:9e:51:d2:2f:19:92:69: f4:bc:84:60:ef:62:21:6f:d0:e4:72:d7:07:a8:ee: c7:6a:b1:c8:73:c7:8a:3b:65:96:85:c1:2d:78:fd: f9:c3:25:1a:2d:8a:52:6e:93:ca:64:59:7b:be:98: 9f:73:0a:c1:a5:92:44:39:4b:f5:61:ec:bc:dc:a9: dd:ab:2a:23:a5:a4:f7:5c:de:4b:17:a6:eb:6e:f5: c7:73:25:ab:7e:45:59:6f:d2:1d:5f:25:c8:cb:34: 88:de:7c:33:6b:a9:3a:ce:35:4d:ba:92:a5:5a:54: 0f:a5:7b:cd:1c:3a:d2:a7:8f:60:c6:ee:2c:41:93: d8:8d:4c:55:b8:f9:3f:44:5a:57:6b:0b:68:4f:71: a5:62:b5:66:66:6b:73:8b:9a:50:68:b8:30:c7:1c: 22:f3:94:e6:f4:79:66:70:cd:9a:66:a1:0d:99:b0: ac:83:1b:0b:3b:64:b2:ff:64:26:4d:2e:43:21:da: 1b:80:12:74:b9:95:b4:65:23:b7:7b:91:ed:b6:80: f6:da:f7:89:43:71:5e:3a:74:74:30:42:56:dc:2a: 87:35:00:59:4c:fd:29:b7:25:84:2f:cb:b0:ff:2f: b3:12:8b:ba:1d:47:dd:2c:ab:3b:8d:7d:2a:ef:02: 6c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:76:46:98:C9:DB:9F:A3:A2:7E:6B:6E:41:C3:CA:24:11:CD:9A:6F X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GHZGmMnbn6OifmtuQcPKJBHNmm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.133.22.0/24 Signature Algorithm: sha256WithRSAEncryption 49:8a:64:18:fa:18:ff:be:8d:d6:6e:62:24:d9:e0:cf:02:54: b7:31:38:f7:12:9f:1f:05:e5:ed:2b:1b:d9:b2:8a:bc:c1:0d: dd:aa:e9:d4:2d:36:80:78:ae:6d:b6:b1:94:05:f8:bf:30:49: 49:d8:80:ed:f0:2b:56:c0:2a:cc:64:af:c1:0c:bb:00:7b:d7: 13:e2:02:84:d6:dc:7c:74:d7:98:30:44:ef:68:54:d1:8c:c2: c0:a8:c3:d3:54:fd:e6:07:ff:79:97:23:51:85:30:ff:92:a2: 61:0d:4c:7e:59:0a:5a:3d:0d:26:0d:fe:95:65:6e:5e:63:93: 13:c0:0b:6c:6d:ba:f5:6b:ca:0d:ea:ac:8e:36:f2:0a:e2:1d: ad:a2:f6:26:8f:4c:c3:bd:0a:00:f0:66:6b:e6:30:be:23:46: e5:18:cb:a9:7f:5b:70:10:db:8e:2d:36:62:d4:13:28:2a:87: 2d:dc:59:e8:3d:65:6a:e9:93:35:ae:45:ba:3c:f3:a6:b9:02: 17:96:10:76:82:71:af:31:da:da:83:3a:55:fd:96:05:90:37: ba:47:19:3c:df:59:a1:f1:91:b0:17:d9:63:9c:37:9b:e2:dc: f9:28:e7:b5:d7:09:8f:bf:4a:f1:28:ba:eb:e2:06:f1:b7:af: 36:e7:2a:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hXtd8JodKhcBCfmiTcT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODc2NDY5OGM5ZGI5ZmEzYTI3ZTZiNmU0MWMzY2EyNDExY2Q5YTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGB3zIALg55R0i8Zkmn0vIRg72Ih b9DkctcHqO7HarHIc8eKO2WWhcEteP35wyUaLYpSbpPKZFl7vpifcwrBpZJEOUv1 Yey83KndqyojpaT3XN5LF6brbvXHcyWrfkVZb9IdXyXIyzSI3nwza6k6zjVNupKl WlQPpXvNHDrSp49gxu4sQZPYjUxVuPk/RFpXawtoT3GlYrVmZmtzi5pQaLgwxxwi 85Tm9HlmcM2aZqENmbCsgxsLO2Sy/2QmTS5DIdobgBJ0uZW0ZSO3e5HttoD22veJ Q3FeOnR0MEJW3CqHNQBZTP0ptyWEL8uw/y+zEou6HUfdLKs7jX0q7wJs8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBh2RpjJ25+jon5rbkHDyiQRzZpvMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvR0haR21NbmJuNk9pZm10dVFjUEtKQkhObW04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4UWMA0G CSqGSIb3DQEBCwUAA4IBAQBJimQY+hj/vo3WbmIk2eDPAlS3MTj3Ep8fBeXtKxvZ soq8wQ3dqunULTaAeK5ttrGUBfi/MElJ2IDt8CtWwCrMZK/BDLsAe9cT4gKE1tx8 dNeYMETvaFTRjMLAqMPTVP3mB/95lyNRhTD/kqJhDUx+WQpaPQ0mDf6VZW5eY5MT wAtsbbr1a8oN6qyONvIK4h2tovYmj0zDvQoA8GZr5jC+I0blGMupf1twENuOLTZi 1BMoKoct3FnoPWVq6ZM1rkW6PPOmuQIXlhB2gnGvMdragzpV/ZYFkDe6Rxk831mh 8ZGwF9ljnDeb4tz5KOe11wmPv0rxKLrr4gbxt6825yqu -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:49 2026 by rpki-client