This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/GOgAejJFsLbsIoSjyXa89DsOln0.roa File: GOgAejJFsLbsIoSjyXa89DsOln0.roa (raw, json) Hash identifier: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA= Subject key identifier: 18:E8:00:7A:32:45:B0:B6:EC:22:84:A3:C9:76:BC:F4:3B:0E:96:7D Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019B7BA3C4F2BE2DF84657E5D4E6017B06B6 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/GOgAejJFsLbsIoSjyXa89DsOln0.roa Signing time: Thu 01 Jan 2026 22:18:08 +0000 ROA not before: Thu 01 Jan 2026 22:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11426 IP address blocks: 45.158.192.0/22 maxlen: 22 185.45.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c4:f2:be:2d:f8:46:57:e5:d4:e6:01:7b:06:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jan 1 22:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18e8007a3245b0b6ec2284a3c976bcf43b0e967d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a6:53:7f:f0:8a:27:ba:73:3a:d9:d8:7e:fe: 8f:fc:ec:ae:c3:8f:dc:87:f6:e9:3a:60:23:88:ca: 1a:a7:07:33:ee:94:28:a0:3a:7a:4b:b4:61:19:21: 68:a7:d9:a6:85:b6:74:54:fb:c6:bd:5f:b9:02:48: f1:c8:8d:68:5e:39:78:4b:26:fb:cb:f9:df:79:e7: aa:c3:9e:22:ab:6a:2a:e0:e4:d8:72:45:bf:2a:65: c5:b3:57:5e:a1:84:7b:e1:c8:46:d6:65:a6:b7:80: 4d:6d:1a:6e:97:e4:ee:d9:16:c5:ca:7b:da:7f:f7: fe:9b:e5:40:83:d0:7e:f7:25:45:fb:fb:f4:94:40: 39:cd:40:ee:4a:0a:dd:b0:63:0a:17:e6:e0:f9:eb: aa:40:b0:18:a4:02:ef:5d:70:fe:ee:14:16:b4:32: 66:39:31:1a:5e:2c:6f:a6:97:ca:62:de:f1:a2:7c: 58:47:80:b8:16:4f:92:f8:30:ac:1b:48:2b:05:46: 9c:18:b0:21:35:ee:87:48:5b:9d:18:8e:5d:60:0d: d3:6e:01:20:15:38:c3:7c:8f:7d:aa:33:b2:59:44: da:5f:5f:ed:2f:25:d4:ea:28:93:65:be:82:16:b2: a8:57:e1:16:dc:f0:eb:32:88:61:73:ef:93:2a:67: e3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E8:00:7A:32:45:B0:B6:EC:22:84:A3:C9:76:BC:F4:3B:0E:96:7D X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/GOgAejJFsLbsIoSjyXa89DsOln0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.192.0/22 185.45.92.0/23 Signature Algorithm: sha256WithRSAEncryption a9:52:55:3c:cc:4b:cb:7e:ad:fd:50:97:bc:c9:07:a4:7d:ad: 54:c0:85:8c:98:83:46:6d:17:87:af:2f:e4:2b:0d:7f:42:e6: cb:c4:77:67:ee:4e:89:4d:91:2e:39:ba:23:5b:6b:48:02:27: 33:b1:38:f1:95:2f:6e:d8:0f:b8:c7:d7:18:a2:e6:f1:b4:30: 63:b2:f2:2a:e4:3d:4d:49:73:b5:89:c9:2a:58:eb:51:cc:4b: ae:4c:4e:24:63:45:62:ae:23:3c:dd:16:fb:b1:c9:17:31:a2: c8:1d:4a:6d:3b:b5:ad:b5:30:51:86:97:e1:ba:71:1a:45:e1: 3c:f4:71:ad:2e:fd:f6:97:c9:a7:e7:6d:6b:52:87:05:18:87: 65:58:7e:eb:7f:95:62:ba:7f:51:5f:73:91:92:f6:b9:92:77: 85:fb:b2:8b:c0:7d:55:61:ab:af:7b:9b:f0:f9:5b:e9:69:80: 0f:71:c6:5f:a9:ef:90:09:46:06:71:db:e5:c1:03:b2:b4:83: ca:1c:95:a1:68:e6:13:da:c0:ed:0b:27:0a:b7:14:7e:f8:c4: 0d:ce:87:ac:01:ff:33:5c:7e:0f:80:4d:c6:62:65:89:ce:b6: 6b:4f:8b:47:87:4e:04:57:36:42:04:91:e0:4a:1c:d1:94:59: c7:32:33:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o8Tyvi34Rlfl1OYBewa2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMTAxMjIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGU4MDA3YTMyNDViMGI2ZWMyMjg0YTNjOTc2YmNmNDNiMGU5NjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ZTf/CKJ7pzOtnYfv6P/Oyuw4/c h/bpOmAjiMoapwcz7pQooDp6S7RhGSFop9mmhbZ0VPvGvV+5AkjxyI1oXjl4Syb7 y/nfeeeqw54iq2oq4OTYckW/KmXFs1deoYR74chG1mWmt4BNbRpul+Tu2RbFynva f/f+m+VAg9B+9yVF+/v0lEA5zUDuSgrdsGMKF+bg+euqQLAYpALvXXD+7hQWtDJm OTEaXixvppfKYt7xonxYR4C4Fk+S+DCsG0grBUacGLAhNe6HSFudGI5dYA3TbgEg FTjDfI99qjOyWUTaX1/tLyXU6iiTZb6CFrKoV+EW3PDrMohhc++TKmfjgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBjoAHoyRbC27CKEo8l2vPQ7DpZ9MB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvR09nQWVqSkZzTGJzSW9TanlYYTg5RHNPbG4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZ7AAwQB uS1cMA0GCSqGSIb3DQEBCwUAA4IBAQCpUlU8zEvLfq39UJe8yQekfa1UwIWMmING bReHry/kKw1/QubLxHdn7k6JTZEuObojW2tIAiczsTjxlS9u2A+4x9cYoubxtDBj svIq5D1NSXO1ickqWOtRzEuuTE4kY0ViriM83Rb7sckXMaLIHUptO7WttTBRhpfh unEaReE89HGtLv32l8mn521rUocFGIdlWH7rf5Viun9RX3ORkva5kneF+7KLwH1V Yauve5vw+VvpaYAPccZfqe+QCUYGcdvlwQOytIPKHJWhaOYT2sDtCycKtxR++MQN zoesAf8zXH4PgE3GYmWJzrZrT4tHh04EVzZCBJHgShzRlFnHMjM6 -----END CERTIFICATE-----Generated at Wed Jan 21 01:07:59 2026 by rpki-client