This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa
File: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (raw, json)
Hash identifier: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=
Subject key identifier: 82:16:D2:F5:F4:3D:BA:F0:2C:C6:8B:14:92:B2:FE:09:2E:8E:2E:9C
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 019BBC6909BC29CE1AC2C4259035E2446074
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa
Signing time: Wed 14 Jan 2026 12:09:18 +0000
ROA not before: Wed 14 Jan 2026 12:09:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42560
IP address blocks: 5.43.64.0/18 maxlen: 18
31.185.112.0/20 maxlen: 20
37.205.24.0/21 maxlen: 21
37.208.32.0/21 maxlen: 21
77.77.192.0/18 maxlen: 24
77.77.195.0/24 maxlen: 24
77.77.216.0/22 maxlen: 22
77.78.192.0/18 maxlen: 18
77.78.192.0/19 maxlen: 24
77.78.224.0/19 maxlen: 19
77.78.224.0/22 maxlen: 22
77.221.0.0/19 maxlen: 19
77.238.192.0/19 maxlen: 19
77.239.0.0/19 maxlen: 19
77.239.16.0/22 maxlen: 22
80.80.32.0/20 maxlen: 20
93.180.96.0/19 maxlen: 19
109.237.32.0/20 maxlen: 20
128.65.104.0/21 maxlen: 21
141.170.192.0/20 maxlen: 20
146.255.128.0/19 maxlen: 19
178.209.0.0/19 maxlen: 19
178.236.80.0/20 maxlen: 20
185.6.104.0/22 maxlen: 22
185.13.240.0/22 maxlen: 22
185.15.64.0/22 maxlen: 22
185.18.152.0/22 maxlen: 22
185.24.208.0/22 maxlen: 22
185.48.172.0/22 maxlen: 22
185.58.92.0/22 maxlen: 22
188.127.96.0/19 maxlen: 19
217.197.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:bc:69:09:bc:29:ce:1a:c2:c4:25:90:35:e2:44:60:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jan 14 12:09:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8216d2f5f43dbaf02cc68b1492b2fe092e8e2e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:77:8c:f7:d9:18:04:bd:07:4f:6e:6c:66:
e1:d2:36:e8:01:9d:72:25:67:f4:40:70:84:23:e1:
fe:8e:2c:53:9d:41:71:b9:2a:aa:d2:50:7a:c8:e8:
54:18:71:b6:24:0e:d1:7e:a4:71:b1:2b:5d:df:eb:
83:45:1d:0d:3b:c4:90:74:cb:06:ee:2f:25:9e:3b:
b7:9f:8a:38:00:dc:b5:4c:44:03:40:9b:41:e9:7f:
72:a7:36:6b:1a:82:07:fe:4e:b6:7f:99:5a:41:90:
2b:95:03:47:0e:bd:43:ff:65:d6:97:83:24:9e:9b:
bc:19:bb:f5:4d:08:e9:53:1e:cb:9a:d4:fa:64:28:
be:69:96:a7:ae:ca:55:21:b7:5f:58:90:06:72:64:
f0:4c:f8:29:66:72:dd:90:30:7b:3e:e0:a0:28:1c:
74:f3:db:fd:92:e6:94:bd:e7:17:9b:c9:de:c0:d9:
11:da:88:b9:17:e8:28:a1:17:a2:7c:55:cc:7c:e2:
78:98:1e:b0:e1:c4:1e:e1:1e:fc:02:b5:16:87:d6:
5d:e5:c9:93:34:ee:5a:81:72:21:7a:05:0f:b1:87:
62:66:cf:63:18:6f:6a:c3:6f:af:10:f6:fb:93:56:
ff:73:d8:54:6e:e8:44:17:00:3a:4b:4d:ea:73:c7:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:16:D2:F5:F4:3D:BA:F0:2C:C6:8B:14:92:B2:FE:09:2E:8E:2E:9C
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.64.0/18
31.185.112.0/20
37.205.24.0/21
37.208.32.0/21
77.77.192.0/18
77.78.192.0/18
77.221.0.0/19
77.238.192.0/19
77.239.0.0/19
80.80.32.0/20
93.180.96.0/19
109.237.32.0/20
128.65.104.0/21
141.170.192.0/20
146.255.128.0/19
178.209.0.0/19
178.236.80.0/20
185.6.104.0/22
185.13.240.0/22
185.15.64.0/22
185.18.152.0/22
185.24.208.0/22
185.48.172.0/22
185.58.92.0/22
188.127.96.0/19
217.197.136.0/21
Signature Algorithm: sha256WithRSAEncryption
69:52:7c:0a:29:0f:1d:94:da:15:66:22:ca:52:0c:14:88:14:
25:21:2e:af:2b:9e:44:f3:09:a0:ff:1c:d7:b9:67:c0:bb:3e:
f6:8c:f6:76:56:ec:53:b5:bd:dc:a8:d5:31:7d:5d:5c:95:15:
26:c5:7f:6e:e3:e3:c2:19:7f:44:ea:14:7d:c4:66:bd:1c:32:
5a:21:83:84:5d:41:86:9d:ea:bb:f2:ea:85:f5:24:69:d6:6d:
2a:07:9a:00:37:a6:92:0c:3e:87:16:70:57:7f:f1:ca:78:ec:
e7:53:49:22:fa:d0:00:e2:b6:09:c2:dd:f1:fe:71:1a:7f:67:
c0:72:f8:41:4f:64:92:f0:c3:11:05:38:b1:de:aa:35:cb:06:
88:dd:0a:bb:7b:34:95:82:94:53:cc:2d:cb:39:80:5a:ce:14:
3b:60:a2:11:5a:bf:5d:13:0e:cd:2e:33:73:68:a6:b5:8d:59:
60:27:3e:e5:48:c4:a2:43:3c:28:8f:46:fd:c1:fc:5f:e6:28:
1d:6a:38:7d:97:fe:af:9a:19:0c:c2:01:75:39:81:46:4b:ab:
fe:46:c7:d5:9d:7c:f7:36:4e:d0:e4:e6:dd:a5:f0:dc:44:d5:
2a:dc:59:c3:e2:05:b7:b9:62:f6:64:32:bd:bc:a9:a6:c6:6f:
40:ad:6e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:30 2026 by rpki-client