This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GvLO-EEdofLBfQP3p2ANRjpY9e4.roa File: GvLO-EEdofLBfQP3p2ANRjpY9e4.roa (raw, json) Hash identifier: tV4e+WMH74qPVdOPFoIp5rKpRYxcvxyKcki/79jUyZ0= Subject key identifier: 1A:F2:CE:F8:41:1D:A1:F2:C1:7D:03:F7:A7:60:0D:46:3A:58:F5:EE Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14678ED5DDD4D41A954FD7F9B8AD18 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GvLO-EEdofLBfQP3p2ANRjpY9e4.roa Signing time: Fri 02 Jan 2026 14:20:02 +0000 ROA not before: Fri 02 Jan 2026 14:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212128 IP address blocks: 147.45.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:67:8e:d5:dd:d4:d4:1a:95:4f:d7:f9:b8:ad:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1af2cef8411da1f2c17d03f7a7600d463a58f5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:72:51:6c:ef:cb:36:be:29:7b:bc:a4:51:62: 05:53:4c:db:32:d1:44:f5:bb:16:4c:ef:df:c2:3a: 26:52:19:7d:1c:95:33:a8:76:42:22:9b:05:46:7a: cd:13:12:e0:3e:4c:a8:a3:63:7e:43:b1:ea:21:74: 73:be:73:f6:78:b9:ae:59:78:f1:31:81:1b:6f:20: bd:54:ae:2f:73:f7:7c:13:3d:a7:57:b1:97:3e:e9: 96:78:45:b0:4d:d8:49:f0:4a:bd:3f:8c:97:0c:d7: c6:d5:4c:5a:a0:07:a1:d2:03:17:23:4a:da:27:65: f2:13:f7:ae:10:e5:65:81:d3:9e:a7:47:8e:17:a5: 8b:87:71:9a:77:45:e1:29:d9:2e:8a:bc:40:a4:c1: 1a:e3:0f:2b:21:87:a0:19:b8:37:ab:33:34:1e:9d: 96:00:6e:af:02:a8:ce:37:90:99:14:90:cd:79:bf: 3b:1c:a8:e6:7c:e6:da:56:0d:0a:df:e3:6d:cd:ad: 4c:7a:4b:6e:e6:ba:70:43:41:2f:47:c0:cb:7a:27: 06:86:7f:0d:df:12:54:56:23:c0:bc:07:f9:a2:a3: b7:0a:00:9a:7f:26:2c:6c:ce:5c:bb:15:97:f3:f7: e1:a8:41:f5:9d:ec:6c:8a:60:45:50:c4:30:d8:d6: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F2:CE:F8:41:1D:A1:F2:C1:7D:03:F7:A7:60:0D:46:3A:58:F5:EE X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GvLO-EEdofLBfQP3p2ANRjpY9e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.128.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:41:11:83:4a:68:5a:29:ff:f1:32:13:03:78:ca:a9:17:fe: 7f:bb:ca:f1:16:16:20:8a:c8:b8:0c:2e:b2:f4:e8:7a:3a:5d: 4e:5a:9c:8e:53:e3:0c:9a:3a:0d:41:52:c5:47:d2:27:9a:6e: d7:21:41:26:f5:5e:7c:9f:f0:27:30:f1:b9:32:4c:f5:dc:79: 31:84:6e:91:d9:85:f7:50:fc:59:fe:03:ee:b7:fe:33:1c:53: 19:09:a7:eb:cb:da:72:dd:a1:b2:56:b1:11:4e:30:f9:ff:fa: 83:7c:60:b8:2a:17:ff:b7:13:9d:f3:40:ab:ba:c8:db:5b:dd: 6c:15:6c:ad:c8:ab:e3:5a:ec:f7:20:05:ac:28:15:46:8f:98: 1c:1c:ca:20:61:3e:57:fb:f8:68:e6:84:63:b5:28:03:c7:be: 3a:84:4f:29:e2:62:a7:ba:46:70:28:6a:1e:fc:ee:f7:fc:e3: ed:45:b8:a2:c1:7a:21:4c:98:ea:04:60:9b:ef:c5:b4:42:33: 79:75:8e:00:9c:b3:5f:7b:1b:49:5b:d2:b0:06:2b:f3:bc:d0: 91:6d:99:c2:ab:2f:a6:59:5c:e0:b1:02:7b:20:99:50:ed:46: 36:f8:b9:19:50:a5:2e:40:ab:11:93:dc:43:98:f2:c8:8c:a2: 42:54:4a:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGeO1d3U1BqVT9f5uK0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWYyY2VmODQxMWRhMWYyYzE3ZDAzZjdhNzYwMGQ0NjNhNThmNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XJRbO/LNr4pe7ykUWIFU0zbMtFE 9bsWTO/fwjomUhl9HJUzqHZCIpsFRnrNExLgPkyoo2N+Q7HqIXRzvnP2eLmuWXjx MYEbbyC9VK4vc/d8Ez2nV7GXPumWeEWwTdhJ8Eq9P4yXDNfG1UxaoAeh0gMXI0ra J2XyE/euEOVlgdOep0eOF6WLh3Gad0XhKdkuirxApMEa4w8rIYegGbg3qzM0Hp2W AG6vAqjON5CZFJDNeb87HKjmfObaVg0K3+Ntza1Mektu5rpwQ0EvR8DLeicGhn8N 3xJUViPAvAf5oqO3CgCafyYsbM5cuxWX8/fhqEH1nexsimBFUMQw2NaKqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBryzvhBHaHywX0D96dgDUY6WPXuMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvR3ZMTy1FRWRvZkxCZlFQM3AyQU5SanBZOWU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCky2AMA0G CSqGSIb3DQEBCwUAA4IBAQAaQRGDSmhaKf/xMhMDeMqpF/5/u8rxFhYgisi4DC6y 9Oh6Ol1OWpyOU+MMmjoNQVLFR9Inmm7XIUEm9V58n/AnMPG5Mkz13HkxhG6R2YX3 UPxZ/gPut/4zHFMZCafry9py3aGyVrERTjD5//qDfGC4Khf/txOd80CrusjbW91s FWytyKvjWuz3IAWsKBVGj5gcHMogYT5X+/ho5oRjtSgDx746hE8p4mKnukZwKGoe /O73/OPtRbiiwXohTJjqBGCb78W0QjN5dY4AnLNfextJW9KwBivzvNCRbZnCqy+m WVzgsQJ7IJlQ7UY2+LkZUKUuQKsRk9xDmPLIjKJCVEpH -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:52 2026 by rpki-client