This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/GhCvmgJfuG506WuiaBMBgDUJQZU.roa File: GhCvmgJfuG506WuiaBMBgDUJQZU.roa (raw, json) Hash identifier: I8NuJF/bk5fAsj3b12qVIfzMf7umbiG0VV3yAbXwHJo= Subject key identifier: 1A:10:AF:9A:02:5F:B8:6E:74:E9:6B:A2:68:13:01:80:35:09:41:95 Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb Certificate serial: 019B76EB59A50AA48E53F64ED3F8EBD0E8B1 Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/GhCvmgJfuG506WuiaBMBgDUJQZU.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41529 IP address blocks: 45.131.84.0/22 maxlen: 22 45.131.84.0/24 maxlen: 24 45.131.85.0/24 maxlen: 24 45.131.86.0/24 maxlen: 24 45.131.87.0/24 maxlen: 24 2a0e:5f40::/29 maxlen: 29 2a0e:5f40:84::/48 maxlen: 48 2a0e:5f40:85::/48 maxlen: 48 2a0e:5f40:86::/48 maxlen: 48 2a0e:5f40:87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:59:a5:0a:a4:8e:53:f6:4e:d3:f8:eb:d0:e8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a10af9a025fb86e74e96ba26813018035094195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ad:80:a6:e5:e7:b5:23:5f:ce:13:b1:e3:fd: 3c:12:d3:43:97:de:e6:38:1b:23:b2:1b:b4:4d:84: 09:03:4c:35:e1:9a:48:7b:81:12:95:0c:a2:02:69: ea:ca:67:57:89:93:92:2e:d4:95:ca:43:9e:59:04: eb:e8:f1:f9:af:67:73:77:33:33:5d:fd:7e:3e:ab: af:7d:ba:ea:bb:ad:67:96:be:b5:d6:df:f2:07:4e: 41:64:37:16:67:92:a5:d4:65:fd:c6:2e:13:44:c8: 4f:95:ae:6c:cd:af:87:c1:29:94:0b:b1:90:26:e4: b6:1b:dd:19:aa:fe:29:7e:58:c6:b7:21:c9:4d:00: 48:6d:ad:15:6b:72:dd:6c:91:21:e4:df:38:e8:71: 6a:c0:9e:b7:68:8b:39:ac:47:06:6b:63:4c:4c:9f: 32:68:fe:9d:4d:63:92:d9:c1:fe:6e:9a:5b:19:f7: d3:ca:ed:25:28:d6:32:a1:23:8e:6a:f4:03:2f:22: cf:2b:b5:cb:b8:02:9e:d0:15:df:b6:09:68:dc:50: bc:c1:5f:08:53:20:c3:51:f2:ec:08:b9:e4:d7:2d: 06:99:2a:ee:2a:cb:0f:b2:14:41:fd:58:a3:d9:53: 14:97:b6:95:e2:9e:e0:ea:0b:24:22:67:57:87:10: a2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:10:AF:9A:02:5F:B8:6E:74:E9:6B:A2:68:13:01:80:35:09:41:95 X509v3 Authority Key Identifier: keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/GhCvmgJfuG506WuiaBMBgDUJQZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.84.0/22 IPv6: 2a0e:5f40::/29 Signature Algorithm: sha256WithRSAEncryption 67:fb:84:ab:4a:ad:db:0c:3f:63:74:4a:34:22:1a:06:bd:88: fb:82:2c:ca:09:3a:ee:79:bb:e6:3e:4b:b0:56:7e:10:97:78: 57:aa:80:c7:e5:da:1c:a2:4e:b4:21:66:84:02:c6:93:49:9b: 49:62:d2:c0:6f:1d:a1:42:49:8e:e3:e2:22:ca:a3:3b:d3:11: a0:14:c1:c9:2a:d6:19:dc:e2:44:92:f1:fb:a6:a4:5b:43:e1: 2e:f3:a0:a0:cf:bf:df:a0:a6:01:65:cd:01:c8:cb:03:a1:1a: ff:31:81:cb:ce:e3:6b:fd:ab:56:22:46:f5:ae:00:6f:bf:08: be:9b:ff:26:5c:bd:e6:d7:7c:e3:69:4e:64:5d:55:65:b2:11: b6:10:19:65:66:b3:6b:6e:90:ad:9d:e7:f6:5d:35:93:cc:3d: e7:43:e7:70:a2:8a:e5:65:94:23:c0:71:0d:e4:6d:5c:09:80: 87:c0:45:88:9d:12:2b:4b:1f:d7:f9:46:e6:51:c0:1c:48:a9: 2f:d2:d5:16:db:df:ea:33:5f:94:23:e9:47:67:d5:ec:c2:77: 15:52:86:a1:e0:16:b9:26:a0:cf:6b:3b:91:d0:cd:c3:b6:ab: e5:f3:d9:5c:a1:b8:9f:99:6b:24:f4:f1:e8:18:b4:55:88:fe: 7b:29:34:ae -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt261mlCqSOU/ZO0/jr0OixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNGRlODc1MDFjN2QzMDgyYzc2NjU5ZjRkZWJkOTQyODg0 M2I0Y2IwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTEwYWY5YTAyNWZiODZlNzRlOTZiYTI2ODEzMDE4MDM1MDk0MTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA562ApuXntSNfzhOx4/08EtNDl97m OBsjshu0TYQJA0w14ZpIe4ESlQyiAmnqymdXiZOSLtSVykOeWQTr6PH5r2dzdzMz Xf1+Pquvfbrqu61nlr611t/yB05BZDcWZ5Kl1GX9xi4TRMhPla5sza+HwSmUC7GQ JuS2G90Zqv4pfljGtyHJTQBIba0Va3LdbJEh5N846HFqwJ63aIs5rEcGa2NMTJ8y aP6dTWOS2cH+bppbGffTyu0lKNYyoSOOavQDLyLPK7XLuAKe0BXftglo3FC8wV8I UyDDUfLsCLnk1y0GmSruKssPshRB/Vij2VMUl7aV4p7g6gskImdXhxCiXwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBoQr5oCX7hudOlromgTAYA1CUGVMB8GA1UdIwQY MBaAFKBN6HUBx9MILHZln03r2UKIQ7TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5Njkt NzQ4Zjc4NzgzODhhLzEvR2hDdm1nSmZ1RzUwNld1aWFCTUJnRFVKUVpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5NjktNzQ4Zjc4NzgzODhh LzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYNUMA0E AgACMAcDBQMqDl9AMA0GCSqGSIb3DQEBCwUAA4IBAQBn+4SrSq3bDD9jdEo0IhoG vYj7gizKCTruebvmPkuwVn4Ql3hXqoDH5docok60IWaEAsaTSZtJYtLAbx2hQkmO 4+IiyqM70xGgFMHJKtYZ3OJEkvH7pqRbQ+Eu86Cgz7/foKYBZc0ByMsDoRr/MYHL zuNr/atWIkb1rgBvvwi+m/8mXL3m13zjaU5kXVVlshG2EBllZrNrbpCtnef2XTWT zD3nQ+dwoorlZZQjwHEN5G1cCYCHwEWInRIrSx/X+UbmUcAcSKkv0tUW29/qM1+U I+lHZ9XswncVUoah4Ba5JqDPazuR0M3Dtqvl89lcobifmWsk9PHoGLRViP57KTSu -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:57 2026 by rpki-client