This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/GHGkwEVylqYxr15hWfLzxHp9MA0.roa File: GHGkwEVylqYxr15hWfLzxHp9MA0.roa (raw, json) Hash identifier: 6MgKNZ/wr6UP8/R75FjFSF75c2qdb4J/GZr8B0Cgj+s= Subject key identifier: 18:71:A4:C0:45:72:96:A6:31:AF:5E:61:59:F2:F3:C4:7A:7D:30:0D Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630 Certificate serial: 019B7C135A7A6DEE04BBDB8D10FB6A4EE445 Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/GHGkwEVylqYxr15hWfLzxHp9MA0.roa Signing time: Fri 02 Jan 2026 00:20:01 +0000 ROA not before: Fri 02 Jan 2026 00:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24961 IP address blocks: 193.193.190.0/23 maxlen: 23 194.9.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5a:7a:6d:ee:04:bb:db:8d:10:fb:6a:4e:e4:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1871a4c0457296a631af5e6159f2f3c47a7d300d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:f4:cb:cd:e3:a0:7b:93:30:82:d2:58:73: 35:31:6d:7c:52:bc:4e:92:d4:dc:56:78:66:36:0f: 56:89:d7:5b:fd:ef:19:2d:6b:eb:65:5d:18:45:05: d4:90:c0:a7:8d:9a:b2:a0:78:08:5b:79:26:f7:d9: c8:41:58:46:0a:85:79:af:4f:c3:04:64:2e:fe:f3: 16:24:56:27:12:d0:3c:06:f1:6c:2d:f7:76:da:4a: 5b:1f:c1:7c:a5:fe:46:4c:97:dc:06:18:71:5f:2a: 23:72:f4:f1:29:a3:d2:0a:8a:5f:61:24:55:6f:6b: 59:c8:66:23:9a:88:d4:5c:f6:9d:db:21:ed:df:30: fc:2f:99:52:5d:32:49:72:69:da:0c:dc:7e:23:35: 12:66:f5:11:65:72:65:be:c2:8b:7e:12:e6:6d:e4: 85:61:d6:f0:d1:45:21:68:11:65:29:7c:ee:b8:44: 32:36:29:46:d5:48:94:d3:16:51:c7:56:a1:d8:21: c4:67:49:5b:ab:f1:87:13:ce:21:34:31:18:a1:70: 98:30:e7:31:91:41:e8:09:c9:49:28:08:53:e3:19: c7:bc:bb:a9:f5:0e:0e:a1:10:14:16:26:82:23:34: 40:22:45:fc:e8:59:41:23:d6:ff:be:03:80:cf:6a: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:71:A4:C0:45:72:96:A6:31:AF:5E:61:59:F2:F3:C4:7A:7D:30:0D X509v3 Authority Key Identifier: keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/GHGkwEVylqYxr15hWfLzxHp9MA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.193.190.0/23 194.9.182.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:83:a2:8e:8d:79:54:d7:d1:ce:2e:5f:e0:cd:50:23:7f:df: 2b:9d:4e:ab:39:90:16:8a:14:da:42:5c:98:d6:17:47:29:d2: b6:f7:72:54:fd:cf:46:9f:c7:ca:f9:41:69:12:6c:89:d8:f8: af:2a:01:98:0b:a3:db:93:3b:b9:6f:3c:8e:54:2e:1c:2e:56: 0b:bb:bd:b8:c3:bd:6d:a6:5d:37:83:cc:9b:73:79:ae:cc:38: b7:09:90:53:c7:69:80:be:68:5e:fb:4a:2f:3c:ff:83:f8:dd: c1:ae:96:c8:84:dd:6b:b3:35:be:1b:68:34:36:1b:e9:f9:e0: 85:ce:a4:9e:c4:62:2e:a7:69:bf:07:a5:e3:73:04:a0:6f:a6: 6c:30:2f:e8:ed:e0:ac:05:12:ed:67:a5:6b:81:73:5d:be:d2: 2f:e9:c8:de:c3:c2:f0:8f:45:1f:e3:f6:db:10:40:ad:3d:37: 78:fd:05:40:98:eb:f2:8f:3c:ce:1f:a0:81:6b:97:3f:0e:0b: 17:92:93:76:01:aa:0d:67:b5:40:0d:29:4a:d4:bb:d3:26:04: a7:85:26:74:f6:8d:39:91:d8:d8:91:70:df:e6:ef:0c:d1:76: 8f:1b:51:8d:94:af:43:ad:50:b2:43:3e:a0:ee:18:1e:4d:81: 08:b3:a1:fd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E1p6be4Eu9uNEPtqTuRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYjc3YzllODEwNzZjZjRiNGNlZmVkNWVlZjIxMDdmNzUy YzM2MzAwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODcxYTRjMDQ1NzI5NmE2MzFhZjVlNjE1OWYyZjNjNDdhN2QzMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+T0y83joHuTMILSWHM1MW18UrxO ktTcVnhmNg9Widdb/e8ZLWvrZV0YRQXUkMCnjZqyoHgIW3km99nIQVhGCoV5r0/D BGQu/vMWJFYnEtA8BvFsLfd22kpbH8F8pf5GTJfcBhhxXyojcvTxKaPSCopfYSRV b2tZyGYjmojUXPad2yHt3zD8L5lSXTJJcmnaDNx+IzUSZvURZXJlvsKLfhLmbeSF Ydbw0UUhaBFlKXzuuEQyNilG1UiU0xZRx1ah2CHEZ0lbq/GHE84hNDEYoXCYMOcx kUHoCclJKAhT4xnHvLup9Q4OoRAUFiaCIzRAIkX86FlBI9b/vgOAz2puOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBhxpMBFcpamMa9eYVny88R6fTANMB8GA1UdIwQY MBaAFIO3fJ6BB2z0tM7+1e7yEH91LDYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgt YjdhZGYwNGU0MjNkLzEvR0hHa3dFVnlscVl4cjE1aFdmTHp4SHA5TUEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgtYjdhZGYwNGU0MjNk LzEvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwcG+AwQB wgm2MA0GCSqGSIb3DQEBCwUAA4IBAQA/g6KOjXlU19HOLl/gzVAjf98rnU6rOZAW ihTaQlyY1hdHKdK293JU/c9Gn8fK+UFpEmyJ2PivKgGYC6Pbkzu5bzyOVC4cLlYL u724w71tpl03g8ybc3muzDi3CZBTx2mAvmhe+0ovPP+D+N3BrpbIhN1rszW+G2g0 Nhvp+eCFzqSexGIup2m/B6XjcwSgb6ZsMC/o7eCsBRLtZ6VrgXNdvtIv6cjew8Lw j0Uf4/bbEECtPTd4/QVAmOvyjzzOH6CBa5c/DgsXkpN2AaoNZ7VADSlK1LvTJgSn hSZ09o05kdjYkXDf5u8M0XaPG1GNlK9DrVCyQz6g7hgeTYEIs6H9 -----END CERTIFICATE-----Generated at Wed Jan 21 09:23:04 2026 by rpki-client