This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/GINhKUhmBtKk0TkbBRxpcNSu6zI.roa File: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (raw, json) Hash identifier: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c= Subject key identifier: 18:83:61:29:48:66:06:D2:A4:D1:39:1B:05:1C:69:70:D4:AE:EB:32 Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380 Certificate serial: 019B775937DF06324FE57EA9239A4AE11F00 Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/GINhKUhmBtKk0TkbBRxpcNSu6zI.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19437 IP address blocks: 185.18.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:37:df:06:32:4f:e5:7e:a9:23:9a:4a:e1:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18836129486606d2a4d1391b051c6970d4aeeb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:1c:c2:b6:e1:0d:42:4e:a2:62:86:f0:a1: 6e:9b:95:6b:93:3e:bf:e4:9a:21:10:9d:92:7e:c5: 7c:e5:5f:3c:3e:5d:d4:9a:ed:78:44:de:a9:7a:22: d6:88:c4:82:83:64:29:f4:7e:92:29:81:bd:69:7f: c4:d5:7d:c0:90:95:1f:44:b3:b6:31:ad:81:df:8c: 0a:75:f9:05:7e:92:f6:47:fb:ed:8f:7a:00:48:ab: 17:26:f8:02:62:68:fe:6a:04:a1:f2:72:7d:f6:d0: 64:72:d9:52:bc:58:33:bc:0e:91:2d:0b:68:f6:96: 3d:5c:47:b1:e7:04:e8:d9:d0:7e:7f:2a:21:b8:8d: cd:33:63:71:36:ba:8a:1e:9a:7a:e9:8b:33:c1:4c: 75:62:35:82:af:6e:ca:eb:0b:ff:7f:15:68:88:b2: 19:a8:45:0c:d9:c5:87:27:ce:7a:9b:3c:88:76:b5: 44:cc:b2:1a:b8:98:a6:ad:48:47:b8:3b:cb:41:9a: 52:fa:43:1d:88:7e:34:f4:62:6f:51:b2:76:ab:db: 35:23:c0:42:35:9e:e2:17:0b:0c:2d:63:f3:71:a8: 8a:2f:25:f1:bc:82:ec:7b:2a:e4:f2:08:4a:a8:ea: f5:d8:d4:c1:b6:ea:4c:42:4e:16:cb:29:dd:c8:f5: eb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:83:61:29:48:66:06:D2:A4:D1:39:1B:05:1C:69:70:D4:AE:EB:32 X509v3 Authority Key Identifier: keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/GINhKUhmBtKk0TkbBRxpcNSu6zI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.122.0/24 Signature Algorithm: sha256WithRSAEncryption 47:7a:9d:f0:c7:61:3d:20:fb:ca:4f:55:ba:a2:de:7e:00:c0: e8:5c:6f:f5:59:46:88:03:dd:89:0b:cf:23:71:79:80:3a:72: 16:81:6f:c3:c4:83:e0:ec:47:28:a2:5a:0d:c4:89:a7:99:b5: f4:08:b0:fe:d2:cb:07:9b:8a:d3:ba:99:dc:c5:90:61:4d:35: 56:5a:41:15:4d:31:60:b8:a2:57:80:cf:1d:c7:1f:9d:cc:fa: e6:9b:ea:34:bb:b4:91:8d:c2:45:8b:4d:80:58:e8:65:04:9a: bc:44:0b:62:27:90:36:5b:3e:56:7b:fa:24:ad:da:48:e0:24: 16:48:a6:b3:9f:97:01:ef:1e:dc:88:eb:fb:b6:9b:b6:11:81: c9:68:e2:bc:03:c3:66:4d:bd:74:5c:02:5e:a3:5c:a6:55:1c: 91:34:74:24:04:8b:80:ca:1e:c8:08:13:78:d6:ad:04:2f:73: 87:4c:82:bc:d6:84:ac:02:9e:0f:5b:7c:2c:b1:6c:9f:2c:d8: 79:1a:35:26:14:79:72:e9:9e:53:fb:92:7f:2d:39:f2:eb:b0: ce:66:51:78:b8:01:f0:d0:92:13:93:a7:a1:5d:24:a1:96:45: 13:12:ee:1e:c8:58:e6:cf:01:a3:93:42:d0:14:71:60:e2:7c: b1:98:a6:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTffBjJP5X6pI5pK4R8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm ZjQzODAwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODgzNjEyOTQ4NjYwNmQyYTRkMTM5MWIwNTFjNjk3MGQ0YWVlYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2UcwrbhDUJOomKG8KFum5Vrkz6/ 5JohEJ2SfsV85V88Pl3Umu14RN6peiLWiMSCg2Qp9H6SKYG9aX/E1X3AkJUfRLO2 Ma2B34wKdfkFfpL2R/vtj3oASKsXJvgCYmj+agSh8nJ99tBkctlSvFgzvA6RLQto 9pY9XEex5wTo2dB+fyohuI3NM2NxNrqKHpp66YszwUx1YjWCr27K6wv/fxVoiLIZ qEUM2cWHJ856mzyIdrVEzLIauJimrUhHuDvLQZpS+kMdiH409GJvUbJ2q9s1I8BC NZ7iFwsMLWPzcaiKLyXxvILseyrk8ghKqOr12NTBtupMQk4WyyndyPXrtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBiDYSlIZgbSpNE5GwUcaXDUrusyMB8GA1UdIwQY MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt MDYzZmNkZDNhMDU3LzEvR0lOaEtVaG1CdEtrMFRrYkJSeHBjTlN1NnpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3 LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRJ6MA0G CSqGSIb3DQEBCwUAA4IBAQBHep3wx2E9IPvKT1W6ot5+AMDoXG/1WUaIA92JC88j cXmAOnIWgW/DxIPg7EcooloNxImnmbX0CLD+0ssHm4rTupncxZBhTTVWWkEVTTFg uKJXgM8dxx+dzPrmm+o0u7SRjcJFi02AWOhlBJq8RAtiJ5A2Wz5We/okrdpI4CQW SKazn5cB7x7ciOv7tpu2EYHJaOK8A8NmTb10XAJeo1ymVRyRNHQkBIuAyh7ICBN4 1q0EL3OHTIK81oSsAp4PW3wssWyfLNh5GjUmFHly6Z5T+5J/LTny67DOZlF4uAHw 0JITk6ehXSShlkUTEu4eyFjmzwGjk0LQFHFg4nyxmKZ6 -----END CERTIFICATE-----Generated at Tue Jan 20 00:11:25 2026 by rpki-client