This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/GHszpS3-Dwi_R7QrobaC-6mzjVA.roa File: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (raw, json) Hash identifier: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw= Subject key identifier: 18:7B:33:A5:2D:FE:0F:08:BF:47:B4:2B:A1:B6:82:FB:A9:B3:8D:50 Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B7AC7EB91B902A87E942E1459E8CA08B8 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/GHszpS3-Dwi_R7QrobaC-6mzjVA.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212128 IP address blocks: 81.19.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:eb:91:b9:02:a8:7e:94:2e:14:59:e8:ca:08:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=187b33a52dfe0f08bf47b42ba1b682fba9b38d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:6d:c9:26:f2:2a:7e:cd:13:2a:3f:22:1f: 63:fc:5c:01:38:bc:b8:d0:1a:51:28:3b:e4:cb:30: 7b:1c:e2:60:16:1e:33:c6:e5:74:12:3b:3a:cf:68: 80:3d:56:a1:08:a5:52:35:c5:09:3c:1d:98:21:7e: 2a:e7:1b:bd:3f:8e:d8:bf:55:88:7b:f9:91:b9:b8: f2:e6:af:4f:6a:40:20:e5:0e:1a:d6:15:88:2f:11: ad:67:ca:2e:45:67:29:f6:0b:10:7e:1e:ff:13:fe: c0:bf:e1:db:2a:23:c5:ea:b8:d2:59:60:3e:ec:14: 5c:e5:cb:b0:cc:88:a1:75:ba:35:e5:c1:8c:23:01: b2:69:83:09:1f:df:e4:c7:e8:b8:6b:7f:c4:ef:78: 7e:6c:19:f6:bb:b9:87:e7:8a:58:31:af:64:19:13: 34:15:3f:17:94:c2:52:7a:73:d7:a5:a1:fc:94:dc: 50:17:49:5c:f3:32:39:71:81:5c:15:c2:36:c4:cb: 11:b6:49:a7:f4:fd:a4:34:f4:82:ac:df:82:b2:bf: d7:e1:95:eb:bb:98:46:56:0d:4e:09:74:e8:0d:ea: be:2a:bc:85:cd:bb:c0:74:f3:fa:03:d6:f9:9a:a4: 03:f1:e0:0e:00:3f:ba:e2:4c:53:42:0d:d3:a7:46: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7B:33:A5:2D:FE:0F:08:BF:47:B4:2B:A1:B6:82:FB:A9:B3:8D:50 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/GHszpS3-Dwi_R7QrobaC-6mzjVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.138.0/24 Signature Algorithm: sha256WithRSAEncryption b4:40:6e:0d:ad:e5:c0:86:12:0b:0a:b9:c2:2f:b5:3b:88:fe: 50:4f:71:c8:de:4b:77:86:19:f5:91:ee:37:dc:bd:ab:ae:b4: d8:20:80:58:97:55:14:26:5f:ce:66:a8:43:ab:ce:04:2d:72: 89:75:46:65:51:dc:28:d3:0e:5d:8d:09:ef:7e:f1:ba:78:70: d4:f0:8d:0a:cb:b6:b2:b7:ec:3c:da:96:aa:7b:cc:05:41:4c: dd:ee:0d:d0:53:e2:36:5e:9b:81:3f:6d:d9:fc:73:cb:9d:2c: 63:57:ec:b5:b6:4f:9f:74:c1:5a:e0:cd:c5:72:db:ca:02:95: 9b:3d:49:c6:71:c9:e7:a7:64:b4:55:89:06:8a:43:26:31:49: ec:17:d0:eb:73:0a:8c:46:4b:ab:0d:11:6a:2e:90:3d:ad:1e: c3:9b:0d:91:54:48:01:e8:5b:41:fd:52:19:d8:7e:9a:dd:33: f3:c7:1d:b7:cf:0e:27:bc:63:0c:ef:5c:4a:48:88:e9:46:3a: 74:04:9c:fb:5b:8e:8c:13:93:74:a4:de:0d:fd:36:f6:2c:b3: 8f:d5:e9:5c:e8:08:ca:73:ac:c9:85:be:bb:0e:e5:fe:10:19: ad:ff:d6:e6:c0:b8:54:b6:42:01:0a:f1:87:73:c3:c8:c1:62: 2b:61:08:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+uRuQKofpQuFFnoygi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODdiMzNhNTJkZmUwZjA4YmY0N2I0MmJhMWI2ODJmYmE5YjM4ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk9tySbyKn7NEyo/Ih9j/FwBOLy4 0BpRKDvkyzB7HOJgFh4zxuV0Ejs6z2iAPVahCKVSNcUJPB2YIX4q5xu9P47Yv1WI e/mRubjy5q9PakAg5Q4a1hWILxGtZ8ouRWcp9gsQfh7/E/7Av+HbKiPF6rjSWWA+ 7BRc5cuwzIihdbo15cGMIwGyaYMJH9/kx+i4a3/E73h+bBn2u7mH54pYMa9kGRM0 FT8XlMJSenPXpaH8lNxQF0lc8zI5cYFcFcI2xMsRtkmn9P2kNPSCrN+Csr/X4ZXr u5hGVg1OCXToDeq+KryFzbvAdPP6A9b5mqQD8eAOAD+64kxTQg3Tp0Y74QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBh7M6Ut/g8Iv0e0K6G2gvups41QMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvR0hzenBTMy1Ed2lfUjdRcm9iYUMtNm16alZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUROKMA0G CSqGSIb3DQEBCwUAA4IBAQC0QG4NreXAhhILCrnCL7U7iP5QT3HI3kt3hhn1ke43 3L2rrrTYIIBYl1UUJl/OZqhDq84ELXKJdUZlUdwo0w5djQnvfvG6eHDU8I0Ky7ay t+w82paqe8wFQUzd7g3QU+I2XpuBP23Z/HPLnSxjV+y1tk+fdMFa4M3FctvKApWb PUnGccnnp2S0VYkGikMmMUnsF9DrcwqMRkurDRFqLpA9rR7Dmw2RVEgB6FtB/VIZ 2H6a3TPzxx23zw4nvGMM71xKSIjpRjp0BJz7W46ME5N0pN4N/Tb2LLOP1elc6AjK c6zJhb67DuX+EBmt/9bmwLhUtkIBCvGHc8PIwWIrYQh4 -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:28 2026 by rpki-client