This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/GOh_vF1-6BQUJEcQX8oRJkKylB8.roa File: GOh_vF1-6BQUJEcQX8oRJkKylB8.roa (raw, json) Hash identifier: jR1wVIFs5Egh3AaDFo20t6uR94VmalgAodS+SYxaL4I= Subject key identifier: 18:E8:7F:BC:5D:7E:E8:14:14:24:47:10:5F:CA:11:26:42:B2:94:1F Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40 Certificate serial: 019C23334C27783778BACF4865F8B1B38B42 Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/GOh_vF1-6BQUJEcQX8oRJkKylB8.roa Signing time: Tue 03 Feb 2026 11:11:30 +0000 ROA not before: Tue 03 Feb 2026 11:11:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210152 IP address blocks: 2001:67c:c14::/48 maxlen: 48 2001:67c:e88::/48 maxlen: 48 2a0a:3e40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:33:4c:27:78:37:78:ba:cf:48:65:f8:b1:b3:8b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40 Validity Not Before: Feb 3 11:11:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18e87fbc5d7ee814142447105fca112642b2941f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:44:d0:62:94:3b:12:9b:4b:da:6c:24:7b: 18:cb:5d:6e:02:5f:cd:2d:f8:8c:a4:52:a1:38:75: 4b:93:c8:43:bb:97:08:f8:2a:1f:27:cb:7a:66:e6: 8b:37:94:51:60:62:6e:9f:c5:5a:91:16:64:13:b1: 0c:e8:ed:fb:c1:e1:0f:75:fb:7b:ce:29:a7:32:9a: 04:89:99:5e:7d:42:e5:c4:e4:55:72:d6:84:d5:8f: 08:83:3f:b1:fe:43:a3:24:e5:d7:35:de:6a:ca:0c: 4b:c3:42:a7:ba:89:30:32:b5:71:3e:09:77:a7:88: 90:1e:ed:b2:fa:b2:78:aa:a1:14:d4:1a:15:1b:2d: e4:9d:ec:76:33:72:f3:96:ad:77:79:38:e0:50:d9: 7f:34:54:89:a2:2e:e6:40:24:f9:77:17:bb:de:c4: 42:56:03:59:af:bc:68:f4:8a:10:dd:e0:d2:cd:7d: d6:bb:7b:82:72:dc:04:73:aa:14:2c:03:1b:4e:fe: 70:2e:df:be:84:d3:fb:7a:ac:bf:c0:8e:93:b9:b3: cd:f6:59:d9:81:f6:11:be:ff:c3:da:c3:35:9d:30: 2e:54:27:d0:7f:62:4b:f3:22:c7:af:60:9b:ab:2f: f0:39:39:46:64:a5:ae:86:5d:35:b6:ce:ce:66:2d: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E8:7F:BC:5D:7E:E8:14:14:24:47:10:5F:CA:11:26:42:B2:94:1F X509v3 Authority Key Identifier: keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/GOh_vF1-6BQUJEcQX8oRJkKylB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c14::/48 2001:67c:e88::/48 2a0a:3e40::/29 Signature Algorithm: sha256WithRSAEncryption 7b:e5:87:08:37:2b:8d:07:04:48:07:c8:49:58:7a:7a:6c:7f: bf:ca:bc:12:90:6c:78:f8:20:39:b9:4d:74:a5:2b:a6:3d:af: cf:07:58:27:16:a2:ca:ab:72:1b:31:5c:ec:fb:05:d7:61:77: 85:c1:7e:e5:8a:ea:88:a4:23:b0:40:f4:1e:10:9d:4b:c2:07: 7d:09:b0:9e:9f:bc:ad:66:1d:65:24:c6:87:34:f9:4a:88:28: 16:1b:0e:ad:5f:7b:e8:47:ca:da:e3:05:6c:e1:bf:84:fc:19: 82:71:0b:a9:e5:ea:4f:70:88:da:18:be:c9:ae:98:44:24:84: a4:bd:0d:bf:0d:22:df:48:80:77:da:b6:a4:ba:a5:c0:72:cf: 84:88:5a:88:ed:92:9e:b1:94:00:a6:ed:d1:af:06:91:9b:12: d3:53:f8:ae:09:17:90:7e:44:b4:72:5e:1a:ca:38:e6:d4:40: 13:dc:4c:b9:63:dc:46:07:df:de:ec:be:53:2b:e6:94:28:c9: 56:8f:6e:47:6b:4e:0e:6f:6a:76:82:0e:35:d1:03:13:f8:b7: 2f:e6:16:60:cc:3d:4c:f5:8b:48:eb:79:58:da:bd:d7:78:7c: 45:cf:a7:7e:44:dd:ac:95:a0:59:05:db:f7:8b:25:d9:9e:2c: ba:c7:2e:ae -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZwjM0wneDd4us9IZfixs4tCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTM4NjcyODQxMzJlZWNjZDU2ZTZiMTU1Y2Y3ZjYyN2Qy NjRmNDAwHhcNMjYwMjAzMTExMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGU4N2ZiYzVkN2VlODE0MTQyNDQ3MTA1ZmNhMTEyNjQyYjI5NDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ehE0GKUOxKbS9psJHsYy11uAl/N LfiMpFKhOHVLk8hDu5cI+CofJ8t6ZuaLN5RRYGJun8VakRZkE7EM6O37weEPdft7 zimnMpoEiZlefULlxORVctaE1Y8Igz+x/kOjJOXXNd5qygxLw0KnuokwMrVxPgl3 p4iQHu2y+rJ4qqEU1BoVGy3knex2M3Lzlq13eTjgUNl/NFSJoi7mQCT5dxe73sRC VgNZr7xo9IoQ3eDSzX3Wu3uCctwEc6oULAMbTv5wLt++hNP7eqy/wI6TubPN9lnZ gfYRvv/D2sM1nTAuVCfQf2JL8yLHr2Cbqy/wOTlGZKWuhl01ts7OZi1UPQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFBjof7xdfugUFCRHEF/KESZCspQfMB8GA1UdIwQY MBaAFDtThnKEEy7szVbmsVXPf2J9Jk9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zYWQ1NTgtNTFhMC00ODAwLWJiZjgt YjIwODU4ZTI5OTNiLzEvR09oX3ZGMS02QlFVSkVjUVg4b1JKa0t5bEI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zYWQ1NTgtNTFhMC00ODAwLWJiZjgtYjIwODU4ZTI5OTNi LzEvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwcAIAEGfAwU AwcAIAEGfA6IAwUDKgo+QDANBgkqhkiG9w0BAQsFAAOCAQEAe+WHCDcrjQcESAfI SVh6emx/v8q8EpBsePggOblNdKUrpj2vzwdYJxaiyqtyGzFc7PsF12F3hcF+5Yrq iKQjsED0HhCdS8IHfQmwnp+8rWYdZSTGhzT5SogoFhsOrV976EfK2uMFbOG/hPwZ gnELqeXqT3CI2hi+ya6YRCSEpL0Nvw0i30iAd9q2pLqlwHLPhIhaiO2SnrGUAKbt 0a8GkZsS01P4rgkXkH5EtHJeGso45tRAE9xMuWPcRgff3uy+UyvmlCjJVo9uR2tO Dm9qdoIONdEDE/i3L+YWYMw9TPWLSOt5WNq913h8Rc+nfkTdrJWgWQXb94sl2Z4s uscurg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:45:28 2026 by rpki-client