This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/gh4KUKUecv3aIFdeyNoSCNjF_bk.roa File: gh4KUKUecv3aIFdeyNoSCNjF_bk.roa (raw, json) Hash identifier: J5ySQINlLDmYwbak6j06Czoor6OIn6JCRI5ELT5bYlU= Subject key identifier: 82:1E:0A:50:A5:1E:72:FD:DA:20:57:5E:C8:DA:12:08:D8:C5:FD:B9 Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31 Certificate serial: 019B7EA55FCA4E2051A965ACD1E072E2EF95 Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/gh4KUKUecv3aIFdeyNoSCNjF_bk.roa Signing time: Fri 02 Jan 2026 12:18:45 +0000 ROA not before: Fri 02 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 185.150.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.mft rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5f:ca:4e:20:51:a9:65:ac:d1:e0:72:e2:ef:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31 Validity Not Before: Jan 2 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=821e0a50a51e72fdda20575ec8da1208d8c5fdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:8b:6d:ff:9b:e2:39:47:89:94:ef:ea:eb: e7:f9:7f:40:75:99:70:cc:4d:a6:53:22:79:a4:dc: 7a:19:bb:2b:4c:b0:6d:43:cc:c3:db:f1:40:66:08: a0:f5:86:38:0e:2a:a1:f1:d4:2d:9d:fd:ed:86:cb: 8c:b5:b6:0d:e8:ef:2f:68:4b:c3:0d:5f:5f:e6:0e: 77:c9:31:27:9d:fe:e4:6a:67:6c:b3:f6:f1:c2:4d: b3:ae:92:f7:23:b9:01:55:2b:c3:3f:ac:b7:f3:a3: c7:f5:fd:fe:cb:fc:7c:af:e2:b1:b0:c3:73:f1:fc: 1b:5d:d5:e3:34:1f:82:e9:3f:9e:be:ff:a8:79:a6: d0:8e:e1:d3:e6:5e:0b:64:04:46:aa:5a:f2:ce:ca: 34:98:fd:f1:10:ca:d3:b2:02:79:42:be:69:ef:b1: 81:9b:a8:e8:59:3e:73:ef:66:3f:59:2f:6d:a2:3d: 4e:aa:ab:72:10:33:ad:43:72:97:a0:7c:5f:90:52: 2e:ba:cf:b0:06:62:a1:f8:57:6d:c9:67:4b:1a:f2: 51:b3:d2:73:99:1f:e1:f1:d4:22:b5:da:26:3d:5a: 66:b0:b8:5c:0d:4d:7c:22:9f:8a:e0:28:e2:df:41: 81:27:40:72:9e:93:1a:8b:13:97:9d:9d:63:f9:2f: af:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1E:0A:50:A5:1E:72:FD:DA:20:57:5E:C8:DA:12:08:D8:C5:FD:B9 X509v3 Authority Key Identifier: keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/gh4KUKUecv3aIFdeyNoSCNjF_bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.216.0/22 Signature Algorithm: sha256WithRSAEncryption a1:31:a5:87:7c:b8:56:fb:ff:44:b9:9b:79:26:1d:7e:e8:c9: a5:83:9d:31:8e:af:ec:88:f7:11:65:f8:0f:5a:c9:10:78:5a: d5:1b:92:a4:82:57:15:f5:63:59:70:03:c8:09:89:df:ec:9d: 72:f5:7d:bd:11:14:55:d8:01:ca:cf:e7:76:03:eb:15:c9:c3: de:9c:c8:b4:af:29:f0:40:1b:98:39:43:79:ed:e7:23:c6:21: 0e:5d:2d:ce:c5:da:87:22:88:82:d9:e4:a3:a1:c8:78:2a:c4: 8d:49:c7:a0:44:20:5d:63:dc:20:ef:bc:8d:d0:de:dc:00:5c: 2b:7a:ad:59:bb:1a:52:cc:47:22:e3:11:60:da:77:38:ab:e3: 55:3c:94:d6:b7:f3:63:76:89:12:30:cf:6f:de:c7:e5:c9:5a: 96:bc:f4:b3:c1:d6:2a:41:d9:bf:e3:4d:bf:f5:03:c6:ee:92: d4:b7:30:6a:98:67:c7:a4:99:5d:9f:bc:09:5c:e0:98:48:e3: ab:24:6a:2f:9d:05:a2:dd:d9:95:9a:a2:2b:f7:89:05:85:55: 06:fc:3c:2c:ad:e8:46:5e:52:c1:83:cb:82:de:3c:6b:21:05: bb:f7:93:ee:3b:35:8f:6d:3c:9f:d3:86:e1:b5:3e:01:74:76: 0a:19:99:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pV/KTiBRqWWs0eBy4u+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZDFmZjZiZWM5ZmJjYjg5ZTk1MGEzYTAxZWYyZDY4NmYw ZTdhMzEwHhcNMjYwMTAyMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjFlMGE1MGE1MWU3MmZkZGEyMDU3NWVjOGRhMTIwOGQ4YzVmZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf+Lbf+b4jlHiZTv6uvn+X9AdZlw zE2mUyJ5pNx6GbsrTLBtQ8zD2/FAZgig9YY4Diqh8dQtnf3thsuMtbYN6O8vaEvD DV9f5g53yTEnnf7kamdss/bxwk2zrpL3I7kBVSvDP6y386PH9f3+y/x8r+KxsMNz 8fwbXdXjNB+C6T+evv+oeabQjuHT5l4LZARGqlryzso0mP3xEMrTsgJ5Qr5p77GB m6joWT5z72Y/WS9toj1OqqtyEDOtQ3KXoHxfkFIuus+wBmKh+FdtyWdLGvJRs9Jz mR/h8dQitdomPVpmsLhcDU18Ip+K4Cji30GBJ0BynpMaixOXnZ1j+S+vzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIIeClClHnL92iBXXsjaEgjYxf25MB8GA1UdIwQY MBaAFBXR/2vsn7y4npUKOgHvLWhvDnoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmRIX2EteWZ2TGllbFFvNkFlOHRhRzhPZWpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjct OTZiODY5MWY1MjYwLzEvZ2g0S1VLVWVjdjNhSUZkZXlOb1NDTmpGX2JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjctOTZiODY5MWY1MjYw LzEvRmRIX2EteWZ2TGllbFFvNkFlOHRhRzhPZWpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZbYMA0G CSqGSIb3DQEBCwUAA4IBAQChMaWHfLhW+/9EuZt5Jh1+6Mmlg50xjq/siPcRZfgP WskQeFrVG5KkglcV9WNZcAPICYnf7J1y9X29ERRV2AHKz+d2A+sVycPenMi0rynw QBuYOUN57ecjxiEOXS3OxdqHIoiC2eSjoch4KsSNScegRCBdY9wg77yN0N7cAFwr eq1ZuxpSzEci4xFg2nc4q+NVPJTWt/NjdokSMM9v3sflyVqWvPSzwdYqQdm/402/ 9QPG7pLUtzBqmGfHpJldn7wJXOCYSOOrJGovnQWi3dmVmqIr94kFhVUG/DwsrehG XlLBg8uC3jxrIQW795PuOzWPbTyf04bhtT4BdHYKGZkD -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:53 2026 by rpki-client