This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/GGzRSfoVy0Nu-jsvuPVqdfmtr8Y.roa File: GGzRSfoVy0Nu-jsvuPVqdfmtr8Y.roa (raw, json) Hash identifier: dY65QrN8XEoMPf47U2fyURlBpZdOUXmMg4ELu09RDqM= Subject key identifier: 18:6C:D1:49:FA:15:CB:43:6E:FA:3B:2F:B8:F5:6A:75:F9:AD:AF:C6 Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B7C13626D2AF7650FD9377BF4F5C40092 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/GGzRSfoVy0Nu-jsvuPVqdfmtr8Y.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 45.91.116.0/24 maxlen: 24 91.212.45.0/24 maxlen: 24 195.82.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:62:6d:2a:f7:65:0f:d9:37:7b:f4:f5:c4:00:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=186cd149fa15cb436efa3b2fb8f56a75f9adafc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:48:47:87:54:66:6e:7e:92:06:70:fd:1f:49: e6:9a:3c:8d:cb:73:d1:96:03:5e:63:fa:8e:db:40: b6:85:88:ae:e9:37:e8:06:8b:b3:a4:15:e0:03:23: cc:09:06:b3:44:5a:fa:4e:43:22:09:cc:b2:f4:74: 6b:a0:bf:5f:73:23:2c:ea:35:93:df:cb:55:7b:3a: 18:c8:c4:09:78:b3:27:3f:1a:13:e9:96:e3:73:9d: 80:5a:ec:72:f6:f5:b4:72:aa:97:09:31:20:38:57: ba:46:4b:cd:b4:69:eb:37:e0:a4:21:30:7a:43:61: b8:64:b9:9f:bf:cb:e5:88:3c:a2:44:f1:58:3c:66: d8:ee:52:9d:5b:25:0a:65:78:c8:9b:8c:78:08:30: 1f:a6:20:a9:4a:9a:dd:6e:03:3b:07:f5:f6:7e:9e: 4a:37:61:7a:7f:0f:3e:f6:77:8e:e6:dc:29:80:f8: bb:a8:69:b8:bd:48:a5:e1:2e:bf:3d:da:8d:1a:56: f8:1e:73:32:c3:e0:cf:77:27:13:8c:b4:d1:de:cd: 0e:c9:f7:75:61:98:6b:ff:2e:c9:14:70:81:06:6a: 0b:6b:57:69:c5:80:b3:ff:83:8e:ce:ce:a5:90:b2: f2:a1:22:a6:47:31:0f:45:48:35:e4:f6:d7:5a:b6: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6C:D1:49:FA:15:CB:43:6E:FA:3B:2F:B8:F5:6A:75:F9:AD:AF:C6 X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/GGzRSfoVy0Nu-jsvuPVqdfmtr8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.116.0/24 91.212.45.0/24 195.82.132.0/23 Signature Algorithm: sha256WithRSAEncryption 02:56:ff:bb:9b:ce:d5:d3:c4:86:c4:5c:9b:b4:e5:d5:cc:19: 87:9a:55:66:3c:6b:8c:76:7e:94:7a:bc:ce:ce:c6:aa:c5:d0: 4e:7d:44:7b:af:4c:8d:d7:09:35:36:ac:a6:8f:05:43:c2:19: 2b:1b:70:b7:c7:73:1f:91:99:a8:0e:1c:69:fa:bb:55:92:95: e6:65:03:9b:e7:71:49:00:fc:75:b9:e3:db:b7:20:f7:27:96: 05:5d:a9:a5:b0:d3:a2:33:0f:4f:c2:17:f3:b8:14:2d:42:d9: 20:f1:cd:13:7e:75:ce:5d:84:56:ca:96:8f:ad:85:7d:09:4b: d6:10:b6:91:ce:77:4d:9c:62:1c:00:23:2d:84:33:42:95:e8: 2e:19:b7:91:84:6c:a3:fb:26:88:50:73:f5:ee:a0:87:5c:f9: 62:ad:51:1c:58:ed:35:ff:53:e9:2d:88:b0:14:af:0e:23:4e: 2c:11:d2:70:da:f0:fa:e4:d6:ac:ae:ea:d1:b5:fc:db:c9:6e: fb:a9:2a:5c:50:d0:f1:62:39:38:aa:61:a7:1c:6d:14:83:ac: 93:73:3d:01:64:e7:37:07:40:76:a6:31:86:e0:df:c0:96:0b: be:92:de:30:28:00:81:47:b1:59:ff:56:4d:01:27:43:d2:6d: 3e:31:83:a8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8E2JtKvdlD9k3e/T1xACSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODZjZDE0OWZhMTVjYjQzNmVmYTNiMmZiOGY1NmE3NWY5YWRhZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkhHh1Rmbn6SBnD9H0nmmjyNy3PR lgNeY/qO20C2hYiu6TfoBouzpBXgAyPMCQazRFr6TkMiCcyy9HRroL9fcyMs6jWT 38tVezoYyMQJeLMnPxoT6Zbjc52AWuxy9vW0cqqXCTEgOFe6RkvNtGnrN+CkITB6 Q2G4ZLmfv8vliDyiRPFYPGbY7lKdWyUKZXjIm4x4CDAfpiCpSprdbgM7B/X2fp5K N2F6fw8+9neO5twpgPi7qGm4vUil4S6/PdqNGlb4HnMyw+DPdycTjLTR3s0Oyfd1 YZhr/y7JFHCBBmoLa1dpxYCz/4OOzs6lkLLyoSKmRzEPRUg15PbXWrbxNwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBhs0Un6FctDbvo7L7j1anX5ra/GMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvR0d6UlNmb1Z5ME51LWpzdnVQVnFkZm10cjhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVt0AwQA W9QtAwQBw1KEMA0GCSqGSIb3DQEBCwUAA4IBAQACVv+7m87V08SGxFybtOXVzBmH mlVmPGuMdn6UerzOzsaqxdBOfUR7r0yN1wk1NqymjwVDwhkrG3C3x3MfkZmoDhxp +rtVkpXmZQOb53FJAPx1uePbtyD3J5YFXamlsNOiMw9PwhfzuBQtQtkg8c0TfnXO XYRWypaPrYV9CUvWELaRzndNnGIcACMthDNCleguGbeRhGyj+yaIUHP17qCHXPli rVEcWO01/1PpLYiwFK8OI04sEdJw2vD65NasrurRtfzbyW77qSpcUNDxYjk4qmGn HG0Ug6yTcz0BZOc3B0B2pjGG4N/Algu+kt4wKACBR7FZ/1ZNASdD0m0+MYOo -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:42 2026 by rpki-client