This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/gHzzrFjQIf1BnANrNt41xIyuTAI.roa File: gHzzrFjQIf1BnANrNt41xIyuTAI.roa (raw, json) Hash identifier: gdosIj1Y84eNGwiRZ4XKtJBxF5aZNg2EDodOpabV+bc= Subject key identifier: 80:7C:F3:AC:58:D0:21:FD:41:9C:03:6B:36:DE:35:C4:8C:AE:4C:02 Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695 Certificate serial: 019B7C7FE1AD05FC638BC4F7F377C91361B4 Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/gHzzrFjQIf1BnANrNt41xIyuTAI.roa Signing time: Fri 02 Jan 2026 02:18:34 +0000 ROA not before: Fri 02 Jan 2026 02:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52000 IP address blocks: 45.15.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e1:ad:05:fc:63:8b:c4:f7:f3:77:c9:13:61:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695 Validity Not Before: Jan 2 02:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=807cf3ac58d021fd419c036b36de35c48cae4c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:6b:63:4e:71:52:db:60:7e:3c:e9:20:d1: c6:9c:77:ad:b7:ab:59:d8:b9:99:5b:25:94:95:41: 52:35:ea:dc:2e:3b:1f:d9:be:30:03:ed:85:10:d0: e8:43:7b:68:0b:12:cc:06:a3:9c:c4:b3:90:28:55: ae:25:ef:55:1b:73:69:94:35:c1:b8:a0:ba:6d:e1: fe:a9:2b:24:34:b7:ec:0e:3a:48:d8:7d:c9:45:8d: 35:13:2e:db:72:5c:df:7b:7b:0a:15:c3:c8:4f:89: b8:4f:c0:a8:df:66:31:be:a7:b5:92:21:c6:23:c3: 6a:03:9c:6d:85:93:b7:7a:ab:46:e0:f4:00:2f:90: e9:61:68:08:27:37:6c:a2:28:ed:7b:99:4c:64:d5: a0:e2:ed:62:fd:01:69:ce:3f:1e:f1:32:05:ff:1a: e8:e1:e5:af:eb:fd:c7:5b:7e:a1:fc:bf:15:36:68: 23:3c:8b:6f:61:bc:0b:ca:db:f0:33:4f:0c:b3:5d: 61:bb:9c:08:05:b6:34:cf:5c:3e:ab:43:fa:e1:c4: ab:9e:9e:3b:85:b8:5a:e4:3a:90:99:10:e7:9c:ee: 20:0b:32:14:12:c5:73:2f:02:e7:b9:07:45:74:d4: df:ed:4d:ed:e0:9f:8b:12:f4:1b:78:90:bf:75:d0: 0b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7C:F3:AC:58:D0:21:FD:41:9C:03:6B:36:DE:35:C4:8C:AE:4C:02 X509v3 Authority Key Identifier: keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/gHzzrFjQIf1BnANrNt41xIyuTAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.156.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:74:e1:c8:e5:e6:dc:91:7b:cf:c7:cd:b2:c7:f5:d4:20:d8: b4:3c:7c:c3:50:cb:34:d1:7f:f2:14:62:2a:61:9e:f4:49:60: 5d:37:f9:e9:48:9d:90:8c:f0:84:1f:ce:f4:76:80:ad:47:00: 5b:9c:0a:35:b1:88:fc:25:24:2c:47:71:fd:d3:9b:66:46:b7: 53:c0:45:3e:f1:24:dd:ba:4e:33:34:dc:ec:b2:a8:49:10:b0: 55:0a:41:77:de:02:58:9f:17:69:a9:ec:c9:d1:31:bd:73:e6: 3b:cd:be:ae:36:10:20:cb:2c:ec:3a:e2:16:41:c4:b8:f7:8c: 3e:c2:29:ae:26:2e:9a:ec:f4:b4:28:55:59:a9:83:ce:9f:b6: a1:26:e9:08:0a:75:ec:61:aa:c6:ea:ed:20:35:cf:84:a5:62: 92:7d:7f:f7:16:32:02:76:55:ea:e1:2d:a9:d5:b9:d5:22:5b: af:57:12:9b:1a:42:7e:3a:ac:b9:07:15:f5:09:08:fe:28:5e: fe:9f:00:41:93:cc:38:1b:43:5b:05:3d:ee:c3:be:1c:1e:78: be:b9:1a:6f:55:f6:98:6c:4f:79:3a:1d:a5:d4:90:1c:29:6f: 9c:b0:e1:cc:72:17:45:0f:ce:d6:4c:f8:09:84:a4:ec:ef:fb: 6d:1f:83:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f+GtBfxji8T383fJE2G0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx ZjE2OTUwHhcNMjYwMTAyMDIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDdjZjNhYzU4ZDAyMWZkNDE5YzAzNmIzNmRlMzVjNDhjYWU0YzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+BrY05xUttgfjzpINHGnHett6tZ 2LmZWyWUlUFSNercLjsf2b4wA+2FENDoQ3toCxLMBqOcxLOQKFWuJe9VG3NplDXB uKC6beH+qSskNLfsDjpI2H3JRY01Ey7bclzfe3sKFcPIT4m4T8Co32Yxvqe1kiHG I8NqA5xthZO3eqtG4PQAL5DpYWgIJzdsoijte5lMZNWg4u1i/QFpzj8e8TIF/xro 4eWv6/3HW36h/L8VNmgjPItvYbwLytvwM08Ms11hu5wIBbY0z1w+q0P64cSrnp47 hbha5DqQmRDnnO4gCzIUEsVzLwLnuQdFdNTf7U3t4J+LEvQbeJC/ddALtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIB886xY0CH9QZwDazbeNcSMrkwCMB8GA1UdIwQY MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt ODk0ODA1Mjg5Y2MwLzEvZ0h6enJGalFJZjFCbkFOck50NDF4SXl1VEFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ+cMA0G CSqGSIb3DQEBCwUAA4IBAQBtdOHI5ebckXvPx82yx/XUINi0PHzDUMs00X/yFGIq YZ70SWBdN/npSJ2QjPCEH870doCtRwBbnAo1sYj8JSQsR3H905tmRrdTwEU+8STd uk4zNNzssqhJELBVCkF33gJYnxdpqezJ0TG9c+Y7zb6uNhAgyyzsOuIWQcS494w+ wimuJi6a7PS0KFVZqYPOn7ahJukICnXsYarG6u0gNc+EpWKSfX/3FjICdlXq4S2p 1bnVIluvVxKbGkJ+Oqy5BxX1CQj+KF7+nwBBk8w4G0NbBT3uw74cHni+uRpvVfaY bE95Oh2l1JAcKW+csOHMchdFD87WTPgJhKTs7/ttH4OC -----END CERTIFICATE-----Generated at Fri Jan 9 00:00:50 2026 by rpki-client