This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/GhJdnyWj9py61uVvaxvqFfy0V7c.roa File: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (raw, json) Hash identifier: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8= Subject key identifier: 1A:12:5D:9F:25:A3:F6:9C:BA:D6:E5:6F:6B:1B:EA:15:FC:B4:57:B7 Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019B78A301F7F339C14FB6AD0ECBCE60E3FD Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/GhJdnyWj9py61uVvaxvqFfy0V7c.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199308 IP address blocks: 80.245.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:01:f7:f3:39:c1:4f:b6:ad:0e:cb:ce:60:e3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a125d9f25a3f69cbad6e56f6b1bea15fcb457b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:d1:c1:56:bb:6a:0a:a4:ec:80:43:27:ca: 14:4b:96:d9:5f:82:8a:cc:e8:4a:4a:a7:40:0b:16: f4:53:b4:c6:14:ce:13:6e:b8:7c:9a:67:1c:fa:21: 10:ea:e8:f7:b0:7e:97:fe:d6:c2:15:65:0a:3b:a5: 6e:58:06:dd:8b:21:0a:ca:4b:1b:35:2d:b8:09:2c: bb:72:f7:83:5f:be:91:1f:48:04:4e:6b:6e:c1:ab: 66:5a:0f:6a:a9:6c:69:2e:a0:0b:91:9a:aa:c5:48: b7:6e:b9:a6:ed:a1:db:ab:21:53:38:7a:9c:70:f4: 1b:20:d4:b3:0f:0b:34:12:e9:e5:d0:5f:87:c7:11: 11:28:25:96:ed:fc:ee:79:a7:c0:0e:ec:53:44:18: 95:d0:66:c3:7b:e6:19:73:a9:8f:2a:8c:86:94:a6: b2:6e:33:17:47:02:4f:6a:7c:6c:51:96:ab:00:e3: 54:46:74:46:7d:4e:29:4e:6b:53:03:68:58:04:d9: 6c:59:fa:b7:41:c1:f8:9b:74:63:7a:81:91:a4:1e: 33:fb:85:97:82:f0:fe:6d:09:01:e2:2e:d1:0e:d5: e7:81:15:08:5f:28:10:13:6f:be:b6:5d:d9:3e:75: cb:c9:2e:5b:ec:89:f5:68:b1:92:43:4a:fb:79:93: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:12:5D:9F:25:A3:F6:9C:BA:D6:E5:6F:6B:1B:EA:15:FC:B4:57:B7 X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/GhJdnyWj9py61uVvaxvqFfy0V7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.245.93.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ee:eb:71:3d:0f:8f:40:ba:ee:f2:19:84:34:69:1b:c0:db: ea:9e:9a:22:fe:74:da:55:ca:aa:de:fc:b1:67:b8:ca:ec:d0: 77:6f:4e:68:6c:a0:8d:42:b7:02:df:68:e7:1e:3d:fa:72:aa: 74:e2:a2:d2:d8:8a:f7:ae:f3:b0:be:5c:23:06:2d:38:94:44: 8d:e4:fe:0b:9d:ec:aa:97:dd:1e:a0:95:79:7e:c2:76:c8:be: c3:34:e3:0d:73:48:4f:99:d1:3b:f8:c9:5c:66:be:68:b3:21: fb:63:f3:42:f3:dd:80:e0:ce:9f:16:f0:43:ab:2c:17:c4:f3: cd:cd:f4:5b:b8:26:a0:52:cf:53:57:c2:fd:ff:91:fd:74:e2: e3:34:5e:9f:6d:01:f9:0b:0c:a1:0d:88:b1:9e:5e:af:02:8d: 5b:e3:f0:63:5d:ce:b7:60:93:d4:e5:5d:2c:28:9b:67:17:4d: 55:e0:b4:90:b5:c6:11:1e:06:c3:fd:d2:36:d3:59:50:4a:92: 26:aa:6e:11:93:1a:05:72:c2:7e:f9:0c:e3:9c:b7:a4:e7:25: a9:06:ec:87:a4:ac:2e:39:19:ed:7f:a4:61:cf:22:f9:69:98: f9:40:73:8d:4f:dc:4e:a5:2d:68:72:43:71:6a:07:97:ce:a8: 7d:ca:71:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owH38znBT7atDsvOYOP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTEyNWQ5ZjI1YTNmNjljYmFkNmU1NmY2YjFiZWExNWZjYjQ1N2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljrRwVa7agqk7IBDJ8oUS5bZX4KK zOhKSqdACxb0U7TGFM4Tbrh8mmcc+iEQ6uj3sH6X/tbCFWUKO6VuWAbdiyEKyksb NS24CSy7cveDX76RH0gETmtuwatmWg9qqWxpLqALkZqqxUi3brmm7aHbqyFTOHqc cPQbINSzDws0Eunl0F+HxxERKCWW7fzueafADuxTRBiV0GbDe+YZc6mPKoyGlKay bjMXRwJPanxsUZarAONURnRGfU4pTmtTA2hYBNlsWfq3QcH4m3RjeoGRpB4z+4WX gvD+bQkB4i7RDtXngRUIXygQE2++tl3ZPnXLyS5b7In1aLGSQ0r7eZPotwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBoSXZ8lo/acutblb2sb6hX8tFe3MB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvR2hKZG55V2o5cHk2MXVWdmF4dnFGZnkwVjdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPVdMA0G CSqGSIb3DQEBCwUAA4IBAQBc7utxPQ+PQLru8hmENGkbwNvqnpoi/nTaVcqq3vyx Z7jK7NB3b05obKCNQrcC32jnHj36cqp04qLS2Ir3rvOwvlwjBi04lESN5P4Lneyq l90eoJV5fsJ2yL7DNOMNc0hPmdE7+MlcZr5osyH7Y/NC892A4M6fFvBDqywXxPPN zfRbuCagUs9TV8L9/5H9dOLjNF6fbQH5CwyhDYixnl6vAo1b4/BjXc63YJPU5V0s KJtnF01V4LSQtcYRHgbD/dI201lQSpImqm4RkxoFcsJ++QzjnLek5yWpBuyHpKwu ORntf6RhzyL5aZj5QHONT9xOpS1ockNxageXzqh9ynEm -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:23 2026 by rpki-client