This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/ghzuYkE_gnJGPgiMxRgv65RQqec.roa File: ghzuYkE_gnJGPgiMxRgv65RQqec.roa (raw, json) Hash identifier: 1+GlWtDdPLwRz4VbLN8GbkLKLROJEbW43VoOa31HX4g= Subject key identifier: 82:1C:EE:62:41:3F:82:72:46:3E:08:8C:C5:18:2F:EB:94:50:A9:E7 Certificate issuer: /CN=c45c98430885628971307c59b5cf241682102378 Certificate serial: 019B77C70D3616B68DAC548C36DE2D461431 Authority key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/ghzuYkE_gnJGPgiMxRgv65RQqec.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8774 IP address blocks: 109.237.0.0/22 maxlen: 22 109.237.4.0/22 maxlen: 22 109.237.8.0/22 maxlen: 22 109.237.12.0/22 maxlen: 22 185.113.208.0/23 maxlen: 23 185.113.210.0/24 maxlen: 24 185.113.211.0/24 maxlen: 24 195.135.212.0/24 maxlen: 24 195.135.213.0/24 maxlen: 24 195.135.214.0/24 maxlen: 24 195.135.215.0/24 maxlen: 24 2a05:3740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0d:36:16:b6:8d:ac:54:8c:36:de:2d:46:14:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c98430885628971307c59b5cf241682102378 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=821cee62413f8272463e088cc5182feb9450a9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:40:97:8c:71:46:cf:6a:90:74:6d:9a:3b: d8:2e:a8:16:c2:13:51:53:c6:66:9e:b1:85:71:4e: 07:51:b6:5d:55:21:2b:07:8e:2a:0b:65:22:a1:35: b7:ff:3f:17:db:a8:2e:60:b4:2a:1d:55:01:0e:4f: 8c:07:7e:5c:d2:00:d9:20:79:e3:e4:b1:38:3f:d2: fc:a4:ff:4e:92:f1:6c:3e:39:23:de:70:ab:cc:d1: ae:ba:84:31:4d:a8:c8:27:b1:a2:00:90:e1:73:24: 7f:aa:28:0f:87:03:ea:4a:98:df:d6:ea:5a:8e:eb: e5:a0:13:67:83:47:eb:34:50:46:36:87:d1:eb:f0: af:b9:75:68:fc:2a:a5:b9:74:99:75:6a:12:e0:bc: 4c:ed:08:0c:e9:5a:3e:b1:56:d2:fe:94:5a:41:59: 3c:62:ce:85:ea:16:1e:f4:99:04:d9:4e:25:5e:12: c9:81:be:a8:4c:96:5f:47:5d:91:cb:1b:34:0a:29: 13:0c:42:a7:7d:29:64:9c:ff:72:81:1c:b5:9d:6c: ab:db:bf:41:fc:64:18:b0:95:0c:cd:15:58:2f:74: 24:4e:dd:41:87:42:02:62:47:3b:79:07:38:1c:b0: a9:1c:53:45:a7:b1:41:40:bc:7f:5f:ee:98:ce:e6: bc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1C:EE:62:41:3F:82:72:46:3E:08:8C:C5:18:2F:EB:94:50:A9:E7 X509v3 Authority Key Identifier: keyid:C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/ghzuYkE_gnJGPgiMxRgv65RQqec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.237.0.0/20 185.113.208.0/22 195.135.212.0/22 IPv6: 2a05:3740::/29 Signature Algorithm: sha256WithRSAEncryption 23:d8:4b:37:fc:96:a4:c2:51:e5:7c:89:73:32:d6:41:31:bd: e4:47:cc:54:f1:e2:d7:c0:f0:64:63:c2:85:b3:cf:6f:55:a6: b6:57:8c:48:d1:21:f2:28:87:a9:39:44:61:fa:03:29:ab:d3: 0f:20:6f:46:81:1c:35:18:d5:4f:bd:57:4a:cb:3d:50:76:27: 0d:ff:41:a5:1e:ee:ad:92:a7:6b:ae:bc:16:08:5b:6e:fe:63: ff:bd:ff:7f:cd:99:6d:fe:49:96:17:0b:d8:d4:1a:62:5d:32: f9:cd:7f:35:a8:70:9e:28:e8:d1:84:c9:06:8a:71:21:2c:a7: 18:8c:ad:51:88:8f:4b:4f:80:9a:79:e4:c6:08:d6:3c:30:b7: 11:da:27:8e:4f:21:b8:9e:b8:3b:3e:89:3e:a9:d0:43:5f:2c: cd:bd:62:c9:16:e5:23:b3:74:03:34:e5:ce:23:1c:97:48:76: 84:ec:9a:7a:a1:40:37:c7:a0:2e:06:0c:c3:88:f1:94:02:70: a8:39:81:ca:2f:ee:ca:c6:0d:9f:1a:bd:f7:ce:71:ed:24:80: 53:16:66:f5:45:60:e1:76:80:e3:24:80:d7:16:14:41:23:02: b2:55:52:40:e6:ac:dc:61:23:e8:fd:a3:f0:88:f2:06:ba:f1: d4:6c:4e:6a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3xw02FraNrFSMNt4tRhQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM5ODQzMDg4NTYyODk3MTMwN2M1OWI1Y2YyNDE2ODIx MDIzNzgwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjFjZWU2MjQxM2Y4MjcyNDYzZTA4OGNjNTE4MmZlYjk0NTBhOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN1Al4xxRs9qkHRtmjvYLqgWwhNR U8ZmnrGFcU4HUbZdVSErB44qC2UioTW3/z8X26guYLQqHVUBDk+MB35c0gDZIHnj 5LE4P9L8pP9OkvFsPjkj3nCrzNGuuoQxTajIJ7GiAJDhcyR/qigPhwPqSpjf1upa juvloBNng0frNFBGNofR6/CvuXVo/CqluXSZdWoS4LxM7QgM6Vo+sVbS/pRaQVk8 Ys6F6hYe9JkE2U4lXhLJgb6oTJZfR12Ryxs0CikTDEKnfSlknP9ygRy1nWyr279B /GQYsJUMzRVYL3QkTt1Bh0ICYkc7eQc4HLCpHFNFp7FBQLx/X+6Yzua8ywIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIIc7mJBP4JyRj4IjMUYL+uUUKnnMB8GA1UdIwQY MBaAFMRcmEMIhWKJcTB8WbXPJBaCECN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ5WVF3aUZZb2x4TUh4WnRjOGtGb0lRSTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zMDdjMzMtMzhhNy00ZmRhLTlhMDgt OWFiZGNhMzlkNGY3LzEvZ2h6dVlrRV9nbkpHUGdpTXhSZ3Y2NVJRcWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zMDdjMzMtMzhhNy00ZmRhLTlhMDgtOWFiZGNhMzlkNGY3 LzEveEZ5WVF3aUZZb2x4TUh4WnRjOGtGb0lRSTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEbe0AAwQC uXHQAwQCw4fUMA0EAgACMAcDBQMqBTdAMA0GCSqGSIb3DQEBCwUAA4IBAQAj2Es3 /JakwlHlfIlzMtZBMb3kR8xU8eLXwPBkY8KFs89vVaa2V4xI0SHyKIepOURh+gMp q9MPIG9GgRw1GNVPvVdKyz1QdicN/0GlHu6tkqdrrrwWCFtu/mP/vf9/zZlt/kmW FwvY1BpiXTL5zX81qHCeKOjRhMkGinEhLKcYjK1RiI9LT4CaeeTGCNY8MLcR2ieO TyG4nrg7Pok+qdBDXyzNvWLJFuUjs3QDNOXOIxyXSHaE7Jp6oUA3x6AuBgzDiPGU AnCoOYHKL+7Kxg2fGr33znHtJIBTFmb1RWDhdoDjJIDXFhRBIwKyVVJA5qzcYSPo /aPwiPIGuvHUbE5q -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:15 2026 by rpki-client