This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/rGOh0aBSaJUcTjStlHDAvBi9GYw.roa File: rGOh0aBSaJUcTjStlHDAvBi9GYw.roa (raw, json) Hash identifier: 8mVUWl2qPU5MUsEWDFtGCEbrM6SO1p6D449zgLNKtAU= Subject key identifier: AC:63:A1:D1:A0:52:68:95:1C:4E:34:AD:94:70:C0:BC:18:BD:19:8C Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b Certificate serial: 019B7A5B512DFE44BD38DD72A6CB16C97E1D Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/rGOh0aBSaJUcTjStlHDAvBi9GYw.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 5.11.20.0/24 maxlen: 24 5.11.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:51:2d:fe:44:bd:38:dd:72:a6:cb:16:c9:7e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac63a1d1a05268951c4e34ad9470c0bc18bd198c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e8:45:2a:6a:1e:fe:02:b6:8d:0f:aa:05:26: 27:68:fe:29:c1:97:67:cb:a5:3f:a6:e5:9a:98:50: 11:c4:d8:28:3d:24:e1:4b:40:32:cc:ae:2f:a7:92: 28:02:d4:80:1f:01:92:ec:2e:93:eb:8d:5b:93:cd: 37:92:99:32:43:b9:79:fc:31:4a:8d:bb:2d:da:f5: 9a:8b:0a:6b:5c:11:f0:2b:ed:6c:7d:46:ff:c1:78: 8e:b4:13:06:d2:58:fc:18:fe:62:af:87:56:f0:5f: d1:51:56:f4:87:5b:28:df:79:d5:51:8d:a6:9f:5f: 8b:31:39:b2:05:13:df:fa:5b:f2:03:18:2a:11:7a: 8d:5e:34:94:7b:1d:2f:f3:44:9c:97:23:0f:53:12: a9:3f:32:5d:15:7f:20:7c:4b:82:69:4e:d9:c4:8e: 5d:a0:10:c5:f5:31:31:11:c2:9a:d8:e1:95:67:0d: 2f:b2:5a:57:7e:5d:6d:f5:39:44:54:b4:88:7c:5d: aa:d2:3b:4d:6c:7c:45:9e:b6:ae:f0:1f:8b:f3:50: 21:48:42:df:1b:0d:1d:cb:6f:74:46:3e:1a:49:b0: 6b:6d:16:cf:43:ff:9b:cd:db:07:f8:6f:84:1c:15: 4c:45:02:5f:16:c1:a1:32:d9:4d:78:76:5b:3a:76: 27:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:63:A1:D1:A0:52:68:95:1C:4E:34:AD:94:70:C0:BC:18:BD:19:8C X509v3 Authority Key Identifier: keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/rGOh0aBSaJUcTjStlHDAvBi9GYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.20.0/24 5.11.23.0/24 Signature Algorithm: sha256WithRSAEncryption 65:40:24:f5:21:6a:7e:d7:dc:4b:65:74:84:8e:08:04:ef:90: 63:89:20:76:ea:d5:66:3e:d8:a6:ec:20:32:ed:c4:0a:16:3d: 52:69:ba:d1:b4:0c:f4:d5:2a:4a:d5:de:4c:5c:47:18:66:ec: 3d:8c:e6:8a:11:0d:df:20:5e:1c:6d:1a:dc:ca:35:fa:36:66: 4e:07:c3:34:0b:09:d0:f2:06:51:d2:f8:17:9c:fc:5c:6a:f2: e9:80:59:a8:6f:57:76:d7:81:96:69:f8:3c:e2:33:91:21:3d: 6f:2e:ae:d2:e6:b1:1b:24:75:d7:29:5c:8e:1c:40:8b:96:1b: fb:f9:2d:81:0b:a8:b8:fe:00:c4:3e:e9:1e:0f:d9:4c:be:d0: 05:85:d7:e7:90:2b:f2:5e:c8:bf:d5:ec:5b:20:c2:1b:af:26: 66:98:57:ad:fc:df:7e:d4:42:59:ea:99:c7:14:64:35:79:2c: 33:67:91:59:25:16:29:bd:82:92:56:da:23:52:63:39:32:b6: f7:46:fa:1f:21:25:4e:4b:d0:8a:06:a4:33:a0:c5:f1:32:81: 49:30:0c:c2:2e:87:dd:23:f2:d0:ad:74:3b:57:ba:21:26:e2: a5:f3:f2:bf:f3:0c:42:80:cc:71:53:ef:55:37:f3:4c:2e:b8: 88:85:8a:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W1Et/kS9ON1ypssWyX4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4 MDY1MmIwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzYzYTFkMWEwNTI2ODk1MWM0ZTM0YWQ5NDcwYzBiYzE4YmQxOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzehFKmoe/gK2jQ+qBSYnaP4pwZdn y6U/puWamFARxNgoPSThS0AyzK4vp5IoAtSAHwGS7C6T641bk803kpkyQ7l5/DFK jbst2vWaiwprXBHwK+1sfUb/wXiOtBMG0lj8GP5ir4dW8F/RUVb0h1so33nVUY2m n1+LMTmyBRPf+lvyAxgqEXqNXjSUex0v80SclyMPUxKpPzJdFX8gfEuCaU7ZxI5d oBDF9TExEcKa2OGVZw0vslpXfl1t9TlEVLSIfF2q0jtNbHxFnrau8B+L81AhSELf Gw0dy290Rj4aSbBrbRbPQ/+bzdsH+G+EHBVMRQJfFsGhMtlNeHZbOnYnbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKxjodGgUmiVHE40rZRwwLwYvRmMMB8GA1UdIwQY MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt YTdhZGU0MzRkNDUxLzEvckdPaDBhQlNhSlVjVGpTdGxIREF2Qmk5R1l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQsUAwQA BQsXMA0GCSqGSIb3DQEBCwUAA4IBAQBlQCT1IWp+19xLZXSEjggE75BjiSB26tVm Ptim7CAy7cQKFj1SabrRtAz01SpK1d5MXEcYZuw9jOaKEQ3fIF4cbRrcyjX6NmZO B8M0CwnQ8gZR0vgXnPxcavLpgFmob1d214GWafg84jORIT1vLq7S5rEbJHXXKVyO HECLlhv7+S2BC6i4/gDEPukeD9lMvtAFhdfnkCvyXsi/1exbIMIbryZmmFet/N9+ 1EJZ6pnHFGQ1eSwzZ5FZJRYpvYKSVtojUmM5Mrb3RvofISVOS9CKBqQzoMXxMoFJ MAzCLofdI/LQrXQ7V7ohJuKl8/K/8wxCgMxxU+9VN/NMLriIhYqT -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:49 2026 by rpki-client