This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/gdh12HnOMOEqYVtaca7KAq1urKE.roa File: gdh12HnOMOEqYVtaca7KAq1urKE.roa (raw, json) Hash identifier: xH1nYkWxaZr276GAcCdV3VvkfxZ8MURBbGI3J9HTllU= Subject key identifier: 81:D8:75:D8:79:CE:30:E1:2A:61:5B:5A:71:AE:CA:02:AD:6E:AC:A1 Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860 Certificate serial: 019B7E37418AA8019BCC154C18EBF9A0CFB3 Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/gdh12HnOMOEqYVtaca7KAq1urKE.roa Signing time: Fri 02 Jan 2026 10:18:28 +0000 ROA not before: Fri 02 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201544 IP address blocks: 89.108.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:41:8a:a8:01:9b:cc:15:4c:18:eb:f9:a0:cf:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b050211219d18e996e086cb7f6309178804860 Validity Not Before: Jan 2 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81d875d879ce30e12a615b5a71aeca02ad6eaca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:82:af:2a:52:37:36:95:c1:2f:7a:b1:00:59: 65:08:a6:f2:e8:67:df:8a:95:f7:cc:01:ac:ea:49: 44:80:67:de:b5:4b:58:3c:78:b4:e5:33:e6:7b:f4: 56:d4:8c:94:50:3f:f9:9e:af:5a:7e:81:ba:ea:0a: 0d:e3:20:04:08:ea:d7:f1:94:38:f7:bf:4e:f8:81: ff:54:9e:43:b9:2e:38:99:4d:5d:56:8a:6a:4b:f7: cc:a2:0d:b8:4c:e0:9a:ed:37:9e:ab:7f:1c:e1:95: a6:30:44:01:4d:33:4c:f6:c5:ae:ff:3c:7b:09:ff: fe:b7:49:40:3d:38:e0:52:6b:8b:5c:19:18:08:01: 4b:1b:7e:53:2d:ab:88:6d:48:91:92:f3:4c:35:65: b9:68:74:31:96:67:22:a2:63:cf:3a:53:f6:23:31: c4:46:f1:c7:29:7d:31:42:16:87:5c:74:7c:51:48: 99:aa:c0:67:0a:4d:37:64:66:67:e8:2a:54:47:34: 6b:a8:83:1c:d2:20:81:9f:66:c5:31:24:39:67:15: a5:44:16:7f:d3:9a:85:39:8f:66:e8:a2:c0:b0:da: 86:a9:77:b5:34:dc:48:60:fd:6c:8c:53:cc:fc:ed: 56:47:74:07:45:3f:6f:e6:ed:34:8b:64:6e:c7:8d: 63:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D8:75:D8:79:CE:30:E1:2A:61:5B:5A:71:AE:CA:02:AD:6E:AC:A1 X509v3 Authority Key Identifier: keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/gdh12HnOMOEqYVtaca7KAq1urKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.108.134.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:12:2b:2c:0e:c9:37:aa:ce:5c:91:5d:7a:df:24:16:94:cb: 41:52:aa:f5:d3:e3:0a:45:51:7e:65:bb:20:79:46:62:dc:67: 8c:9d:53:e4:4d:db:88:0c:ec:3e:7f:76:f4:45:dc:7c:ec:cf: 78:04:e7:7b:09:06:99:6a:72:83:1a:55:fa:e2:8e:65:18:16: 39:ab:de:23:cc:f8:9a:e6:7c:ab:61:a7:e4:d1:ed:9b:30:a3: 2d:e5:62:c3:48:44:b3:58:9a:3d:9d:91:2f:47:2f:46:05:7e: 29:79:ac:97:a7:d5:fb:71:09:ef:11:a7:30:59:94:52:9d:3a: 60:11:d9:62:a2:7b:c0:b6:a2:30:e7:aa:da:11:59:30:dd:29: 86:f2:8f:dd:a2:dc:5a:2a:86:1e:72:01:ec:22:31:3a:02:db: 6e:59:66:d9:6c:da:00:3b:44:dc:23:15:2a:11:47:1f:87:44: f9:91:98:e1:a9:75:11:68:7f:e0:e9:00:6f:00:5d:59:3f:25: 64:81:2a:a9:42:7e:ae:42:b6:1b:44:68:6d:d4:50:03:ce:f1: a0:a9:d2:83:9b:92:fc:91:d6:27:b3:a9:dc:82:20:f9:15:42: 44:bf:10:ba:52:f6:cd:29:2a:fd:21:d7:42:7f:2d:e6:02:7c: 8c:c0:31:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N0GKqAGbzBVMGOv5oM+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjA1MDIxMTIxOWQxOGU5OTZlMDg2Y2I3ZjYzMDkxNzg4 MDQ4NjAwHhcNMjYwMTAyMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWQ4NzVkODc5Y2UzMGUxMmE2MTViNWE3MWFlY2EwMmFkNmVhY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oKvKlI3NpXBL3qxAFllCKby6Gff ipX3zAGs6klEgGfetUtYPHi05TPme/RW1IyUUD/5nq9afoG66goN4yAECOrX8ZQ4 979O+IH/VJ5DuS44mU1dVopqS/fMog24TOCa7Teeq38c4ZWmMEQBTTNM9sWu/zx7 Cf/+t0lAPTjgUmuLXBkYCAFLG35TLauIbUiRkvNMNWW5aHQxlmciomPPOlP2IzHE RvHHKX0xQhaHXHR8UUiZqsBnCk03ZGZn6CpURzRrqIMc0iCBn2bFMSQ5ZxWlRBZ/ 05qFOY9m6KLAsNqGqXe1NNxIYP1sjFPM/O1WR3QHRT9v5u00i2Rux41jywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIHYddh5zjDhKmFbWnGuygKtbqyhMB8GA1UdIwQY MBaAFMGwUCESGdGOmW4IbLf2MJF4gEhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUt Y2UyMjUxODdmYzM4LzEvZ2RoMTJIbk9NT0VxWVZ0YWNhN0tBcTF1cktFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUtY2UyMjUxODdmYzM4 LzEvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWyGMA0G CSqGSIb3DQEBCwUAA4IBAQA6EissDsk3qs5ckV163yQWlMtBUqr10+MKRVF+Zbsg eUZi3GeMnVPkTduIDOw+f3b0Rdx87M94BOd7CQaZanKDGlX64o5lGBY5q94jzPia 5nyrYafk0e2bMKMt5WLDSESzWJo9nZEvRy9GBX4peayXp9X7cQnvEacwWZRSnTpg EdlionvAtqIw56raEVkw3SmG8o/dotxaKoYecgHsIjE6AttuWWbZbNoAO0TcIxUq EUcfh0T5kZjhqXURaH/g6QBvAF1ZPyVkgSqpQn6uQrYbRGht1FADzvGgqdKDm5L8 kdYns6ncgiD5FUJEvxC6UvbNKSr9IddCfy3mAnyMwDHw -----END CERTIFICATE-----Generated at Wed Jan 21 18:44:54 2026 by rpki-client