This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ghUDQHbPlSidMHFaXMk2dOJAbWE.roa File: ghUDQHbPlSidMHFaXMk2dOJAbWE.roa (raw, json) Hash identifier: P0uQVGj14DuSbY6C6TZoKJB+GFw/qkMq+q7h5gtPaug= Subject key identifier: 82:15:03:40:76:CF:95:28:9D:30:71:5A:5C:C9:36:74:E2:40:6D:61 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E264A82A2EC27B7362240D3EEF19F Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ghUDQHbPlSidMHFaXMk2dOJAbWE.roa Signing time: Thu 01 Jan 2026 12:17:48 +0000 ROA not before: Thu 01 Jan 2026 12:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30707 IP address blocks: 5.253.136.0/24 maxlen: 24 45.141.246.0/24 maxlen: 24 2a06:7247::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:26:4a:82:a2:ec:27:b7:36:22:40:d3:ee:f1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8215034076cf95289d30715a5cc93674e2406d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:60:2d:48:da:e6:c0:27:78:f5:32:24:ac: b7:b8:ad:91:28:bc:fa:76:92:9e:5d:0f:01:ac:fc: b3:61:57:95:28:e5:e0:44:90:a7:7f:8b:9a:39:5e: 98:90:91:40:30:6d:9c:d8:f9:cc:de:50:ab:d5:a3: 10:fe:48:40:fd:a5:0a:36:1e:a9:4b:2f:07:0e:30: c3:39:b9:9f:f3:5f:00:1b:55:c5:a6:8e:cd:a1:49: 4b:1e:48:f3:93:13:70:42:f1:32:8f:7e:20:e1:58: c6:55:d7:f3:cf:aa:4e:f6:54:c2:9d:4b:30:3e:4e: c5:2b:7d:33:5e:88:71:7c:c6:fc:2c:81:ea:76:f5: 71:81:c5:29:51:27:f4:dd:fd:09:b7:69:84:a7:cd: eb:07:47:8f:f3:54:33:d0:5a:98:1a:2e:50:b9:1f: 19:86:e0:ac:45:00:10:5f:8f:49:10:61:6a:dc:2d: b3:d7:63:0b:c5:8c:bf:9b:8c:0a:8e:3c:d1:52:ca: ad:ab:98:25:5b:f8:f5:02:93:66:37:b7:80:7f:69: 3e:44:42:cb:91:a1:dd:fa:3b:65:25:6b:b8:21:19: 88:8e:38:f1:4b:21:38:f5:22:35:7e:89:23:aa:48: 5b:42:84:b5:04:3f:fd:b6:36:4c:ee:5a:51:ec:f4: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:15:03:40:76:CF:95:28:9D:30:71:5A:5C:C9:36:74:E2:40:6D:61 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ghUDQHbPlSidMHFaXMk2dOJAbWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.136.0/24 45.141.246.0/24 IPv6: 2a06:7247::/45 Signature Algorithm: sha256WithRSAEncryption a7:ce:26:ca:b1:e4:31:11:40:1c:2f:80:cc:8d:f0:08:16:ae: 91:5e:44:cb:e8:c0:5c:28:e8:c6:96:7e:4a:a7:44:b1:7e:ef: 2c:1e:f8:59:be:2a:4b:0d:f8:39:b2:f5:77:15:cc:05:dc:03: 01:bd:5d:54:d4:fa:51:58:79:2b:4d:96:65:30:b3:b6:7f:b2: f0:fd:2e:15:a4:48:64:bd:ad:cf:95:5f:ad:21:06:9d:9b:a5: 2a:7b:75:02:43:90:b9:0e:1b:e4:1d:cc:ed:ef:38:86:e7:80: 92:b7:cb:a5:c7:e3:9b:08:5d:5d:ad:82:f6:41:ed:fe:ea:9d: 57:1b:a6:cc:98:bf:4b:b3:2d:51:c6:c2:7b:5f:3e:53:7c:63: 6f:3b:c2:ec:76:dd:1a:cf:d2:2a:ca:4e:bd:8c:27:fb:5f:18: 1a:5d:90:07:08:2a:f1:d6:aa:cf:89:83:b3:98:bf:27:de:d7: 26:95:eb:7b:19:ab:10:0d:38:78:d5:2f:ae:6f:23:6a:c2:23: 28:e2:32:85:bb:db:73:40:88:ec:5a:ab:cf:90:c0:5c:f7:72: fe:84:bb:6c:09:b0:dd:66:0f:22:78:93:db:06:c2:f0:ea:c7: c3:2c:65:d6:fb:dc:b1:7c:26:00:d5:22:85:ef:80:b6:77:0b: af:5f:b5:b9 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5fiZKgqLsJ7c2IkDT7vGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjE1MDM0MDc2Y2Y5NTI4OWQzMDcxNWE1Y2M5MzY3NGUyNDA2ZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpRgLUja5sAnePUyJKy3uK2RKLz6 dpKeXQ8BrPyzYVeVKOXgRJCnf4uaOV6YkJFAMG2c2PnM3lCr1aMQ/khA/aUKNh6p Sy8HDjDDObmf818AG1XFpo7NoUlLHkjzkxNwQvEyj34g4VjGVdfzz6pO9lTCnUsw Pk7FK30zXohxfMb8LIHqdvVxgcUpUSf03f0Jt2mEp83rB0eP81Qz0FqYGi5QuR8Z huCsRQAQX49JEGFq3C2z12MLxYy/m4wKjjzRUsqtq5glW/j1ApNmN7eAf2k+RELL kaHd+jtlJWu4IRmIjjjxSyE49SI1fokjqkhbQoS1BD/9tjZM7lpR7PSa/wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIIVA0B2z5UonTBxWlzJNnTiQG1hMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvZ2hVRFFIYlBsU2lkTUhGYVhNazJkT0pBYldFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQABf2IAwQA LY32MA8EAgACMAkDBwMqBnJHAAAwDQYJKoZIhvcNAQELBQADggEBAKfOJsqx5DER QBwvgMyN8AgWrpFeRMvowFwo6MaWfkqnRLF+7ywe+Fm+KksN+Dmy9XcVzAXcAwG9 XVTU+lFYeStNlmUws7Z/svD9LhWkSGS9rc+VX60hBp2bpSp7dQJDkLkOG+QdzO3v OIbngJK3y6XH45sIXV2tgvZB7f7qnVcbpsyYv0uzLVHGwntfPlN8Y287wux23RrP 0irKTr2MJ/tfGBpdkAcIKvHWqs+Jg7OYvyfe1yaV63sZqxANOHjVL65vI2rCIyji MoW723NAiOxaq8+QwFz3cv6Eu2wJsN1mDyJ4k9sGwvDqx8MsZdb73LF8JgDVIoXv gLZ3C69ftbk= -----END CERTIFICATE-----Generated at Mon Jan 19 20:22:05 2026 by rpki-client