This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/GhP6Vn--SqdLNlAbm7AaZpnExPU.roa
File: GhP6Vn--SqdLNlAbm7AaZpnExPU.roa (raw, json)
Hash identifier: LE4ZlCHS2qUrwNtls6Qsm1YOj9fYR0KcBc+qgdSoRxA=
Subject key identifier: 1A:13:FA:56:7F:BE:4A:A7:4B:36:50:1B:9B:B0:1A:66:99:C4:C4:F5
Certificate issuer: /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial: 019B7E3792FB2EC3C887D4678458BDFD91B3
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/GhP6Vn--SqdLNlAbm7AaZpnExPU.roa
Signing time: Fri 02 Jan 2026 10:18:49 +0000
ROA not before: Fri 02 Jan 2026 10:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35654
IP address blocks: 80.72.66.0/24 maxlen: 24
80.72.68.0/24 maxlen: 24
80.72.69.0/24 maxlen: 24
80.72.75.0/24 maxlen: 24
80.72.77.0/24 maxlen: 24
80.72.80.0/24 maxlen: 24
80.72.82.0/24 maxlen: 24
80.72.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:92:fb:2e:c3:c8:87:d4:67:84:58:bd:fd:91:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Validity
Not Before: Jan 2 10:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a13fa567fbe4aa74b36501b9bb01a6699c4c4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:df:6b:b7:6b:a4:ad:d3:d4:49:83:2e:34:
2d:13:85:0e:8c:e6:17:d6:c0:2f:16:32:1c:03:88:
35:1e:db:04:9d:85:b9:f2:da:e3:70:1f:49:38:08:
af:68:a9:f7:ae:de:28:7a:17:23:de:d1:97:3e:4b:
e0:c5:ca:e2:29:f3:bf:72:3a:ff:b9:ba:55:51:19:
a6:cc:0f:ca:f4:be:e4:99:17:34:5e:41:c7:b0:7a:
1d:e5:78:1f:53:fa:24:33:b5:0b:9a:51:38:33:ce:
c8:b8:42:ca:00:05:af:e9:da:8e:21:3f:6c:a4:74:
f9:30:85:db:44:be:04:5d:b3:7a:bf:f2:fe:27:7f:
be:25:50:25:5e:f2:05:58:51:d7:01:fb:e9:4e:2b:
bc:6b:03:bc:03:a4:18:d2:85:b9:89:ac:0d:ff:ab:
00:05:95:8f:0a:21:63:30:9f:c2:0e:ae:8f:3e:4c:
d4:3b:47:2b:96:64:b1:95:53:fe:0b:77:7d:2c:1d:
f7:99:26:44:a9:63:c9:bb:d7:cc:0a:4c:bf:11:65:
b5:90:40:ad:33:9d:40:2b:f3:f6:f2:49:dc:22:1b:
21:8c:0c:b2:64:8c:50:57:62:47:1a:19:fa:aa:63:
83:f0:36:51:9a:70:47:f7:c8:2b:76:69:e4:76:e4:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:13:FA:56:7F:BE:4A:A7:4B:36:50:1B:9B:B0:1A:66:99:C4:C4:F5
X509v3 Authority Key Identifier:
keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/GhP6Vn--SqdLNlAbm7AaZpnExPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.66.0/24
80.72.68.0/23
80.72.75.0/24
80.72.77.0/24
80.72.80.0/24
80.72.82.0/24
80.72.95.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4a:e0:83:f0:0a:f7:7b:b0:3b:df:40:07:f8:08:20:a9:cf:
d0:74:f4:b5:8f:a4:f3:9f:bd:30:93:06:52:4b:20:a0:f4:bf:
73:24:1c:05:35:d8:a0:3b:f9:20:e5:5d:70:de:1a:28:f7:b5:
5f:28:e3:fa:b4:35:f0:4b:83:c3:8d:57:f6:89:4e:97:2c:70:
f1:04:68:51:88:6a:ee:5b:25:38:45:74:51:fe:8f:31:5b:dd:
5d:92:a2:2b:82:d7:8f:e6:a3:84:1e:91:2c:ad:39:6f:63:c1:
12:26:51:fc:1f:8f:e2:13:1f:55:76:6f:5e:3a:79:80:0b:f5:
87:ca:ba:da:88:79:5d:2d:7c:34:11:72:61:e2:00:68:36:e4:
68:36:d3:55:65:4a:d1:dc:e9:53:e7:70:76:23:bb:6f:e5:59:
8e:37:c4:22:5f:92:27:d4:d2:80:0f:88:d6:f9:f0:c4:52:1f:
7f:6e:0e:02:b0:82:28:14:83:16:2c:1f:b5:97:8f:d7:0e:e4:
f8:52:5e:3e:a1:66:df:3d:04:cc:8c:b3:42:53:f7:3e:24:b8:
48:2a:db:58:04:c0:25:36:58:42:88:bf:1d:9b:a6:17:00:58:
d3:76:ce:2d:ce:bb:ac:51:5f:01:21:74:9f:64:7e:52:70:1c:
62:0a:7f:e5
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZt+N5L7LsPIh9RnhFi9/ZGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjcxZTUyZjdlOTdhMmVhNTNmNWVjYWJkNmI5NGJjOGMw
NzVhNmEwHhcNMjYwMTAyMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTEzZmE1NjdmYmU0YWE3NGIzNjUwMWI5YmIwMWE2Njk5YzRjNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hXfa7drpK3T1EmDLjQtE4UOjOYX
1sAvFjIcA4g1HtsEnYW58trjcB9JOAivaKn3rt4oehcj3tGXPkvgxcriKfO/cjr/
ubpVURmmzA/K9L7kmRc0XkHHsHod5XgfU/okM7ULmlE4M87IuELKAAWv6dqOIT9s
pHT5MIXbRL4EXbN6v/L+J3++JVAlXvIFWFHXAfvpTiu8awO8A6QY0oW5iawN/6sA
BZWPCiFjMJ/CDq6PPkzUO0crlmSxlVP+C3d9LB33mSZEqWPJu9fMCky/EWW1kECt
M51AK/P28kncIhshjAyyZIxQV2JHGhn6qmOD8DZRmnBH98grdmnkduQaywIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBoT+lZ/vkqnSzZQG5uwGmaZxMT1MB8GA1UdIwQY
MBaAFCZnHlL36XoupT9eyr1rlLyMB1pqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mYWI4YmItMDU0Ny00ZjMzLWFjY2Yt
MjUxOThlMGVkNjg3LzEvR2hQNlZuLS1TcWRMTmxBYm03QWFacG5FeFBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mYWI4YmItMDU0Ny00ZjMzLWFjY2YtMjUxOThlMGVkNjg3
LzEvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAUEhCAwQB
UEhEAwQAUEhLAwQAUEhNAwQAUEhQAwQAUEhSAwQAUEhfMA0GCSqGSIb3DQEBCwUA
A4IBAQA3SuCD8Ar3e7A730AH+Aggqc/QdPS1j6Tzn70wkwZSSyCg9L9zJBwFNdig
O/kg5V1w3hoo97VfKOP6tDXwS4PDjVf2iU6XLHDxBGhRiGruWyU4RXRR/o8xW91d
kqIrgteP5qOEHpEsrTlvY8ESJlH8H4/iEx9Vdm9eOnmAC/WHyrraiHldLXw0EXJh
4gBoNuRoNtNVZUrR3OlT53B2I7tv5VmON8QiX5In1NKAD4jW+fDEUh9/bg4CsIIo
FIMWLB+1l4/XDuT4Ul4+oWbfPQTMjLNCU/c+JLhIKttYBMAlNlhCiL8dm6YXAFjT
ds4tzrusUV8BIXSfZH5ScBxiCn/l
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:17 2026 by rpki-client