This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ghhUI-e3iC-VVQBJUymOLNQq5DA.roa File: ghhUI-e3iC-VVQBJUymOLNQq5DA.roa (raw, json) Hash identifier: Dkgbj1+OrDZzm++zFchEQsBrWz1XZhyfmgyW8LR2nG0= Subject key identifier: 82:18:54:23:E7:B7:88:2F:95:55:00:49:53:29:8E:2C:D4:2A:E4:30 Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f Certificate serial: 019B797E4F0CCAC362D17D87942B7D031BC8 Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ghhUI-e3iC-VVQBJUymOLNQq5DA.roa Signing time: Thu 01 Jan 2026 12:17:59 +0000 ROA not before: Thu 01 Jan 2026 12:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203639 IP address blocks: 46.21.20.0/24 maxlen: 24 46.21.23.0/24 maxlen: 24 46.21.28.0/24 maxlen: 24 46.21.30.0/24 maxlen: 24 185.155.186.0/24 maxlen: 24 185.155.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4f:0c:ca:c3:62:d1:7d:87:94:2b:7d:03:1b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f Validity Not Before: Jan 1 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82185423e7b7882f9555004953298e2cd42ae430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:6b:d5:3c:4f:cb:56:7a:87:21:f4:27:4f: 07:2d:61:fa:82:d6:c9:f7:92:b5:9f:5e:e6:6a:11: 65:7e:ab:94:ef:a9:36:30:15:ea:c5:86:88:9f:5f: 40:db:32:56:76:14:6a:eb:be:06:a5:b5:78:2b:bb: b6:c9:f1:69:64:65:df:cc:c0:a9:51:42:cf:d0:f8: f8:ad:e5:c8:61:cd:0b:8f:f1:f3:75:9a:c6:0c:5b: 80:ea:8a:bc:74:6e:d7:ca:07:e7:30:8d:d9:26:df: 2e:18:36:ad:2d:c8:83:d9:a6:42:6f:52:42:7d:99: c4:ad:b7:47:4d:e6:f7:57:1f:e5:5e:3d:9c:fa:bc: dd:92:51:94:1a:c0:51:dc:48:ec:75:20:dc:e8:24: a9:09:f4:4d:cc:b4:c6:42:e8:13:c4:0e:0c:61:41: 3b:3f:31:ef:44:6c:57:de:df:46:dc:2b:6e:7d:d4: 02:75:b2:06:3e:0d:3d:2c:45:7c:ce:4a:fb:77:82: 20:90:df:9f:70:98:74:40:0f:c6:b3:dc:a6:6c:96: 65:88:6d:a4:71:61:62:9e:e3:ad:b1:a6:09:e9:ba: e9:9c:56:a8:6c:c9:09:4a:0b:d0:a8:91:60:05:c8: 8b:27:6a:15:35:5c:16:87:ef:44:77:27:d8:fd:70: af:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:18:54:23:E7:B7:88:2F:95:55:00:49:53:29:8E:2C:D4:2A:E4:30 X509v3 Authority Key Identifier: keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ghhUI-e3iC-VVQBJUymOLNQq5DA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.21.20.0/24 46.21.23.0/24 46.21.28.0/24 46.21.30.0/24 185.155.186.0/23 Signature Algorithm: sha256WithRSAEncryption 70:5d:61:c5:41:88:4b:4c:df:93:de:55:5a:37:ce:77:81:a1: 02:77:35:13:64:60:1e:06:12:0f:8d:5f:e5:5f:da:57:de:44: 39:45:a7:e0:7f:b3:39:1f:cf:7c:6a:6f:9b:0c:9e:61:fb:01: 9f:dc:e1:7a:60:1a:1a:ed:ac:0c:3e:0b:9e:af:46:96:02:ea: aa:17:25:3f:d1:ef:f7:c7:d6:8c:24:a5:ae:5a:5d:d1:0e:77: 5f:88:24:10:60:df:ae:4c:ee:1e:ec:cd:07:a6:94:f0:ab:a5: 09:ed:cd:55:0e:4e:01:f1:5d:e3:ac:aa:14:71:be:0e:1d:39: 21:dc:63:7b:ce:4a:55:55:56:c7:87:89:f4:11:59:f2:fe:53: 8b:5b:8e:0c:29:13:f8:e9:8d:71:48:d6:8c:2f:92:d9:53:47: 97:4c:bb:78:9f:82:ff:71:ae:8c:1d:8e:1f:69:3e:5c:3a:91: 04:71:9e:c1:ee:b5:94:47:d7:81:c3:54:8b:dd:d2:c2:5b:ad: b1:06:d8:17:db:36:c0:ec:91:2c:15:e4:7b:19:fe:d1:13:85: e3:5d:7f:fe:cd:cc:24:37:4d:14:17:2f:d0:a7:c4:7e:87:d1: 2d:6e:d9:d9:c4:bb:a8:8c:d9:c2:f9:9a:6c:0a:d0:1b:fd:1f: b2:c5:ab:aa -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5fk8MysNi0X2HlCt9AxvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NTVjYTMwNTkyMzEzMzg4OTI1ZWUxNDQxMDA5YWQzMWQ0 YmI0MWYwHhcNMjYwMTAxMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjE4NTQyM2U3Yjc4ODJmOTU1NTAwNDk1MzI5OGUyY2Q0MmFlNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPdr1TxPy1Z6hyH0J08HLWH6gtbJ 95K1n17mahFlfquU76k2MBXqxYaIn19A2zJWdhRq674GpbV4K7u2yfFpZGXfzMCp UULP0Pj4reXIYc0Lj/HzdZrGDFuA6oq8dG7XygfnMI3ZJt8uGDatLciD2aZCb1JC fZnErbdHTeb3Vx/lXj2c+rzdklGUGsBR3EjsdSDc6CSpCfRNzLTGQugTxA4MYUE7 PzHvRGxX3t9G3CtufdQCdbIGPg09LEV8zkr7d4IgkN+fcJh0QA/Gs9ymbJZliG2k cWFinuOtsaYJ6brpnFaobMkJSgvQqJFgBciLJ2oVNVwWh+9EdyfY/XCv9QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIIYVCPnt4gvlVUASVMpjizUKuQwMB8GA1UdIwQY MBaAFBRVyjBZIxM4iSXuFEEAmtMdS7QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDIt OWIyNmNhYjc5NDUxLzEvZ2hoVUktZTNpQy1WVlFCSlV5bU9MTlFxNURBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDItOWIyNmNhYjc5NDUx LzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALhUUAwQA LhUXAwQALhUcAwQALhUeAwQBuZu6MA0GCSqGSIb3DQEBCwUAA4IBAQBwXWHFQYhL TN+T3lVaN853gaECdzUTZGAeBhIPjV/lX9pX3kQ5Rafgf7M5H898am+bDJ5h+wGf 3OF6YBoa7awMPguer0aWAuqqFyU/0e/3x9aMJKWuWl3RDndfiCQQYN+uTO4e7M0H ppTwq6UJ7c1VDk4B8V3jrKoUcb4OHTkh3GN7zkpVVVbHh4n0EVny/lOLW44MKRP4 6Y1xSNaML5LZU0eXTLt4n4L/ca6MHY4faT5cOpEEcZ7B7rWUR9eBw1SL3dLCW62x BtgX2zbA7JEsFeR7Gf7RE4XjXX/+zcwkN00UFy/Qp8R+h9EtbtnZxLuojNnC+Zps CtAb/R+yxauq -----END CERTIFICATE-----Generated at Wed Jan 21 11:24:11 2026 by rpki-client