This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/ggOW3o-MbvU8qrixzLewXEOW-dA.roa File: ggOW3o-MbvU8qrixzLewXEOW-dA.roa (raw, json) Hash identifier: l2JHFaXh36mxZ4Wh5hSlzL5jEoUquwv+npOClo9uaVo= Subject key identifier: 82:03:96:DE:8F:8C:6E:F5:3C:AA:B8:B1:CC:B7:B0:5C:43:96:F9:D0 Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208 Certificate serial: 019B79EC614F23FD6F320F74D8826C5F945F Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/ggOW3o-MbvU8qrixzLewXEOW-dA.roa Signing time: Thu 01 Jan 2026 14:18:13 +0000 ROA not before: Thu 01 Jan 2026 14:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16247 IP address blocks: 194.145.240.0/24 maxlen: 24 194.145.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:61:4f:23:fd:6f:32:0f:74:d8:82:6c:5f:94:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208 Validity Not Before: Jan 1 14:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=820396de8f8c6ef53caab8b1ccb7b05c4396f9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:51:76:b4:f4:74:6a:82:78:6c:70:2d:83: 5c:2b:d5:0c:f7:1c:a5:b7:e7:32:09:45:f6:92:37: bc:32:10:e1:79:6c:89:cf:05:55:a3:37:3e:ff:8a: b9:a4:2c:68:a1:a5:e5:46:9a:57:4b:8a:27:23:8a: 10:bd:c6:21:2f:5b:4a:25:38:98:71:03:55:fb:15: 8e:47:c4:b3:2e:92:1a:02:32:da:29:46:65:79:f5: 9d:01:3b:40:01:71:29:a8:40:35:cf:b2:9c:6f:1b: 1c:0c:0a:ad:d1:18:29:18:08:82:01:49:28:c6:16: b4:f1:2e:58:87:e6:20:96:58:f2:be:e4:a1:13:7f: 0b:5e:e9:29:30:29:10:c3:f3:a5:09:07:39:a4:ec: 82:22:b2:36:cb:f6:91:d2:20:6d:7c:3a:ef:03:b9: 0c:7c:1a:f0:b1:8d:a2:72:7d:88:79:3e:e9:17:6e: 5f:37:e1:2d:d4:c5:0b:25:06:87:0b:ca:81:cf:83: e9:9a:54:f3:be:b1:d9:18:d5:ae:8b:c5:b2:a6:7a: 80:11:2b:6f:ec:a2:e8:d3:9f:cd:0b:82:e0:81:bd: 62:62:1e:6c:7e:4e:19:14:26:a7:06:e4:4b:79:c0: e0:6c:bd:cf:fe:48:48:2d:81:ef:44:da:5b:2a:3f: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:03:96:DE:8F:8C:6E:F5:3C:AA:B8:B1:CC:B7:B0:5C:43:96:F9:D0 X509v3 Authority Key Identifier: keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/ggOW3o-MbvU8qrixzLewXEOW-dA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.145.240.0/23 Signature Algorithm: sha256WithRSAEncryption 00:e1:6f:40:46:99:05:ef:36:fd:3a:4a:6c:26:a6:13:32:46: c8:64:cf:6e:1d:03:ad:04:38:a8:ac:8d:10:3a:fd:34:ea:a9: 6d:c4:e1:70:ee:42:62:56:a9:20:f2:01:2d:45:a3:be:f6:ae: 7f:c5:e7:0c:a0:6e:58:07:d0:eb:66:e5:61:b0:04:dc:f3:af: 07:eb:f3:9e:c7:cc:cc:39:8a:db:1c:2f:65:df:d1:80:22:9f: fe:8d:6b:27:28:dc:ee:71:b5:f6:4a:5e:0f:de:3e:af:04:a5: cc:0b:5c:3d:31:5e:32:93:1f:fe:99:a4:12:6c:28:b8:45:54: 75:4a:53:42:1f:d3:19:60:d2:d5:34:cf:84:48:43:b4:3a:c3: 68:66:f2:43:83:61:88:2f:a6:9e:3a:23:3c:67:8b:38:07:f2: 5c:ef:65:9a:92:80:81:62:70:22:73:c1:c3:36:4d:c4:1f:f2: 37:39:cc:3b:74:53:eb:35:62:6e:e6:2d:ff:17:85:d6:db:e5: b0:ab:1a:28:a8:1e:97:31:af:3d:58:ea:3d:89:9e:b2:da:76: 58:ba:75:10:4e:b4:7a:83:7d:92:51:0b:20:30:82:29:8d:64: 5c:b8:f9:e1:5a:a9:2b:39:f1:f4:cc:9c:f3:a4:be:9d:15:5b: 10:3a:10:90 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt57GFPI/1vMg902IJsX5RfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWU5ODgxYmYxMTIwOThhMmJmZDQ5YTBiY2ZmZGNjY2U3 YmMyMDgwHhcNMjYwMTAxMTQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjAzOTZkZThmOGM2ZWY1M2NhYWI4YjFjY2I3YjA1YzQzOTZmOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvtRdrT0dGqCeGxwLYNcK9UM9xyl t+cyCUX2kje8MhDheWyJzwVVozc+/4q5pCxooaXlRppXS4onI4oQvcYhL1tKJTiY cQNV+xWOR8SzLpIaAjLaKUZlefWdATtAAXEpqEA1z7KcbxscDAqt0RgpGAiCAUko xha08S5Yh+YglljyvuShE38LXukpMCkQw/OlCQc5pOyCIrI2y/aR0iBtfDrvA7kM fBrwsY2icn2IeT7pF25fN+Et1MULJQaHC8qBz4PpmlTzvrHZGNWui8WypnqAEStv 7KLo05/NC4Lggb1iYh5sfk4ZFCanBuRLecDgbL3P/khILYHvRNpbKj9D3wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIIDlt6PjG71PKq4scy3sFxDlvnQMB8GA1UdIwQY MBaAFPiumIG/ESCYor/UmgvP/czOe8IIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LNllnYjhSSUppaXY5U2FDOF85ek01N3dnZy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFm LTI1YTE1YTUyNGY4Ny8xL2dnT1czby1NYnZVOHFyaXh6TGV3WEVPVy1kQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFmLTI1YTE1YTUyNGY4 Ny8xLzEtSzZZZ2I4UklKaWl2OVNhQzhfOXpNNTd3Z2cuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHCkfAw DQYJKoZIhvcNAQELBQADggEBAADhb0BGmQXvNv06SmwmphMyRshkz24dA60EOKis jRA6/TTqqW3E4XDuQmJWqSDyAS1Fo772rn/F5wygblgH0Otm5WGwBNzzrwfr857H zMw5itscL2Xf0YAin/6Nayco3O5xtfZKXg/ePq8EpcwLXD0xXjKTH/6ZpBJsKLhF VHVKU0If0xlg0tU0z4RIQ7Q6w2hm8kODYYgvpp46IzxnizgH8lzvZZqSgIFicCJz wcM2TcQf8jc5zDt0U+s1Ym7mLf8Xhdbb5bCrGiioHpcxrz1Y6j2JnrLadli6dRBO tHqDfZJRCyAwgimNZFy4+eFaqSs58fTMnPOkvp0VWxA6EJA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:34 2026 by rpki-client