This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/GdXlIc5BP-3XOg-aqWkP_a52ndk.roa File: GdXlIc5BP-3XOg-aqWkP_a52ndk.roa (raw, json) Hash identifier: G0Pn5eObq0FpgcplWCouXfdtlhgx0MPfgPeSIk/PGOo= Subject key identifier: 19:D5:E5:21:CE:41:3F:ED:D7:3A:0F:9A:A9:69:0F:FD:AE:76:9D:D9 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B76EB7B22B28739B53FA277C7262A6E6B Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/GdXlIc5BP-3XOg-aqWkP_a52ndk.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202910 IP address blocks: 185.151.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7b:22:b2:87:39:b5:3f:a2:77:c7:26:2a:6e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19d5e521ce413fedd73a0f9aa9690ffdae769dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:b9:91:91:d2:4e:09:15:89:22:86:05:64: 46:7e:aa:1f:7e:73:69:01:bc:f0:48:03:15:fe:4a: 82:6a:ca:23:e7:68:67:da:d2:73:73:3f:d1:2c:fb: d6:99:d8:77:83:45:de:ea:c3:51:fc:38:8a:66:18: 07:c7:1e:90:59:15:46:d5:f7:5a:43:b0:38:22:8d: 0a:39:ff:5c:22:3e:cd:80:b0:1a:09:c4:dd:22:7f: db:4b:f2:da:eb:85:36:87:66:62:9e:c0:16:ae:2e: f6:8b:2c:37:c6:39:d8:2a:f6:33:8f:58:40:5b:81: 17:7f:e3:09:15:dd:1b:b4:0f:0d:c1:9a:52:21:b5: d8:e5:07:0c:b3:4b:e6:d8:dc:35:3f:75:f4:84:27: 56:10:67:40:86:4f:d1:d9:61:c4:37:bd:d7:e2:92: 5d:82:22:ed:b1:35:0b:0d:de:88:2c:05:a7:bd:34: 14:cb:3e:46:ec:a5:a6:d9:2f:1d:19:83:10:3f:19: 53:4d:2b:22:9e:0a:ca:18:12:3b:a0:64:9b:ed:78: bb:75:b6:69:5b:05:7b:99:75:55:5a:a0:4a:33:a3: 75:94:87:79:8c:b0:fd:50:78:8b:20:9d:92:8c:9f: 7f:5e:67:b0:70:76:ec:d1:40:53:13:e3:7c:01:b4: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D5:E5:21:CE:41:3F:ED:D7:3A:0F:9A:A9:69:0F:FD:AE:76:9D:D9 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/GdXlIc5BP-3XOg-aqWkP_a52ndk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.16.0/22 Signature Algorithm: sha256WithRSAEncryption 20:9c:57:9a:6e:13:de:9d:86:e4:09:fa:d6:83:42:9d:92:32: 85:38:4d:dd:a9:8a:3b:35:19:bb:f8:78:61:3b:c6:f1:1d:2c: 05:91:8a:d6:e2:1b:18:81:ae:db:bb:ed:3c:36:06:b9:88:eb: 20:bb:f0:b2:da:67:25:9f:e1:95:43:ea:12:c2:9a:28:40:fd: 3a:72:8d:02:56:90:47:f6:5d:d7:01:7c:e1:74:e1:61:c9:5f: 91:2f:fc:e2:53:00:5b:21:09:32:30:d1:e1:d4:59:d4:01:b5: 28:33:a7:87:db:36:3b:85:7d:db:2d:20:98:1a:41:f7:3e:b6: 26:65:2a:e8:80:43:8a:88:65:52:4a:c0:84:04:42:60:3d:11: dd:7d:4f:ad:78:28:8a:1f:7e:ef:c4:66:0e:4c:29:4e:7d:aa: b5:bf:36:33:b7:f8:a3:37:da:b8:47:d4:d7:be:e0:8a:25:26: 35:d3:f4:77:db:7e:5f:de:d3:93:42:3c:3a:a5:b3:2a:61:4e: ba:84:b7:d9:00:55:29:8a:1e:55:b1:8e:a6:c3:d7:7c:b4:d3: 1e:b6:b6:58:9f:ad:d8:d1:7f:a6:f0:5a:09:99:39:1e:78:e8: fb:36:53:c7:79:a9:1d:a9:23:4f:c5:7b:bc:88:2b:9f:23:71: 56:af:46:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263sisoc5tT+id8cmKm5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWQ1ZTUyMWNlNDEzZmVkZDczYTBmOWFhOTY5MGZmZGFlNzY5ZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBe5kZHSTgkViSKGBWRGfqoffnNp AbzwSAMV/kqCasoj52hn2tJzcz/RLPvWmdh3g0Xe6sNR/DiKZhgHxx6QWRVG1fda Q7A4Io0KOf9cIj7NgLAaCcTdIn/bS/La64U2h2ZinsAWri72iyw3xjnYKvYzj1hA W4EXf+MJFd0btA8NwZpSIbXY5QcMs0vm2Nw1P3X0hCdWEGdAhk/R2WHEN73X4pJd giLtsTULDd6ILAWnvTQUyz5G7KWm2S8dGYMQPxlTTSsingrKGBI7oGSb7Xi7dbZp WwV7mXVVWqBKM6N1lId5jLD9UHiLIJ2SjJ9/XmewcHbs0UBTE+N8AbQ3swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBnV5SHOQT/t1zoPmqlpD/2udp3ZMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvR2RYbEljNUJQLTNYT2ctYXFXa1BfYTUybmRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZcQMA0G CSqGSIb3DQEBCwUAA4IBAQAgnFeabhPenYbkCfrWg0KdkjKFOE3dqYo7NRm7+Hhh O8bxHSwFkYrW4hsYga7bu+08Nga5iOsgu/Cy2mcln+GVQ+oSwpooQP06co0CVpBH 9l3XAXzhdOFhyV+RL/ziUwBbIQkyMNHh1FnUAbUoM6eH2zY7hX3bLSCYGkH3PrYm ZSrogEOKiGVSSsCEBEJgPRHdfU+teCiKH37vxGYOTClOfaq1vzYzt/ijN9q4R9TX vuCKJSY10/R3235f3tOTQjw6pbMqYU66hLfZAFUpih5VsY6mw9d8tNMetrZYn63Y 0X+m8FoJmTkeeOj7NlPHeakdqSNPxXu8iCufI3FWr0Zt -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:45 2026 by rpki-client