This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GHSDF2JPEye0O4AWUxBCYSEkaAI.roa File: GHSDF2JPEye0O4AWUxBCYSEkaAI.roa (raw, json) Hash identifier: 0lOTIXpj+IiF+Cvw2ZPIma45JyDvj6gDTakt2B0h2bc= Subject key identifier: 18:74:83:17:62:4F:13:27:B4:3B:80:16:53:10:42:61:21:24:68:02 Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39 Certificate serial: 019B7910B97BEA1D0C05439E00692F5B73C4 Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GHSDF2JPEye0O4AWUxBCYSEkaAI.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61371 IP address blocks: 109.95.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b9:7b:ea:1d:0c:05:43:9e:00:69:2f:5b:73:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39 Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18748317624f1327b43b80165310426121246802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:33:17:c1:22:34:36:1e:92:42:a7:0f:3e:c8: 1c:1e:93:a3:2b:ab:ed:1b:34:66:c9:a1:32:f3:eb: 4e:31:f2:75:b3:5d:8a:92:2c:09:7a:b8:6e:58:2a: 9a:f2:b6:4c:a1:8f:59:85:bb:01:66:25:71:39:d1: 3f:21:2c:12:a4:90:10:fe:20:41:a4:c2:a6:94:35: 35:ca:b8:55:82:c8:85:82:3c:a2:21:31:cc:b8:ca: 85:7d:69:40:3e:d0:16:95:40:46:36:69:7a:cc:0c: 4f:e2:b9:0a:10:6e:9f:dc:63:c4:81:ce:d3:1a:a9: 10:f9:ee:e1:53:c8:78:ae:0a:fc:ff:f4:ea:ac:d0: fc:18:92:38:89:1b:b3:30:02:5c:13:68:3d:e4:38: e7:3e:97:c7:f7:4d:d8:01:47:7d:7e:ad:b1:2f:f1: 4f:2c:84:44:a2:ee:4f:6e:e3:16:53:7a:1b:b7:6e: 3f:f7:6b:2b:eb:99:01:ba:3d:3e:02:12:c7:93:e2: 27:ba:14:4f:11:86:33:6f:8d:b0:fc:c7:9d:e5:f5: bc:b1:21:c0:91:b5:25:43:05:a9:cc:e2:1b:05:6a: 00:de:5d:aa:53:5a:b7:b6:4a:f3:0c:4e:64:e6:44: 7e:40:4b:08:7a:de:6d:dc:14:b4:b4:16:33:b2:51: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:74:83:17:62:4F:13:27:B4:3B:80:16:53:10:42:61:21:24:68:02 X509v3 Authority Key Identifier: keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GHSDF2JPEye0O4AWUxBCYSEkaAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.95.41.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:c6:9f:b8:fa:34:87:f1:02:d4:ce:69:50:e3:25:d7:04:ac: 12:1c:5e:90:4e:74:9b:48:cb:a2:60:e7:eb:52:0a:f7:8e:3e: 27:07:15:70:b7:28:55:28:89:92:28:3e:e4:d2:b0:e4:0e:d6: 79:0d:f4:1a:f0:51:be:92:f0:8e:2d:d2:0b:eb:5d:01:7f:d6: b0:1d:27:9b:32:d4:38:6e:f2:62:11:6a:ea:b8:07:4a:9d:61: fb:72:59:57:b1:53:67:06:08:b7:48:f8:46:10:65:49:9b:97: 56:50:74:74:db:76:ac:e6:b1:74:8c:25:24:8a:1e:b7:a3:24: 2e:fa:76:ed:87:77:a9:74:9e:89:b5:f7:4d:a9:2f:34:6f:f1: ee:4b:9b:59:ee:dc:9a:c9:f1:f6:bd:b8:28:68:93:43:93:46: 8d:13:a1:ec:27:2c:3d:a4:e6:cd:a8:5a:93:17:20:1d:47:23: 20:cf:f7:f7:99:d3:b8:bb:d5:72:b2:e0:8b:00:2b:7a:2d:65: b8:00:a0:e1:88:ee:ee:71:99:23:d2:51:09:cb:c3:6f:e8:3c: a3:ad:8d:c4:d8:a9:90:57:39:bf:05:94:e2:8d:8a:bf:02:12: 6c:79:67:d9:87:a0:a0:13:67:7f:f6:2a:70:f1:69:10:37:70: b3:c4:1d:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELl76h0MBUOeAGkvW3PEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YTYwNDZlMzdjN2UyMDc1YjQxZDZmZWY3MGQyMzEyMzAz YzVmMzkwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODc0ODMxNzYyNGYxMzI3YjQzYjgwMTY1MzEwNDI2MTIxMjQ2ODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDMXwSI0Nh6SQqcPPsgcHpOjK6vt GzRmyaEy8+tOMfJ1s12KkiwJerhuWCqa8rZMoY9ZhbsBZiVxOdE/ISwSpJAQ/iBB pMKmlDU1yrhVgsiFgjyiITHMuMqFfWlAPtAWlUBGNml6zAxP4rkKEG6f3GPEgc7T GqkQ+e7hU8h4rgr8//TqrND8GJI4iRuzMAJcE2g95DjnPpfH903YAUd9fq2xL/FP LIREou5PbuMWU3obt24/92sr65kBuj0+AhLHk+InuhRPEYYzb42w/Med5fW8sSHA kbUlQwWpzOIbBWoA3l2qU1q3tkrzDE5k5kR+QEsIet5t3BS0tBYzslG1vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBh0gxdiTxMntDuAFlMQQmEhJGgCMB8GA1UdIwQY MBaAFBmmBG43x+IHW0HW/vcNIxIwPF85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQt M2ZlYzU4NjE0YzRiLzEvR0hTREYySlBFeWUwTzRBV1V4QkNZU0VrYUFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQtM2ZlYzU4NjE0YzRi LzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbV8pMA0G CSqGSIb3DQEBCwUAA4IBAQBqxp+4+jSH8QLUzmlQ4yXXBKwSHF6QTnSbSMuiYOfr Ugr3jj4nBxVwtyhVKImSKD7k0rDkDtZ5DfQa8FG+kvCOLdIL610Bf9awHSebMtQ4 bvJiEWrquAdKnWH7cllXsVNnBgi3SPhGEGVJm5dWUHR023as5rF0jCUkih63oyQu +nbth3epdJ6JtfdNqS80b/HuS5tZ7tyayfH2vbgoaJNDk0aNE6HsJyw9pObNqFqT FyAdRyMgz/f3mdO4u9VysuCLACt6LWW4AKDhiO7ucZkj0lEJy8Nv6DyjrY3E2KmQ Vzm/BZTijYq/AhJseWfZh6CgE2d/9ipw8WkQN3CzxB23 -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:00 2026 by rpki-client