This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa File: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (raw, json) Hash identifier: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig= Subject key identifier: 18:78:C9:8F:00:69:A0:07:61:CF:D2:0C:A4:8F:3E:30:56:E6:85:78 Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054 Certificate serial: 019B797E44539C1B78C0E7C59E675045DD7E Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207044 IP address blocks: 185.12.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:44:53:9c:1b:78:c0:e7:c5:9e:67:50:45:dd:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1878c98f0069a00761cfd20ca48f3e3056e68578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:98:44:0e:79:ce:d1:f2:6b:68:7f:5a:8c: 91:63:15:24:d0:ea:0d:12:d4:e4:9f:3f:9c:e1:ab: d1:3b:b4:b0:bc:4a:95:f6:16:44:cb:33:47:0f:5c: f3:9e:51:34:97:89:0d:36:56:b3:ba:55:ef:73:72: b7:52:df:86:82:ce:54:4b:a5:ea:8a:81:40:1b:79: 54:aa:67:60:35:49:79:5e:b8:6e:9b:65:34:b1:33: d2:4a:7d:2a:25:2e:ac:19:4b:63:91:da:fa:76:e3: 87:98:6c:c2:e3:0a:a6:2e:8c:66:36:de:8e:28:22: 13:13:21:38:46:83:62:0f:35:68:8e:29:5b:4e:bc: 80:a3:40:64:24:a8:40:5a:3e:c2:ae:4f:56:a9:4e: 29:13:7c:64:1d:37:4c:67:78:de:18:90:60:dd:56: a8:b1:77:26:30:1b:ce:10:ed:e5:d0:fc:ae:10:2c: 27:27:96:e2:c4:32:de:75:a1:b4:ca:c6:a6:ac:f3: ba:3c:77:f9:84:76:40:db:8f:39:01:28:e6:21:62: 8b:1d:d1:87:cd:fb:2d:15:34:fa:d0:5c:8a:8c:56: 16:1c:7c:0c:3b:2c:50:8e:02:8f:0a:8e:48:4b:f7: df:a4:80:ba:23:31:09:d7:38:45:bd:4e:fc:34:5a: 10:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:78:C9:8F:00:69:A0:07:61:CF:D2:0C:A4:8F:3E:30:56:E6:85:78 X509v3 Authority Key Identifier: keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.157.0/24 Signature Algorithm: sha256WithRSAEncryption 44:68:5e:7a:cb:02:a9:40:0d:8f:8c:8b:dc:eb:9b:74:b0:f2: 0b:a1:65:08:c6:ab:88:c1:cb:c4:50:0d:7b:f4:37:a7:61:c8: f9:2d:ae:79:d3:88:20:33:11:6c:53:e2:7d:26:81:53:b7:99: 24:6a:de:c6:12:c8:9f:63:d7:4e:ae:5d:1d:42:b9:90:78:15: 3c:78:f2:dd:8a:58:e8:ba:2a:02:1f:13:a2:75:3f:39:9d:4e: fe:d3:d9:36:ec:73:72:a1:c8:03:74:3b:5b:85:81:41:9e:62: b8:7e:ba:06:1b:eb:d9:ff:92:6f:df:5e:d0:d1:2b:7e:38:68: bf:a6:c7:11:3f:ac:1b:1d:c7:12:54:c7:a6:7d:45:e0:17:a0: bd:78:f0:68:d7:4e:3a:82:89:df:1b:19:9e:9b:eb:c3:07:d8: e3:ef:53:a4:db:6c:62:49:31:56:b6:61:71:f0:9c:50:05:94: cd:77:a7:6f:40:72:ef:53:f8:4a:ba:74:c5:61:bb:f3:07:68: 1b:c6:15:c7:30:99:27:43:55:06:3f:00:97:49:95:88:34:54: 9f:e2:b0:22:ec:8b:5a:8f:ae:8c:3f:f8:d8:48:53:9f:a0:a4: 7f:f2:35:92:4a:f6:10:df:cf:b3:78:63:7f:a1:6a:f6:35:b6: 15:62:29:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkRTnBt4wOfFnmdQRd1+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3 YmQwNTQwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODc4Yzk4ZjAwNjlhMDA3NjFjZmQyMGNhNDhmM2UzMDU2ZTY4NTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy6YRA55ztHya2h/WoyRYxUk0OoN EtTknz+c4avRO7SwvEqV9hZEyzNHD1zznlE0l4kNNlazulXvc3K3Ut+Ggs5US6Xq ioFAG3lUqmdgNUl5Xrhum2U0sTPSSn0qJS6sGUtjkdr6duOHmGzC4wqmLoxmNt6O KCITEyE4RoNiDzVojilbTryAo0BkJKhAWj7Crk9WqU4pE3xkHTdMZ3jeGJBg3Vao sXcmMBvOEO3l0PyuECwnJ5bixDLedaG0ysamrPO6PHf5hHZA2485ASjmIWKLHdGH zfstFTT60FyKjFYWHHwMOyxQjgKPCo5IS/ffpIC6IzEJ1zhFvU78NFoQPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBh4yY8AaaAHYc/SDKSPPjBW5oV4MB8GA1UdIwQY MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt NTZiYmUzOGY3NDA3LzEvR0hqSmp3QnBvQWRoejlJTXBJOC1NRmJtaFhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3 LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQydMA0G CSqGSIb3DQEBCwUAA4IBAQBEaF56ywKpQA2PjIvc65t0sPILoWUIxquIwcvEUA17 9DenYcj5La5504ggMxFsU+J9JoFTt5kkat7GEsifY9dOrl0dQrmQeBU8ePLdiljo uioCHxOidT85nU7+09k27HNyocgDdDtbhYFBnmK4froGG+vZ/5Jv317Q0St+OGi/ pscRP6wbHccSVMemfUXgF6C9ePBo1046gonfGxmem+vDB9jj71Ok22xiSTFWtmFx 8JxQBZTNd6dvQHLvU/hKunTFYbvzB2gbxhXHMJknQ1UGPwCXSZWINFSf4rAi7Ita j66MP/jYSFOfoKR/8jWSSvYQ38+zeGN/oWr2NbYVYimi -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:58 2026 by rpki-client