This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/GHgp5Vp47VKlbxndRXtEhJDYn_U.roa File: GHgp5Vp47VKlbxndRXtEhJDYn_U.roa (raw, json) Hash identifier: syIEb7iHu5Ey2FBT8ljIgEWQRJ42h5jOyIS+gGfr5AI= Subject key identifier: 18:78:29:E5:5A:78:ED:52:A5:6F:19:DD:45:7B:44:84:90:D8:9F:F5 Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB8FFB4AE12D2C2EA7BD662B7833C3 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/GHgp5Vp47VKlbxndRXtEhJDYn_U.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208905 IP address blocks: 85.130.240.0/22 maxlen: 24 85.130.244.0/23 maxlen: 24 85.130.248.0/21 maxlen: 24 109.67.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8f:fb:4a:e1:2d:2c:2e:a7:bd:66:2b:78:33:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=187829e55a78ed52a56f19dd457b448490d89ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:94:2c:cc:bb:13:eb:9a:55:de:27:78:0d: b6:52:3f:b2:65:75:c8:d5:49:e6:3d:26:2f:fe:e2: ea:f4:e7:b9:19:05:1a:db:83:af:60:76:9c:d0:7f: 0b:f2:d1:a4:e5:fd:37:72:99:f3:f6:c3:63:27:7f: b6:b8:9f:77:ab:f2:64:5b:d6:d5:66:72:ef:e2:c0: 58:6f:0e:40:b4:73:7c:59:7d:0a:2c:64:8e:43:d6: b3:6f:3a:80:9f:fb:06:bd:c5:1e:27:10:85:0a:78: 06:8a:c9:ee:b7:36:0e:21:49:32:81:45:35:b5:7a: ee:a9:c1:14:21:28:ff:49:dc:e7:9b:08:a3:7a:85: c5:fc:55:d1:fb:c0:a5:27:34:74:83:40:01:c5:f9: b8:cd:e5:41:c5:51:ff:05:32:cc:d0:fa:20:b2:e5: 4f:f0:d8:05:fe:8b:29:b0:b5:f0:72:97:fd:ff:44: d2:31:a9:ff:dd:71:8e:8c:b0:7c:cc:94:3e:e7:34: 49:8c:f2:e2:76:7f:7f:e9:87:48:69:91:04:b3:11: 62:2f:37:c9:dc:50:2b:e8:ac:f4:9b:76:68:85:b3: 3b:d2:c4:e5:03:25:ff:67:a9:57:88:28:3d:33:a0: d1:d4:93:57:75:85:ea:a2:77:9e:b4:ec:37:86:68: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:78:29:E5:5A:78:ED:52:A5:6F:19:DD:45:7B:44:84:90:D8:9F:F5 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/GHgp5Vp47VKlbxndRXtEhJDYn_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.130.240.0-85.130.245.255 85.130.248.0/21 109.67.184.0/21 Signature Algorithm: sha256WithRSAEncryption 08:fb:0f:cd:fc:b9:09:44:c4:ab:d4:23:a4:77:7c:72:5a:3a: 6b:86:72:44:77:5d:cf:77:d8:5a:8a:5f:31:cd:70:71:9f:0a: 00:b0:c5:b3:a1:4c:04:62:cd:2b:33:18:8d:1a:cf:84:5f:52: de:cd:12:b8:c1:fb:b1:a1:d0:39:0a:af:5a:ab:69:69:40:47: ed:30:76:12:ae:7b:aa:3e:58:50:2d:77:ed:da:e3:26:6e:f7: f0:d4:eb:4f:d6:d2:ce:cd:fa:3e:c9:c8:ac:9b:4b:88:94:88: 41:41:49:fd:91:88:56:f6:cc:de:14:3b:be:81:00:8f:f7:3d: 94:f7:7a:87:c4:16:ea:75:96:27:62:8b:77:b6:f2:fa:41:d0: c7:60:33:1d:06:9f:7b:ec:f2:bf:ac:7c:4c:84:06:de:58:44: 72:65:67:35:08:2b:a7:48:20:a1:e1:1d:61:f7:1e:e1:70:0e: da:93:30:5b:f7:e8:58:54:69:a2:3e:31:fd:ca:66:b8:17:05: f3:ee:b9:90:72:a7:70:0e:28:0c:d1:92:b4:1d:33:81:a2:62: 27:ef:da:95:7b:cf:81:9c:63:5a:a2:09:5b:00:42:f4:94:bd: 62:29:25:67:b1:cc:fc:c8:d2:6a:28:0b:a8:03:51:72:76:00: f3:71:23:9f -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt264/7SuEtLC6nvWYreDPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODc4MjllNTVhNzhlZDUyYTU2ZjE5ZGQ0NTdiNDQ4NDkwZDg5ZmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ+ULMy7E+uaVd4neA22Uj+yZXXI 1UnmPSYv/uLq9Oe5GQUa24OvYHac0H8L8tGk5f03cpnz9sNjJ3+2uJ93q/JkW9bV ZnLv4sBYbw5AtHN8WX0KLGSOQ9azbzqAn/sGvcUeJxCFCngGisnutzYOIUkygUU1 tXruqcEUISj/SdznmwijeoXF/FXR+8ClJzR0g0ABxfm4zeVBxVH/BTLM0PogsuVP 8NgF/ospsLXwcpf9/0TSMan/3XGOjLB8zJQ+5zRJjPLidn9/6YdIaZEEsxFiLzfJ 3FAr6Kz0m3ZohbM70sTlAyX/Z6lXiCg9M6DR1JNXdYXqoneetOw3hmhWRwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBh4KeVaeO1SpW8Z3UV7RISQ2J/1MB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvR0hncDVWcDQ3VktsYnhuZFJYdEVoSkRZbl9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBARVgvAD BAFVgvQDBANVgvgDBANtQ7gwDQYJKoZIhvcNAQELBQADggEBAAj7D838uQlExKvU I6R3fHJaOmuGckR3Xc932FqKXzHNcHGfCgCwxbOhTARizSszGI0az4RfUt7NErjB +7Gh0DkKr1qraWlAR+0wdhKue6o+WFAtd+3a4yZu9/DU60/W0s7N+j7JyKybS4iU iEFBSf2RiFb2zN4UO76BAI/3PZT3eofEFup1lidii3e28vpB0MdgMx0Gn3vs8r+s fEyEBt5YRHJlZzUIK6dIIKHhHWH3HuFwDtqTMFv36FhUaaI+Mf3KZrgXBfPuuZBy p3AOKAzRkrQdM4GiYifv2pV7z4GcY1qiCVsAQvSUvWIpJWexzPzI0mooC6gDUXJ2 APNxI58= -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:58 2026 by rpki-client