This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/GHmOBTWpGXiBAX4RNuz2xairNfE.roa File: GHmOBTWpGXiBAX4RNuz2xairNfE.roa (raw, json) Hash identifier: OuocCGewS3iYlKIOMFVODKlPgpbRYcHe7MtuSN6Zz0c= Subject key identifier: 18:79:8E:05:35:A9:19:78:81:01:7E:11:36:EC:F6:C5:A8:AB:35:F1 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B36006058E4365993BA12937CA00C38 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/GHmOBTWpGXiBAX4RNuz2xairNfE.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45650 IP address blocks: 45.139.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:00:60:58:e4:36:59:93:ba:12:93:7c:a0:0c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18798e0535a9197881017e1136ecf6c5a8ab35f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:db:47:db:a8:cd:9b:a6:bd:2c:53:6f:24: cd:71:a8:f9:ad:77:42:0c:d7:b1:a8:4a:34:1c:ec: fb:52:d0:cb:c0:e0:9e:a8:97:e7:90:e3:42:87:49: 29:fa:7d:60:a8:e1:fd:6c:b1:0b:00:0b:1b:b0:f4: b7:e9:b5:06:1d:47:09:7f:0a:64:58:ce:16:91:ed: 4a:f2:e5:26:7c:64:e5:44:70:d0:f9:04:b0:17:f8: 0a:a2:13:7d:19:5f:c3:13:21:80:39:aa:ed:56:53: 41:bf:64:ef:fc:f8:bf:0c:5a:6b:39:32:0b:c2:da: 77:cd:b8:8e:54:96:b9:c5:64:19:b7:37:b0:9a:a1: 4e:9b:30:39:4e:5f:ef:f8:1c:66:7d:bc:d6:77:0b: e5:60:c8:d9:25:77:6e:28:c0:c1:9f:d7:46:60:ec: bb:66:c1:68:3f:5f:72:17:45:a8:28:e3:cd:7d:bc: b6:a2:ba:cf:a9:b7:da:c2:0d:1f:42:dc:e6:25:54: 30:6e:87:e5:40:73:c8:3d:8b:8a:92:d7:3e:45:51: 30:09:f8:be:97:16:e0:7c:c7:21:be:8f:42:1b:c8: 5b:98:88:3a:b1:30:4a:58:2c:02:9b:6f:a0:c8:df: e7:d2:2a:72:40:cf:ee:5a:78:97:8e:2a:d0:f0:7c: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:79:8E:05:35:A9:19:78:81:01:7E:11:36:EC:F6:C5:A8:AB:35:F1 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/GHmOBTWpGXiBAX4RNuz2xairNfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.188.0/22 Signature Algorithm: sha256WithRSAEncryption 34:90:bd:07:e0:1b:5c:9c:9a:ad:e8:88:e2:d4:ee:c1:38:81: 61:22:a2:f3:e3:68:5f:40:53:66:52:58:1e:4d:f0:92:13:1e: 51:d8:fe:05:50:6e:37:c0:dc:12:0e:56:e8:aa:fd:b8:ea:77: ce:f6:cf:4b:60:ef:e8:b1:38:f1:31:92:6f:f2:2d:1a:bd:df: 4d:43:3d:b6:7b:7e:c0:41:18:30:77:47:54:9d:4c:9d:46:19: 01:57:76:02:ca:f9:ea:1f:bd:1e:e2:72:0b:38:75:af:fb:40: 20:72:99:9c:36:88:c6:f7:27:4f:fd:1c:a1:ff:a9:af:4a:42: ea:3c:6a:c7:af:57:1d:f1:7a:06:2d:c4:53:c4:af:33:93:f8: 86:c1:66:eb:79:d9:9a:e6:6f:05:86:36:f0:eb:5d:7b:2c:a3: 37:19:bc:23:ed:2e:cf:78:f6:ab:4b:6e:4b:c3:e4:9c:f9:4f: 11:bd:25:22:16:27:b2:2b:bf:0a:0a:d3:33:b5:7b:54:d0:15: 05:13:b6:05:df:0f:47:c0:09:01:da:95:66:97:e8:72:62:cc: d9:2c:4c:0d:d6:98:a9:db:9f:15:31:c3:89:c2:9a:50:42:fb: d9:31:dc:2e:a7:9f:cf:52:f7:ed:f5:32:41:87:a4:0a:91:53: 52:d4:f9:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgBgWOQ2WZO6EpN8oAw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODc5OGUwNTM1YTkxOTc4ODEwMTdlMTEzNmVjZjZjNWE4YWIzNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZLbR9uozZumvSxTbyTNcaj5rXdC DNexqEo0HOz7UtDLwOCeqJfnkONCh0kp+n1gqOH9bLELAAsbsPS36bUGHUcJfwpk WM4Wke1K8uUmfGTlRHDQ+QSwF/gKohN9GV/DEyGAOartVlNBv2Tv/Pi/DFprOTIL wtp3zbiOVJa5xWQZtzewmqFOmzA5Tl/v+BxmfbzWdwvlYMjZJXduKMDBn9dGYOy7 ZsFoP19yF0WoKOPNfby2orrPqbfawg0fQtzmJVQwboflQHPIPYuKktc+RVEwCfi+ lxbgfMchvo9CG8hbmIg6sTBKWCwCm2+gyN/n0ipyQM/uWniXjirQ8HxJdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBh5jgU1qRl4gQF+ETbs9sWoqzXxMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvR0htT0JUV3BHWGlCQVg0Uk51ejJ4YWlyTmZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYu8MA0G CSqGSIb3DQEBCwUAA4IBAQA0kL0H4BtcnJqt6Iji1O7BOIFhIqLz42hfQFNmUlge TfCSEx5R2P4FUG43wNwSDlboqv246nfO9s9LYO/osTjxMZJv8i0avd9NQz22e37A QRgwd0dUnUydRhkBV3YCyvnqH70e4nILOHWv+0AgcpmcNojG9ydP/Ryh/6mvSkLq PGrHr1cd8XoGLcRTxK8zk/iGwWbredma5m8Fhjbw6117LKM3Gbwj7S7PeParS25L w+Sc+U8RvSUiFieyK78KCtMztXtU0BUFE7YF3w9HwAkB2pVml+hyYszZLEwN1pip 258VMcOJwppQQvvZMdwup5/PUvft9TJBh6QKkVNS1PlC -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:50 2026 by rpki-client