This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/GgAiSP9V-LA3Tb1RzkuTypo9oKM.roa File: GgAiSP9V-LA3Tb1RzkuTypo9oKM.roa (raw, json) Hash identifier: 3tVPpV4Vk6UB+t4zVvD3GK+v9FiDf9MFk0dQMBf2d60= Subject key identifier: 1A:00:22:48:FF:55:F8:B0:37:4D:BD:51:CE:4B:93:CA:9A:3D:A0:A3 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019BE7B0039894E6A7F3F6070650FE7A1F7B Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/GgAiSP9V-LA3Tb1RzkuTypo9oKM.roa Signing time: Thu 22 Jan 2026 21:50:30 +0000 ROA not before: Thu 22 Jan 2026 21:50:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 45.86.44.0/24 maxlen: 24 45.86.45.0/24 maxlen: 24 45.86.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e7:b0:03:98:94:e6:a7:f3:f6:07:06:50:fe:7a:1f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 22 21:50:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a002248ff55f8b0374dbd51ce4b93ca9a3da0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:ba:ee:a8:03:ce:00:36:a3:5b:fe:60:b3: 17:07:ec:72:00:9d:3c:a6:65:f9:4a:b9:f0:5d:37: 7a:0b:ef:6e:4a:c1:ae:71:e6:64:c5:e9:cf:3b:3e: b6:72:d6:28:a6:9d:2e:53:91:74:77:5d:eb:92:7d: b5:01:63:de:eb:75:3d:c2:1f:ea:a4:d4:06:6b:82: 4e:6c:72:02:8d:79:97:b3:6d:81:76:d9:44:1d:33: 8f:7f:9f:a4:eb:8c:43:09:ff:83:c4:bb:32:58:d3: 26:1b:ad:65:17:8c:0f:79:c2:41:5a:ab:c5:67:bf: 10:87:56:c9:b4:d8:2c:8b:17:a2:6a:bb:f8:ad:9c: f8:93:0e:f6:23:d9:17:74:4d:95:aa:ed:6c:60:0d: bb:3a:17:9b:93:e8:79:67:d9:bf:38:41:e9:1a:83: f7:35:9a:2f:88:b9:77:f1:b3:61:67:da:be:83:78: 07:1a:8b:81:dd:fd:58:cf:d7:1a:28:78:6a:20:33: c8:6c:70:f4:ab:85:2f:f5:0a:47:b8:64:4f:b9:cb: 53:64:dc:0d:7a:78:ef:8e:e8:74:83:64:17:eb:4b: eb:ee:c0:93:8d:80:a8:5c:81:fd:0d:1e:a4:e1:77: 45:3d:6f:22:b2:53:3e:ea:5c:83:89:24:bf:e6:10: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:00:22:48:FF:55:F8:B0:37:4D:BD:51:CE:4B:93:CA:9A:3D:A0:A3 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/GgAiSP9V-LA3Tb1RzkuTypo9oKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.44.0-45.86.46.255 Signature Algorithm: sha256WithRSAEncryption 32:c5:17:1a:94:0f:b6:90:83:70:77:29:de:f3:30:2a:ae:84: 4e:24:88:93:87:f0:52:49:5b:0d:fb:1f:5d:b4:47:26:b2:52: fb:ca:a9:1c:74:20:e7:23:18:24:d2:bd:4b:ab:32:03:9e:d4: 91:9d:85:6d:f5:06:29:02:6e:9c:46:91:62:da:36:55:c7:bf: 60:c5:54:f4:96:db:18:e1:c1:29:9a:ff:4c:1a:8a:42:c8:dd: f4:84:43:97:67:82:12:68:49:a2:aa:05:fb:70:81:94:d9:eb: 47:a6:6b:e6:71:4c:56:69:db:29:a1:c8:93:4c:31:35:be:d2: 23:a4:20:a4:26:ed:41:80:0a:d6:ff:3c:5c:40:65:8b:2e:ff: 7e:ee:70:89:45:bf:7f:22:fd:a5:ad:21:c0:26:14:de:ac:5e: e1:b5:39:95:66:a8:91:1e:14:3d:de:6b:52:4b:bd:f7:f8:2a: a2:de:c8:6e:e9:6e:93:33:0e:45:34:f5:0a:57:de:c2:4b:cb: df:23:82:c5:11:2e:ec:16:d8:20:d9:75:21:3e:05:08:d9:9c: 58:dd:36:33:db:ae:6d:22:97:cf:04:ca:4d:65:66:02:0f:e7: 64:1a:90:00:9f:4c:2b:85:29:18:ef:20:1e:4a:70:c6:ad:7a: d3:94:e6:47 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZvnsAOYlOan8/YHBlD+eh97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTIyMjE1MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTAwMjI0OGZmNTVmOGIwMzc0ZGJkNTFjZTRiOTNjYTlhM2RhMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTy67qgDzgA2o1v+YLMXB+xyAJ08 pmX5SrnwXTd6C+9uSsGuceZkxenPOz62ctYopp0uU5F0d13rkn21AWPe63U9wh/q pNQGa4JObHICjXmXs22BdtlEHTOPf5+k64xDCf+DxLsyWNMmG61lF4wPecJBWqvF Z78Qh1bJtNgsixeiarv4rZz4kw72I9kXdE2Vqu1sYA27Ohebk+h5Z9m/OEHpGoP3 NZoviLl38bNhZ9q+g3gHGouB3f1Yz9caKHhqIDPIbHD0q4Uv9QpHuGRPuctTZNwN enjvjuh0g2QX60vr7sCTjYCoXIH9DR6k4XdFPW8islM+6lyDiSS/5hC+mwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBoAIkj/VfiwN029Uc5Lk8qaPaCjMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvR2dBaVNQOVYtTEEzVGIxUnprdVR5cG85b0tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItViwD BAAtVi4wDQYJKoZIhvcNAQELBQADggEBADLFFxqUD7aQg3B3Kd7zMCquhE4kiJOH 8FJJWw37H120RyayUvvKqRx0IOcjGCTSvUurMgOe1JGdhW31BikCbpxGkWLaNlXH v2DFVPSW2xjhwSma/0waikLI3fSEQ5dnghJoSaKqBftwgZTZ60ema+ZxTFZp2ymh yJNMMTW+0iOkIKQm7UGACtb/PFxAZYsu/37ucIlFv38i/aWtIcAmFN6sXuG1OZVm qJEeFD3ea1JLvff4KqLeyG7pbpMzDkU09QpX3sJLy98jgsURLuwW2CDZdSE+BQjZ nFjdNjPbrm0il88Eyk1lZgIP52QakACfTCuFKRjvIB5KcMatetOU5kc= -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:55 2026 by rpki-client