This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/GhcOsk0O2_wZIMiPsKAAT8tcjQk.roa File: GhcOsk0O2_wZIMiPsKAAT8tcjQk.roa (raw, json) Hash identifier: 0yEQgIWX72p/2MzI904UFD45zO2Zp7N2aljVhqUiKrE= Subject key identifier: 1A:17:0E:B2:4D:0E:DB:FC:19:20:C8:8F:B0:A0:00:4F:CB:5C:8D:09 Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160 Certificate serial: 019B7CECCE4DD58EA7060D1699379B9F2CA6 Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/GhcOsk0O2_wZIMiPsKAAT8tcjQk.roa Signing time: Fri 02 Jan 2026 04:17:32 +0000 ROA not before: Fri 02 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39122 IP address blocks: 46.22.128.0/20 maxlen: 20 78.153.192.0/19 maxlen: 24 81.17.240.0/20 maxlen: 24 91.197.234.0/23 maxlen: 23 176.52.222.0/23 maxlen: 23 185.2.64.0/22 maxlen: 22 185.209.164.0/22 maxlen: 22 200.69.8.0/21 maxlen: 21 2a01:a8::/32 maxlen: 32 2a01:aa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ce:4d:d5:8e:a7:06:0d:16:99:37:9b:9f:2c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160 Validity Not Before: Jan 2 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a170eb24d0edbfc1920c88fb0a0004fcb5c8d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ba:c3:80:04:63:b5:32:1f:da:0e:bd:f7:9b: d8:c6:1c:3e:87:72:bf:bb:6f:89:26:3d:e0:6f:cd: 7d:a3:6a:8e:b6:0a:1f:d1:b6:63:90:4a:84:0d:58: 5e:07:01:58:45:37:27:14:da:a3:cb:84:df:75:80: b6:cf:44:be:84:1f:1e:92:c9:d6:8d:e0:5a:cc:ff: 47:68:6d:d9:a8:b4:70:c8:fe:a3:b5:e8:0b:a1:cf: de:49:8f:90:1a:16:4b:b1:3d:f0:e1:13:8a:69:f7: 4c:a1:25:08:a2:5e:aa:28:48:9c:d6:0d:ad:fd:63: 25:43:27:a5:0f:ba:8b:6c:72:9f:a0:f9:d2:3a:f0: 3f:8e:72:0a:2e:f3:d8:75:d2:08:6f:69:d1:3d:8b: 6c:e7:27:b1:52:a9:fc:30:f2:89:67:43:4c:f9:8f: c7:73:33:93:11:42:cf:72:7c:d5:fa:4b:a9:8e:61: 1c:8c:88:61:cf:c7:7c:4f:1f:69:b2:2c:8b:02:b3: e3:51:a5:54:6b:3f:94:4f:95:6b:9b:4d:70:6b:37: 20:72:88:e0:97:80:b8:d0:7d:76:23:65:34:98:77: 23:40:af:f6:39:d4:4c:08:9f:c3:38:79:61:f7:fd: 27:23:bf:af:bb:31:56:84:06:85:ba:47:e4:a9:31: 52:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:17:0E:B2:4D:0E:DB:FC:19:20:C8:8F:B0:A0:00:4F:CB:5C:8D:09 X509v3 Authority Key Identifier: keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/GhcOsk0O2_wZIMiPsKAAT8tcjQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.128.0/20 78.153.192.0/19 81.17.240.0/20 91.197.234.0/23 176.52.222.0/23 185.2.64.0/22 185.209.164.0/22 200.69.8.0/21 IPv6: 2a01:a8::/32 2a01:aa::/32 Signature Algorithm: sha256WithRSAEncryption 95:1f:64:83:6d:92:c8:20:65:2b:43:de:1e:c2:32:02:f5:c8: 21:5b:f5:09:fe:5d:88:96:81:b2:1f:8c:8c:ad:d2:d1:0c:19: ec:6e:94:0a:07:81:63:97:99:2f:b8:e0:cc:6c:de:76:b3:4a: 6d:b2:f0:0d:75:2e:bd:95:e4:f7:be:cf:8c:3e:a4:09:54:a8: 2c:65:66:ef:61:0b:92:3d:41:06:da:1a:80:23:69:9f:fd:39: 3f:66:17:fc:45:28:e1:59:22:31:e0:19:ad:00:ea:3c:89:52: 84:25:ea:a1:d7:66:97:2d:c2:71:0e:11:40:a4:17:d6:45:83: b5:79:91:3b:54:43:f5:ef:cd:f5:f0:b5:58:86:00:c0:6f:e3: cf:53:0f:88:65:c6:2b:00:00:8c:17:f0:55:a0:16:29:c3:99: ee:65:1c:16:23:fa:db:0d:38:e6:0a:6a:26:cc:08:aa:c5:9f: 44:12:68:58:d2:ba:51:27:22:bc:d2:4f:64:76:d5:5f:fe:af: e8:88:03:36:7c:b6:00:7b:7a:39:a2:50:4b:ce:27:9b:c8:5c: 4b:c1:b3:8c:8a:5a:fc:f6:e8:8d:ef:f0:7f:6e:82:c1:d5:23: 70:a0:20:68:83:e6:85:02:6a:53:d0:85:c8:4a:9f:29:8a:87: 8d:80:8f:36 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt87M5N1Y6nBg0WmTebnyymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTZhZWE2YmFiNzljNDhmNWRkZWU0YTQ2YmY0YWI2NGQ4 NjMxNjAwHhcNMjYwMTAyMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTE3MGViMjRkMGVkYmZjMTkyMGM4OGZiMGEwMDA0ZmNiNWM4ZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLrDgARjtTIf2g6995vYxhw+h3K/ u2+JJj3gb819o2qOtgof0bZjkEqEDVheBwFYRTcnFNqjy4TfdYC2z0S+hB8eksnW jeBazP9HaG3ZqLRwyP6jtegLoc/eSY+QGhZLsT3w4ROKafdMoSUIol6qKEic1g2t /WMlQyelD7qLbHKfoPnSOvA/jnIKLvPYddIIb2nRPYts5yexUqn8MPKJZ0NM+Y/H czOTEULPcnzV+kupjmEcjIhhz8d8Tx9psiyLArPjUaVUaz+UT5Vrm01wazcgcojg l4C40H12I2U0mHcjQK/2OdRMCJ/DOHlh9/0nI7+vuzFWhAaFukfkqTFSOQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFBoXDrJNDtv8GSDIj7CgAE/LXI0JMB8GA1UdIwQY MBaAFGaWrqa6t5xI9d3uSka/SrZNhjFgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2Qt ZjAxOThjNmMyNDc0LzEvR2hjT3NrME8yX3daSU1pUHNLQUFUOHRjalFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2QtZjAxOThjNmMyNDc0 LzEvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQELhaAAwQF TpnAAwQEURHwAwQBW8XqAwQBsDTeAwQCuQJAAwQCudGkAwQDyEUIMBQEAgACMA4D BQAqAQCoAwUAKgEAqjANBgkqhkiG9w0BAQsFAAOCAQEAlR9kg22SyCBlK0PeHsIy AvXIIVv1Cf5diJaBsh+MjK3S0QwZ7G6UCgeBY5eZL7jgzGzedrNKbbLwDXUuvZXk 977PjD6kCVSoLGVm72ELkj1BBtoagCNpn/05P2YX/EUo4VkiMeAZrQDqPIlShCXq oddmly3CcQ4RQKQX1kWDtXmRO1RD9e/N9fC1WIYAwG/jz1MPiGXGKwAAjBfwVaAW KcOZ7mUcFiP62w045gpqJswIqsWfRBJoWNK6UScivNJPZHbVX/6v6IgDNny2AHt6 OaJQS84nm8hcS8GzjIpa/Pboje/wf26CwdUjcKAgaIPmhQJqU9CFyEqfKYqHjYCP Ng== -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:32 2026 by rpki-client