This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/GOJdmQeTfRZxvLli-b1t8ivPIP0.roa File: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (raw, json) Hash identifier: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc= Subject key identifier: 18:E2:5D:99:07:93:7D:16:71:BC:B9:62:F9:BD:6D:F2:2B:CF:20:FD Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Certificate serial: 019B7D5BCAE612ABD601E96183E0225200EB Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/GOJdmQeTfRZxvLli-b1t8ivPIP0.roa Signing time: Fri 02 Jan 2026 06:18:46 +0000 ROA not before: Fri 02 Jan 2026 06:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136133 IP address blocks: 45.154.180.0/24 maxlen: 24 45.154.181.0/24 maxlen: 24 45.154.182.0/24 maxlen: 24 45.154.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ca:e6:12:ab:d6:01:e9:61:83:e0:22:52:00:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Validity Not Before: Jan 2 06:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18e25d9907937d1671bcb962f9bd6df22bcf20fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:30:b3:d0:b9:3c:88:e6:7f:15:23:ef:ab: ae:c2:fc:70:10:02:02:e1:d1:54:df:27:b0:bf:11: 2d:24:13:aa:f0:79:c9:38:89:fc:b2:7b:46:a8:2e: 89:2b:27:5a:0f:a4:0a:7b:e4:49:d1:d9:b3:72:a1: 80:96:7c:27:ba:c9:9c:7f:ea:25:72:b1:bc:03:b2: 25:95:26:7f:e0:87:1a:e3:c6:74:9c:d8:70:5e:2c: c9:4c:e6:54:43:87:f9:6f:6b:bc:9f:12:0c:2c:3c: 1d:fe:2a:5f:c2:59:d7:ea:ef:af:68:ab:e5:eb:34: 86:c7:4e:7e:dd:9f:73:cd:f8:76:df:a2:66:68:5e: 6f:69:8d:c2:57:d5:33:6a:da:6d:b2:e0:d9:ee:af: 96:b0:9e:d5:1b:0e:ce:9d:c1:66:6c:8a:e8:3f:75: 1c:57:1b:97:2a:6e:d8:dd:57:b3:1a:ea:95:fb:aa: df:81:6d:bf:31:2c:4e:22:9d:55:0d:e1:55:3c:b5: ec:f5:04:28:db:36:3d:9b:0a:2b:41:50:d6:3d:4f: 83:69:89:31:48:a5:2c:8b:39:f4:8b:d9:a6:27:ea: e6:7c:33:44:a1:ca:f7:80:9d:3d:32:67:a8:09:fa: b6:ef:89:68:11:1a:26:db:82:f7:35:b4:e6:77:46: 6d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E2:5D:99:07:93:7D:16:71:BC:B9:62:F9:BD:6D:F2:2B:CF:20:FD X509v3 Authority Key Identifier: keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/GOJdmQeTfRZxvLli-b1t8ivPIP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.180.0/22 Signature Algorithm: sha256WithRSAEncryption 47:0d:6a:36:5d:54:c9:8b:b1:cf:aa:4c:ec:8e:4e:a5:d6:49: 0d:ba:f1:f3:ba:dd:ab:e3:07:85:c8:66:1a:eb:81:54:b5:bc: 3b:37:61:e3:b3:97:84:27:c0:7e:a0:58:b0:10:23:bd:30:fc: 58:e0:55:39:0d:81:cb:f9:9f:9e:b9:31:c7:93:f9:17:c7:e1: a1:6f:03:cb:05:2e:4f:28:0a:7e:d4:e5:98:9c:84:e6:29:95: 11:ff:b3:26:82:53:b1:f7:8e:ef:ec:b9:a2:6b:69:b2:d1:65: dc:08:34:b5:ed:29:69:fe:6e:38:5b:d1:72:9a:7a:62:10:3f: ec:79:94:7a:88:f5:f4:09:1a:27:ba:30:6f:59:4a:8e:6e:d3: 68:af:da:54:ca:74:d0:d0:e9:a8:ba:5b:cb:08:39:16:8f:e9: 19:aa:a6:1b:3b:ca:d2:29:bb:3d:f2:45:cc:f5:53:71:06:22: a3:18:cb:1d:3a:5a:97:d0:ba:e9:0e:59:9f:b8:53:2d:2f:91: c8:14:eb:42:b6:09:44:ee:64:a4:fb:d0:e1:0e:2e:1a:f0:f6: 41:ea:2c:0d:d4:14:7e:91:1d:d5:e7:44:b2:93:a4:b6:1d:68: 6b:af:f2:20:54:47:2d:68:b0:14:06:d1:7d:7e:5f:21:0d:2d: ed:e9:23:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W8rmEqvWAelhg+AiUgDrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2 ZjYwOWQwHhcNMjYwMTAyMDYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGUyNWQ5OTA3OTM3ZDE2NzFiY2I5NjJmOWJkNmRmMjJiY2YyMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaUws9C5PIjmfxUj76uuwvxwEAIC 4dFU3yewvxEtJBOq8HnJOIn8sntGqC6JKydaD6QKe+RJ0dmzcqGAlnwnusmcf+ol crG8A7IllSZ/4Ica48Z0nNhwXizJTOZUQ4f5b2u8nxIMLDwd/ipfwlnX6u+vaKvl 6zSGx05+3Z9zzfh236JmaF5vaY3CV9UzatptsuDZ7q+WsJ7VGw7OncFmbIroP3Uc VxuXKm7Y3VezGuqV+6rfgW2/MSxOIp1VDeFVPLXs9QQo2zY9mworQVDWPU+DaYkx SKUsizn0i9mmJ+rmfDNEocr3gJ09MmeoCfq274loERom24L3NbTmd0ZtVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBjiXZkHk30Wcby5Yvm9bfIrzyD9MB8GA1UdIwQY MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt ODc5MTNjMzU0OTJhLzEvR09KZG1RZVRmUlp4dkxsaS1iMXQ4aXZQSVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZq0MA0G CSqGSIb3DQEBCwUAA4IBAQBHDWo2XVTJi7HPqkzsjk6l1kkNuvHzut2r4weFyGYa 64FUtbw7N2Hjs5eEJ8B+oFiwECO9MPxY4FU5DYHL+Z+euTHHk/kXx+GhbwPLBS5P KAp+1OWYnITmKZUR/7MmglOx947v7Lmia2my0WXcCDS17Slp/m44W9FymnpiED/s eZR6iPX0CRonujBvWUqObtNor9pUynTQ0OmoulvLCDkWj+kZqqYbO8rSKbs98kXM 9VNxBiKjGMsdOlqX0LrpDlmfuFMtL5HIFOtCtglE7mSk+9DhDi4a8PZB6iwN1BR+ kR3V50Syk6S2HWhrr/IgVEctaLAUBtF9fl8hDS3t6SPN -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:07 2026 by rpki-client