This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/GoJ7p5byconiGncMqRmL8LXgnE8.roa File: GoJ7p5byconiGncMqRmL8LXgnE8.roa (raw, json) Hash identifier: ZMKph7pEjMlyasEu5eXgJpQBIoAaFlANMUUEAZTh0+E= Subject key identifier: 1A:82:7B:A7:96:F2:72:89:E2:1A:77:0C:A9:19:8B:F0:B5:E0:9C:4F Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e Certificate serial: 019B775926E3F58EA58E1E5B438CC3350DE9 Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/GoJ7p5byconiGncMqRmL8LXgnE8.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 192.135.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:26:e3:f5:8e:a5:8e:1e:5b:43:8c:c3:35:0d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a827ba796f27289e21a770ca9198bf0b5e09c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:bd:a2:1d:eb:b7:3f:38:c0:25:60:a0:94: 9f:47:0b:cb:47:34:e5:e1:be:97:0e:87:3d:ba:35: da:62:79:26:4c:68:c1:c0:d5:5f:19:6e:43:4b:d5: 22:3e:c3:97:d6:88:a8:c1:dd:5b:e7:ff:4d:06:c8: 2e:82:86:aa:06:86:19:1a:68:07:de:44:b2:9e:7f: b2:0e:d6:5f:1d:31:0d:cb:95:9e:17:a4:d5:29:9b: e8:2a:39:e5:9e:bc:b5:66:1b:c8:6b:ca:89:80:9c: 68:7f:20:57:31:26:e5:a0:31:a2:7c:f1:ad:8f:d2: 93:c5:f4:0d:69:83:45:a8:7e:46:4c:c7:22:62:22: cc:c6:61:91:87:85:9b:10:85:2d:7e:8e:3e:3a:6b: e2:cc:9f:84:4b:d2:01:4b:24:c7:05:2b:d9:be:14: 88:97:75:e4:f4:03:2e:5d:38:82:f8:cb:50:e3:dd: 48:27:6b:50:d5:64:51:ed:aa:6d:7a:66:61:99:c4: c2:37:8d:e8:81:ac:0f:b0:02:fd:00:3a:2d:e5:4d: 88:e0:ac:c1:94:0f:96:ce:14:2a:38:33:d4:b6:f9: 69:53:6a:b6:99:69:5c:6e:7f:1b:a5:c3:14:b3:61: 1c:f4:bc:24:cc:a7:3f:77:d2:f7:11:58:32:5c:3e: 62:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:82:7B:A7:96:F2:72:89:E2:1A:77:0C:A9:19:8B:F0:B5:E0:9C:4F X509v3 Authority Key Identifier: keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/GoJ7p5byconiGncMqRmL8LXgnE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.135.217.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:8c:a6:65:97:9e:6d:b4:2a:c1:54:ec:c3:74:b3:34:ed:c5: ac:64:06:08:c2:1a:6a:4f:14:20:de:8a:a4:7d:8b:a8:7d:41: 77:5d:23:29:55:bb:d1:45:9d:6e:a1:5f:18:11:55:83:21:71: 86:e0:41:d3:c4:86:da:21:54:65:73:af:27:84:57:e4:dd:41: c0:a3:b8:47:d7:af:a5:a0:3c:4c:8c:1a:de:90:96:5c:a2:cc: 0e:f4:db:94:42:67:2b:3f:48:db:4b:30:63:7c:d4:c0:e1:f6: ff:82:87:52:22:a0:64:1f:be:4e:ac:55:50:ad:e0:ea:68:7d: d7:f0:be:e5:22:a0:68:c4:ee:01:35:59:a0:c7:70:9d:1e:bb: 1d:80:e0:2c:eb:b4:8c:aa:19:55:1c:b6:af:1e:56:4c:a6:bc: 4e:2b:f2:33:34:d6:f1:38:18:8d:ae:bb:6c:e1:8e:34:4c:5b: db:02:ec:84:7f:1d:59:22:ad:73:4b:a9:50:f0:2f:13:58:6c: df:3b:b3:d6:3c:93:4d:d3:82:c6:09:cb:ad:a2:62:cd:be:27: de:24:08:d3:69:c8:97:e5:9e:d7:4c:1f:15:57:84:72:48:1f: 8f:16:70:48:a6:0e:9f:db:65:79:4a:33:e5:a1:77:52:8a:a3: 8a:76:cb:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSbj9Y6ljh5bQ4zDNQ3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OWMwZTczN2RmNDgyZTg5YWE2NzI2Y2RkOGE5OTU4YWE3 NDExMWUwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTgyN2JhNzk2ZjI3Mjg5ZTIxYTc3MGNhOTE5OGJmMGI1ZTA5YzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHG9oh3rtz84wCVgoJSfRwvLRzTl 4b6XDoc9ujXaYnkmTGjBwNVfGW5DS9UiPsOX1oiowd1b5/9NBsgugoaqBoYZGmgH 3kSynn+yDtZfHTENy5WeF6TVKZvoKjnlnry1ZhvIa8qJgJxofyBXMSbloDGifPGt j9KTxfQNaYNFqH5GTMciYiLMxmGRh4WbEIUtfo4+OmvizJ+ES9IBSyTHBSvZvhSI l3Xk9AMuXTiC+MtQ491IJ2tQ1WRR7aptemZhmcTCN43ogawPsAL9ADot5U2I4KzB lA+WzhQqODPUtvlpU2q2mWlcbn8bpcMUs2Ec9LwkzKc/d9L3EVgyXD5i9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBqCe6eW8nKJ4hp3DKkZi/C14JxPMB8GA1UdIwQY MBaAFIacDnN99ILomqZybN2KmViqdBEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEt YzVlMGZhY2E0YTVlLzEvR29KN3A1Ynljb25pR25jTXFSbUw4TFhnbkU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEtYzVlMGZhY2E0YTVl LzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIfZMA0G CSqGSIb3DQEBCwUAA4IBAQA9jKZll55ttCrBVOzDdLM07cWsZAYIwhpqTxQg3oqk fYuofUF3XSMpVbvRRZ1uoV8YEVWDIXGG4EHTxIbaIVRlc68nhFfk3UHAo7hH16+l oDxMjBrekJZcoswO9NuUQmcrP0jbSzBjfNTA4fb/godSIqBkH75OrFVQreDqaH3X 8L7lIqBoxO4BNVmgx3CdHrsdgOAs67SMqhlVHLavHlZMprxOK/IzNNbxOBiNrrts 4Y40TFvbAuyEfx1ZIq1zS6lQ8C8TWGzfO7PWPJNN04LGCcutomLNvifeJAjTaciX 5Z7XTB8VV4RySB+PFnBIpg6f22V5SjPloXdSiqOKdsv/ -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:28 2026 by rpki-client