This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/GHJyTF0ORoaY9AckOmArWob3_HY.roa File: GHJyTF0ORoaY9AckOmArWob3_HY.roa (raw, json) Hash identifier: uI00sPFgBL2eDPBgh7Ys5Cfku0oem0hVhkVJpAs4CZg= Subject key identifier: 18:72:72:4C:5D:0E:46:86:98:F4:07:24:3A:60:2B:5A:86:F7:FC:76 Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578 Certificate serial: 019B7BA376AF30207D43A797FAF1461BC1B1 Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/GHJyTF0ORoaY9AckOmArWob3_HY.roa Signing time: Thu 01 Jan 2026 22:17:48 +0000 ROA not before: Thu 01 Jan 2026 22:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28958 IP address blocks: 82.146.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:76:af:30:20:7d:43:a7:97:fa:f1:46:1b:c1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578 Validity Not Before: Jan 1 22:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1872724c5d0e468698f407243a602b5a86f7fc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:c4:37:4b:40:63:60:17:79:fa:70:9b:4d: ae:09:be:3b:cb:82:19:78:97:ad:26:b0:8c:a0:fe: 06:aa:47:19:21:24:1d:c8:f5:cd:03:82:31:61:1a: 96:4f:1d:96:5c:a3:fc:b7:7f:e8:d5:c8:28:a7:51: 09:d9:6a:b6:aa:f3:62:10:5f:a9:16:36:ba:5b:1e: 16:af:bd:9d:b2:b3:87:97:94:32:70:2a:6b:b5:68: 46:23:2e:89:66:cc:d4:fe:f8:07:2e:08:52:c0:83: 86:3d:01:4a:ec:c6:53:b5:56:89:98:50:18:21:e5: 12:71:bc:df:71:bb:72:2e:db:e3:4f:dc:2f:c8:94: a3:0e:30:62:de:d9:2a:f9:90:ce:8e:fd:57:8a:93: c2:be:c3:86:77:18:ae:8e:c0:23:46:b4:dd:d7:40: 58:7d:20:c7:02:0f:e8:34:20:b0:21:43:43:c4:79: 9e:8a:71:68:77:e9:36:37:da:db:ec:a8:65:6c:60: f8:85:30:84:04:29:34:01:bf:f9:24:2c:41:ff:cd: 27:a2:6d:bc:9d:7e:10:02:2f:fc:64:cc:7f:d6:a2: 2b:3c:7b:be:29:b1:bd:5a:e6:f6:59:17:c3:e7:e3: 0e:83:0f:e5:ce:70:6b:a5:15:a9:6d:30:97:01:1f: ab:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:72:72:4C:5D:0E:46:86:98:F4:07:24:3A:60:2B:5A:86:F7:FC:76 X509v3 Authority Key Identifier: keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/GHJyTF0ORoaY9AckOmArWob3_HY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.146.186.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:ba:47:ae:3f:26:06:a6:9a:32:2f:44:d6:72:79:99:b1:97: 79:0c:7b:0f:ca:89:da:98:56:f0:8b:6d:e2:e1:fb:0d:d1:92: 85:ed:f1:0c:bb:8f:71:91:0b:cb:26:ca:f7:62:5f:82:50:f0: 87:f5:68:0e:d8:93:47:18:ea:4a:45:a0:7e:ea:08:39:4d:dd: a4:cd:8e:ce:56:e4:72:72:93:4d:32:7d:38:60:87:3a:4a:3c: 65:fe:8c:b5:c8:e0:35:97:82:d8:8b:f0:97:f6:a9:80:67:40: da:8a:ff:bf:e7:be:b0:8d:21:64:dc:2a:0b:66:4a:c5:a3:1e: 51:2f:15:05:78:ff:5e:bb:50:1d:7c:ff:47:bd:4b:5f:10:95: af:7c:9d:e8:e9:41:bc:cc:26:8a:c7:06:14:4f:ee:be:31:f2: d8:f9:b7:46:33:e2:c0:aa:5d:e4:9a:1e:80:ef:a0:f4:ef:a1: 18:79:a1:3a:62:70:a1:69:2e:a6:cb:d1:1c:ee:7b:d8:73:76: 98:c8:b7:6c:e9:1c:66:86:da:6f:10:a2:0b:f2:98:7f:c6:6f: b0:a8:87:a7:53:4c:8e:e4:7a:5c:15:d9:6d:72:35:68:a0:22: e9:3e:ca:1b:9a:97:96:04:42:7c:5a:5c:fb:50:79:54:e8:2b: cf:af:06:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o3avMCB9Q6eX+vFGG8GxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx MzM1NzgwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODcyNzI0YzVkMGU0Njg2OThmNDA3MjQzYTYwMmI1YTg2ZjdmYzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqnEN0tAY2AXefpwm02uCb47y4IZ eJetJrCMoP4GqkcZISQdyPXNA4IxYRqWTx2WXKP8t3/o1cgop1EJ2Wq2qvNiEF+p Fja6Wx4Wr72dsrOHl5QycCprtWhGIy6JZszU/vgHLghSwIOGPQFK7MZTtVaJmFAY IeUScbzfcbtyLtvjT9wvyJSjDjBi3tkq+ZDOjv1XipPCvsOGdxiujsAjRrTd10BY fSDHAg/oNCCwIUNDxHmeinFod+k2N9rb7KhlbGD4hTCEBCk0Ab/5JCxB/80nom28 nX4QAi/8ZMx/1qIrPHu+KbG9Wub2WRfD5+MOgw/lznBrpRWpbTCXAR+r3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBhyckxdDkaGmPQHJDpgK1qG9/x2MB8GA1UdIwQY MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt YWQ2ZjBiZjg4NDM4LzEvR0hKeVRGME9Sb2FZOUFja09tQXJXb2IzX0hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4 LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpK6MA0G CSqGSIb3DQEBCwUAA4IBAQCfukeuPyYGppoyL0TWcnmZsZd5DHsPyonamFbwi23i 4fsN0ZKF7fEMu49xkQvLJsr3Yl+CUPCH9WgO2JNHGOpKRaB+6gg5Td2kzY7OVuRy cpNNMn04YIc6Sjxl/oy1yOA1l4LYi/CX9qmAZ0Daiv+/576wjSFk3CoLZkrFox5R LxUFeP9eu1AdfP9HvUtfEJWvfJ3o6UG8zCaKxwYUT+6+MfLY+bdGM+LAql3kmh6A 76D076EYeaE6YnChaS6my9Ec7nvYc3aYyLds6RxmhtpvEKIL8ph/xm+wqIenU0yO 5HpcFdltcjVooCLpPsobmpeWBEJ8Wlz7UHlU6CvPrwZT -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:46 2026 by rpki-client