This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa File: GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa (raw, json) Hash identifier: 3EWNe3rvlVZaJrxvof33Dkt8YZC4xAKJeeMy9djaF9g= Subject key identifier: 18:21:F1:E8:18:CC:A8:0E:D2:6D:13:6D:C0:03:7C:45:5F:9A:A8:DC Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Certificate serial: 019B77C71E2FBE14B2C0C87BA465F9FBD16A Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33844 IP address blocks: 84.252.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1e:2f:be:14:b2:c0:c8:7b:a4:65:f9:fb:d1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1821f1e818cca80ed26d136dc0037c455f9aa8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:98:e9:25:58:b9:0d:f8:5d:e4:9f:ba:98:ef: 14:95:4c:5d:86:dc:7e:6e:0d:52:84:49:0b:a3:eb: 0f:6b:88:b3:fe:27:cf:4d:66:da:ef:a6:c7:15:10: 23:22:30:9e:bb:87:85:24:ab:d9:87:e9:fe:40:8e: d6:44:67:1b:7e:09:dd:18:30:55:8e:16:03:9b:dd: fa:13:f4:37:88:6c:ec:66:ac:78:f2:6c:6b:81:1c: f2:c3:43:b1:e7:75:6c:be:1e:73:7d:f4:70:4b:e7: a8:da:56:ec:af:1f:1f:60:db:18:40:a0:ba:40:fc: 18:81:de:15:b3:bd:a0:cc:a8:14:7d:c8:bc:25:9f: 23:ab:30:36:fc:d3:ec:3f:7b:a3:73:8e:d3:0a:88: d7:a2:99:64:85:e6:f1:9b:7c:eb:03:68:0c:13:e0: a9:d5:96:32:81:b6:89:b8:c5:ca:52:b3:04:43:0c: a1:93:e8:70:4f:e6:55:0f:03:45:86:e7:28:b9:ca: 85:a8:e3:c3:53:7f:a0:60:0d:bd:ee:a7:b6:41:ee: 06:cc:3e:6c:a4:79:94:30:ff:9d:2d:d8:45:43:50: 55:40:3c:82:96:ba:35:c3:a4:cc:20:d0:e4:45:ea: 0b:8e:4f:c3:22:cf:8e:0e:bd:4b:6d:10:8b:f6:cd: a5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:21:F1:E8:18:CC:A8:0E:D2:6D:13:6D:C0:03:7C:45:5F:9A:A8:DC X509v3 Authority Key Identifier: keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.252.148.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:ab:42:b1:8e:1b:de:47:9a:94:05:4c:b5:64:1f:3a:44:34: 70:cb:2b:5a:38:ee:e5:fd:52:ea:dd:3f:c1:37:47:40:da:97: 5d:df:71:fb:26:98:b6:77:99:d6:4c:57:75:8e:a9:58:1b:26: 0c:ad:b9:a4:ac:d2:30:27:ad:b1:35:0d:8b:3c:2a:c3:4f:58: eb:c0:db:e4:ba:84:6b:e2:c4:d7:9a:3f:06:26:ec:db:ca:b0: 95:7e:04:a4:06:0f:83:6d:1c:0f:40:6d:92:24:bf:62:f5:77: ec:f3:31:ea:28:fb:c0:58:52:7f:e7:bc:e4:29:f3:4e:be:81: 41:1c:f4:05:a0:bd:73:17:97:fa:68:5d:72:2d:27:f3:ac:fc: 73:3f:3b:a8:cc:93:27:d8:a9:b2:72:32:86:9a:50:28:75:64: 44:5d:93:bc:3c:17:41:fe:a7:21:b3:69:04:d6:35:b7:aa:b2: 0d:1d:23:03:f3:44:e7:37:83:fe:24:d3:a3:13:38:5c:49:1a: ad:b1:18:8a:04:24:2a:f9:99:19:75:a3:fa:45:66:99:dd:9a: d2:73:a1:1b:ca:94:f8:77:c5:25:2c:28:f6:ac:ee:b2:a8:ff: f1:6d:c5:17:2b:fc:e2:55:5c:ce:7d:79:d0:36:89:98:db:58: ed:c4:5b:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xx4vvhSywMh7pGX5+9FqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk NThjNDYwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODIxZjFlODE4Y2NhODBlZDI2ZDEzNmRjMDAzN2M0NTVmOWFhOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5jpJVi5Dfhd5J+6mO8UlUxdhtx+ bg1ShEkLo+sPa4iz/ifPTWba76bHFRAjIjCeu4eFJKvZh+n+QI7WRGcbfgndGDBV jhYDm936E/Q3iGzsZqx48mxrgRzyw0Ox53Vsvh5zffRwS+eo2lbsrx8fYNsYQKC6 QPwYgd4Vs72gzKgUfci8JZ8jqzA2/NPsP3ujc47TCojXoplkhebxm3zrA2gME+Cp 1ZYygbaJuMXKUrMEQwyhk+hwT+ZVDwNFhucoucqFqOPDU3+gYA297qe2Qe4GzD5s pHmUMP+dLdhFQ1BVQDyClro1w6TMINDkReoLjk/DIs+ODr1LbRCL9s2loQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBgh8egYzKgO0m0TbcADfEVfmqjcMB8GA1UdIwQY MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt N2QxNmI5MGRiZTcyLzEvR0NIeDZCak1xQTdTYlJOdHdBTjhSVi1hcU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPyUMA0G CSqGSIb3DQEBCwUAA4IBAQBvq0KxjhveR5qUBUy1ZB86RDRwyytaOO7l/VLq3T/B N0dA2pdd33H7Jpi2d5nWTFd1jqlYGyYMrbmkrNIwJ62xNQ2LPCrDT1jrwNvkuoRr 4sTXmj8GJuzbyrCVfgSkBg+DbRwPQG2SJL9i9Xfs8zHqKPvAWFJ/57zkKfNOvoFB HPQFoL1zF5f6aF1yLSfzrPxzPzuozJMn2KmycjKGmlAodWREXZO8PBdB/qchs2kE 1jW3qrINHSMD80TnN4P+JNOjEzhcSRqtsRiKBCQq+ZkZdaP6RWaZ3ZrSc6EbypT4 d8UlLCj2rO6yqP/xbcUXK/ziVVzOfXnQNomY21jtxFvG -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:55 2026 by rpki-client