This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/GQGH1TUEJr1HQhYRiSjWJswIL4A.roa File: GQGH1TUEJr1HQhYRiSjWJswIL4A.roa (raw, json) Hash identifier: Jv+GSO2x+qgI4rphlsamD+JlgQVEbjq2/x4KuEr/c5E= Subject key identifier: 19:01:87:D5:35:04:26:BD:47:42:16:11:89:28:D6:26:CC:08:2F:80 Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a Certificate serial: 019B7758B4772AC013ACA3254DC25C4E4D8B Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/GQGH1TUEJr1HQhYRiSjWJswIL4A.roa Signing time: Thu 01 Jan 2026 02:17:40 +0000 ROA not before: Thu 01 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12552 IP address blocks: 185.18.84.0/22 maxlen: 22 2a03:f440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b4:77:2a:c0:13:ac:a3:25:4d:c2:5c:4e:4d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591338a61f6a0f548420a9392037f4811749508a Validity Not Before: Jan 1 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=190187d5350426bd474216118928d626cc082f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:1f:66:df:3e:1c:83:53:c1:a7:69:18:65: d0:8e:15:06:64:4f:ee:d8:32:33:4b:df:3c:f9:c1: 7c:03:cd:a7:90:e0:c1:0d:3c:5e:9c:09:65:e1:e6: 21:42:f4:43:dd:4a:a1:bf:da:53:29:6f:e3:06:bc: 68:cf:02:b6:6d:13:ac:32:f6:22:29:94:7e:f1:65: 3e:b1:9e:99:cf:c8:79:d2:90:28:55:e7:5d:6c:8d: 3b:9e:07:3f:a5:2b:a4:9e:8f:10:ff:1f:e6:6f:29: bf:27:9e:e3:be:68:7f:67:e6:c7:ee:a4:da:aa:4a: 7a:ec:91:3e:37:a4:5d:33:a9:d2:5d:9d:8f:93:25: 6c:7f:df:c3:4d:01:4d:64:b4:95:ea:be:53:10:fa: 8c:9b:d9:94:d0:7f:ba:e0:f6:19:22:96:4a:93:db: 7e:6e:0b:f5:df:e4:3f:8e:0c:37:0a:95:d1:14:14: 76:69:a6:40:8d:15:46:8d:2a:29:e4:d0:eb:b7:e2: 1e:a7:a1:ed:38:35:d6:9e:02:d0:45:c0:a4:ae:04: fc:7c:21:3a:32:95:d0:bb:9a:72:ef:3e:5c:31:38: 5e:7c:20:0a:bb:1c:99:77:b0:d6:62:73:7e:a4:ad: 4f:a6:d1:dd:c0:bb:ee:8b:63:a6:dc:86:bd:80:16: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:01:87:D5:35:04:26:BD:47:42:16:11:89:28:D6:26:CC:08:2F:80 X509v3 Authority Key Identifier: keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/GQGH1TUEJr1HQhYRiSjWJswIL4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.84.0/22 IPv6: 2a03:f440::/32 Signature Algorithm: sha256WithRSAEncryption 43:43:4c:46:65:bb:f0:55:db:f7:57:ef:81:9f:60:55:0f:7d: 1c:d2:2d:e8:fa:4d:10:2c:0d:f7:39:e3:1e:0c:8c:a0:ee:00: 0a:55:29:a4:1f:b3:1a:51:0f:bf:2d:86:8a:4c:2b:6b:35:16: f4:22:85:3c:00:17:03:86:68:df:60:0e:7f:ac:89:92:09:f0: 21:27:d4:75:d1:8f:54:b4:a2:8a:2a:30:c2:4d:12:20:c7:d3: 09:e7:8a:bf:09:85:fc:a2:b5:4b:48:fc:8f:ad:a8:b5:bb:40: 30:3f:33:58:e2:81:c4:c2:d5:48:7c:bc:e5:36:11:eb:61:cf: 55:c2:6d:ed:17:76:05:a5:24:35:7c:04:6d:a3:56:62:ea:6c: a0:1c:18:45:71:41:5f:82:9a:dc:e8:3f:3d:da:9c:d0:94:18: 72:8c:3b:34:e2:2e:2f:3b:b7:a4:43:f2:8f:db:0c:ef:40:24: e7:c7:a2:1f:22:f0:c4:90:14:26:6e:50:7e:7c:69:ae:b4:ad: 61:62:bc:dc:06:47:dd:ef:c3:40:51:cd:35:91:23:cf:1a:e4: 91:e2:cb:a5:08:25:09:16:91:49:50:cd:3f:e7:b3:be:ea:81: c2:79:bb:9b:9e:1b:48:06:1a:58:c4:e8:28:2d:b4:18:e9:b2: dd:4d:1c:3d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WLR3KsATrKMlTcJcTk2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MTMzOGE2MWY2YTBmNTQ4NDIwYTkzOTIwMzdmNDgxMTc0 OTUwOGEwHhcNMjYwMTAxMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTAxODdkNTM1MDQyNmJkNDc0MjE2MTE4OTI4ZDYyNmNjMDgyZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDMfZt8+HINTwadpGGXQjhUGZE/u 2DIzS988+cF8A82nkODBDTxenAll4eYhQvRD3Uqhv9pTKW/jBrxozwK2bROsMvYi KZR+8WU+sZ6Zz8h50pAoVeddbI07ngc/pSukno8Q/x/mbym/J57jvmh/Z+bH7qTa qkp67JE+N6RdM6nSXZ2PkyVsf9/DTQFNZLSV6r5TEPqMm9mU0H+64PYZIpZKk9t+ bgv13+Q/jgw3CpXRFBR2aaZAjRVGjSop5NDrt+Iep6HtODXWngLQRcCkrgT8fCE6 MpXQu5py7z5cMThefCAKuxyZd7DWYnN+pK1PptHdwLvui2Om3Ia9gBYNLwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBkBh9U1BCa9R0IWEYko1ibMCC+AMB8GA1UdIwQY MBaAFFkTOKYfag9UhCCpOSA39IEXSVCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JNNHBoOXFEMVNFSUtrNUlEZjBnUmRKVUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZWEwMGQtNjA0Ny00ZTEyLWE4ODEt MTg5NDBjYjM3MmJkLzEvR1FHSDFUVUVKcjFIUWhZUmlTaldKc3dJTDRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83ZWEwMGQtNjA0Ny00ZTEyLWE4ODEtMTg5NDBjYjM3MmJk LzEvV1JNNHBoOXFEMVNFSUtrNUlEZjBnUmRKVUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRJUMA0E AgACMAcDBQAqA/RAMA0GCSqGSIb3DQEBCwUAA4IBAQBDQ0xGZbvwVdv3V++Bn2BV D30c0i3o+k0QLA33OeMeDIyg7gAKVSmkH7MaUQ+/LYaKTCtrNRb0IoU8ABcDhmjf YA5/rImSCfAhJ9R10Y9UtKKKKjDCTRIgx9MJ54q/CYX8orVLSPyPrai1u0AwPzNY 4oHEwtVIfLzlNhHrYc9Vwm3tF3YFpSQ1fARto1Zi6mygHBhFcUFfgprc6D892pzQ lBhyjDs04i4vO7ekQ/KP2wzvQCTnx6IfIvDEkBQmblB+fGmutK1hYrzcBkfd78NA Uc01kSPPGuSR4sulCCUJFpFJUM0/57O+6oHCebubnhtIBhpYxOgoLbQY6bLdTRw9 -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:25 2026 by rpki-client