This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/GGptaUCk5HswofHGiRhoLDBrSsk.roa File: GGptaUCk5HswofHGiRhoLDBrSsk.roa (raw, json) Hash identifier: a8zAb+DGkHkBUoReMwMr6C/BLIezYKFQteBzpzxwQ3I= Subject key identifier: 18:6A:6D:69:40:A4:E4:7B:30:A1:F1:C6:89:18:68:2C:30:6B:4A:C9 Certificate issuer: /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2 Certificate serial: 019B7E378B63808716239EBBAC03E1706AD2 Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/GGptaUCk5HswofHGiRhoLDBrSsk.roa Signing time: Fri 02 Jan 2026 10:18:47 +0000 ROA not before: Fri 02 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15623 IP address blocks: 45.94.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8b:63:80:87:16:23:9e:bb:ac:03:e1:70:6a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2 Validity Not Before: Jan 2 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=186a6d6940a4e47b30a1f1c68918682c306b4ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:aa:4d:76:4a:52:15:52:19:3a:cc:f8:14:9f: 73:2b:ed:14:23:3c:37:0f:ad:97:d1:e5:59:24:34: 88:70:db:0d:fa:1e:93:aa:77:3d:5f:5b:57:1b:bf: 4e:86:1a:c9:b5:71:4b:f8:6e:a8:3c:f3:b4:07:de: b4:70:18:31:fd:92:a0:1b:54:29:58:79:6d:20:37: 91:5c:9c:61:46:3c:1f:41:36:32:19:c2:e3:bc:6b: 56:91:0d:b9:21:06:bc:ab:aa:94:ae:87:fe:b1:28: 33:07:59:25:15:da:af:ed:a6:9c:ac:b4:6c:97:0b: cc:e1:a1:0e:a2:25:87:e9:93:d1:02:76:c0:f7:1a: 46:bd:cf:97:ea:25:f0:76:61:f7:3b:8e:80:b4:e0: ca:1a:f8:5c:ca:c3:43:c2:a0:d2:00:b0:91:29:2a: eb:6e:d1:c1:e2:a5:68:d1:04:04:fc:da:86:15:8c: 1c:8c:bf:d9:b2:3b:9d:60:cb:31:b9:60:7c:ee:1e: 53:b1:6d:d7:a3:a4:23:83:13:7d:12:f6:5b:fb:8d: a8:2a:ec:0d:94:05:67:df:ee:35:57:39:5f:d9:2e: 6c:f8:f6:ab:ee:13:88:1e:02:5f:0a:e1:30:cf:ab: b6:ab:aa:f1:ae:96:58:a3:72:f6:34:7e:f6:89:4b: a4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6A:6D:69:40:A4:E4:7B:30:A1:F1:C6:89:18:68:2C:30:6B:4A:C9 X509v3 Authority Key Identifier: keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/GGptaUCk5HswofHGiRhoLDBrSsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.88.0/22 Signature Algorithm: sha256WithRSAEncryption c2:c9:19:af:70:fa:75:52:6b:3b:9c:11:67:92:66:be:88:8c: c2:b8:2f:29:c4:34:5b:96:52:36:aa:b4:8b:91:7e:af:1d:a3: 88:eb:96:6d:48:87:86:c5:62:f1:f0:bb:54:83:7c:dd:64:69: 70:63:ac:21:75:81:a3:a3:c3:7e:e9:ca:bc:22:6e:cd:53:35: 2c:af:63:db:de:ee:e1:db:91:e0:3c:cd:28:2f:0c:64:72:d9: 37:ae:52:72:15:47:8d:66:c6:90:7d:98:2d:c0:b3:2e:72:c0: 88:b4:5f:0e:de:d2:ef:76:d0:28:4b:98:4a:8a:20:5c:10:e6: 71:36:eb:4b:41:9b:24:8b:40:b5:fe:54:e6:9e:8d:1c:ab:cf: 21:cd:69:66:57:b8:3e:b6:e7:78:19:02:43:a4:41:0c:de:70: 82:30:8f:b4:a2:17:37:fa:8e:30:3e:07:b6:5b:e0:1c:ea:2d: af:e1:56:91:3e:03:4f:27:b6:54:7e:01:bc:26:b7:4e:58:55: 4c:02:2b:fa:fc:70:92:86:f2:12:d2:77:d8:14:36:b8:75:cf: 15:a1:68:c3:ac:d1:da:b9:84:c9:62:cd:ff:38:78:6e:00:ca: 1b:53:a4:6e:2c:eb:eb:6a:bb:43:1f:70:3c:bf:33:d5:0e:58: d1:e6:97:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N4tjgIcWI567rAPhcGrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiN2RlOGQxMzUzM2QxZTM2YjExMzVhNWQyZTlhNmZmMzk4 NWNkYTIwHhcNMjYwMTAyMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODZhNmQ2OTQwYTRlNDdiMzBhMWYxYzY4OTE4NjgyYzMwNmI0YWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qpNdkpSFVIZOsz4FJ9zK+0UIzw3 D62X0eVZJDSIcNsN+h6Tqnc9X1tXG79OhhrJtXFL+G6oPPO0B960cBgx/ZKgG1Qp WHltIDeRXJxhRjwfQTYyGcLjvGtWkQ25IQa8q6qUrof+sSgzB1klFdqv7aacrLRs lwvM4aEOoiWH6ZPRAnbA9xpGvc+X6iXwdmH3O46AtODKGvhcysNDwqDSALCRKSrr btHB4qVo0QQE/NqGFYwcjL/ZsjudYMsxuWB87h5TsW3Xo6QjgxN9EvZb+42oKuwN lAVn3+41Vzlf2S5s+Par7hOIHgJfCuEwz6u2q6rxrpZYo3L2NH72iUukBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBhqbWlApOR7MKHxxokYaCwwa0rJMB8GA1UdIwQY MBaAFHt96NE1M9HjaxE1pdLppv85hc2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2It MmU5YjJkODhkNTQ3LzEvR0dwdGFVQ2s1SHN3b2ZIR2lSaG9MREJyU3NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2ItMmU5YjJkODhkNTQ3 LzEvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLV5YMA0G CSqGSIb3DQEBCwUAA4IBAQDCyRmvcPp1Ums7nBFnkma+iIzCuC8pxDRbllI2qrSL kX6vHaOI65ZtSIeGxWLx8LtUg3zdZGlwY6whdYGjo8N+6cq8Im7NUzUsr2Pb3u7h 25HgPM0oLwxkctk3rlJyFUeNZsaQfZgtwLMucsCItF8O3tLvdtAoS5hKiiBcEOZx NutLQZski0C1/lTmno0cq88hzWlmV7g+tud4GQJDpEEM3nCCMI+0ohc3+o4wPge2 W+Ac6i2v4VaRPgNPJ7ZUfgG8JrdOWFVMAiv6/HCShvIS0nfYFDa4dc8VoWjDrNHa uYTJYs3/OHhuAMobU6RuLOvrartDH3A8vzPVDljR5pd5 -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:06 2026 by rpki-client