This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/GhkWyWZKwlXQpHL9cBTb8aM_SU0.roa File: GhkWyWZKwlXQpHL9cBTb8aM_SU0.roa (raw, json) Hash identifier: U6m6vO7DhNVBFyGzZpbR/VsXLGh07rZQqb4nItJW0Qc= Subject key identifier: 1A:19:16:C9:66:4A:C2:55:D0:A4:72:FD:70:14:DB:F1:A3:3F:49:4D Certificate issuer: /CN=7938dfb9eb924079bb706cb616eda572864a9e13 Certificate serial: 019B027A053E91FB27C075B7954925974456 Authority key identifier: 79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/GhkWyWZKwlXQpHL9cBTb8aM_SU0.roa Signing time: Tue 09 Dec 2025 09:38:29 +0000 ROA not before: Tue 09 Dec 2025 09:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44400 IP address blocks: 185.51.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:7a:05:3e:91:fb:27:c0:75:b7:95:49:25:97:44:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7938dfb9eb924079bb706cb616eda572864a9e13 Validity Not Before: Dec 9 09:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a1916c9664ac255d0a472fd7014dbf1a33f494d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:40:24:5f:dc:c2:b9:35:b1:5b:0c:16:63: 72:49:a7:34:7e:7b:78:95:b5:11:30:06:30:0a:45: 7e:9c:19:52:c9:d2:aa:96:9b:3b:22:95:b9:09:a9: 5a:c1:a9:39:5b:b1:30:3d:84:8a:9e:d1:32:d9:99: b8:bd:6a:ed:86:15:4e:32:de:91:b9:84:25:19:ce: 53:16:9a:ef:fc:1f:d1:30:5c:10:9a:bf:f0:bb:b3: d9:5d:c1:de:d8:8a:0d:de:3a:a1:c6:17:ed:1a:50: 7b:12:32:02:15:6b:01:7f:98:3f:ab:d1:b1:e5:e1: 47:9a:b8:92:58:b9:0c:46:99:88:73:19:83:0d:74: c4:80:ca:d9:0a:86:2b:c2:7c:e8:77:7c:c1:76:d6: c5:3a:43:29:f7:2d:a0:06:8e:d7:ae:ab:aa:33:49: a6:8c:72:4b:1d:ec:f6:65:e5:7f:5e:c8:db:f2:65: 23:36:18:96:b8:51:38:7c:31:1d:32:79:66:fb:7c: 94:c9:fd:c2:eb:4e:1a:a5:b4:c5:2f:ec:66:b3:ad: c5:f5:ea:a5:10:c8:e0:b1:98:4f:ea:ee:58:7f:a0: 9d:3f:3c:a6:24:a3:74:b3:c7:41:4f:b3:37:7e:06: bc:60:82:23:6b:47:ca:95:e4:83:2e:eb:0c:60:fb: ae:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:19:16:C9:66:4A:C2:55:D0:A4:72:FD:70:14:DB:F1:A3:3F:49:4D X509v3 Authority Key Identifier: keyid:79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/GhkWyWZKwlXQpHL9cBTb8aM_SU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.40.0/24 Signature Algorithm: sha256WithRSAEncryption ab:6a:a3:58:36:9c:c4:56:1e:e6:7a:f9:85:50:7e:ee:22:0e: ca:e5:3d:07:aa:a6:07:86:37:42:bb:d9:0c:df:07:cb:43:b3: 48:f6:6b:b6:b4:a4:a8:cb:ea:50:3f:04:d8:31:0c:df:61:64: 1e:76:b4:a5:92:24:44:1a:10:b0:cb:b1:01:0a:5d:1f:98:9b: 45:49:d0:c1:46:e3:c9:85:e1:59:e9:c1:ff:22:21:58:06:db: a9:17:7a:cb:1c:58:b8:b8:ec:27:09:04:e9:0e:8d:cb:36:98: 14:a3:d9:79:99:8a:05:bd:46:99:0d:3d:7a:8e:be:e0:af:a5: 1f:4a:2f:c6:b9:0e:53:03:3b:56:ef:b3:88:80:77:5b:d7:f4: e6:84:7a:95:f2:5e:c3:89:a0:64:bd:9f:77:bd:0c:ec:90:83: 32:5a:64:de:90:0a:c4:4f:99:34:cd:c9:9b:81:da:dd:c3:e3: 48:2b:dd:2d:d2:79:10:2d:31:36:b2:32:1b:4b:36:26:2d:e0: 6a:1f:1d:ae:a5:ad:98:09:9c:40:3f:c5:d6:59:fc:0f:f2:33: 2e:9e:a9:86:b4:72:1d:dc:51:5a:03:c4:cd:3a:38:e3:19:f0: 3e:cc:e6:bd:90:3d:72:44:61:b6:a0:3c:c7:ad:22:11:1d:58: b0:f7:2a:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsCegU+kfsnwHW3lUkll0RWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MzhkZmI5ZWI5MjQwNzliYjcwNmNiNjE2ZWRhNTcyODY0 YTllMTMwHhcNMjUxMjA5MDkzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTE5MTZjOTY2NGFjMjU1ZDBhNDcyZmQ3MDE0ZGJmMWEzM2Y0OTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzRAJF/cwrk1sVsMFmNySac0fnt4 lbURMAYwCkV+nBlSydKqlps7IpW5Calawak5W7EwPYSKntEy2Zm4vWrthhVOMt6R uYQlGc5TFprv/B/RMFwQmr/wu7PZXcHe2IoN3jqhxhftGlB7EjICFWsBf5g/q9Gx 5eFHmriSWLkMRpmIcxmDDXTEgMrZCoYrwnzod3zBdtbFOkMp9y2gBo7XrquqM0mm jHJLHez2ZeV/Xsjb8mUjNhiWuFE4fDEdMnlm+3yUyf3C604apbTFL+xms63F9eql EMjgsZhP6u5Yf6CdPzymJKN0s8dBT7M3fga8YIIja0fKleSDLusMYPuukQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBoZFslmSsJV0KRy/XAU2/GjP0lNMB8GA1UdIwQY MBaAFHk437nrkkB5u3BsthbtpXKGSp4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVRqZnVldVNRSG03Y0d5MkZ1Mmxjb1pLbmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81ZjUzZWUtZmIwMC00ZGY0LTk3NjQt MDZkYTJiYjA2MDcxLzEvR2hrV3lXWkt3bFhRcEhMOWNCVGI4YU1fU1UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81ZjUzZWUtZmIwMC00ZGY0LTk3NjQtMDZkYTJiYjA2MDcx LzEvZVRqZnVldVNRSG03Y0d5MkZ1Mmxjb1pLbmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTMoMA0G CSqGSIb3DQEBCwUAA4IBAQCraqNYNpzEVh7mevmFUH7uIg7K5T0HqqYHhjdCu9kM 3wfLQ7NI9mu2tKSoy+pQPwTYMQzfYWQedrSlkiREGhCwy7EBCl0fmJtFSdDBRuPJ heFZ6cH/IiFYBtupF3rLHFi4uOwnCQTpDo3LNpgUo9l5mYoFvUaZDT16jr7gr6Uf Si/GuQ5TAztW77OIgHdb1/TmhHqV8l7DiaBkvZ93vQzskIMyWmTekArET5k0zcmb gdrdw+NIK90t0nkQLTE2sjIbSzYmLeBqHx2upa2YCZxAP8XWWfwP8jMunqmGtHId 3FFaA8TNOjjjGfA+zOa9kD1yRGG2oDzHrSIRHViw9yqt -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:25 2025 by rpki-client