This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/GCtMm5OsOU4i4g4KxyLMcQ0BHfI.roa File: GCtMm5OsOU4i4g4KxyLMcQ0BHfI.roa (raw, json) Hash identifier: xY/vjjYqZS6LtAuHCK/fXtGxtcnuq2WBz+FraVY91IY= Subject key identifier: 18:2B:4C:9B:93:AC:39:4E:22:E2:0E:0A:C7:22:CC:71:0D:01:1D:F2 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C8072B81D8E7132F10AA34E8DE6FAD4 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/GCtMm5OsOU4i4g4KxyLMcQ0BHfI.roa Signing time: Fri 02 Jan 2026 02:19:11 +0000 ROA not before: Fri 02 Jan 2026 02:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216341 IP address blocks: 185.39.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:72:b8:1d:8e:71:32:f1:0a:a3:4e:8d:e6:fa:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=182b4c9b93ac394e22e20e0ac722cc710d011df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:32:e5:ce:c2:84:3e:9a:bd:c7:63:82:a7: 18:f4:87:82:67:16:e3:50:2c:20:02:58:2d:1e:66: fa:7f:fa:20:56:a8:31:ec:82:4d:55:92:38:b7:2a: a7:44:e1:2f:ad:0c:e6:13:b9:cb:75:a2:2f:10:1a: a4:48:b3:52:0a:a7:ca:24:52:c6:ce:4d:ca:bb:e9: cd:d8:d2:14:38:5a:37:d6:6c:13:66:98:bc:3c:ef: 80:d7:c5:49:fa:44:be:fc:7b:96:0d:14:9a:a2:1f: 0d:40:d2:e0:b2:06:a6:93:ee:bc:82:94:a3:7b:78: 7b:c0:6a:cd:99:89:9c:a0:b0:b3:fa:d7:05:4f:7a: 12:ac:fe:5a:b8:6f:02:ee:6f:2c:ae:a3:d9:12:e5: 86:c0:18:3f:b8:de:1c:ca:78:54:90:7f:51:7c:d8: 4a:e2:6d:fd:5f:a9:34:8e:fa:7b:24:90:b0:05:01: 79:dd:44:2f:a6:de:0a:c1:85:35:9d:b6:d9:52:a6: 3c:c4:6a:6f:33:4a:54:4d:6e:9a:5e:cb:b7:49:3c: fb:7a:7e:f7:eb:bc:1c:66:c1:65:e3:b5:ee:8f:3f: 25:77:cc:a6:fe:17:f5:7a:62:ba:45:6b:2e:23:68: 5b:8e:e9:f6:20:e3:c3:0c:79:10:9a:fb:a0:39:0e: d9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2B:4C:9B:93:AC:39:4E:22:E2:0E:0A:C7:22:CC:71:0D:01:1D:F2 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/GCtMm5OsOU4i4g4KxyLMcQ0BHfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.19.0/24 Signature Algorithm: sha256WithRSAEncryption 52:14:29:d6:3c:00:60:38:7f:27:30:87:ea:b2:fe:14:63:84: 94:23:2f:3b:42:8b:7c:93:e1:40:f9:9c:99:c1:e7:f6:1f:3d: 66:29:15:50:b3:83:b9:60:75:4d:07:1b:04:ba:6d:5f:dd:56: b1:ef:47:ab:c4:89:df:88:09:a1:a0:c9:10:0b:a1:bf:0d:27: bc:e1:cb:c7:54:18:98:31:00:30:9e:9f:5c:4b:41:42:4f:53: d2:2b:58:57:62:91:99:38:46:29:4c:9d:2f:c9:71:96:f1:e0: a8:ea:63:a5:5b:77:61:2e:0f:84:95:12:2f:d2:86:62:ec:d7: 1f:8a:db:48:7f:a1:05:e8:5c:05:5d:ec:30:e3:f8:9c:c1:e9: 11:0e:96:d7:f9:70:fd:13:e1:3c:7a:a0:49:c0:ef:4f:10:34: 73:a1:83:bc:76:94:2c:b8:df:d7:f8:b2:eb:1d:84:97:d4:28: f5:68:22:ad:d0:52:18:74:74:71:d6:21:55:10:03:15:b0:4c: 87:ee:26:95:b7:e4:82:3b:16:3d:04:6d:23:b2:40:63:c5:19: 2d:5a:6f:98:36:fb:da:26:f8:86:b9:8c:a1:b5:24:69:93:ae: 04:61:7f:3f:fb:7e:cf:91:03:fa:df:65:c5:37:90:7e:f7:ea: b6:cc:4b:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHK4HY5xMvEKo06N5vrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODJiNGM5YjkzYWMzOTRlMjJlMjBlMGFjNzIyY2M3MTBkMDExZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHoy5c7ChD6avcdjgqcY9IeCZxbj UCwgAlgtHmb6f/ogVqgx7IJNVZI4tyqnROEvrQzmE7nLdaIvEBqkSLNSCqfKJFLG zk3Ku+nN2NIUOFo31mwTZpi8PO+A18VJ+kS+/HuWDRSaoh8NQNLgsgamk+68gpSj e3h7wGrNmYmcoLCz+tcFT3oSrP5auG8C7m8srqPZEuWGwBg/uN4cynhUkH9RfNhK 4m39X6k0jvp7JJCwBQF53UQvpt4KwYU1nbbZUqY8xGpvM0pUTW6aXsu3STz7en73 67wcZsFl47Xujz8ld8ym/hf1emK6RWsuI2hbjun2IOPDDHkQmvugOQ7Z+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBgrTJuTrDlOIuIOCscizHENAR3yMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvR0N0TW01T3NPVTRpNGc0S3h5TE1jUTBCSGZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuScTMA0G CSqGSIb3DQEBCwUAA4IBAQBSFCnWPABgOH8nMIfqsv4UY4SUIy87Qot8k+FA+ZyZ wef2Hz1mKRVQs4O5YHVNBxsEum1f3Vax70erxInfiAmhoMkQC6G/DSe84cvHVBiY MQAwnp9cS0FCT1PSK1hXYpGZOEYpTJ0vyXGW8eCo6mOlW3dhLg+ElRIv0oZi7Ncf ittIf6EF6FwFXeww4/icwekRDpbX+XD9E+E8eqBJwO9PEDRzoYO8dpQsuN/X+LLr HYSX1Cj1aCKt0FIYdHRx1iFVEAMVsEyH7iaVt+SCOxY9BG0jskBjxRktWm+YNvva JviGuYyhtSRpk64EYX8/+37PkQP632XFN5B+9+q2zEth -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:13 2026 by rpki-client