This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa File: GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa (raw, json) Hash identifier: G9NhBuAJ9tyZxN2RMYoM+cN+FlYgn+5It9aPaKFMmf0= Subject key identifier: 1B:10:99:A1:05:24:57:97:C1:01:78:52:2F:80:C4:81:36:06:25:0A Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A33198D58A1AE74FF00E458E708C44 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207433 IP address blocks: 84.47.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:31:98:d5:8a:1a:e7:4f:f0:0e:45:8e:70:8c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b1099a105245797c10178522f80c4813606250a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1d:b0:b9:64:19:69:71:66:03:e7:e0:74:51: 95:fe:19:6f:66:f9:2a:bf:0f:7c:f4:0c:ee:bd:3d: 57:11:ea:6d:ef:57:f2:2b:d5:f5:c1:b8:36:02:32: ff:f5:48:41:47:14:4b:33:4d:4e:dd:b0:e6:de:0f: 18:b3:ff:b1:5d:c8:68:eb:4b:f1:37:c0:08:03:66: 82:f8:04:2a:19:5d:a1:9c:e9:03:39:4d:a3:a5:c6: a7:1d:ee:49:44:27:61:03:29:bf:57:e4:82:76:bd: d4:a6:d5:d2:29:9f:d0:5d:2e:f7:45:ea:85:06:e2: 21:5d:4d:d0:d3:1a:40:32:02:83:4b:76:ec:d1:2b: ca:76:e2:86:cc:45:3d:85:fe:b5:e8:f3:dc:f5:cb: 42:55:a8:00:23:da:17:06:49:f0:35:13:85:61:cf: 92:e1:6a:68:4f:eb:7e:f8:58:64:98:30:97:82:f5: 1c:22:70:65:f4:4f:bb:ec:cc:8f:23:ff:e0:7a:b0: e9:7b:3b:ad:c3:27:07:a6:63:71:72:8d:51:c5:3c: f0:92:85:89:19:69:01:37:31:c1:a8:20:41:80:9e: 80:03:0b:72:49:6d:50:28:79:ee:b5:83:5e:29:bd: 67:f0:56:df:b0:64:2a:7a:e5:82:65:aa:73:08:cf: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:10:99:A1:05:24:57:97:C1:01:78:52:2F:80:C4:81:36:06:25:0A X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.47.163.0/24 Signature Algorithm: sha256WithRSAEncryption 26:cf:f4:0b:ec:de:d6:33:85:e4:c2:8c:36:36:18:39:02:04: 38:a3:34:bf:f9:9f:e1:ee:13:32:6a:01:65:83:5c:cb:00:82: ee:25:a0:e7:46:6d:02:79:fa:25:aa:2f:15:10:e9:93:49:96: 34:5c:28:06:dd:15:95:b4:68:c5:d3:8a:f1:f7:9e:c4:71:49: 45:e8:cf:29:24:32:b2:d3:19:81:29:cf:32:1e:33:b8:a9:41: d2:fb:dc:a1:51:5d:12:d1:23:cf:e3:cc:61:58:0d:ed:7d:a7: db:30:61:58:cc:35:98:00:b5:46:d4:df:39:aa:cb:a0:3f:00: 95:17:3a:59:20:f1:96:68:f8:96:1e:bb:83:95:c0:fc:0d:a3: 52:26:12:20:13:e0:e6:6f:65:4d:34:f6:70:d3:20:a1:e8:00: d6:2f:d5:a6:98:7c:49:7c:a3:f2:67:5b:bd:13:8e:c9:98:89: fa:1c:1f:3b:9a:f4:29:ef:8d:91:96:f2:dd:4d:86:e8:34:1b: 9e:e8:82:4c:db:49:60:c4:cb:b4:6d:a4:71:35:a7:2c:4c:0c: ca:50:d1:ba:29:b5:c2:ba:2e:1e:a9:fa:38:dd:fc:b0:ce:05: ee:b5:89:d7:91:5a:d5:2c:37:a2:da:32:92:59:bd:3d:04:54: aa:dd:2f:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozGY1Yoa50/wDkWOcIxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjEwOTlhMTA1MjQ1Nzk3YzEwMTc4NTIyZjgwYzQ4MTM2MDYyNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh2wuWQZaXFmA+fgdFGV/hlvZvkq vw989AzuvT1XEept71fyK9X1wbg2AjL/9UhBRxRLM01O3bDm3g8Ys/+xXcho60vx N8AIA2aC+AQqGV2hnOkDOU2jpcanHe5JRCdhAym/V+SCdr3UptXSKZ/QXS73ReqF BuIhXU3Q0xpAMgKDS3bs0SvKduKGzEU9hf616PPc9ctCVagAI9oXBknwNROFYc+S 4WpoT+t++FhkmDCXgvUcInBl9E+77MyPI//gerDpezutwycHpmNxco1RxTzwkoWJ GWkBNzHBqCBBgJ6AAwtySW1QKHnutYNeKb1n8FbfsGQqeuWCZapzCM9JUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBsQmaEFJFeXwQF4Ui+AxIE2BiUKMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvR3hDWm9RVWtWNWZCQVhoU0w0REVnVFlHSlFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVC+jMA0G CSqGSIb3DQEBCwUAA4IBAQAmz/QL7N7WM4Xkwow2Nhg5AgQ4ozS/+Z/h7hMyagFl g1zLAILuJaDnRm0Cefolqi8VEOmTSZY0XCgG3RWVtGjF04rx957EcUlF6M8pJDKy 0xmBKc8yHjO4qUHS+9yhUV0S0SPP48xhWA3tfafbMGFYzDWYALVG1N85qsugPwCV FzpZIPGWaPiWHruDlcD8DaNSJhIgE+Dmb2VNNPZw0yCh6ADWL9WmmHxJfKPyZ1u9 E47JmIn6HB87mvQp742RlvLdTYboNBue6IJM20lgxMu0baRxNacsTAzKUNG6KbXC ui4eqfo43fywzgXutYnXkVrVLDei2jKSWb09BFSq3S+Y -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:23 2026 by rpki-client