This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/GZYNt-YP_7Hadt6qxc3RQHa1sYY.roa File: GZYNt-YP_7Hadt6qxc3RQHa1sYY.roa (raw, json) Hash identifier: W0gvqyTsgxCPRfvxHQXq38ri2H0pX/uYL4J5Y5G9QMM= Subject key identifier: 19:96:0D:B7:E6:0F:FF:B1:DA:76:DE:AA:C5:CD:D1:40:76:B5:B1:86 Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896 Certificate serial: 019A81D5B48686BE0613C0673D77A9B4B892 Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/GZYNt-YP_7Hadt6qxc3RQHa1sYY.roa Signing time: Fri 14 Nov 2025 10:07:37 +0000 ROA not before: Fri 14 Nov 2025 10:07:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 269822 IP address blocks: 185.104.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:d5:b4:86:86:be:06:13:c0:67:3d:77:a9:b4:b8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896 Validity Not Before: Nov 14 10:07:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=19960db7e60fffb1da76deaac5cdd14076b5b186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:1a:22:da:24:ee:be:59:42:ff:06:1a:23: 4f:a3:90:68:b1:75:04:96:0b:ba:aa:4b:56:1d:b5: aa:58:92:42:a7:de:0b:f0:36:bd:e5:cb:0b:fa:d5: f9:ab:8b:33:5a:e1:fa:c2:3e:22:7f:55:8e:f2:da: 30:83:b1:4f:b7:aa:ad:aa:c9:98:08:3e:aa:2c:3d: 38:e1:da:02:9b:25:aa:ee:34:2c:b3:a7:19:05:4b: 53:82:83:d8:16:8e:6e:ad:29:8c:41:77:fd:6f:95: 4a:8c:72:5b:22:93:77:93:10:88:90:47:d4:41:87: da:39:c7:e9:95:74:da:26:92:ce:24:ce:18:62:5f: 29:12:c3:70:6c:19:de:7c:34:81:9d:bd:d4:4b:f5: 5e:8e:4c:2f:b0:bf:86:1a:10:f8:9a:06:e1:dc:2d: 9b:2e:61:fa:53:9b:d7:72:d2:b3:7e:3c:10:71:48: 07:88:80:57:0b:96:11:48:54:a6:8c:b2:6a:98:ae: 84:61:25:a3:cb:fb:82:5a:40:9b:31:e1:39:b7:45: 91:37:60:ec:4a:7d:de:da:31:90:1e:49:c5:c7:e4: 81:e7:66:53:30:dc:65:31:46:e2:1e:42:61:4e:8f: c1:f8:ab:34:fc:df:8b:b6:ac:51:89:f0:7d:d1:59: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:96:0D:B7:E6:0F:FF:B1:DA:76:DE:AA:C5:CD:D1:40:76:B5:B1:86 X509v3 Authority Key Identifier: keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/GZYNt-YP_7Hadt6qxc3RQHa1sYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.164.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:2c:4a:12:05:f1:7c:0f:2d:f0:94:93:65:81:63:72:80:e9: ca:e5:5c:c4:33:bb:3d:6a:74:6d:1f:03:5f:26:e6:f2:04:80: 4d:ec:e0:e1:41:a1:04:8b:b5:24:ff:01:2e:2b:0a:64:e9:90: 4f:ce:49:23:03:ed:9f:28:f7:b4:f0:a5:c9:65:e4:80:7a:64: 18:ba:05:54:4d:ff:e7:ea:a7:92:62:ab:4e:fd:68:35:2b:ed: 08:92:7e:b0:c3:00:e1:4b:f9:93:03:aa:46:3f:92:f4:3f:43: 77:5c:5c:d3:df:8e:eb:d2:90:65:19:59:98:1c:3e:17:30:1d: 58:92:7c:31:28:f5:8b:aa:8a:9f:7e:92:fd:95:f9:64:5b:e9: ee:49:5c:3b:a3:4d:04:43:98:58:1e:6c:4f:1e:9a:98:79:1c: 08:b9:e5:2c:03:72:e4:c7:41:32:42:ea:cb:45:24:35:e7:b8: b7:09:ad:b4:3f:af:18:c5:eb:67:fb:92:4b:57:ff:7c:e7:09: 60:17:a1:3e:1b:29:65:68:e4:38:a7:9d:83:5e:74:11:6e:e6: 95:71:13:b3:3e:d6:1a:e5:d2:eb:d2:b9:d0:8a:d6:4f:d4:02: 2f:91:98:a7:c7:9d:e7:2f:45:a8:e9:72:1b:82:83:8b:7c:38: d4:8f:d0:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqB1bSGhr4GE8BnPXeptLiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOGVkZGEyZjIxYzg4NWZiZTY3Mjg2MjE4YjgzMThkNmFk MjM4OTYwHhcNMjUxMTE0MTAwNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTk2MGRiN2U2MGZmZmIxZGE3NmRlYWFjNWNkZDE0MDc2YjViMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR4aItok7r5ZQv8GGiNPo5BosXUE lgu6qktWHbWqWJJCp94L8Da95csL+tX5q4szWuH6wj4if1WO8towg7FPt6qtqsmY CD6qLD044doCmyWq7jQss6cZBUtTgoPYFo5urSmMQXf9b5VKjHJbIpN3kxCIkEfU QYfaOcfplXTaJpLOJM4YYl8pEsNwbBnefDSBnb3US/VejkwvsL+GGhD4mgbh3C2b LmH6U5vXctKzfjwQcUgHiIBXC5YRSFSmjLJqmK6EYSWjy/uCWkCbMeE5t0WRN2Ds Sn3e2jGQHknFx+SB52ZTMNxlMUbiHkJhTo/B+Ks0/N+LtqxRifB90VkMhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBmWDbfmD/+x2nbeqsXN0UB2tbGGMB8GA1UdIwQY MBaAFGqO3aLyHIhfvmcoYhi4MY1q0jiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2Et MGM2Njg0MDE5OGQwLzEvR1pZTnQtWVBfN0hhZHQ2cXhjM1JRSGExc1lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2EtMGM2Njg0MDE5OGQw LzEvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWikMA0G CSqGSIb3DQEBCwUAA4IBAQAfLEoSBfF8Dy3wlJNlgWNygOnK5VzEM7s9anRtHwNf JubyBIBN7ODhQaEEi7Uk/wEuKwpk6ZBPzkkjA+2fKPe08KXJZeSAemQYugVUTf/n 6qeSYqtO/Wg1K+0Ikn6wwwDhS/mTA6pGP5L0P0N3XFzT347r0pBlGVmYHD4XMB1Y knwxKPWLqoqffpL9lflkW+nuSVw7o00EQ5hYHmxPHpqYeRwIueUsA3Lkx0EyQurL RSQ157i3Ca20P68Yxetn+5JLV/985wlgF6E+GyllaOQ4p52DXnQRbuaVcROzPtYa 5dLr0rnQitZP1AIvkZinx53nL0Wo6XIbgoOLfDjUj9Ds -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:35 2025 by rpki-client