This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/gndzUxO1CNccN-YEVyYR7nMztTA.roa File: gndzUxO1CNccN-YEVyYR7nMztTA.roa (raw, json) Hash identifier: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc= Subject key identifier: 82:77:73:53:13:B5:08:D7:1C:37:E6:04:57:26:11:EE:73:33:B5:30 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019B7E388DADB9B4073030864CB1D7A725E2 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/gndzUxO1CNccN-YEVyYR7nMztTA.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210435 IP address blocks: 109.175.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8d:ad:b9:b4:07:30:30:86:4c:b1:d7:a7:25:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8277735313b508d71c37e604572611ee7333b530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:d2:6b:7d:7e:9d:9c:e3:d8:b9:92:5f:75: e9:9e:b2:12:b1:76:92:c8:97:a9:76:ef:ad:bb:d7: b1:69:42:8d:f6:ab:c1:8e:e3:1f:63:96:c9:3b:4e: fd:64:c9:81:ac:7b:30:14:3b:8b:95:ec:d0:52:ec: 16:de:bf:6c:48:3b:99:67:82:7d:43:7b:0e:0c:73: 58:53:74:3c:93:68:3d:c8:60:55:6c:31:30:a8:5f: a0:d8:70:1e:3d:b6:3e:f8:cb:86:97:51:eb:ba:44: 1a:67:82:8f:cc:23:4e:a8:4d:a9:4a:da:34:04:5b: 2c:e2:5d:6e:0d:66:9b:92:0e:e0:93:0c:a5:3d:39: 9e:ce:38:34:eb:ca:a1:03:38:f5:7a:8e:2f:fd:8f: a7:45:d4:60:4f:9d:19:5e:38:57:57:66:94:0d:24: bf:cb:78:00:2b:06:46:75:3c:f3:ca:37:bf:06:21: 8c:31:25:a3:af:af:d9:15:ed:2e:d4:20:d5:d2:0b: 22:cf:b4:af:1f:22:37:41:49:25:3a:3c:f7:0c:ad: 99:24:10:1d:00:cc:60:0a:71:76:c0:23:f2:6f:d6: 94:90:7d:74:0d:6f:39:a8:c2:6b:d8:ee:c0:5c:9b: 8a:d2:a2:7c:46:26:5c:d0:6d:80:2d:f6:0a:92:00: ab:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:77:73:53:13:B5:08:D7:1C:37:E6:04:57:26:11:EE:73:33:B5:30 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/gndzUxO1CNccN-YEVyYR7nMztTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.175.174.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:41:01:ec:70:06:8a:18:c5:57:15:f7:39:3e:a2:08:e2:13: 06:4d:cf:14:d2:03:8d:5e:97:0d:9a:12:16:05:d4:e6:16:6e: 0e:81:30:eb:79:c1:a7:e3:65:c0:4a:63:82:f2:48:5d:5e:3c: 38:18:65:1b:75:7b:72:b9:95:e0:25:b9:ad:07:84:f4:7f:7f: 48:53:d0:8c:20:16:56:c3:79:c5:ec:48:f0:f0:4d:b8:6f:24: 96:1a:99:e7:9a:32:98:78:c3:17:a8:82:6f:14:bf:86:65:3a: 28:9b:08:bf:53:e6:f1:f9:b9:17:81:3b:f9:69:08:88:6e:3d: 81:3c:df:bc:ae:38:07:16:19:9d:fc:36:9a:39:5c:12:f9:a7: 22:89:1e:bd:bc:22:59:ad:e1:b1:aa:3c:85:84:ec:88:be:93: 81:c8:d6:6e:c6:ea:91:9d:02:93:e5:57:b8:be:4e:3c:e5:6f: 80:e9:a3:7d:2d:57:30:a8:14:3d:7d:be:f3:d7:de:ca:3c:71: ef:b0:0b:d2:c6:d1:df:1c:b9:38:ee:c9:47:00:fb:20:f6:ca: 22:67:07:44:6c:c4:88:ec:d8:10:d5:0d:9d:98:21:15:0b:01: 78:b7:6a:2c:15:f1:d6:d1:94:00:5a:e1:66:fa:20:5e:a7:89: 11:a9:0c:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OI2tubQHMDCGTLHXpyXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mjc3NzM1MzEzYjUwOGQ3MWMzN2U2MDQ1NzI2MTFlZTczMzNiNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd7Sa31+nZzj2LmSX3XpnrISsXaS yJepdu+tu9exaUKN9qvBjuMfY5bJO079ZMmBrHswFDuLlezQUuwW3r9sSDuZZ4J9 Q3sODHNYU3Q8k2g9yGBVbDEwqF+g2HAePbY++MuGl1HrukQaZ4KPzCNOqE2pSto0 BFss4l1uDWabkg7gkwylPTmezjg068qhAzj1eo4v/Y+nRdRgT50ZXjhXV2aUDSS/ y3gAKwZGdTzzyje/BiGMMSWjr6/ZFe0u1CDV0gsiz7SvHyI3QUklOjz3DK2ZJBAd AMxgCnF2wCPyb9aUkH10DW85qMJr2O7AXJuK0qJ8RiZc0G2ALfYKkgCr3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJ3c1MTtQjXHDfmBFcmEe5zM7UwMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvZ25kelV4TzFDTmNjTi1ZRVZ5WVI3bk16dFRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAba+uMA0G CSqGSIb3DQEBCwUAA4IBAQANQQHscAaKGMVXFfc5PqII4hMGTc8U0gONXpcNmhIW BdTmFm4OgTDrecGn42XASmOC8khdXjw4GGUbdXtyuZXgJbmtB4T0f39IU9CMIBZW w3nF7Ejw8E24bySWGpnnmjKYeMMXqIJvFL+GZToomwi/U+bx+bkXgTv5aQiIbj2B PN+8rjgHFhmd/DaaOVwS+aciiR69vCJZreGxqjyFhOyIvpOByNZuxuqRnQKT5Ve4 vk485W+A6aN9LVcwqBQ9fb7z197KPHHvsAvSxtHfHLk47slHAPsg9soiZwdEbMSI 7NgQ1Q2dmCEVCwF4t2osFfHW0ZQAWuFm+iBep4kRqQxb -----END CERTIFICATE-----Generated at Mon Jan 26 05:44:46 2026 by rpki-client