This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa File: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (raw, json) Hash identifier: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0= Subject key identifier: FA:17:7E:8C:66:78:31:56:62:E3:B9:CF:CD:72:52:7F:B2:E0:E0:65 Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Certificate serial: 019B7F8251733EBFF3469C0151703FE41D21 Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa Signing time: Fri 02 Jan 2026 16:20:05 +0000 ROA not before: Fri 02 Jan 2026 16:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48747 IP address blocks: 94.139.204.0/22 maxlen: 22 94.139.204.0/24 maxlen: 24 94.139.205.0/24 maxlen: 24 94.139.206.0/24 maxlen: 24 94.139.207.0/24 maxlen: 24 178.75.196.0/24 maxlen: 24 178.75.197.0/24 maxlen: 24 178.75.198.0/24 maxlen: 24 178.75.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:51:73:3e:bf:f3:46:9c:01:51:70:3f:e4:1d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Validity Not Before: Jan 2 16:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa177e8c6678315662e3b9cfcd72527fb2e0e065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ea:8d:b5:0c:86:3c:dc:04:fd:94:fc:3a:34: a7:12:89:5f:5e:a6:db:7c:30:b9:ab:f7:46:03:5d: 20:f2:35:3e:7d:c0:44:a2:2d:a2:c6:a8:0f:74:da: 5e:11:c4:59:bd:84:a1:5e:bc:54:f2:ea:32:0c:ce: 04:12:54:0d:5d:43:95:56:fc:1d:e4:fa:74:4a:02: 46:37:95:6c:da:41:76:11:05:c2:84:b8:da:83:47: 8d:e2:5f:a7:e5:44:5e:f3:8a:a7:e9:49:ed:4b:d3: f8:58:92:b4:7a:5a:56:e9:55:3f:62:ff:df:30:71: 07:e9:10:b5:db:a6:30:22:10:e9:b1:6b:a8:69:ec: 8f:08:24:51:c1:8a:e7:d4:ea:ff:8a:69:8f:71:33: fa:d0:b8:dc:bb:69:bd:73:42:d9:ee:b8:b9:c4:3e: c6:aa:2b:6d:29:ee:af:e0:27:46:06:a8:d4:d6:2c: 99:8d:36:28:90:11:9c:89:06:03:0f:cb:e7:34:ab: f4:6c:c0:3d:a9:2d:bb:74:13:da:e3:d2:c6:fd:ed: 5a:e2:c3:00:43:80:13:ba:0e:59:98:c6:a6:c7:ea: e5:7b:71:0d:ff:4c:ef:95:e0:09:0b:26:cf:ad:e6: e4:6e:f6:34:90:00:c1:34:0c:62:82:2d:84:fb:3b: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:17:7E:8C:66:78:31:56:62:E3:B9:CF:CD:72:52:7F:B2:E0:E0:65 X509v3 Authority Key Identifier: keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.139.204.0/22 178.75.196.0/22 Signature Algorithm: sha256WithRSAEncryption 07:6a:e8:9c:03:b7:dc:dc:9f:42:b6:6c:1f:90:df:af:3f:d5: 73:a2:67:42:44:67:ff:ae:91:5a:61:d0:b0:8d:d3:bf:34:37: b8:8f:51:99:2d:9d:39:6f:a8:6b:3b:05:63:f9:a7:1d:4b:3c: 77:89:80:2b:0e:61:9d:58:80:39:ad:da:3d:a5:92:4a:df:ea: b1:09:3a:f6:16:8d:0d:66:fa:77:28:bc:5c:ec:c9:41:47:ba: 71:99:f5:df:0e:c0:29:bc:3f:69:22:a1:46:bf:4e:7e:6a:67: 2b:d5:9b:f0:71:4a:01:91:15:7c:72:16:3b:41:47:d8:ab:bd: a9:87:fe:71:7c:84:0e:c6:b4:ba:be:8d:a0:78:85:1b:b5:ca: 95:72:7a:51:3f:ef:7b:b0:50:1e:9f:bf:ab:09:76:c4:1f:79: 76:14:02:30:63:66:84:cf:95:d1:1e:80:b1:72:ec:98:a8:87: 92:7a:bc:d0:b5:ae:c0:a3:27:51:fd:36:1c:ed:e5:bd:4d:11: ad:18:d3:5b:0d:4d:7c:19:0a:d7:14:68:a5:52:8c:26:ae:61: 93:65:56:24:c0:de:c6:21:d1:6f:69:6e:3e:a8:04:0d:23:12: 58:bf:f2:af:fa:6f:05:27:b4:21:37:e3:86:7c:f2:54:8a:0a: 7e:40:28:61 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/glFzPr/zRpwBUXA/5B0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3 OGIzOGQwHhcNMjYwMTAyMTYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTE3N2U4YzY2NzgzMTU2NjJlM2I5Y2ZjZDcyNTI3ZmIyZTBlMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOqNtQyGPNwE/ZT8OjSnEolfXqbb fDC5q/dGA10g8jU+fcBEoi2ixqgPdNpeEcRZvYShXrxU8uoyDM4EElQNXUOVVvwd 5Pp0SgJGN5Vs2kF2EQXChLjag0eN4l+n5URe84qn6UntS9P4WJK0elpW6VU/Yv/f MHEH6RC126YwIhDpsWuoaeyPCCRRwYrn1Or/immPcTP60Ljcu2m9c0LZ7ri5xD7G qittKe6v4CdGBqjU1iyZjTYokBGciQYDD8vnNKv0bMA9qS27dBPa49LG/e1a4sMA Q4ATug5ZmMamx+rle3EN/0zvleAJCybPrebkbvY0kADBNAxigi2E+zsmzwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPoXfoxmeDFWYuO5z81yUn+y4OBlMB8GA1UdIwQY MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt NmIxNDY5YzNiOTVhLzEvMS1oZC1qR1o0TVZaaTQ3blB6WEpTZjdMZzRHVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWQvZjNiODI1LWNiYzAtNDlkMi04Yjc2LTZiMTQ2OWMzYjk1 YS8xL1pZRm5kTGZGWmwxbnFHd2d6clpJZTF0NHM0MC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAl6LzAME ArJLxDANBgkqhkiG9w0BAQsFAAOCAQEAB2ronAO33NyfQrZsH5Dfrz/Vc6JnQkRn /66RWmHQsI3TvzQ3uI9RmS2dOW+oazsFY/mnHUs8d4mAKw5hnViAOa3aPaWSSt/q sQk69haNDWb6dyi8XOzJQUe6cZn13w7AKbw/aSKhRr9OfmpnK9Wb8HFKAZEVfHIW O0FH2Ku9qYf+cXyEDsa0ur6NoHiFG7XKlXJ6UT/ve7BQHp+/qwl2xB95dhQCMGNm hM+V0R6AsXLsmKiHknq80LWuwKMnUf02HO3lvU0RrRjTWw1NfBkK1xRopVKMJq5h k2VWJMDexiHRb2luPqgEDSMSWL/yr/pvBSe0ITfjhnzyVIoKfkAoYQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:57 2026 by rpki-client