This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/gozTMRP9KybW0YQlfst5QWvJTAc.roa File: gozTMRP9KybW0YQlfst5QWvJTAc.roa (raw, json) Hash identifier: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA= Subject key identifier: 82:8C:D3:31:13:FD:2B:26:D6:D1:84:25:7E:CB:79:41:6B:C9:4C:07 Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6 Certificate serial: 019B78348929FEE29F58E77060C65335F364 Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/gozTMRP9KybW0YQlfst5QWvJTAc.roa Signing time: Thu 01 Jan 2026 06:17:47 +0000 ROA not before: Thu 01 Jan 2026 06:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9051 IP address blocks: 37.209.248.0/21 maxlen: 24 82.112.160.0/21 maxlen: 24 82.112.161.0/26 maxlen: 26 185.124.212.0/22 maxlen: 24 193.227.160.0/19 maxlen: 24 213.175.160.0/19 maxlen: 24 2a06:b540::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:89:29:fe:e2:9f:58:e7:70:60:c6:53:35:f3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6 Validity Not Before: Jan 1 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=828cd33113fd2b26d6d184257ecb79416bc94c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:bd:be:a0:70:88:c2:a8:52:47:ac:98:09: aa:78:31:66:8e:10:9f:54:90:3b:ae:c6:68:2e:b5: 26:54:b5:7a:a9:45:5f:a8:23:71:d5:1b:24:d6:cb: 40:9b:1c:a0:b7:6f:fc:b0:50:d5:b4:46:4b:e2:51: db:e3:68:6e:33:fa:74:3b:9e:ae:8a:f1:7e:06:a5: dc:38:7f:47:52:ff:8d:25:4b:26:1d:9b:2d:bb:0c: 30:c9:15:bb:64:bb:bf:10:70:79:e9:25:d6:fe:3c: d3:7e:bd:5b:e6:05:9b:5d:7f:6b:75:e5:fd:21:99: f2:33:a6:5b:7a:20:ca:c9:05:99:1d:5b:08:d4:be: bf:8b:49:74:ad:8a:61:6e:ce:82:c3:aa:3c:f4:94: 90:6b:67:6c:d2:17:5b:7f:e5:f6:59:cb:39:7c:c1: 88:f9:b7:a8:21:dd:29:19:88:0c:3b:26:43:4a:f8: 53:5c:69:70:d1:cc:c0:9a:10:75:83:4d:d4:9b:e0: 4c:19:c8:d1:c0:e4:c3:43:1b:30:1e:3f:75:c2:2e: f1:bc:4c:3b:17:7b:28:f4:07:e0:fb:e4:50:b0:b3: 51:6e:27:ba:7b:f9:4b:e1:64:66:b9:3c:b8:08:2c: f1:94:2e:cc:f9:9d:3b:21:aa:19:9f:c1:9e:4a:ce: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8C:D3:31:13:FD:2B:26:D6:D1:84:25:7E:CB:79:41:6B:C9:4C:07 X509v3 Authority Key Identifier: keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/gozTMRP9KybW0YQlfst5QWvJTAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.248.0/21 82.112.160.0/21 185.124.212.0/22 193.227.160.0/19 213.175.160.0/19 IPv6: 2a06:b540::/29 Signature Algorithm: sha256WithRSAEncryption 2c:07:3f:34:0f:c0:2b:54:d3:8a:4b:2d:32:05:2a:41:86:6f: be:72:ab:27:bc:1c:bc:1b:f5:41:0d:fc:d7:ce:50:8f:b2:dd: 08:36:e2:e6:7d:69:e8:a7:0e:80:c1:65:e3:f9:24:6a:d7:b5: 85:10:51:bb:21:f8:22:6a:21:9d:e0:b1:35:df:8d:28:36:74: 35:cc:7e:24:60:75:12:49:e5:0b:38:24:7d:70:44:f7:bb:28: 6a:8a:70:66:48:ac:9e:8e:80:82:42:74:80:9b:c0:1f:9d:a1: 65:76:b4:3a:15:04:ec:e2:ec:0e:40:02:19:91:6d:5c:6e:f2: 21:3a:5f:0c:25:04:5d:f0:ae:20:d1:7a:08:80:55:ba:7c:57: d4:72:0f:16:45:3f:6e:a3:70:ec:e2:2a:64:3a:a1:7b:0c:86: 9a:da:d8:ad:e0:93:81:6d:6a:eb:b4:37:4b:8a:bf:a9:03:7f: f9:8f:2e:03:f9:b7:15:7e:cb:f7:37:19:79:d8:0e:7e:35:13: 71:3d:5a:8b:92:12:e5:71:d4:43:a4:75:f6:68:73:37:f0:70: 33:88:4a:f1:8c:99:f9:35:40:8e:2b:8d:ce:6f:92:d4:5e:99: a6:26:63:68:09:78:f5:03:e3:d0:e3:86:04:f2:d6:13:88:56: e8:72:17:5d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4NIkp/uKfWOdwYMZTNfNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMGI2NjNjNDVkN2JjMjcyNGQxNjg0ODUwODc1ODFlMTQ0 NDhmYjYwHhcNMjYwMTAxMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjhjZDMzMTEzZmQyYjI2ZDZkMTg0MjU3ZWNiNzk0MTZiYzk0YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXW9vqBwiMKoUkesmAmqeDFmjhCf VJA7rsZoLrUmVLV6qUVfqCNx1Rsk1stAmxygt2/8sFDVtEZL4lHb42huM/p0O56u ivF+BqXcOH9HUv+NJUsmHZstuwwwyRW7ZLu/EHB56SXW/jzTfr1b5gWbXX9rdeX9 IZnyM6ZbeiDKyQWZHVsI1L6/i0l0rYphbs6Cw6o89JSQa2ds0hdbf+X2Wcs5fMGI +beoId0pGYgMOyZDSvhTXGlw0czAmhB1g03Um+BMGcjRwOTDQxswHj91wi7xvEw7 F3so9Afg++RQsLNRbie6e/lL4WRmuTy4CCzxlC7M+Z07IaoZn8GeSs4ClQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIKM0zET/Ssm1tGEJX7LeUFryUwHMB8GA1UdIwQY MBaAFN0LZjxF17wnJNFoSFCHWB4URI+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQt M2I5ZTNjOGEyZmNhLzEvZ296VE1SUDlLeWJXMFlRbGZzdDVRV3ZKVEFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQtM2I5ZTNjOGEyZmNh LzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDJdH4AwQD UnCgAwQCuXzUAwQFweOgAwQF1a+gMA0EAgACMAcDBQMqBrVAMA0GCSqGSIb3DQEB CwUAA4IBAQAsBz80D8ArVNOKSy0yBSpBhm++cqsnvBy8G/VBDfzXzlCPst0INuLm fWnopw6AwWXj+SRq17WFEFG7IfgiaiGd4LE1340oNnQ1zH4kYHUSSeULOCR9cET3 uyhqinBmSKyejoCCQnSAm8AfnaFldrQ6FQTs4uwOQAIZkW1cbvIhOl8MJQRd8K4g 0XoIgFW6fFfUcg8WRT9uo3Ds4ipkOqF7DIaa2tit4JOBbWrrtDdLir+pA3/5jy4D +bcVfsv3Nxl52A5+NRNxPVqLkhLlcdRDpHX2aHM38HAziErxjJn5NUCOK43Ob5LU XpmmJmNoCXj1A+PQ44YE8tYTiFbochdd -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:32 2026 by rpki-client