This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/gTZStAUV6Ze2DEOTRK0zEOlHiG4.roa File: gTZStAUV6Ze2DEOTRK0zEOlHiG4.roa (raw, json) Hash identifier: QT7wLC56tXvI11uYjU8gf1PINF8TFEsspZYDN4W/KLw= Subject key identifier: 81:36:52:B4:05:15:E9:97:B6:0C:43:93:44:AD:33:10:E9:47:88:6E Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019AF28C4266876A8B893018C061E966717F Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/gTZStAUV6Ze2DEOTRK0zEOlHiG4.roa Signing time: Sat 06 Dec 2025 07:24:29 +0000 ROA not before: Sat 06 Dec 2025 07:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203144 IP address blocks: 85.203.17.0/24 maxlen: 24 85.203.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:8c:42:66:87:6a:8b:89:30:18:c0:61:e9:66:71:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Dec 6 07:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=813652b40515e997b60c439344ad3310e947886e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:1e:c1:ef:cf:06:75:40:d3:b5:fa:76:88: 46:9a:bd:3a:ed:24:0e:3b:fc:3a:c6:04:7c:7a:bb: 2f:42:0c:9d:ef:fd:92:37:40:63:c9:6a:62:46:52: 58:66:57:79:37:f8:10:42:9a:ab:13:b4:1a:de:7a: d2:ad:eb:64:eb:62:c9:17:bf:83:ef:03:24:4f:a7: 87:6f:94:d7:bf:ce:a6:25:ba:93:56:3a:9d:5b:78: 33:87:04:23:29:53:9c:18:3b:cc:e4:c5:50:23:02: 27:d5:30:92:5f:b1:ac:f3:32:56:68:aa:ff:24:43: d6:db:5b:d4:4a:b8:ad:7c:f1:f2:d5:5b:44:df:6c: d1:57:09:3f:96:fd:63:1e:89:90:e7:9b:61:39:95: 50:02:31:48:7f:1c:a4:a2:27:f4:60:ea:0e:40:33: 02:66:73:59:f4:a1:f2:71:59:15:e2:36:f4:9c:ba: ef:48:76:aa:50:06:8b:a3:10:da:35:1e:e2:f3:4c: 2a:a6:07:4b:60:44:18:af:37:d0:dc:98:ef:ad:06: c5:42:c8:25:5a:1b:94:3d:cb:bf:70:fd:b3:33:f5: 3e:cc:52:f8:c4:15:39:6f:e8:0e:2a:86:55:55:95: a4:88:6d:68:7c:51:f3:70:a6:8f:e8:ab:38:98:c3: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:36:52:B4:05:15:E9:97:B6:0C:43:93:44:AD:33:10:E9:47:88:6E X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/gTZStAUV6Ze2DEOTRK0zEOlHiG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.17.0-85.203.18.255 Signature Algorithm: sha256WithRSAEncryption 09:35:70:5c:99:0a:4a:46:ba:29:38:0a:01:99:e7:21:00:16: fe:a2:c4:33:c8:39:c9:4a:31:0d:a8:65:ce:d3:24:30:36:c0: 4f:72:00:a3:81:ac:a3:8d:37:0a:10:53:f5:9c:ac:97:89:5a: 6a:2f:bd:4e:2a:5a:7d:ec:7b:56:5d:f8:4c:64:11:53:40:4b: 58:11:c5:a4:86:c8:44:f6:72:64:a8:8f:35:eb:ec:e9:7c:6f: 44:c9:e7:f3:32:9d:75:64:3b:01:65:2f:dd:fb:68:97:e4:64: 65:49:c5:92:06:7f:f1:0a:8b:55:ff:36:cc:7e:e8:67:00:86: 8e:53:3e:11:cf:d1:5d:a1:ff:b5:3d:f9:12:87:e5:51:87:c4: b5:16:41:58:3a:da:19:b3:c9:0d:d2:52:95:e4:66:a4:b5:7c: 7c:78:9f:77:2d:f3:39:d8:dc:b7:2f:a2:53:47:8b:b5:ae:94: c8:e9:6b:56:98:70:ac:0f:6c:be:f8:55:3b:01:6e:99:f1:ec: e1:dc:1f:6c:10:d1:98:5a:36:cb:66:bd:c3:b3:c4:97:68:4a: 10:ba:1f:2c:b5:c2:01:59:5d:74:f6:8b:50:ec:29:b1:23:87: 5a:42:75:4e:fd:05:06:8d:29:bf:43:85:f4:07:8e:57:46:e4: 36:84:c1:5d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZryjEJmh2qLiTAYwGHpZnF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjUxMjA2MDcyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTM2NTJiNDA1MTVlOTk3YjYwYzQzOTM0NGFkMzMxMGU5NDc4ODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjgewe/PBnVA07X6dohGmr067SQO O/w6xgR8ersvQgyd7/2SN0BjyWpiRlJYZld5N/gQQpqrE7Qa3nrSretk62LJF7+D 7wMkT6eHb5TXv86mJbqTVjqdW3gzhwQjKVOcGDvM5MVQIwIn1TCSX7Gs8zJWaKr/ JEPW21vUSritfPHy1VtE32zRVwk/lv1jHomQ55thOZVQAjFIfxykoif0YOoOQDMC ZnNZ9KHycVkV4jb0nLrvSHaqUAaLoxDaNR7i80wqpgdLYEQYrzfQ3JjvrQbFQsgl WhuUPcu/cP2zM/U+zFL4xBU5b+gOKoZVVZWkiG1ofFHzcKaP6Ks4mMPA3QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIE2UrQFFemXtgxDk0StMxDpR4huMB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvZ1RaU3RBVVY2WmUyREVPVFJLMHpFT2xIaUc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABVyxED BABVyxIwDQYJKoZIhvcNAQELBQADggEBAAk1cFyZCkpGuik4CgGZ5yEAFv6ixDPI OclKMQ2oZc7TJDA2wE9yAKOBrKONNwoQU/WcrJeJWmovvU4qWn3se1Zd+ExkEVNA S1gRxaSGyET2cmSojzXr7Ol8b0TJ5/MynXVkOwFlL937aJfkZGVJxZIGf/EKi1X/ Nsx+6GcAho5TPhHP0V2h/7U9+RKH5VGHxLUWQVg62hmzyQ3SUpXkZqS1fHx4n3ct 8znY3LcvolNHi7WulMjpa1aYcKwPbL74VTsBbpnx7OHcH2wQ0ZhaNstmvcOzxJdo ShC6Hyy1wgFZXXT2i1DsKbEjh1pCdU79BQaNKb9DhfQHjldG5DaEwV0= -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:13 2025 by rpki-client