This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/GjOqkzTnZSJ2IM-ilXZsSH0BDEs.roa File: GjOqkzTnZSJ2IM-ilXZsSH0BDEs.roa (raw, json) Hash identifier: ViNaPYttrQqtr/yvSEXih8SqVieBReHwf8y6XNPrJX0= Subject key identifier: 1A:33:AA:93:34:E7:65:22:76:20:CF:A2:95:76:6C:48:7D:01:0C:4B Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924 Certificate serial: 019B7BA52A5885621F98AA2A45DC36FC7DFD Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/GjOqkzTnZSJ2IM-ilXZsSH0BDEs.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202520 IP address blocks: 83.168.68.0/23 maxlen: 24 83.168.94.0/24 maxlen: 24 83.168.95.0/24 maxlen: 24 83.168.105.0/24 maxlen: 24 83.168.106.0/24 maxlen: 24 83.168.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2a:58:85:62:1f:98:aa:2a:45:dc:36:fc:7d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a33aa9334e765227620cfa295766c487d010c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:a7:c6:60:18:f5:ee:4a:b5:5c:ad:14:6f: 6f:64:3e:54:43:a3:4d:c1:af:c7:c6:64:a7:a4:1d: b0:ae:f3:27:cb:70:cd:ae:a1:1f:ce:fe:67:d9:c8: 47:2e:26:35:28:9a:e5:8c:e6:e5:b1:71:1a:e7:2c: 77:88:65:86:47:f0:83:be:ba:4c:1d:af:3d:6f:be: 1b:71:a1:ac:fd:ec:4a:24:6e:1b:7d:75:5b:17:fd: 22:4b:01:6e:a9:78:a6:86:3e:60:37:e0:b5:f2:f3: a2:1c:43:22:8c:29:4f:e0:d8:84:ed:e8:39:6a:c6: 65:9d:f9:8f:56:2a:c7:64:10:cc:90:71:13:0b:df: 8f:9d:d5:25:6a:a4:a2:a0:5d:1e:2a:0d:67:22:b6: 75:2b:dc:db:ee:84:fd:2a:56:93:4b:27:12:b9:b5: 8c:9c:f8:93:45:ad:7c:09:91:71:a8:fa:3c:67:bd: a6:4a:b4:1f:74:55:05:fe:9e:d0:45:bc:08:af:42: 7f:dc:dc:b5:94:80:c9:42:16:84:d6:7d:26:eb:df: e4:91:02:22:15:96:18:4d:e7:bf:de:24:05:67:6c: 41:c2:b0:f5:20:0a:f2:03:be:fa:74:1b:10:53:e1: 33:bd:b4:e5:0e:5a:67:be:ff:39:9f:16:ac:de:54: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:33:AA:93:34:E7:65:22:76:20:CF:A2:95:76:6C:48:7D:01:0C:4B X509v3 Authority Key Identifier: keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/GjOqkzTnZSJ2IM-ilXZsSH0BDEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.168.68.0/23 83.168.94.0/23 83.168.105.0-83.168.107.255 Signature Algorithm: sha256WithRSAEncryption 65:44:ed:2d:bf:79:8d:b2:db:6d:23:e7:1b:fa:64:90:13:48: c1:e6:ce:43:eb:58:a3:e4:57:c2:c5:b4:af:95:37:55:b6:95: da:a1:db:2d:6f:8b:32:a9:d5:5f:17:76:3b:f4:2c:1c:86:cf: 41:5d:d9:db:1b:82:a6:27:9f:91:34:2f:fa:b2:e5:b5:d3:7e: 23:f5:cf:0a:6e:36:a8:9d:91:1e:12:7e:47:c2:78:4d:bc:27: 37:8c:6a:f9:b3:ca:43:ce:41:84:25:42:cc:11:a4:10:9c:ae: e3:61:aa:59:04:03:8d:f5:42:b7:62:26:6a:0d:71:07:f9:a6: 3c:e0:ff:54:6d:f5:0c:1d:af:63:78:85:d6:c6:70:77:36:77: e3:b0:10:3f:f4:7e:06:cf:5f:f1:5a:a4:c0:81:50:a0:6a:bc: 7c:4d:72:12:4f:27:72:74:ab:b6:13:9b:42:bb:ae:9d:a5:71: 71:b9:5a:8c:69:2d:11:b9:2e:6e:09:cd:7e:95:b6:62:d3:81: 8b:75:ce:8f:18:28:f1:df:40:12:cf:ae:9a:40:b3:73:01:1e: 5f:48:ce:50:5a:11:e7:5a:58:8e:11:e4:8e:df:84:46:3d:79: a5:76:4b:c9:7e:5f:c0:7c:31:fc:77:5b:18:64:c7:a9:95:01: 7b:b5:c0:e0 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7pSpYhWIfmKoqRdw2/H39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmVlZjA5YzQ1MDk5MGFmMzQ3NzljZTcwMWJlNmNkNTRi M2Q5MjQwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTMzYWE5MzM0ZTc2NTIyNzYyMGNmYTI5NTc2NmM0ODdkMDEwYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0smnxmAY9e5KtVytFG9vZD5UQ6NN wa/HxmSnpB2wrvMny3DNrqEfzv5n2chHLiY1KJrljOblsXEa5yx3iGWGR/CDvrpM Ha89b74bcaGs/exKJG4bfXVbF/0iSwFuqXimhj5gN+C18vOiHEMijClP4NiE7eg5 asZlnfmPVirHZBDMkHETC9+PndUlaqSioF0eKg1nIrZ1K9zb7oT9KlaTSycSubWM nPiTRa18CZFxqPo8Z72mSrQfdFUF/p7QRbwIr0J/3Ny1lIDJQhaE1n0m69/kkQIi FZYYTee/3iQFZ2xBwrD1IAryA776dBsQU+EzvbTlDlpnvv85nxas3lSibQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBozqpM052UidiDPopV2bEh9AQxLMB8GA1UdIwQY MBaAFGb+7wnEUJkK80d5znAb5s1Us9kkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYt ODI0NTFmMzNmNGNhLzEvR2pPcWt6VG5aU0oySU0taWxYWnNTSDBCREVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYtODI0NTFmMzNmNGNh LzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBU6hEAwQB U6heMAwDBABTqGkDBAJTqGgwDQYJKoZIhvcNAQELBQADggEBAGVE7S2/eY2y220j 5xv6ZJATSMHmzkPrWKPkV8LFtK+VN1W2ldqh2y1vizKp1V8Xdjv0LByGz0Fd2dsb gqYnn5E0L/qy5bXTfiP1zwpuNqidkR4SfkfCeE28JzeMavmzykPOQYQlQswRpBCc ruNhqlkEA431QrdiJmoNcQf5pjzg/1Rt9Qwdr2N4hdbGcHc2d+OwED/0fgbPX/Fa pMCBUKBqvHxNchJPJ3J0q7YTm0K7rp2lcXG5WoxpLRG5Lm4JzX6VtmLTgYt1zo8Y KPHfQBLPrppAs3MBHl9IzlBaEedaWI4R5I7fhEY9eaV2S8l+X8B8Mfx3Wxhkx6mV AXu1wOA= -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:25 2026 by rpki-client