This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/GZP-shevrErtsalHq-t3Ev3Z6QQ.roa File: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (raw, json) Hash identifier: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA= Subject key identifier: 19:93:FE:B2:17:AF:AC:4A:ED:B1:A9:47:AB:EB:77:12:FD:D9:E9:04 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B7CECE3D82A8CB6E59E068ECC13674AE6 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/GZP-shevrErtsalHq-t3Ev3Z6QQ.roa Signing time: Fri 02 Jan 2026 04:17:38 +0000 ROA not before: Fri 02 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202060 IP address blocks: 185.41.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e3:d8:2a:8c:b6:e5:9e:06:8e:cc:13:67:4a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 2 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1993feb217afac4aedb1a947abeb7712fdd9e904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:f4:08:0f:9e:f6:8e:8a:4f:a5:e2:f8:29: 7e:8d:d6:6f:7a:08:a9:b6:a2:c9:48:de:27:94:a5: 8e:7c:57:85:5b:aa:02:f4:1a:b1:06:8a:ec:a0:f6: df:3f:00:6d:a8:5e:07:c9:4d:e7:01:77:38:8c:a7: 0b:e4:44:72:ae:a8:9c:98:06:35:37:c8:6b:68:f5: 10:6f:e7:b1:17:99:4f:f7:04:5d:ed:0e:ec:cd:c6: c0:3c:8b:7c:62:01:a3:c9:6d:07:98:80:c6:de:a9: 7d:d2:28:81:21:9c:89:49:38:2d:e8:9f:94:5a:63: 4e:38:60:13:d2:e9:48:4e:60:0c:bf:d9:af:dd:79: 1b:59:e9:cf:19:e6:f9:42:87:64:0d:67:05:98:d9: a4:30:10:00:4e:1e:cc:ac:be:ab:af:fe:7e:bf:f2: 1f:00:e5:ea:a2:fa:1f:10:72:be:1f:bd:41:c8:fd: 0b:a8:79:66:3d:85:62:7d:26:e0:e1:05:f3:d6:85: 8c:4d:b3:7c:24:c0:2a:00:d4:84:21:0c:32:fe:25: 03:80:02:09:ac:13:ba:f7:19:c2:60:c8:3e:1c:e8: 80:2f:df:e3:00:cf:f9:c0:1d:96:72:8f:ee:6c:85: e7:40:8c:b3:1a:dc:ad:c4:ec:99:9d:db:36:cf:57: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:93:FE:B2:17:AF:AC:4A:ED:B1:A9:47:AB:EB:77:12:FD:D9:E9:04 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/GZP-shevrErtsalHq-t3Ev3Z6QQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.243.0/24 Signature Algorithm: sha256WithRSAEncryption 05:35:9a:4a:69:49:d7:2e:da:be:ae:f7:98:eb:4f:cf:02:9c: a8:5d:aa:de:b3:f3:a1:38:6b:d5:99:75:df:59:9e:30:72:64: 5e:7b:2a:1e:0c:e9:a5:d3:3c:7e:19:cd:e4:e8:cc:21:72:f6: 08:98:62:9e:f0:5a:2e:7e:61:8e:f2:0f:c7:d2:fa:5f:84:02: 1b:18:85:39:0f:8c:9a:af:94:b7:3e:f2:0b:3d:e6:de:6b:e1: 27:6b:c8:ff:f4:61:43:29:18:ef:f0:3b:6f:38:f8:63:cc:fd: e9:ad:58:24:96:5b:e1:95:9e:7b:52:f3:f1:30:59:c6:f3:bc: 2c:8b:5a:d8:46:cb:47:0a:cb:47:5d:4e:04:28:a6:1e:70:0f: 24:21:f1:a3:80:4a:57:e3:a0:da:02:de:d9:9e:b9:ea:43:89: ff:21:01:01:47:6f:5b:ae:07:6e:61:70:cb:22:f9:7c:2a:12: 1b:32:39:3d:1e:b8:fc:c9:6d:56:e1:32:5c:62:22:cb:39:86: 96:80:86:7c:7f:53:93:ed:07:f5:7f:cc:4c:7d:6c:60:34:5d: da:65:8e:62:a6:91:eb:e9:dc:06:ac:d1:74:14:01:bb:61:fc: 5f:23:1e:9a:30:9a:f7:37:6e:68:79:1a:06:14:fa:31:92:f4: ca:06:c6:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87OPYKoy25Z4GjswTZ0rmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTAyMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTkzZmViMjE3YWZhYzRhZWRiMWE5NDdhYmViNzcxMmZkZDllOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYX0CA+e9o6KT6Xi+Cl+jdZvegip tqLJSN4nlKWOfFeFW6oC9BqxBorsoPbfPwBtqF4HyU3nAXc4jKcL5ERyrqicmAY1 N8hraPUQb+exF5lP9wRd7Q7szcbAPIt8YgGjyW0HmIDG3ql90iiBIZyJSTgt6J+U WmNOOGAT0ulITmAMv9mv3XkbWenPGeb5QodkDWcFmNmkMBAATh7MrL6rr/5+v/If AOXqovofEHK+H71ByP0LqHlmPYVifSbg4QXz1oWMTbN8JMAqANSEIQwy/iUDgAIJ rBO69xnCYMg+HOiAL9/jAM/5wB2Wco/ubIXnQIyzGtytxOyZnds2z1dLQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBmT/rIXr6xK7bGpR6vrdxL92ekEMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvR1pQLXNoZXZyRXJ0c2FsSHEtdDNFdjNaNlFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSnzMA0G CSqGSIb3DQEBCwUAA4IBAQAFNZpKaUnXLtq+rveY60/PApyoXares/OhOGvVmXXf WZ4wcmReeyoeDOml0zx+Gc3k6MwhcvYImGKe8FoufmGO8g/H0vpfhAIbGIU5D4ya r5S3PvILPebea+Ena8j/9GFDKRjv8DtvOPhjzP3prVgkllvhlZ57UvPxMFnG87ws i1rYRstHCstHXU4EKKYecA8kIfGjgEpX46DaAt7ZnrnqQ4n/IQEBR29brgduYXDL Ivl8KhIbMjk9Hrj8yW1W4TJcYiLLOYaWgIZ8f1OT7Qf1f8xMfWxgNF3aZY5ippHr 6dwGrNF0FAG7YfxfIx6aMJr3N25oeRoGFPoxkvTKBsZw -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:20 2026 by rpki-client