This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/RGZDs7FDHPZQveBdXaR6_RleIaI.roa File: RGZDs7FDHPZQveBdXaR6_RleIaI.roa (raw, json) Hash identifier: f9EpD71aD4s84pzobb8iZVB6jiX1m2KzVjJwHRvpYCg= Subject key identifier: 44:66:43:B3:B1:43:1C:F6:50:BD:E0:5D:5D:A4:7A:FD:19:5E:21:A2 Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Certificate serial: 019B7DC956ABDF6661ED622E5ACC81625992 Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/RGZDs7FDHPZQveBdXaR6_RleIaI.roa Signing time: Fri 02 Jan 2026 08:18:25 +0000 ROA not before: Fri 02 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57997 IP address blocks: 176.110.116.0/23 maxlen: 23 2001:67c:1070::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:56:ab:df:66:61:ed:62:2e:5a:cc:81:62:59:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Validity Not Before: Jan 2 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=446643b3b1431cf650bde05d5da47afd195e21a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:b5:a2:e6:87:ee:49:6f:5d:00:3d:a2:df: cb:52:c5:ac:57:de:06:19:c2:8a:ad:98:1f:13:2e: 64:40:db:8f:b3:7a:5d:59:b7:ab:db:47:f8:6a:94: f9:b4:82:61:ea:0f:28:b4:4c:21:68:c6:7e:b8:76: 94:56:ae:80:19:5a:a5:24:74:03:be:3c:a9:b0:2e: f7:b7:50:8b:e5:43:1e:ca:d2:e4:ed:ce:48:d0:07: 7a:c6:d6:2d:a0:17:80:23:39:d9:19:24:d6:1e:b0: e0:29:3e:b0:95:07:dd:07:68:c3:f9:16:ca:7e:a2: 18:f6:1e:9e:2c:59:2d:9e:32:79:1d:24:f8:58:58: 62:18:d7:72:e2:b0:30:88:5c:94:1a:de:c3:69:c1: 69:1c:c5:c0:f4:42:f0:13:ac:ea:0c:50:71:9c:d2: 2b:c8:d1:95:91:b7:9c:ae:51:ea:e2:17:6f:a9:9d: 5d:22:1e:21:4e:de:90:b7:19:1b:ac:86:7e:67:d1: a1:09:a4:c5:86:8f:7b:c6:fa:89:8b:ce:e3:fb:e6: 17:d3:be:97:e0:db:5d:f4:a1:ee:2d:9f:9f:02:0f: 4e:90:1a:80:6c:4b:42:64:23:f6:8a:e9:8d:9e:e0: 8c:6e:d5:47:5d:b4:df:75:af:9b:61:31:52:29:7c: c1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:66:43:B3:B1:43:1C:F6:50:BD:E0:5D:5D:A4:7A:FD:19:5E:21:A2 X509v3 Authority Key Identifier: keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/RGZDs7FDHPZQveBdXaR6_RleIaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.110.116.0/23 IPv6: 2001:67c:1070::/47 Signature Algorithm: sha256WithRSAEncryption 3f:0c:2b:e5:b2:64:ef:19:48:33:23:3e:51:ec:58:47:22:7c: 03:e4:93:4d:fa:c8:97:12:55:5c:14:ce:bf:d1:6f:d1:0f:c2: b3:e6:0b:3d:00:c7:23:fc:89:ed:d9:73:aa:40:6a:ac:8f:62: 5e:a7:da:01:c0:0c:fc:19:5e:b7:f4:4f:b2:12:be:e0:46:8d: e4:8f:42:36:72:0f:31:bb:7f:21:f8:9c:80:6d:d8:40:42:0c: 4d:d7:5d:6d:d4:89:f9:fc:cf:ab:ae:60:d3:f7:aa:67:fd:86: 64:67:c0:71:50:2e:85:34:4a:ad:16:e6:00:8e:e6:eb:21:ce: 75:a3:bc:9a:ff:96:a3:25:66:dd:9a:3c:13:5b:a6:42:40:80: b9:33:46:f5:09:ad:60:c0:b1:d8:5c:f1:97:2b:06:0f:be:e8: be:f9:44:f5:5c:45:a5:34:01:67:5a:45:cb:0c:0e:8a:12:7f: e3:5e:2d:3a:21:69:d2:ad:db:df:19:d7:a1:cd:8f:2b:77:f0: 6a:12:e4:a9:34:bb:1b:1c:ab:b7:64:b4:99:4d:28:a0:17:7a: b3:d3:94:0f:27:8d:e0:0b:ed:6e:6a:8a:39:89:43:07:e1:c8: 5b:aa:6c:e7:ff:44:95:14:36:8c:b7:51:d5:08:56:00:e3:fc: 7c:8f:23:3c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yVar32Zh7WIuWsyBYlmSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGFkZTU0YzI3ZTZmY2RkYWNlMjYyYzRmZGY3OTBmMzIw ZmVkOWMwHhcNMjYwMTAyMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDY2NDNiM2IxNDMxY2Y2NTBiZGUwNWQ1ZGE0N2FmZDE5NWUyMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApny1ouaH7klvXQA9ot/LUsWsV94G GcKKrZgfEy5kQNuPs3pdWber20f4apT5tIJh6g8otEwhaMZ+uHaUVq6AGVqlJHQD vjypsC73t1CL5UMeytLk7c5I0Ad6xtYtoBeAIznZGSTWHrDgKT6wlQfdB2jD+RbK fqIY9h6eLFktnjJ5HST4WFhiGNdy4rAwiFyUGt7DacFpHMXA9ELwE6zqDFBxnNIr yNGVkbecrlHq4hdvqZ1dIh4hTt6QtxkbrIZ+Z9GhCaTFho97xvqJi87j++YX076X 4Ntd9KHuLZ+fAg9OkBqAbEtCZCP2iumNnuCMbtVHXbTfda+bYTFSKXzBLQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFERmQ7OxQxz2UL3gXV2kev0ZXiGiMB8GA1UdIwQY MBaAFE0K3lTCfm/N2s4mLE/feQ8yD+2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2It ODkyOTZjY2IzNWY1LzEvUkdaRHM3RkRIUFpRdmVCZFhhUjZfUmxlSWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2ItODkyOTZjY2IzNWY1 LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBsG50MA8E AgACMAkDBwEgAQZ8EHAwDQYJKoZIhvcNAQELBQADggEBAD8MK+WyZO8ZSDMjPlHs WEcifAPkk036yJcSVVwUzr/Rb9EPwrPmCz0AxyP8ie3Zc6pAaqyPYl6n2gHADPwZ Xrf0T7ISvuBGjeSPQjZyDzG7fyH4nIBt2EBCDE3XXW3Uifn8z6uuYNP3qmf9hmRn wHFQLoU0Sq0W5gCO5ushznWjvJr/lqMlZt2aPBNbpkJAgLkzRvUJrWDAsdhc8Zcr Bg++6L75RPVcRaU0AWdaRcsMDooSf+NeLTohadKt298Z16HNjyt38GoS5Kk0uxsc q7dktJlNKKAXerPTlA8njeAL7W5qijmJQwfhyFuqbOf/RJUUNoy3UdUIVgDj/HyP Izw= -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:03 2026 by rpki-client