This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F-gz_l82TUnzqe8gi8T6ej1cJG0.roa File: F-gz_l82TUnzqe8gi8T6ej1cJG0.roa (raw, json) Hash identifier: jpoXE8kpvBegzmVvGIpXdTpn85rRNdihECgeVjcK5VA= Subject key identifier: 17:E8:33:FE:5F:36:4D:49:F3:A9:EF:20:8B:C4:FA:7A:3D:5C:24:6D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3180AB2A34132A8E79B392CBB8849 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F-gz_l82TUnzqe8gi8T6ej1cJG0.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 45.129.85.0/24 maxlen: 24 83.219.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:18:0a:b2:a3:41:32:a8:e7:9b:39:2c:bb:88:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17e833fe5f364d49f3a9ef208bc4fa7a3d5c246d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:59:75:98:b7:c9:61:b0:35:94:c7:77:cb: 5e:e1:cb:f3:dc:b9:a3:69:e2:fc:21:aa:46:14:07: f4:60:8f:ef:a9:97:3b:31:b7:eb:9f:12:40:1f:b2: 59:ae:b2:62:6e:6f:21:ad:f8:77:51:a3:3e:8b:8d: 14:72:ea:8e:9c:4b:2c:92:7d:02:ec:62:2e:9c:92: f7:f3:76:c5:64:97:01:78:4e:df:ad:5f:40:69:99: 22:77:a8:90:a4:eb:e6:26:15:b8:74:c2:fe:8d:8d: 90:ab:b0:46:32:a9:df:b5:ab:01:54:8c:bb:22:d7: d4:4e:16:aa:27:c8:6f:da:9a:fa:75:d0:b0:40:81: 56:66:ad:2e:1b:48:0b:10:1a:0e:e0:e1:e8:56:04: ac:7b:0a:d8:a5:d9:db:64:d3:fa:03:7f:3d:31:b1: 98:9c:34:96:b6:95:88:29:1a:8b:75:5c:fd:4b:79: 65:4c:0b:ca:62:38:cf:9e:97:e3:95:df:41:d9:5d: 50:1e:15:89:fa:9e:27:40:66:3f:50:21:a5:3f:6b: bc:e2:87:7b:13:94:46:7d:78:5c:fc:06:43:e8:c0: 41:38:73:30:ab:b7:51:ae:14:18:5a:37:f2:3e:5f: 9f:e4:d0:e7:5d:4d:92:bf:1d:68:94:10:e0:6d:12: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E8:33:FE:5F:36:4D:49:F3:A9:EF:20:8B:C4:FA:7A:3D:5C:24:6D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F-gz_l82TUnzqe8gi8T6ej1cJG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.85.0/24 83.219.96.0/24 Signature Algorithm: sha256WithRSAEncryption ab:2a:9d:90:30:65:76:11:6c:67:52:9f:2d:06:82:62:cb:90: 7c:5f:2d:3d:4d:2a:e7:82:64:68:1b:36:fd:87:f8:c8:ea:19: 9b:f6:b8:23:1a:25:92:5a:07:9d:0d:51:89:ad:00:65:4b:e5: 98:02:8b:32:29:01:15:be:69:62:12:50:03:58:34:4f:c0:1d: b3:cb:7c:7e:9a:d5:70:c2:12:aa:2c:cd:35:23:a9:33:fe:1c: 83:90:53:4f:84:7e:37:0a:94:b4:a2:ac:65:ea:db:28:b4:a0: 14:1c:52:22:b6:4e:67:ea:c4:38:0d:36:79:ef:76:20:b3:2b: 28:e7:cb:48:4f:9d:fd:4d:8c:95:62:c6:df:51:83:f2:a9:46: 63:15:7e:8d:c1:e4:8b:c8:ee:00:fe:cc:cb:e0:dd:62:bb:12: 03:18:09:85:18:44:df:68:53:90:99:a7:91:60:92:c3:3b:a3: 82:73:9d:05:d2:9c:17:1a:69:f8:51:6c:d7:b5:7a:12:d5:4a: 59:12:f6:7e:e7:9f:0d:57:51:5a:cc:b9:8b:48:70:df:03:a8: e4:05:49:44:a5:82:f0:23:10:16:a5:94:73:48:3d:80:68:88: 6e:e7:9e:f6:fb:9c:1a:5a:9a:a0:9d:50:aa:fa:75:ea:0c:d6: 2d:9c:72:f5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxgKsqNBMqjnmzksu4hJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2U4MzNmZTVmMzY0ZDQ5ZjNhOWVmMjA4YmM0ZmE3YTNkNWMyNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+xZdZi3yWGwNZTHd8te4cvz3Lmj aeL8IapGFAf0YI/vqZc7MbfrnxJAH7JZrrJibm8hrfh3UaM+i40UcuqOnEsskn0C 7GIunJL383bFZJcBeE7frV9AaZkid6iQpOvmJhW4dML+jY2Qq7BGMqnftasBVIy7 ItfUThaqJ8hv2pr6ddCwQIFWZq0uG0gLEBoO4OHoVgSsewrYpdnbZNP6A389MbGY nDSWtpWIKRqLdVz9S3llTAvKYjjPnpfjld9B2V1QHhWJ+p4nQGY/UCGlP2u84od7 E5RGfXhc/AZD6MBBOHMwq7dRrhQYWjfyPl+f5NDnXU2Svx1olBDgbRJ+YwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBfoM/5fNk1J86nvIIvE+no9XCRtMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRi1nel9sODJUVW56cWU4Z2k4VDZlajFjSkcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYFVAwQA U9tgMA0GCSqGSIb3DQEBCwUAA4IBAQCrKp2QMGV2EWxnUp8tBoJiy5B8Xy09TSrn gmRoGzb9h/jI6hmb9rgjGiWSWgedDVGJrQBlS+WYAosyKQEVvmliElADWDRPwB2z y3x+mtVwwhKqLM01I6kz/hyDkFNPhH43CpS0oqxl6tsotKAUHFIitk5n6sQ4DTZ5 73Ygsyso58tIT539TYyVYsbfUYPyqUZjFX6NweSLyO4A/szL4N1iuxIDGAmFGETf aFOQmaeRYJLDO6OCc50F0pwXGmn4UWzXtXoS1UpZEvZ+558NV1FazLmLSHDfA6jk BUlEpYLwIxAWpZRzSD2AaIhu5572+5waWpqgnVCq+nXqDNYtnHL1 -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:32 2026 by rpki-client