This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gzjxCK1tX2JG2Db2DY8PGTsoFac.roa File: gzjxCK1tX2JG2Db2DY8PGTsoFac.roa (raw, json) Hash identifier: X7ObGMwvLWIXRjEGk9utNybBZO2Ukoc9ZH876GcKdXU= Subject key identifier: 83:38:F1:08:AD:6D:5F:62:46:D8:36:F6:0D:8F:0F:19:3B:28:15:A7 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14408EAABD4ACFE5E377C53F8D6ECA Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gzjxCK1tX2JG2Db2DY8PGTsoFac.roa Signing time: Fri 02 Jan 2026 14:19:52 +0000 ROA not before: Fri 02 Jan 2026 14:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6869 IP address blocks: 193.233.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:40:8e:aa:bd:4a:cf:e5:e3:77:c5:3f:8d:6e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8338f108ad6d5f6246d836f60d8f0f193b2815a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:38:c8:a7:1e:75:76:e8:54:18:85:4f:2a: c4:4f:54:20:24:f4:50:d5:86:16:aa:35:22:d9:f5: cf:ec:36:18:c7:59:3f:52:14:84:09:22:51:48:fa: 1b:c9:69:c4:cd:09:da:34:c9:68:82:fc:24:2d:0b: 7b:88:67:c5:32:2d:24:3b:fb:d4:b8:c5:d3:9d:2e: 8a:2b:20:f3:c1:7d:ae:ed:90:59:de:73:6b:5c:2d: 87:6d:f2:49:e2:d8:42:07:b1:e9:fa:9b:bf:3c:b6: 07:32:40:97:93:88:98:e0:ea:7d:81:a3:42:33:9b: 83:a3:a4:c1:48:ce:7a:74:4c:da:d7:b4:fc:f8:30: 2f:cc:ee:3f:47:15:b8:b6:79:ee:bb:d8:0b:a0:f7: ff:18:86:9f:dd:72:3a:b4:ed:97:22:c4:d0:30:d8: d6:44:ba:c1:95:70:16:1d:37:58:61:7b:fe:80:bc: 07:57:71:fc:26:22:c7:5a:b5:ad:91:03:e1:06:cf: 4e:29:f3:54:ca:da:9f:0f:66:47:4c:cd:0a:d0:25: d5:19:be:40:bb:cb:8a:14:28:45:4c:c8:d0:79:1f: 5e:2f:fb:42:d7:d9:6f:76:ae:07:48:05:f3:3f:07: 82:57:bc:5c:21:58:aa:2d:72:ca:30:56:31:f2:08: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:38:F1:08:AD:6D:5F:62:46:D8:36:F6:0D:8F:0F:19:3B:28:15:A7 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gzjxCK1tX2JG2Db2DY8PGTsoFac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.152.0/24 Signature Algorithm: sha256WithRSAEncryption 67:a8:d5:b4:01:d6:06:7e:f7:fc:9c:78:3c:e8:e7:d7:27:03: 0b:9c:46:1c:23:16:ec:33:dd:e2:ad:97:2b:b9:e6:8d:b9:a2: a1:fd:2e:73:8f:51:70:73:80:8f:fe:d6:a9:64:e3:3b:f3:e0: ab:07:b1:4a:e1:6b:b0:29:e8:73:45:fb:07:ff:93:f7:b7:f6: 6a:e4:e5:0a:d2:d4:0b:49:24:c7:24:17:bd:23:45:4b:ce:f4: 40:de:d4:12:fc:61:60:23:99:cb:63:ff:7d:5a:bd:e4:8b:0a: 49:55:ba:6b:85:8b:61:66:02:d8:3f:eb:5d:f1:76:4b:fc:d5: 6b:4c:dd:ba:fe:42:77:bd:38:30:6b:c7:7a:66:79:13:22:13: 29:6d:3d:dd:fe:dc:c4:08:76:6d:35:41:53:61:ff:1e:ec:e2: dc:1a:40:61:0e:1e:ff:83:02:8c:47:e5:92:55:0c:f1:e0:fb: a6:e3:e0:68:d8:65:76:bd:83:c6:dc:6b:5d:4a:a7:5e:fb:6b: de:3b:ec:ec:8f:d5:d2:a0:34:bc:97:03:ac:9e:8d:7f:a0:67: e9:c1:b1:46:2d:7d:a6:f8:47:ce:85:51:d1:08:8e:cf:2c:1d: 5f:dc:cd:7f:a1:1d:50:f8:5d:79:83:bc:f3:fd:51:c2:df:8f: 23:6b:df:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FECOqr1Kz+Xjd8U/jW7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzM4ZjEwOGFkNmQ1ZjYyNDZkODM2ZjYwZDhmMGYxOTNiMjgxNWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Q4yKcedXboVBiFTyrET1QgJPRQ 1YYWqjUi2fXP7DYYx1k/UhSECSJRSPobyWnEzQnaNMlogvwkLQt7iGfFMi0kO/vU uMXTnS6KKyDzwX2u7ZBZ3nNrXC2HbfJJ4thCB7Hp+pu/PLYHMkCXk4iY4Op9gaNC M5uDo6TBSM56dEza17T8+DAvzO4/RxW4tnnuu9gLoPf/GIaf3XI6tO2XIsTQMNjW RLrBlXAWHTdYYXv+gLwHV3H8JiLHWrWtkQPhBs9OKfNUytqfD2ZHTM0K0CXVGb5A u8uKFChFTMjQeR9eL/tC19lvdq4HSAXzPweCV7xcIViqLXLKMFYx8gjGBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIM48QitbV9iRtg29g2PDxk7KBWnMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvZ3pqeENLMXRYMkpHMkRiMkRZOFBHVHNvRmFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwemYMA0G CSqGSIb3DQEBCwUAA4IBAQBnqNW0AdYGfvf8nHg86OfXJwMLnEYcIxbsM93irZcr ueaNuaKh/S5zj1Fwc4CP/tapZOM78+CrB7FK4WuwKehzRfsH/5P3t/Zq5OUK0tQL SSTHJBe9I0VLzvRA3tQS/GFgI5nLY/99Wr3kiwpJVbprhYthZgLYP+td8XZL/NVr TN26/kJ3vTgwa8d6ZnkTIhMpbT3d/tzECHZtNUFTYf8e7OLcGkBhDh7/gwKMR+WS VQzx4Pum4+Bo2GV2vYPG3GtdSqde+2veO+zsj9XSoDS8lwOsno1/oGfpwbFGLX2m +EfOhVHRCI7PLB1f3M1/oR1Q+F15g7zz/VHC348ja996 -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:46 2026 by rpki-client