This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/gzPjxSV5NT3n9pyhl6YdC1VefSA.roa File: gzPjxSV5NT3n9pyhl6YdC1VefSA.roa (raw, json) Hash identifier: mmHPwTp+4ezqtnWysDoJTp93kBZueU6MUxs9A6m03vY= Subject key identifier: 83:33:E3:C5:25:79:35:3D:E7:F6:9C:A1:97:A6:1D:0B:55:5E:7D:20 Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3 Certificate serial: 019B7C11AF0E4A5E52A62A8AC32E92F02216 Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/gzPjxSV5NT3n9pyhl6YdC1VefSA.roa Signing time: Fri 02 Jan 2026 00:18:12 +0000 ROA not before: Fri 02 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 194.115.212.0/22 maxlen: 22 194.115.212.0/24 maxlen: 24 194.115.213.0/24 maxlen: 24 194.115.214.0/24 maxlen: 24 194.115.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:af:0e:4a:5e:52:a6:2a:8a:c3:2e:92:f0:22:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3 Validity Not Before: Jan 2 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8333e3c52579353de7f69ca197a61d0b555e7d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:34:04:9d:87:34:5c:b9:f1:8b:08:f5:2f: 40:28:40:2d:d7:67:95:17:0f:34:52:a6:66:82:3c: 9e:7e:38:9e:64:94:bc:a2:e5:47:00:cc:d2:52:68: c7:49:8e:5c:a6:12:c0:89:03:1e:a3:e1:8e:d4:dd: 4c:6c:06:82:b0:d7:88:0b:ab:12:1c:5f:b1:85:5a: 41:f2:ff:7b:27:9e:8d:3f:f1:4b:db:4f:23:04:14: 44:51:b4:75:72:e7:5f:67:f0:21:c6:d3:25:8d:7e: b0:54:1b:d4:be:0d:0b:4e:9d:f1:87:a3:b5:1c:50: 44:19:f0:92:ee:74:8b:71:c7:7c:d4:6b:09:7b:ad: 93:d5:10:f8:4a:a2:5b:68:d6:d8:f6:3a:0b:5e:52: 6d:ae:cf:ac:9f:ec:c4:86:a6:c8:6d:87:bd:e7:eb: 1b:82:e5:69:ad:3b:c4:7a:cd:af:4f:be:60:b3:0b: ae:4f:71:d9:66:21:46:a2:2f:e4:fd:1a:87:0a:b2: 0d:4d:7d:90:05:99:b6:0b:88:c5:9a:cb:e1:b4:2c: d4:a7:26:bb:3f:36:a0:c4:59:b8:9a:e0:fc:44:18: 35:0a:c2:91:4d:0d:49:38:61:00:f8:40:7e:c0:cf: 31:7c:4f:99:43:f8:f2:ae:0c:69:b2:02:95:08:51: 0a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:33:E3:C5:25:79:35:3D:E7:F6:9C:A1:97:A6:1D:0B:55:5E:7D:20 X509v3 Authority Key Identifier: keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/gzPjxSV5NT3n9pyhl6YdC1VefSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.115.212.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:13:50:49:04:07:c0:da:70:dd:8b:17:49:8c:fd:a9:8a:eb: 48:d4:47:05:70:a9:a2:46:83:43:c0:12:62:1e:47:35:15:d8: 0e:3f:f2:60:6f:a8:6a:67:0d:e8:2c:46:55:32:79:6b:2e:99: eb:9c:05:e3:82:67:5c:20:e1:74:a5:6f:15:82:34:15:b7:1a: 72:cc:d6:e2:9f:f6:95:64:58:b2:20:71:0b:c2:8a:ac:45:4f: 05:2e:00:c7:7d:dd:46:6a:ed:e6:6c:bb:f5:2b:89:25:78:67: e6:8b:fd:28:f6:0b:bf:b6:5f:cd:a7:c2:d5:12:60:e3:65:66: 80:53:76:4c:56:eb:54:79:4a:d9:e9:be:f9:df:99:7c:25:a3: 7c:58:25:e0:e0:00:d4:cb:60:e2:56:23:2c:6c:19:e3:50:48: 29:12:67:03:ce:9b:ef:a0:c2:3e:64:fb:f6:86:09:ac:9a:13: 73:d6:e1:8b:80:97:85:2e:8d:8d:66:35:56:d1:e8:b3:ba:b4: c2:9b:1c:ce:96:0c:4e:25:75:84:7e:43:36:c7:95:a6:ea:8f: a4:a9:dc:af:ed:00:22:1a:af:dd:1e:5c:eb:3f:c5:e1:f3:aa: 2b:8c:6e:6a:8c:36:fb:a8:60:16:24:55:89:cb:cb:b5:d7:c7: 53:81:cc:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ea8OSl5SpiqKwy6S8CIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYzZmZDNmMzJjYTQ1OTRjOTYwNzU2NTlhNzA4OWIyN2Fl M2ZlZjMwHhcNMjYwMTAyMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzMzZTNjNTI1NzkzNTNkZTdmNjljYTE5N2E2MWQwYjU1NWU3ZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm80BJ2HNFy58YsI9S9AKEAt12eV Fw80UqZmgjyefjieZJS8ouVHAMzSUmjHSY5cphLAiQMeo+GO1N1MbAaCsNeIC6sS HF+xhVpB8v97J56NP/FL208jBBREUbR1cudfZ/AhxtMljX6wVBvUvg0LTp3xh6O1 HFBEGfCS7nSLccd81GsJe62T1RD4SqJbaNbY9joLXlJtrs+sn+zEhqbIbYe95+sb guVprTvEes2vT75gswuuT3HZZiFGoi/k/RqHCrINTX2QBZm2C4jFmsvhtCzUpya7 PzagxFm4muD8RBg1CsKRTQ1JOGEA+EB+wM8xfE+ZQ/jyrgxpsgKVCFEK0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIMz48UleTU95/acoZemHQtVXn0gMB8GA1UdIwQY MBaAFJvG/T8yykWUyWB1ZZpwibJ64/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYt ZGNiZTUzZGE3ODYwLzEvZ3pQanhTVjVOVDNuOXB5aGw2WWRDMVZlZlNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYtZGNiZTUzZGE3ODYw LzEvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwnPUMA0G CSqGSIb3DQEBCwUAA4IBAQAME1BJBAfA2nDdixdJjP2piutI1EcFcKmiRoNDwBJi Hkc1FdgOP/Jgb6hqZw3oLEZVMnlrLpnrnAXjgmdcIOF0pW8VgjQVtxpyzNbin/aV ZFiyIHELwoqsRU8FLgDHfd1Gau3mbLv1K4kleGfmi/0o9gu/tl/Np8LVEmDjZWaA U3ZMVutUeUrZ6b7535l8JaN8WCXg4ADUy2DiViMsbBnjUEgpEmcDzpvvoMI+ZPv2 hgmsmhNz1uGLgJeFLo2NZjVW0eizurTCmxzOlgxOJXWEfkM2x5Wm6o+kqdyv7QAi Gq/dHlzrP8Xh86orjG5qjDb7qGAWJFWJy8u118dTgczP -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:52 2026 by rpki-client