This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa File: rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa (raw, json) Hash identifier: piFE9GnT4z5N6g/l0DAbRB4nCDUBJdWgytzAmBqGihU= Subject key identifier: AE:0C:FE:CB:B4:E1:43:35:3E:E1:5A:82:7D:7F:4E:B5:AD:DD:FA:9D Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Certificate serial: 019B7C7F6D13C258B251CFD001DF9B4A15BA Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa Signing time: Fri 02 Jan 2026 02:18:04 +0000 ROA not before: Fri 02 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.60.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:6d:13:c2:58:b2:51:cf:d0:01:df:9b:4a:15:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Validity Not Before: Jan 2 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae0cfecbb4e143353ee15a827d7f4eb5adddfa9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1e:8f:6c:a1:19:dc:75:e5:80:a6:62:84:17: 4d:c6:40:38:c4:27:a7:80:45:7a:b5:92:32:8b:be: cb:a9:78:7d:fa:28:84:8f:30:c8:51:8f:3a:9b:89: 1a:f2:78:51:84:f6:ef:92:88:9f:41:ea:c2:56:a7: 40:19:96:df:bb:7b:fc:9a:d4:fa:7f:9c:b1:f7:35: 1f:43:d0:e1:12:78:bc:e0:47:ba:50:3e:c4:8f:0b: 72:21:a0:26:fc:a2:56:41:ee:47:72:ff:b3:97:92: 66:2b:df:ca:a0:4b:8a:63:6a:e2:26:c2:e7:53:37: 16:53:84:6b:5e:10:90:3e:9d:a7:ce:c1:b3:81:69: ff:f7:ae:2b:01:bf:5d:f7:dd:36:54:26:73:9a:39: 1c:e3:05:6c:c3:21:2d:bc:e9:59:2d:fb:da:56:3e: d2:6d:0d:e8:d7:46:0f:b3:a6:28:95:8a:d8:a1:e4: 1b:c3:0f:08:b0:c4:f2:b0:32:4a:ae:3b:7c:6e:43: 6a:73:c4:ed:05:cd:10:ca:e1:c3:64:2c:e6:81:ef: 13:6c:bb:2e:c1:ab:2c:8e:8f:77:01:59:6a:80:c6: 67:03:4e:d6:4e:2e:f7:8e:75:28:55:73:3b:00:a0: f8:0f:f0:71:4e:49:22:d9:7d:e1:be:ef:64:6a:d7: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:FE:CB:B4:E1:43:35:3E:E1:5A:82:7D:7F:4E:B5:AD:DD:FA:9D X509v3 Authority Key Identifier: keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.248.0/24 Signature Algorithm: sha256WithRSAEncryption e2:33:4b:11:8e:a5:a1:eb:82:d0:79:79:7a:1b:6a:9f:39:28: df:7b:a5:1d:31:05:13:65:fe:1f:fa:27:11:c3:45:4c:ad:4c: e5:77:c6:57:23:fb:01:ac:c8:1c:29:7e:fa:91:a6:16:84:24: ae:1b:d7:5a:bc:b8:02:dd:4a:38:c1:e4:4e:a6:83:27:29:22: 33:20:57:b0:37:9c:9e:c8:6e:66:39:d8:f3:19:ca:3f:b6:a1: ed:06:e8:12:57:4f:60:42:71:b5:c7:f7:86:2d:3b:15:fa:40: 30:91:6c:ec:da:cf:7c:b1:d4:99:07:91:db:29:c6:f5:c4:ff: 42:05:51:37:1e:6a:af:47:4a:59:df:8c:a5:b6:0c:4a:ee:c4: 2c:33:e2:4e:41:cf:67:47:7b:eb:bf:39:8f:0b:a5:a1:14:9c: 54:79:c2:20:bf:48:be:0b:60:a6:7b:a6:40:1c:5b:69:ad:d2: 90:d3:24:df:51:f2:61:ed:0e:1e:1d:bf:9e:12:0f:1e:fe:44: 9b:50:b8:9e:5e:61:b1:87:2d:28:9b:41:82:8b:b1:6f:05:e4: 8b:fb:e8:b9:80:41:95:25:e1:b5:ab:7e:6f:36:00:e4:4d:8b: 12:45:e4:82:5f:60:3c:96:c3:e3:2c:04:69:53:7d:46:86:bf: 02:38:eb:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f20TwliyUc/QAd+bShW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWEzZTk5YmJiMGRkYTc4MDg0MjE5YTYxMzQ5MmU1ZTZk OWI0NWEwHhcNMjYwMTAyMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTBjZmVjYmI0ZTE0MzM1M2VlMTVhODI3ZDdmNGViNWFkZGRmYTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh6PbKEZ3HXlgKZihBdNxkA4xCen gEV6tZIyi77LqXh9+iiEjzDIUY86m4ka8nhRhPbvkoifQerCVqdAGZbfu3v8mtT6 f5yx9zUfQ9DhEni84Ee6UD7EjwtyIaAm/KJWQe5Hcv+zl5JmK9/KoEuKY2riJsLn UzcWU4RrXhCQPp2nzsGzgWn/964rAb9d9902VCZzmjkc4wVswyEtvOlZLfvaVj7S bQ3o10YPs6YolYrYoeQbww8IsMTysDJKrjt8bkNqc8TtBc0QyuHDZCzmge8TbLsu wassjo93AVlqgMZnA07WTi73jnUoVXM7AKD4D/BxTkki2X3hvu9katfM6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK4M/su04UM1PuFagn1/TrWt3fqdMB8GA1UdIwQY MBaAFBvqPpm7sN2ngIQhmmE0kuXm2bRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2Ut YTBiY2M5MTJkNzM1LzEvcmd6LXk3VGhRelUtNFZxQ2ZYOU90YTNkLXAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2UtYTBiY2M5MTJkNzM1 LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTz4MA0G CSqGSIb3DQEBCwUAA4IBAQDiM0sRjqWh64LQeXl6G2qfOSjfe6UdMQUTZf4f+icR w0VMrUzld8ZXI/sBrMgcKX76kaYWhCSuG9davLgC3Uo4weROpoMnKSIzIFewN5ye yG5mOdjzGco/tqHtBugSV09gQnG1x/eGLTsV+kAwkWzs2s98sdSZB5HbKcb1xP9C BVE3HmqvR0pZ34yltgxK7sQsM+JOQc9nR3vrvzmPC6WhFJxUecIgv0i+C2Cme6ZA HFtprdKQ0yTfUfJh7Q4eHb+eEg8e/kSbULieXmGxhy0om0GCi7FvBeSL++i5gEGV JeG1q35vNgDkTYsSReSCX2A8lsPjLARpU31Ghr8COOtV -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:03 2026 by rpki-client