This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/GZDzHGbDx7dfkoatOEujE-QeXX0.roa File: GZDzHGbDx7dfkoatOEujE-QeXX0.roa (raw, json) Hash identifier: rp5gMVM6d0QMtfUx8hE8lYmJBJMynSH2EW1XEZUY1fk= Subject key identifier: 19:90:F3:1C:66:C3:C7:B7:5F:92:86:AD:38:4B:A3:13:E4:1E:5D:7D Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26 Certificate serial: 019B7CEE0AB4A51115077749DF2C32F8C539 Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/GZDzHGbDx7dfkoatOEujE-QeXX0.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29633 IP address blocks: 217.75.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0a:b4:a5:11:15:07:77:49:df:2c:32:f8:c5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1990f31c66c3c7b75f9286ad384ba313e41e5d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cb:a3:e2:05:6d:06:2b:aa:ae:7e:74:d0:1d: 02:a4:aa:86:7e:e2:88:6e:75:bb:d5:e0:08:79:a5: 34:4e:ad:45:2e:cb:ec:38:fb:e8:47:fd:ea:79:10: 59:8d:a0:89:8e:68:05:78:f5:14:19:3a:17:f4:e5: 69:7c:07:d1:75:5f:6e:2c:b2:bd:7d:1d:55:ab:da: 8a:48:28:52:08:dc:87:1e:e3:00:fa:d6:33:fa:37: c5:79:88:72:9b:2d:1b:75:43:5d:f9:5d:86:ec:7a: 30:32:1f:22:bf:93:8e:73:c6:49:3a:c5:86:c5:3e: 9f:02:a3:f6:d7:9d:73:b9:98:33:1d:19:7b:a2:77: 5c:77:8a:fb:01:61:6f:f1:b9:51:cb:de:b7:4f:70: a7:d0:05:d2:46:51:06:33:d9:d1:e7:17:7c:94:fd: 33:18:8d:33:d4:ca:71:01:b8:68:8f:c0:b5:7d:c3: 12:c9:7c:83:a0:88:bd:3d:68:3f:bd:15:c5:dc:78: eb:4f:80:a0:95:ef:10:77:b3:3b:20:ad:6f:fe:39: de:ee:e8:81:18:a8:99:8f:84:78:fb:1b:7a:2e:d6: 10:ab:64:b7:99:af:43:7e:f1:74:ef:dd:36:e1:57: 23:d7:e3:45:1b:be:01:d0:e6:ae:30:15:bb:6a:bd: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:90:F3:1C:66:C3:C7:B7:5F:92:86:AD:38:4B:A3:13:E4:1E:5D:7D X509v3 Authority Key Identifier: keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/GZDzHGbDx7dfkoatOEujE-QeXX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.75.176.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:3c:3d:96:2f:c9:36:bf:be:9f:36:cb:fc:8f:92:ed:df:b5: a4:b6:d4:5b:a3:37:b0:b6:6a:d2:81:a3:76:c6:32:0b:5c:d7: 30:68:72:2f:c1:c1:89:f9:dd:e6:81:91:8a:64:04:12:68:40: 29:81:2f:11:f4:db:28:54:5a:b8:dd:2b:b1:a2:f4:38:aa:af: d9:d6:e4:1d:fd:72:38:d2:64:33:10:09:a6:fa:5d:7a:87:e3: bc:58:4e:e8:c3:d3:e4:f6:0f:73:f2:ec:08:ba:64:e0:71:0f: 33:6a:5c:41:f5:39:3b:79:ad:c0:8a:07:a5:5d:91:0a:13:19: b5:6f:d7:04:9c:3f:75:8a:d8:09:63:80:af:5e:f1:1e:be:79: 53:27:79:96:58:6a:cc:ec:01:27:48:40:60:f2:6a:67:79:3a: 88:e8:9b:b9:92:78:9e:cc:12:b3:a7:31:33:71:b8:1a:c3:a5: 81:88:a7:e9:ea:f5:1e:8d:18:42:84:57:c1:b3:80:6c:32:be: 71:e9:50:d2:4c:61:af:03:ac:d3:58:8d:9c:89:d7:6f:20:85: ad:23:54:63:f7:a0:9b:75:d6:e2:b5:d4:e3:1f:88:8c:35:70: cc:f3:44:5b:9f:11:6b:8a:ae:9b:86:25:df:30:64:9a:53:18: 27:0d:73:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gq0pREVB3dJ3ywy+MU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj MzBhMjYwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTkwZjMxYzY2YzNjN2I3NWY5Mjg2YWQzODRiYTMxM2U0MWU1ZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8uj4gVtBiuqrn500B0CpKqGfuKI bnW71eAIeaU0Tq1FLsvsOPvoR/3qeRBZjaCJjmgFePUUGToX9OVpfAfRdV9uLLK9 fR1Vq9qKSChSCNyHHuMA+tYz+jfFeYhymy0bdUNd+V2G7HowMh8iv5OOc8ZJOsWG xT6fAqP2151zuZgzHRl7ondcd4r7AWFv8blRy963T3Cn0AXSRlEGM9nR5xd8lP0z GI0z1MpxAbhoj8C1fcMSyXyDoIi9PWg/vRXF3HjrT4Cgle8Qd7M7IK1v/jne7uiB GKiZj4R4+xt6LtYQq2S3ma9DfvF079024Vcj1+NFG74B0OauMBW7ar10LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBmQ8xxmw8e3X5KGrThLoxPkHl19MB8GA1UdIwQY MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct NDY1MzhjYTUzODNjLzEvR1pEekhHYkR4N2Rma29hdE9FdWpFLVFlWFgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2UuwMA0G CSqGSIb3DQEBCwUAA4IBAQCNPD2WL8k2v76fNsv8j5Lt37WkttRbozewtmrSgaN2 xjILXNcwaHIvwcGJ+d3mgZGKZAQSaEApgS8R9NsoVFq43SuxovQ4qq/Z1uQd/XI4 0mQzEAmm+l16h+O8WE7ow9Pk9g9z8uwIumTgcQ8zalxB9Tk7ea3AigelXZEKExm1 b9cEnD91itgJY4CvXvEevnlTJ3mWWGrM7AEnSEBg8mpneTqI6Ju5kniezBKzpzEz cbgaw6WBiKfp6vUejRhChFfBs4BsMr5x6VDSTGGvA6zTWI2ciddvIIWtI1Rj96Cb ddbitdTjH4iMNXDM80RbnxFriq6bhiXfMGSaUxgnDXOF -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:46 2026 by rpki-client