This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa File: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (raw, json) Hash identifier: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o= Subject key identifier: 1B:1B:59:2F:1F:EF:E1:96:B0:1F:28:40:A7:FF:71:D2:DD:B1:F8:17 Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025 Certificate serial: 019B7D5AEF6D6DA50C6BA274E697CF13E9BB Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa Signing time: Fri 02 Jan 2026 06:17:50 +0000 ROA not before: Fri 02 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215273 IP address blocks: 194.104.94.0/24 maxlen: 24 2a14:2640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ef:6d:6d:a5:0c:6b:a2:74:e6:97:cf:13:e9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025 Validity Not Before: Jan 2 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b1b592f1fefe196b01f2840a7ff71d2ddb1f817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:e0:52:45:f2:21:30:64:d8:4d:28:b8:26: fe:5d:64:13:da:d5:dc:24:34:7f:ab:71:4c:a9:0b: c5:ea:91:f6:41:f3:80:cd:a6:1f:3b:a0:55:98:0e: de:a9:4e:82:17:3a:d9:61:12:74:ef:b3:67:6e:36: fd:1e:86:0f:4e:2b:c0:a8:12:9a:de:d4:8d:dc:6a: be:32:97:dd:a8:ee:9b:02:c2:a2:5a:55:82:1a:50: 41:03:27:be:dd:68:24:f5:61:07:d2:dc:90:39:8f: 73:ed:7c:f6:26:18:fa:7c:96:90:df:ca:0a:26:1c: 24:b0:cd:b5:01:9b:5e:da:b7:0a:87:0f:44:26:41: 1d:cb:e2:56:0e:e0:1c:5a:f6:a4:e8:00:9d:b5:bf: b7:7c:df:93:d4:f1:9e:b4:d1:5c:53:e3:fd:5c:bb: d3:87:92:19:ad:e4:5a:31:15:cc:04:d6:81:13:ca: 0e:18:16:f5:12:99:b1:20:b2:f4:fa:27:cc:ef:51: ad:57:69:5f:0a:01:e7:b7:26:c2:0e:08:0e:3b:45: 39:d7:6a:ae:df:be:78:b6:ff:05:6e:38:6e:5b:88: c4:c6:c1:63:78:a9:28:dd:31:d7:d2:37:8b:8e:33: f7:98:82:97:01:de:87:3a:0e:d1:ce:51:98:47:be: 25:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1B:59:2F:1F:EF:E1:96:B0:1F:28:40:A7:FF:71:D2:DD:B1:F8:17 X509v3 Authority Key Identifier: keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.94.0/24 IPv6: 2a14:2640::/29 Signature Algorithm: sha256WithRSAEncryption 02:fc:b6:4a:2e:da:e5:84:27:87:73:26:70:6c:bb:f4:b5:8e: 07:b4:ca:1d:14:c3:81:54:b9:c5:d3:72:39:3e:de:b4:bf:ee: 05:b6:c0:f6:3a:c7:38:fe:68:dc:96:a3:fd:fa:34:0f:08:fe: 58:d2:e6:84:51:e7:1a:66:fb:61:ca:af:9a:a1:72:1e:1b:cd: d8:f3:10:66:86:8c:1a:69:5c:c5:50:74:0e:05:f1:e1:00:f4: df:58:75:83:2a:e2:f2:1c:c4:25:1b:62:78:c6:ad:ab:48:88: 81:b2:7f:6f:d0:52:7b:f2:1c:41:6a:9e:f3:62:e8:2c:80:fe: 08:88:df:d1:d4:99:77:91:08:06:f0:32:b1:5c:cb:8c:fb:56: ee:87:56:3d:a5:6c:38:97:e3:9e:32:5b:cb:1b:66:ad:4c:f9: 19:f7:dc:46:bb:ca:0b:0f:54:77:fb:93:14:49:8c:ea:ac:48: 61:0b:4a:6d:56:b4:1f:be:5c:3a:1d:70:d7:be:fb:9f:85:11: c7:a3:f1:81:cb:50:33:02:22:40:c0:51:d3:e8:5c:f9:b4:fd: ac:e5:af:0a:80:af:4c:a7:08:7a:39:53:be:5e:3e:1f:d0:96: b1:23:54:b5:66:08:5f:c4:68:7a:b1:a4:71:91:de:9d:10:37: 8e:a0:11:11 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9Wu9tbaUMa6J05pfPE+m7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZWNlYzk2YTAzNzFhM2FlNjJkN2FhNmRkN2Q5ZTQzYWM1 NWQwMjUwHhcNMjYwMTAyMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjFiNTkyZjFmZWZlMTk2YjAxZjI4NDBhN2ZmNzFkMmRkYjFmODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWDgUkXyITBk2E0ouCb+XWQT2tXc JDR/q3FMqQvF6pH2QfOAzaYfO6BVmA7eqU6CFzrZYRJ077Nnbjb9HoYPTivAqBKa 3tSN3Gq+MpfdqO6bAsKiWlWCGlBBAye+3Wgk9WEH0tyQOY9z7Xz2Jhj6fJaQ38oK JhwksM21AZte2rcKhw9EJkEdy+JWDuAcWvak6ACdtb+3fN+T1PGetNFcU+P9XLvT h5IZreRaMRXMBNaBE8oOGBb1EpmxILL0+ifM71GtV2lfCgHntybCDggOO0U512qu 3754tv8FbjhuW4jExsFjeKko3THX0jeLjjP3mIKXAd6HOg7RzlGYR74lKwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBsbWS8f7+GWsB8oQKf/cdLdsfgXMB8GA1UdIwQY MBaAFNvs7JagNxo65i16pt19nkOsVdAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2Yjct YTg3NjY1MjBmZWEyLzEvR3h0Wkx4X3Y0WmF3SHloQXBfOXgwdDJ4LUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2YjctYTg3NjY1MjBmZWEy LzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwmheMA0E AgACMAcDBQMqFCZAMA0GCSqGSIb3DQEBCwUAA4IBAQAC/LZKLtrlhCeHcyZwbLv0 tY4HtModFMOBVLnF03I5Pt60v+4FtsD2Osc4/mjclqP9+jQPCP5Y0uaEUecaZvth yq+aoXIeG83Y8xBmhowaaVzFUHQOBfHhAPTfWHWDKuLyHMQlG2J4xq2rSIiBsn9v 0FJ78hxBap7zYugsgP4IiN/R1Jl3kQgG8DKxXMuM+1buh1Y9pWw4l+OeMlvLG2at TPkZ99xGu8oLD1R3+5MUSYzqrEhhC0ptVrQfvlw6HXDXvvufhRHHo/GBy1AzAiJA wFHT6Fz5tP2s5a8KgK9Mpwh6OVO+Xj4f0JaxI1S1ZghfxGh6saRxkd6dEDeOoBER -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:09 2026 by rpki-client