This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GzDWZibMlqixxdToOfP-v0yGUoQ.roa File: GzDWZibMlqixxdToOfP-v0yGUoQ.roa (raw, json) Hash identifier: dPBUpQUZe3g882KBN/49RilstGIbn8nvyFf9x+2l2IY= Subject key identifier: 1B:30:D6:66:26:CC:96:A8:B1:C5:D4:E8:39:F3:FE:BF:4C:86:52:84 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791049D4C6B51121442280AEB14C73F0 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GzDWZibMlqixxdToOfP-v0yGUoQ.roa Signing time: Thu 01 Jan 2026 10:17:48 +0000 ROA not before: Thu 01 Jan 2026 10:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 78.135.72.0/24 maxlen: 24 78.135.74.0/24 maxlen: 24 78.135.78.0/24 maxlen: 24 78.135.88.0/24 maxlen: 24 188.132.141.0/24 maxlen: 24 188.132.146.0/24 maxlen: 24 188.132.152.0/24 maxlen: 24 188.132.163.0/24 maxlen: 24 188.132.171.0/24 maxlen: 24 188.132.189.0/24 maxlen: 24 188.132.191.0/24 maxlen: 24 188.132.203.0/24 maxlen: 24 188.132.212.0/24 maxlen: 24 188.132.213.0/24 maxlen: 24 188.132.216.0/24 maxlen: 24 188.132.217.0/24 maxlen: 24 188.132.229.0/24 maxlen: 24 188.132.236.0/24 maxlen: 24 212.68.55.0/24 maxlen: 24 212.68.59.0/24 maxlen: 24 212.68.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:49:d4:c6:b5:11:21:44:22:80:ae:b1:4c:73:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b30d66626cc96a8b1c5d4e839f3febf4c865284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:4b:66:e2:bf:ab:a6:54:a7:71:46:52:2c: ba:e9:5a:5f:cc:9c:dc:74:9c:19:fd:01:ae:68:56: 0f:a0:be:12:bc:f8:2a:30:74:b6:87:73:4f:15:35: f4:f3:36:64:27:36:c2:c0:c2:25:dd:a5:f5:6b:5c: 9d:69:0d:63:56:b6:8b:dd:55:6b:d1:12:c3:48:25: 2a:1c:fb:43:2d:1c:cb:c9:57:a2:73:dd:9e:19:ba: 48:09:58:cb:40:61:3b:d8:f1:21:cb:88:4e:fe:c6: 36:7c:5b:7a:32:06:f1:74:8c:1b:14:a2:14:c6:88: 02:ad:81:78:8e:d1:50:5b:f1:8f:fc:58:d7:ce:42: 33:ec:2d:a2:e6:29:9e:7a:cf:42:52:4d:f6:cf:99: 08:b1:9e:0d:c7:24:5f:df:f8:cc:84:44:01:65:72: be:9d:48:e3:f7:18:71:e4:3e:00:45:6b:13:03:f1: 2d:57:31:92:b1:13:8e:90:97:c2:81:01:7c:35:08: 65:b4:5f:f7:9f:bf:bd:05:7f:3d:7f:40:bd:51:3e: 2b:6c:96:d1:8f:ea:de:c8:77:12:96:4a:2f:7f:26: c0:e9:4f:22:e7:44:af:8b:29:39:fa:fc:c0:7b:81: f4:f0:e9:e0:c1:7b:74:a7:a0:4b:bb:93:af:3f:0f: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:30:D6:66:26:CC:96:A8:B1:C5:D4:E8:39:F3:FE:BF:4C:86:52:84 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/GzDWZibMlqixxdToOfP-v0yGUoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.72.0/24 78.135.74.0/24 78.135.78.0/24 78.135.88.0/24 188.132.141.0/24 188.132.146.0/24 188.132.152.0/24 188.132.163.0/24 188.132.171.0/24 188.132.189.0/24 188.132.191.0/24 188.132.203.0/24 188.132.212.0/23 188.132.216.0/23 188.132.229.0/24 188.132.236.0/24 212.68.55.0/24 212.68.59.0-212.68.60.255 Signature Algorithm: sha256WithRSAEncryption 20:3f:bf:64:80:ba:c5:2a:99:b5:13:c2:94:70:22:af:98:70: 31:46:fb:92:2a:b8:5e:d0:e8:62:ef:65:7a:01:28:a4:a1:29: 48:dd:b6:58:9c:59:a1:53:ce:53:37:f0:5c:25:6d:a1:75:52: 01:ce:83:e7:93:f9:80:b8:d8:a7:6c:ef:24:35:46:ee:60:bd: 0f:6d:83:8e:27:80:bc:0b:5a:3c:91:21:12:bb:30:cd:51:a4: 1c:53:0a:77:d7:8e:44:f5:b6:39:2f:2d:18:e0:56:49:f9:98: 8b:85:12:97:fa:23:7b:3d:48:f4:70:a9:88:40:e5:9e:33:fb: 75:58:6a:02:90:8d:83:d4:bf:1a:e4:ef:de:f4:19:ca:de:0c: 9f:51:7f:30:af:ec:5e:92:b7:a5:28:6a:f4:35:44:98:50:b8: 9f:32:6b:b1:98:69:31:d2:5d:57:0f:99:2f:e2:9f:f6:3f:53: 97:9e:0b:f9:f5:f1:17:55:21:70:4f:90:87:88:f8:6b:0c:19: 92:e2:80:84:4b:ed:42:a4:d3:27:ca:91:5d:3d:2a:0b:96:5a: a9:f4:65:20:b0:35:d8:71:a3:49:18:b7:2a:b9:8b:62:ef:9a: 6b:81:c0:0d:85:49:2a:4e:67:3e:9a:b4:27:11:e6:9a:f9:71: c5:b7:f2:42 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZt5EEnUxrURIUQigK6xTHPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjMwZDY2NjI2Y2M5NmE4YjFjNWQ0ZTgzOWYzZmViZjRjODY1Mjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrdLZuK/q6ZUp3FGUiy66VpfzJzc dJwZ/QGuaFYPoL4SvPgqMHS2h3NPFTX08zZkJzbCwMIl3aX1a1ydaQ1jVraL3VVr 0RLDSCUqHPtDLRzLyVeic92eGbpICVjLQGE72PEhy4hO/sY2fFt6MgbxdIwbFKIU xogCrYF4jtFQW/GP/FjXzkIz7C2i5imees9CUk32z5kIsZ4NxyRf3/jMhEQBZXK+ nUjj9xhx5D4ARWsTA/EtVzGSsROOkJfCgQF8NQhltF/3n7+9BX89f0C9UT4rbJbR j+reyHcSlkovfybA6U8i50Sviyk5+vzAe4H08OngwXt0p6BLu5OvPw/RcQIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFBsw1mYmzJaoscXU6Dnz/r9MhlKEMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvR3pEV1ppYk1scWl4eGRUb09mUC12MHlHVW9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAE6HSAME AE6HSgMEAE6HTgMEAE6HWAMEALyEjQMEALyEkgMEALyEmAMEALyEowMEALyEqwME ALyEvQMEALyEvwMEALyEywMEAbyE1AMEAbyE2AMEALyE5QMEALyE7AMEANRENzAM AwQA1EQ7AwQA1EQ8MA0GCSqGSIb3DQEBCwUAA4IBAQAgP79kgLrFKpm1E8KUcCKv mHAxRvuSKrhe0Ohi72V6ASikoSlI3bZYnFmhU85TN/BcJW2hdVIBzoPnk/mAuNin bO8kNUbuYL0PbYOOJ4C8C1o8kSESuzDNUaQcUwp3145E9bY5Ly0Y4FZJ+ZiLhRKX +iN7PUj0cKmIQOWeM/t1WGoCkI2D1L8a5O/e9BnK3gyfUX8wr+xekrelKGr0NUSY ULifMmuxmGkx0l1XD5kv4p/2P1OXngv59fEXVSFwT5CHiPhrDBmS4oCES+1CpNMn ypFdPSoLllqp9GUgsDXYcaNJGLcquYti75prgcANhUkqTmc+mrQnEeaa+XHFt/JC -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:36 2026 by rpki-client