This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/gzKt63tUYAzMRiZUE4WC4FyD4b8.roa File: gzKt63tUYAzMRiZUE4WC4FyD4b8.roa (raw, json) Hash identifier: TUYmXfLyWQJoJEpWCQg5e1O7L83j3Oydl7JqN1+DDy0= Subject key identifier: 83:32:AD:EB:7B:54:60:0C:CC:46:26:54:13:85:82:E0:5C:83:E1:BF Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019B7DCB1421397C93BB1A54B00E1BC322A4 Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/gzKt63tUYAzMRiZUE4WC4FyD4b8.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213301 IP address blocks: 80.71.145.0/24 maxlen: 24 185.78.84.0/24 maxlen: 24 185.78.85.0/24 maxlen: 24 185.174.68.0/24 maxlen: 24 185.174.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:14:21:39:7c:93:bb:1a:54:b0:0e:1b:c3:22:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8332adeb7b54600ccc462654138582e05c83e1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:56:5e:9a:1e:41:86:a5:23:fb:c6:02:42:b4: bd:7d:ad:f5:4b:ea:bb:b8:f7:3b:75:a2:ec:3f:9f: 50:c1:7c:df:ba:81:e1:89:51:19:55:0e:21:0b:51: 36:84:a8:1e:b6:52:ad:82:4c:ae:86:50:b1:02:3c: 43:74:ef:7f:06:c7:89:06:76:e5:70:cb:2b:5e:19: ec:5b:a4:21:8c:3e:3c:c6:0a:28:4c:cd:8c:b8:c9: 7d:10:77:47:49:4e:4b:5f:75:86:1c:5b:b9:22:72: b3:b1:56:c2:f6:1a:b9:27:85:4d:57:60:98:73:0f: d6:de:a2:fa:64:a9:3e:95:2d:93:bb:39:9d:fd:36: cc:66:6d:8a:4f:f0:ef:dd:c2:ac:b9:27:21:e4:72: ad:29:68:a8:d6:34:ac:c4:f5:8a:8f:25:f2:a7:9f: 5e:a0:26:9d:c6:5e:1c:fd:37:c8:c7:6a:49:64:6a: d7:2e:65:3b:63:43:fb:8b:d2:4c:cf:7b:0a:27:ca: bd:be:f3:3b:b7:09:f2:36:66:45:83:a9:72:5c:1b: 4e:83:24:c7:0c:22:b3:51:1e:6f:aa:76:a9:98:f6: 34:b0:7c:20:37:e4:3d:97:b5:53:73:29:e3:92:24: a1:21:c2:52:30:75:d1:54:f8:7b:0c:a7:13:d2:c6: 79:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:32:AD:EB:7B:54:60:0C:CC:46:26:54:13:85:82:E0:5C:83:E1:BF X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/gzKt63tUYAzMRiZUE4WC4FyD4b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.145.0/24 185.78.84.0/23 185.174.68.0/24 185.174.70.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:56:c5:4f:49:03:ef:64:4f:b4:aa:1a:1c:6b:37:82:0e:4c: 38:4a:ec:9d:d6:cc:d6:19:dc:b7:b6:2c:1e:c8:31:a2:4f:08: c7:53:1e:ca:c6:1c:7d:0a:ae:84:2a:03:a3:57:11:7d:2b:59: bc:9c:6f:99:81:92:e5:2d:0d:ce:15:ea:a2:d4:39:94:5e:2b: 93:c6:50:99:3e:d9:24:a4:f7:de:4b:e0:44:98:c3:95:98:9e: 03:3a:40:9b:9e:6b:94:f4:1b:64:f9:42:45:65:da:1a:af:59: 2c:d2:ce:f6:30:c7:c3:b2:ba:aa:d7:3e:27:0a:cc:4f:d3:13: 4c:3a:f0:2c:ee:48:bf:d7:39:bd:b8:3f:07:bb:5a:b0:db:ed: e8:cb:33:49:1a:cb:10:0f:45:33:d6:6c:95:04:8b:0e:73:0b: 57:53:12:92:41:57:21:64:b6:81:0f:0a:1d:47:f7:60:23:cf: 2c:90:25:3d:c5:25:fa:74:2c:70:ff:85:ed:81:63:af:e2:46: f8:2e:54:aa:09:48:fa:29:99:fd:60:a7:65:cb:a5:fc:4a:ad: 65:67:ae:40:fb:c0:a1:12:90:52:e2:59:29:75:09:83:dc:8d: 7a:60:57:ce:44:1a:f5:3e:8c:52:d7:38:f3:33:6c:b1:f8:86: 8e:1b:be:09 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yxQhOXyTuxpUsA4bwyKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzMyYWRlYjdiNTQ2MDBjY2M0NjI2NTQxMzg1ODJlMDVjODNlMWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VZemh5BhqUj+8YCQrS9fa31S+q7 uPc7daLsP59QwXzfuoHhiVEZVQ4hC1E2hKgetlKtgkyuhlCxAjxDdO9/BseJBnbl cMsrXhnsW6QhjD48xgooTM2MuMl9EHdHSU5LX3WGHFu5InKzsVbC9hq5J4VNV2CY cw/W3qL6ZKk+lS2Tuzmd/TbMZm2KT/Dv3cKsuSch5HKtKWio1jSsxPWKjyXyp59e oCadxl4c/TfIx2pJZGrXLmU7Y0P7i9JMz3sKJ8q9vvM7twnyNmZFg6lyXBtOgyTH DCKzUR5vqnapmPY0sHwgN+Q9l7VTcynjkiShIcJSMHXRVPh7DKcT0sZ5DwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIMyret7VGAMzEYmVBOFguBcg+G/MB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvZ3pLdDYzdFVZQXpNUmlaVUU0V0M0RnlENGI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUEeRAwQB uU5UAwQAua5EAwQAua5GMA0GCSqGSIb3DQEBCwUAA4IBAQBcVsVPSQPvZE+0qhoc azeCDkw4Suyd1szWGdy3tiweyDGiTwjHUx7Kxhx9Cq6EKgOjVxF9K1m8nG+ZgZLl LQ3OFeqi1DmUXiuTxlCZPtkkpPfeS+BEmMOVmJ4DOkCbnmuU9Btk+UJFZdoar1ks 0s72MMfDsrqq1z4nCsxP0xNMOvAs7ki/1zm9uD8Hu1qw2+3oyzNJGssQD0Uz1myV BIsOcwtXUxKSQVchZLaBDwodR/dgI88skCU9xSX6dCxw/4XtgWOv4kb4LlSqCUj6 KZn9YKdly6X8Sq1lZ65A+8ChEpBS4lkpdQmD3I16YFfORBr1PoxS1zjzM2yx+IaO G74J -----END CERTIFICATE-----Generated at Wed Jan 21 18:59:15 2026 by rpki-client