This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa File: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (raw, json) Hash identifier: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU= Subject key identifier: 1B:3C:61:BC:0C:14:96:00:08:3A:5F:D5:90:6F:33:83:B6:3B:8E:27 Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c Certificate serial: 019B7CEDBC093422AD560DACBDD60C9F4387 Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa Signing time: Fri 02 Jan 2026 04:18:33 +0000 ROA not before: Fri 02 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 146.66.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:bc:09:34:22:ad:56:0d:ac:bd:d6:0c:9f:43:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c Validity Not Before: Jan 2 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b3c61bc0c149600083a5fd5906f3383b63b8e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6d:19:4f:70:e5:25:42:ea:bb:3d:a6:ef:56: b9:c2:3a:09:e6:88:4f:5a:c1:76:0e:ae:e3:81:e5: 20:fc:d9:68:4f:58:88:43:c0:d9:76:4b:b7:8c:c6: f6:c5:90:6f:73:7a:d2:11:8d:ee:13:0f:71:ac:9c: 8e:e3:19:15:49:b8:45:93:22:8f:67:6c:92:49:bf: 86:b5:f0:93:91:8f:18:97:de:2a:da:af:be:f1:aa: e4:ee:66:24:df:3e:87:f0:cd:36:df:02:1f:ab:a3: 1a:4e:4f:33:0c:65:01:5a:4e:bf:13:e4:55:06:b2: 9d:f9:b9:9c:b0:0c:42:e3:f9:9b:51:46:d7:1b:49: 8d:43:7f:e4:1f:73:d3:03:6a:69:a4:6b:09:8f:9c: 14:b9:d7:55:1a:9f:d4:31:ee:08:4f:dc:66:5f:ad: be:e2:33:c1:20:dd:ad:00:45:51:25:51:d2:0a:29: 99:fb:43:c5:44:1d:56:c4:0e:13:ae:67:df:e7:28: ea:e1:50:c3:23:4a:c4:30:6f:b1:79:d1:bc:b2:cf: 5e:e1:7c:07:c8:23:f0:20:63:dd:e5:49:51:7d:dc: d4:86:52:78:3d:17:e3:04:2e:07:6a:44:19:e7:f2: df:e1:ed:f8:1a:d0:82:53:dd:2e:5a:c8:87:b4:a7: 46:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3C:61:BC:0C:14:96:00:08:3A:5F:D5:90:6F:33:83:B6:3B:8E:27 X509v3 Authority Key Identifier: keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.66.3.0/24 Signature Algorithm: sha256WithRSAEncryption 10:83:c3:f2:32:5a:1c:7c:96:21:4e:51:20:81:d1:23:9b:8b: d4:a4:f3:fb:d1:ff:e2:35:32:1b:a2:7c:a4:c4:b1:2d:c2:8f: be:ab:6f:94:68:45:94:40:14:22:c5:79:5d:15:4c:1f:48:02: d4:59:e7:9f:d5:fa:55:99:14:bc:d2:fc:5d:4f:df:da:27:30: 97:dd:67:cf:25:06:8f:12:49:fe:16:a1:94:77:63:2e:c1:8a: 27:9a:da:54:a6:7b:db:41:32:c9:09:21:2f:01:da:62:0b:c6: 3c:7d:83:8b:13:42:1b:92:86:89:af:30:85:d7:2a:1f:44:a1: c4:f7:ce:19:40:94:08:41:57:62:60:1e:cd:e3:5c:e9:2b:de: 1c:da:8e:66:a5:21:09:47:4a:a8:1d:33:16:e1:e8:0b:b0:19: f9:22:72:65:37:c5:cd:f2:c9:d0:fa:a1:f2:09:c5:6e:3f:eb: 34:58:fb:dd:6a:8d:13:d1:4e:81:a9:f7:92:48:3b:1d:63:54: b5:63:0d:23:6b:2a:76:8f:89:2d:5f:44:97:b5:91:35:fd:5b: 1f:78:62:4c:12:45:eb:19:82:0b:e9:4d:16:ed:ab:dc:e0:ff: a4:4e:75:cc:af:12:cc:04:71:5c:f4:08:f2:11:c8:32:d9:52: 33:1e:28:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87bwJNCKtVg2svdYMn0OHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMjcxMTNkYjU1YjYzYjY3YTRhNjI3YTcwMDhhOGFmYzJi Y2M0MmMwHhcNMjYwMTAyMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjNjNjFiYzBjMTQ5NjAwMDgzYTVmZDU5MDZmMzM4M2I2M2I4ZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm0ZT3DlJULquz2m71a5wjoJ5ohP WsF2Dq7jgeUg/NloT1iIQ8DZdku3jMb2xZBvc3rSEY3uEw9xrJyO4xkVSbhFkyKP Z2ySSb+GtfCTkY8Yl94q2q++8ark7mYk3z6H8M023wIfq6MaTk8zDGUBWk6/E+RV BrKd+bmcsAxC4/mbUUbXG0mNQ3/kH3PTA2pppGsJj5wUuddVGp/UMe4IT9xmX62+ 4jPBIN2tAEVRJVHSCimZ+0PFRB1WxA4Trmff5yjq4VDDI0rEMG+xedG8ss9e4XwH yCPwIGPd5UlRfdzUhlJ4PRfjBC4HakQZ5/Lf4e34GtCCU90uWsiHtKdGgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBs8YbwMFJYACDpf1ZBvM4O2O44nMB8GA1UdIwQY MBaAFNonET21W2O2ekpienAIqK/CvMQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTct MjNiMjhmMzlhNjAyLzEvR3p4aHZBd1VsZ0FJT2xfVmtHOHpnN1k3amljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTctMjNiMjhmMzlhNjAy LzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkkIDMA0G CSqGSIb3DQEBCwUAA4IBAQAQg8PyMlocfJYhTlEggdEjm4vUpPP70f/iNTIbonyk xLEtwo++q2+UaEWUQBQixXldFUwfSALUWeef1fpVmRS80vxdT9/aJzCX3WfPJQaP Ekn+FqGUd2MuwYonmtpUpnvbQTLJCSEvAdpiC8Y8fYOLE0IbkoaJrzCF1yofRKHE 984ZQJQIQVdiYB7N41zpK94c2o5mpSEJR0qoHTMW4egLsBn5InJlN8XN8snQ+qHy CcVuP+s0WPvdao0T0U6BqfeSSDsdY1S1Yw0jayp2j4ktX0SXtZE1/VsfeGJMEkXr GYIL6U0W7avc4P+kTnXMrxLMBHFc9AjyEcgy2VIzHihQ -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:08 2026 by rpki-client