This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Gz_GXl1ikwJQOSyJz_V8IyjxMHo.roa File: Gz_GXl1ikwJQOSyJz_V8IyjxMHo.roa (raw, json) Hash identifier: C/++dZDmp3eROYoIOJWaWoo0KehG0rqb9mS7r9ib01w= Subject key identifier: 1B:3F:C6:5E:5D:62:93:02:50:39:2C:89:CF:F5:7C:23:28:F1:30:7A Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1A35948C06AA4BE0FBCC5C5103EAA Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Gz_GXl1ikwJQOSyJz_V8IyjxMHo.roa Signing time: Fri 02 Jan 2026 18:21:40 +0000 ROA not before: Fri 02 Jan 2026 18:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 45.128.76.0/24 maxlen: 24 45.130.125.0/24 maxlen: 24 45.146.130.0/24 maxlen: 24 45.148.100.0/24 maxlen: 24 45.158.187.0/24 maxlen: 24 185.126.66.0/24 maxlen: 24 193.8.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a3:59:48:c0:6a:a4:be:0f:bc:c5:c5:10:3e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b3fc65e5d62930250392c89cff57c2328f1307a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:92:71:b2:5b:eb:1b:5a:4d:69:e1:fa:a6: 84:39:ab:f7:70:ab:34:9a:8e:9c:4f:b2:7b:59:44: c4:aa:a2:df:42:4a:ab:25:2c:ad:1c:cd:05:c0:83: fc:15:0d:e3:ff:2b:bf:54:d3:23:77:06:0e:2b:73: 92:f6:2c:fd:03:83:30:85:3d:e6:10:8c:d7:07:62: 0c:bb:85:31:c6:33:c2:e2:3e:01:0b:cb:78:ee:4a: f5:40:1a:ce:a7:42:bc:0b:a5:7e:87:8c:5e:5d:8f: 26:72:21:59:08:e0:14:74:ae:99:49:2a:71:d6:6c: 96:59:68:26:13:32:84:63:dc:46:31:b6:8e:50:63: c9:a0:24:19:d2:8c:f1:d5:d1:69:e6:63:a8:1d:01: 58:3c:7d:f4:78:52:39:ac:44:0a:b1:06:45:67:7e: 2f:8d:3e:f6:e1:b1:93:9c:b7:42:1d:cd:0d:2e:6d: d5:d8:75:f3:6a:da:58:c8:22:e5:96:ab:00:3f:79: 4e:c9:1e:41:32:79:96:9c:bd:a8:ef:bf:4c:2c:a8: 5c:bf:83:f9:1e:1c:3a:ef:4f:39:ff:1b:87:93:6d: 08:b1:a7:78:56:78:1e:e4:0a:3f:9e:fd:4b:d0:39: 75:b2:3c:77:83:a5:4a:1c:74:a4:4f:cf:4c:47:2a: bd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3F:C6:5E:5D:62:93:02:50:39:2C:89:CF:F5:7C:23:28:F1:30:7A X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Gz_GXl1ikwJQOSyJz_V8IyjxMHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.76.0/24 45.130.125.0/24 45.146.130.0/24 45.148.100.0/24 45.158.187.0/24 185.126.66.0/24 193.8.231.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:d5:4a:ef:49:85:33:aa:3c:04:a9:68:3c:92:1f:4e:30:63: 09:76:2e:16:cb:c0:ec:ce:e2:7f:f9:36:23:e5:89:e3:74:84: 49:b0:2f:9c:e5:2a:00:eb:88:a3:fd:d0:13:84:f8:6e:42:01: 4f:cb:de:02:1b:63:52:2c:28:ec:7f:98:7f:0f:23:e6:3c:9e: 49:68:74:39:7c:48:2c:ac:9f:96:6a:d0:33:67:d0:53:7c:cf: f8:1f:a0:be:f9:46:84:01:2e:ba:a3:7e:03:96:7b:fc:f1:e2: 79:b2:82:47:a7:e0:07:1a:c7:9a:c6:ff:0c:e0:79:be:eb:22: ae:0a:cf:19:8e:c5:8a:05:d1:8f:db:bc:18:f1:f7:7a:7a:93: 3f:40:f8:af:db:d0:ad:dc:67:1d:7a:1d:79:c1:89:55:b7:2e: e2:cf:f7:06:b4:5d:7e:25:9d:e9:f6:98:64:59:4f:b0:d3:a1: da:53:4a:49:06:ea:80:47:2b:5c:2a:81:85:56:0d:02:de:a3: d0:0b:de:35:a6:ce:91:1b:ab:82:a7:c1:f8:3b:08:0d:43:d1: 64:cc:0a:52:89:4f:cc:c5:79:a2:69:cf:02:4e:70:75:c6:89: ad:ac:bd:46:90:42:7c:19:9c:56:c5:35:c0:2f:aa:0f:08:58: 5c:cf:25:89 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/8aNZSMBqpL4PvMXFED6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjNmYzY1ZTVkNjI5MzAyNTAzOTJjODljZmY1N2MyMzI4ZjEzMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBaScbJb6xtaTWnh+qaEOav3cKs0 mo6cT7J7WUTEqqLfQkqrJSytHM0FwIP8FQ3j/yu/VNMjdwYOK3OS9iz9A4MwhT3m EIzXB2IMu4UxxjPC4j4BC8t47kr1QBrOp0K8C6V+h4xeXY8mciFZCOAUdK6ZSSpx 1myWWWgmEzKEY9xGMbaOUGPJoCQZ0ozx1dFp5mOoHQFYPH30eFI5rEQKsQZFZ34v jT724bGTnLdCHc0NLm3V2HXzatpYyCLllqsAP3lOyR5BMnmWnL2o779MLKhcv4P5 Hhw67085/xuHk20Isad4Vnge5Ao/nv1L0Dl1sjx3g6VKHHSkT89MRyq9/QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFBs/xl5dYpMCUDksic/1fCMo8TB6MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvR3pfR1hsMWlrd0pRT1N5SnpfVjhJeWp4TUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALYBMAwQA LYJ9AwQALZKCAwQALZRkAwQALZ67AwQAuX5CAwQAwQjnMA0GCSqGSIb3DQEBCwUA A4IBAQB91UrvSYUzqjwEqWg8kh9OMGMJdi4Wy8DszuJ/+TYj5YnjdIRJsC+c5SoA 64ij/dAThPhuQgFPy94CG2NSLCjsf5h/DyPmPJ5JaHQ5fEgsrJ+WatAzZ9BTfM/4 H6C++UaEAS66o34Dlnv88eJ5soJHp+AHGseaxv8M4Hm+6yKuCs8ZjsWKBdGP27wY 8fd6epM/QPiv29Ct3Gcdeh15wYlVty7iz/cGtF1+JZ3p9phkWU+w06HaU0pJBuqA RytcKoGFVg0C3qPQC941ps6RG6uCp8H4OwgNQ9FkzApSiU/MxXmiac8CTnB1xomt rL1GkEJ8GZxWxTXAL6oPCFhczyWJ -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:25 2026 by rpki-client