This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/gZRVVjbr0VF9kLZepM4sAakfV64.roa File: gZRVVjbr0VF9kLZepM4sAakfV64.roa (raw, json) Hash identifier: OS+DVlQyVLtcNxKCYd+cy14Vh3Z+rz6mTy8GBtTKd0Q= Subject key identifier: 81:94:55:56:36:EB:D1:51:7D:90:B6:5E:A4:CE:2C:01:A9:1F:57:AE Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733 Certificate serial: 019B7E38DDB48FD0DCDFCAAE5CD4F2E7BFAE Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/gZRVVjbr0VF9kLZepM4sAakfV64.roa Signing time: Fri 02 Jan 2026 10:20:14 +0000 ROA not before: Fri 02 Jan 2026 10:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47944 IP address blocks: 94.125.200.0/21 maxlen: 21 94.125.207.0/24 maxlen: 24 2a03:2ba0::/32 maxlen: 32 2a03:2ba0:1:888::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:dd:b4:8f:d0:dc:df:ca:ae:5c:d4:f2:e7:bf:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733 Validity Not Before: Jan 2 10:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8194555636ebd1517d90b65ea4ce2c01a91f57ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:60:43:86:0b:e1:2e:b3:bc:d9:31:a9:c4: 91:15:13:a8:26:84:19:59:4d:dd:55:4a:ba:29:6f: bb:71:c2:a2:f7:4d:68:40:4a:3a:6f:ae:37:89:d6: 1c:17:de:e4:4a:c6:64:67:c4:fa:12:ec:24:dd:4b: 7c:0d:d3:73:1a:4b:2c:bc:4c:86:06:7b:45:f4:73: a2:46:90:12:03:a4:f3:f2:7b:21:e7:12:20:35:0d: 10:8f:bd:1f:c4:cd:86:a4:50:fc:08:d7:0f:5c:4b: d5:b3:4c:37:03:6b:41:17:30:fd:16:ce:99:ef:3b: ab:53:a0:e1:ff:74:9c:10:43:6b:68:a9:2d:18:be: 60:6f:67:51:0f:50:d4:3f:df:46:f4:56:da:f6:3c: 27:0c:19:65:b7:cb:53:fb:1e:da:21:12:ea:eb:5a: 25:55:25:5a:fc:0c:d9:29:cb:aa:31:57:d2:1f:6a: 8d:05:20:4b:9b:96:88:de:53:20:96:0c:2c:4e:ff: f6:31:2f:43:e7:a8:92:11:e2:15:6b:4c:05:bf:5a: b8:d1:76:77:bb:51:d2:6b:2a:a3:39:92:f2:33:6f: 4a:e9:cb:de:7f:2f:b9:d1:75:0f:3d:58:60:22:cf: 46:47:b8:b2:f5:0f:41:f2:07:bb:3d:90:f7:34:9b: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:94:55:56:36:EB:D1:51:7D:90:B6:5E:A4:CE:2C:01:A9:1F:57:AE X509v3 Authority Key Identifier: keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/gZRVVjbr0VF9kLZepM4sAakfV64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.125.200.0/21 IPv6: 2a03:2ba0::/32 Signature Algorithm: sha256WithRSAEncryption 3b:cf:36:a6:c0:05:4a:c3:66:ec:1a:df:39:7c:76:4c:15:e3: 78:c6:f5:5f:b2:5e:fe:22:8d:f5:0a:b8:c8:40:09:09:70:19: 7c:ee:21:c0:a8:52:27:fa:44:46:25:01:4e:30:94:66:cb:31: fb:53:5a:35:a6:66:2b:1f:67:f2:60:34:96:cc:12:53:a2:66: f9:21:22:ff:db:96:c9:35:cb:0e:5b:4d:5c:ab:0f:5d:db:35: a0:a0:3e:51:29:59:7f:dc:90:d9:00:3a:07:53:d3:4f:80:30: 82:4f:ed:a7:06:5e:44:63:18:3e:02:40:d9:bf:ee:bc:48:b9: 52:d6:92:63:62:47:f0:27:af:74:5d:ce:52:81:70:84:70:4a: c2:c6:ae:75:98:28:2d:68:25:3a:e0:0b:52:16:65:51:94:be: 54:2c:07:56:23:7d:23:f9:80:b6:09:99:49:b6:dc:0c:8d:33: 12:50:9e:f2:f9:b7:25:64:80:9b:66:27:c4:a0:14:66:04:8c: fd:fc:47:2d:c3:4c:6d:84:c2:a6:45:0b:c2:d7:f3:a8:ad:0e: c6:33:7c:61:9a:dd:a9:10:cc:91:05:77:d6:f0:1a:1c:e3:22: 2d:be:33:42:ed:11:13:f5:7c:99:cc:1b:0d:b8:5d:9d:ab:cc: d4:cb:a5:e1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+ON20j9Dc38quXNTy57+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZjdjZDBlYzRjM2JjNTRjNTk0MzEzMDdlZWMzNmVmMDM4 Mjc3MzMwHhcNMjYwMTAyMTAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTk0NTU1NjM2ZWJkMTUxN2Q5MGI2NWVhNGNlMmMwMWE5MWY1N2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFlgQ4YL4S6zvNkxqcSRFROoJoQZ WU3dVUq6KW+7ccKi901oQEo6b643idYcF97kSsZkZ8T6Euwk3Ut8DdNzGkssvEyG BntF9HOiRpASA6Tz8nsh5xIgNQ0Qj70fxM2GpFD8CNcPXEvVs0w3A2tBFzD9Fs6Z 7zurU6Dh/3ScEENraKktGL5gb2dRD1DUP99G9Fba9jwnDBllt8tT+x7aIRLq61ol VSVa/AzZKcuqMVfSH2qNBSBLm5aI3lMglgwsTv/2MS9D56iSEeIVa0wFv1q40XZ3 u1HSayqjOZLyM29K6cvefy+50XUPPVhgIs9GR7iy9Q9B8ge7PZD3NJuUlQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIGUVVY269FRfZC2XqTOLAGpH1euMB8GA1UdIwQY MBaAFNH3zQ7Ew7xUxZQxMH7sNu8DgnczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgt OWNiNWQ4OGZkZDM5LzEvZ1pSVlZqYnIwVkY5a0xaZXBNNHNBYWtmVjY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgtOWNiNWQ4OGZkZDM5 LzEvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXn3IMA0E AgACMAcDBQAqAyugMA0GCSqGSIb3DQEBCwUAA4IBAQA7zzamwAVKw2bsGt85fHZM FeN4xvVfsl7+Io31CrjIQAkJcBl87iHAqFIn+kRGJQFOMJRmyzH7U1o1pmYrH2fy YDSWzBJTomb5ISL/25bJNcsOW01cqw9d2zWgoD5RKVl/3JDZADoHU9NPgDCCT+2n Bl5EYxg+AkDZv+68SLlS1pJjYkfwJ690Xc5SgXCEcErCxq51mCgtaCU64AtSFmVR lL5ULAdWI30j+YC2CZlJttwMjTMSUJ7y+bclZICbZifEoBRmBIz9/Ectw0xthMKm RQvC1/OorQ7GM3xhmt2pEMyRBXfW8Boc4yItvjNC7RET9XyZzBsNuF2dq8zUy6Xh -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:41 2026 by rpki-client