This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/GzMjnqAMs0LUgNkkZUnPmTnsw-U.roa File: GzMjnqAMs0LUgNkkZUnPmTnsw-U.roa (raw, json) Hash identifier: 6whjobpWy5AGszV3zunKjIFDrpH8oaovVR4Ks5zQelI= Subject key identifier: 1B:33:23:9E:A0:0C:B3:42:D4:80:D9:24:65:49:CF:99:39:EC:C3:E5 Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 019B7EA6123C286947DB391EBD3758583F81 Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/GzMjnqAMs0LUgNkkZUnPmTnsw-U.roa Signing time: Fri 02 Jan 2026 12:19:31 +0000 ROA not before: Fri 02 Jan 2026 12:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 194.127.108.0/24 maxlen: 24 194.127.110.0/24 maxlen: 24 194.127.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:12:3c:28:69:47:db:39:1e:bd:37:58:58:3f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Jan 2 12:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b33239ea00cb342d480d9246549cf9939ecc3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:aa:f2:54:51:b4:55:74:da:e8:87:54:42: b1:38:f4:35:a2:0c:ba:64:2d:f6:1e:cc:88:01:b8: ef:1e:ec:eb:b5:73:44:59:bf:3d:80:71:3f:46:d2: 73:4a:e7:76:d6:b2:56:3e:16:f2:da:d3:fc:90:f6: 4b:91:af:ea:10:7c:cf:2c:b8:66:29:8b:38:9f:19: b6:23:1e:26:26:a7:ed:b6:34:fc:ee:cf:78:c3:72: 01:5e:41:d5:88:9f:61:bd:46:f7:46:33:49:b4:f3: 18:87:38:78:87:0b:0c:29:27:d1:90:ad:62:f5:4e: 9c:bd:c2:cb:7b:73:e8:3b:e4:c3:35:b5:b2:de:f9: 04:2d:da:15:a8:24:ad:b4:26:f4:65:45:72:cf:b9: e3:93:65:6d:10:b4:d6:1f:3a:8d:df:32:e2:bb:4c: 14:c6:47:0d:e6:5b:3e:7a:d1:9f:35:6b:6d:8e:26: b8:53:db:42:4a:4b:1f:26:27:8e:49:31:2c:98:9e: f4:d5:be:1c:bd:36:ba:aa:f6:d4:43:dd:5c:6d:e7: 47:41:60:6f:bd:54:46:e7:82:52:2d:09:ff:10:ed: 0a:4a:34:7d:ff:5f:c8:c6:d3:8d:92:82:88:98:37: a0:ca:b3:18:00:f4:d8:7a:6b:7a:eb:a6:c0:86:2e: 0a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:33:23:9E:A0:0C:B3:42:D4:80:D9:24:65:49:CF:99:39:EC:C3:E5 X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/GzMjnqAMs0LUgNkkZUnPmTnsw-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.108.0/24 194.127.110.0/23 Signature Algorithm: sha256WithRSAEncryption 52:66:aa:db:e8:b1:71:cd:14:01:05:72:30:d1:1d:f8:a4:ad: aa:4e:2f:c6:51:df:d1:ee:85:ce:b2:73:ca:76:b2:02:5a:ca: 31:84:a1:85:62:76:24:ea:4a:26:77:ed:01:c8:fb:ef:61:52: f4:7e:c4:93:aa:38:c9:d9:27:89:cf:ec:59:a0:42:24:66:9e: f4:2f:12:6d:08:ff:21:f3:7d:e5:71:2b:24:89:70:82:1c:61: 51:87:4f:de:27:df:a3:80:1c:0e:39:49:59:26:18:e3:9d:11: c4:96:ca:ef:4f:e9:e4:45:67:3c:32:ea:7f:90:b9:0c:0f:4b: c4:8e:d3:17:4e:df:12:2b:4f:03:6b:0d:b9:ff:83:95:9e:8e: 50:f3:33:e2:e8:e7:a3:b1:e4:6c:ea:09:22:bf:3d:e3:7c:61: 61:9f:ec:6b:f2:03:64:60:8a:ca:f1:5b:8f:c6:65:63:8c:2d: 74:f9:ca:26:f2:90:d8:cf:67:da:2b:e7:0d:22:b2:2d:77:26: d2:d4:ee:74:83:af:8a:6a:93:c4:f6:5c:ec:b6:ed:0e:74:d7: 79:84:af:e2:79:45:65:b6:9c:cf:46:41:5a:74:c9:a6:99:9d: 06:7d:3e:50:24:27:66:20:1f:c4:f3:ec:77:f1:33:21:c7:ac: d1:af:05:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+phI8KGlH2zkevTdYWD+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjYwMTAyMTIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjMzMjM5ZWEwMGNiMzQyZDQ4MGQ5MjQ2NTQ5Y2Y5OTM5ZWNjM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjleq8lRRtFV02uiHVEKxOPQ1ogy6 ZC32HsyIAbjvHuzrtXNEWb89gHE/RtJzSud21rJWPhby2tP8kPZLka/qEHzPLLhm KYs4nxm2Ix4mJqfttjT87s94w3IBXkHViJ9hvUb3RjNJtPMYhzh4hwsMKSfRkK1i 9U6cvcLLe3PoO+TDNbWy3vkELdoVqCSttCb0ZUVyz7njk2VtELTWHzqN3zLiu0wU xkcN5ls+etGfNWttjia4U9tCSksfJieOSTEsmJ701b4cvTa6qvbUQ91cbedHQWBv vVRG54JSLQn/EO0KSjR9/1/IxtONkoKImDegyrMYAPTYemt666bAhi4KswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBszI56gDLNC1IDZJGVJz5k57MPlMB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvR3pNam5xQU1zMExVZ05ra1pVblBtVG5zdy1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwn9sAwQB wn9uMA0GCSqGSIb3DQEBCwUAA4IBAQBSZqrb6LFxzRQBBXIw0R34pK2qTi/GUd/R 7oXOsnPKdrICWsoxhKGFYnYk6komd+0ByPvvYVL0fsSTqjjJ2SeJz+xZoEIkZp70 LxJtCP8h833lcSskiXCCHGFRh0/eJ9+jgBwOOUlZJhjjnRHElsrvT+nkRWc8Mup/ kLkMD0vEjtMXTt8SK08Daw25/4OVno5Q8zPi6OejseRs6gkivz3jfGFhn+xr8gNk YIrK8VuPxmVjjC10+com8pDYz2faK+cNIrItdybS1O50g6+KapPE9lzstu0OdNd5 hK/ieUVltpzPRkFadMmmmZ0GfT5QJCdmIB/E8+x38TMhx6zRrwUF -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:01 2026 by rpki-client