This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/gDiXd9Mst5s-XWsSBWPs08-uTHU.roa File: gDiXd9Mst5s-XWsSBWPs08-uTHU.roa (raw, json) Hash identifier: CcTqCeCWdkvuGEKvjGUEouLc82NmDES6GwWVPEJ2whU= Subject key identifier: 80:38:97:77:D3:2C:B7:9B:3E:5D:6B:12:05:63:EC:D3:CF:AE:4C:75 Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c Certificate serial: 019B76EABDB999DABBD2089D48C0594EDDB8 Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/gDiXd9Mst5s-XWsSBWPs08-uTHU.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 45.83.200.0/22 maxlen: 22 185.114.158.0/24 maxlen: 24 185.114.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bd:b9:99:da:bb:d2:08:9d:48:c0:59:4e:dd:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80389777d32cb79b3e5d6b120563ecd3cfae4c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cf:1d:49:af:63:9c:ff:3f:57:8f:a9:7d:3a: b8:fc:18:44:9a:87:ed:be:16:78:d0:35:17:30:21: 59:f2:9b:40:68:6e:8c:46:f0:56:6d:18:3e:e4:ca: 90:69:8a:bf:c0:19:72:73:ba:d9:56:a8:c7:45:22: a5:79:ac:ee:e5:a8:85:40:84:2a:fb:89:21:ff:e5: 6b:4a:b5:e6:52:aa:52:69:d0:bf:57:1e:ba:ff:b5: 02:13:12:3e:10:92:02:f7:09:d3:50:1f:22:de:37: de:02:fa:35:84:c8:58:57:ec:90:b1:f4:17:f2:ae: ae:c8:e7:bd:8f:86:d5:af:ca:d7:68:e6:c3:43:f5: 94:8d:44:2d:dc:ad:75:34:1f:50:96:3a:4d:ed:14: c7:b0:f0:f4:5e:55:d8:b0:27:f6:b1:0f:97:ee:3d: 2a:c8:17:f2:18:07:ed:db:56:b3:6d:34:24:48:46: 74:07:66:a0:21:4f:4a:33:ae:ef:e7:b3:2f:3a:84: c1:a2:d9:20:43:c7:8e:96:03:ef:c6:86:60:43:ef: 53:30:02:a8:84:08:8c:33:2c:d2:4e:fb:a0:20:fc: 69:90:63:87:8d:2a:2b:d8:44:01:1c:98:74:74:cd: 62:dd:37:d5:ba:ad:e7:64:51:6f:b0:b7:67:d8:c2: 23:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:38:97:77:D3:2C:B7:9B:3E:5D:6B:12:05:63:EC:D3:CF:AE:4C:75 X509v3 Authority Key Identifier: keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/gDiXd9Mst5s-XWsSBWPs08-uTHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.200.0/22 185.114.158.0/23 Signature Algorithm: sha256WithRSAEncryption 74:8a:0b:0b:fd:59:09:da:bc:ee:12:bd:27:1a:35:ba:6f:8b: 25:c1:df:5c:3c:8c:01:f5:bf:f8:e6:3b:fb:03:ee:7d:81:bd: c2:c3:15:e6:53:66:55:96:3b:06:5c:60:9c:16:b1:b4:b1:04: f5:68:38:87:e0:2a:f3:96:7b:9f:df:8b:cc:ec:8a:f3:fb:c8: f1:6b:07:d6:57:8a:2a:c0:0e:89:57:f6:e4:79:f1:7a:54:29: 7b:42:98:35:bb:ac:5f:0d:4c:33:fe:88:16:4f:67:e5:e2:90: 63:7c:d8:56:16:b6:4a:d3:42:37:a0:8b:e4:2b:fc:71:1e:41: bf:95:b5:a7:0e:d8:1a:2b:9e:ed:29:b2:e8:70:37:a9:d6:f4: c4:65:28:10:cd:51:68:b3:aa:42:d3:fc:20:87:73:a8:d2:00: bd:60:82:58:fc:db:ae:65:94:14:f1:69:fa:26:79:c1:33:82: c2:a2:01:07:27:be:91:84:46:b1:60:8e:ca:e6:3c:29:75:f5: a8:80:a8:45:4e:7c:2e:85:e7:6b:6e:8d:46:9b:63:82:1e:9f: 98:81:ab:b2:b9:7a:ef:f1:92:eb:e4:ac:7e:e5:f5:86:37:06: e1:f4:2f:67:3d:0a:6c:98:ca:ce:12:7d:15:b9:b4:9b:f1:44: 76:eb:db:ca -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26r25mdq70gidSMBZTt24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm MGIwNWMwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDM4OTc3N2QzMmNiNzliM2U1ZDZiMTIwNTYzZWNkM2NmYWU0Yzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc8dSa9jnP8/V4+pfTq4/BhEmoft vhZ40DUXMCFZ8ptAaG6MRvBWbRg+5MqQaYq/wBlyc7rZVqjHRSKleazu5aiFQIQq +4kh/+VrSrXmUqpSadC/Vx66/7UCExI+EJIC9wnTUB8i3jfeAvo1hMhYV+yQsfQX 8q6uyOe9j4bVr8rXaObDQ/WUjUQt3K11NB9QljpN7RTHsPD0XlXYsCf2sQ+X7j0q yBfyGAft21azbTQkSEZ0B2agIU9KM67v57MvOoTBotkgQ8eOlgPvxoZgQ+9TMAKo hAiMMyzSTvugIPxpkGOHjSor2EQBHJh0dM1i3TfVuq3nZFFvsLdn2MIjwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIA4l3fTLLebPl1rEgVj7NPPrkx1MB8GA1UdIwQY MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt YmJmZDQ1Yzg0YmVhLzEvZ0RpWGQ5TXN0NXMtWFdzU0JXUHMwOC11VEhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVPIAwQB uXKeMA0GCSqGSIb3DQEBCwUAA4IBAQB0igsL/VkJ2rzuEr0nGjW6b4slwd9cPIwB 9b/45jv7A+59gb3CwxXmU2ZVljsGXGCcFrG0sQT1aDiH4Crzlnuf34vM7Irz+8jx awfWV4oqwA6JV/bkefF6VCl7Qpg1u6xfDUwz/ogWT2fl4pBjfNhWFrZK00I3oIvk K/xxHkG/lbWnDtgaK57tKbLocDep1vTEZSgQzVFos6pC0/wgh3Oo0gC9YIJY/Nuu ZZQU8Wn6JnnBM4LCogEHJ76RhEaxYI7K5jwpdfWogKhFTnwuhedrbo1Gm2OCHp+Y gauyuXrv8ZLr5Kx+5fWGNwbh9C9nPQpsmMrOEn0VubSb8UR269vK -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:53 2026 by rpki-client