This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/GZH4Q14_v0a5Cap41OYwPoMxxRg.roa File: GZH4Q14_v0a5Cap41OYwPoMxxRg.roa (raw, json) Hash identifier: iGqy4PhZNDKduyf66irt5g2e/+6Csi95Un37zKDu9jY= Subject key identifier: 19:91:F8:43:5E:3F:BF:46:B9:09:AA:78:D4:E6:30:3E:83:31:C5:18 Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536 Certificate serial: 019B79EC55CF5434A82D42AB51C06A3AA326 Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/GZH4Q14_v0a5Cap41OYwPoMxxRg.roa Signing time: Thu 01 Jan 2026 14:18:10 +0000 ROA not before: Thu 01 Jan 2026 14:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 95.128.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 23:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:55:cf:54:34:a8:2d:42:ab:51:c0:6a:3a:a3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536 Validity Not Before: Jan 1 14:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1991f8435e3fbf46b909aa78d4e6303e8331c518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:70:27:e3:db:31:4d:93:21:5d:9a:e9:f9: 2d:72:e0:47:81:9f:08:03:0e:18:6d:58:6f:65:08: 60:23:e6:9b:da:32:32:43:3c:e2:12:f9:17:b6:de: 3c:1a:22:fc:cc:98:7b:8d:8e:7a:64:12:48:63:8d: 34:fa:1a:66:95:16:39:a1:93:6d:92:6c:a2:c7:30: 7d:92:cf:2e:5e:80:ef:ad:e3:9a:08:b0:50:27:1d: 98:5b:06:69:62:b1:7c:3e:a3:47:fd:e0:78:ec:a8: 6d:97:28:bf:5d:5e:05:b0:87:d5:78:d1:31:cf:a6: 81:18:99:23:60:21:5d:d4:4b:29:52:bd:b0:9f:77: 70:f3:01:8c:b4:6d:54:61:b8:b2:6e:3c:54:c3:f5: e4:d1:78:a4:84:88:7d:cf:06:2d:1d:e3:4b:c2:ca: 37:0f:37:4f:c3:d1:d8:49:5d:2f:2f:6a:da:5c:7d: 7f:28:cc:da:37:24:db:f0:bd:80:58:b0:a8:71:ac: 60:d6:25:ae:18:a1:40:67:1e:c0:24:dd:b5:0e:1f: 8f:8e:2b:38:a3:3f:7f:38:5b:12:af:0d:01:a8:de: 10:93:55:52:55:d5:77:3c:15:53:08:aa:c0:0f:67: ff:bf:67:60:f3:a8:c4:78:ad:98:a6:15:fe:62:a0: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:91:F8:43:5E:3F:BF:46:B9:09:AA:78:D4:E6:30:3E:83:31:C5:18 X509v3 Authority Key Identifier: keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/GZH4Q14_v0a5Cap41OYwPoMxxRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.158.0/24 Signature Algorithm: sha256WithRSAEncryption 66:3a:d3:75:59:98:2e:09:3d:bd:0a:ae:ca:60:7b:19:f1:ef: 38:1e:25:21:48:50:62:3e:f6:bf:87:c9:13:aa:85:b3:ad:b5: d8:2e:f0:af:8e:d9:d2:f1:6f:3d:ab:09:9b:c1:87:93:57:f0: 48:95:73:bf:64:89:42:42:7f:91:4e:00:a1:86:18:06:64:8d: e4:c2:bd:e4:68:b4:bf:30:ce:5e:af:46:de:e1:2a:1a:d1:e3: b1:31:1c:69:14:9e:21:7f:70:5c:f2:5a:7d:89:57:96:5b:90: 1b:2f:3c:05:e4:fc:e8:80:f3:da:45:39:7f:ad:c0:f1:38:c6: f1:a4:3d:18:78:95:bc:9d:cd:12:1c:f7:7e:a5:19:b7:5b:2d: 5f:98:5b:17:cb:6d:64:e6:00:88:7c:7f:d1:a9:75:3a:5a:86: 6f:51:93:19:3d:d4:6b:a1:7d:a3:c8:21:ef:c3:3e:51:c9:79: de:fd:1a:3c:bc:78:13:e6:00:19:6f:39:d9:e3:e2:f3:d6:a0: 92:0b:9c:9c:91:9e:13:b7:2c:f0:c3:43:3b:4c:05:08:6c:d0: 0e:5c:12:c7:53:71:19:91:2f:1d:51:ff:5d:51:20:45:0c:2b: 7f:13:34:9c:55:38:c8:13:18:d7:76:3b:ef:32:b9:f5:f2:d2: e5:3a:63:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57FXPVDSoLUKrUcBqOqMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTg0OTEwMTI0YWY3NzZlMzBlNWFjZjA1NWQ2YmFlMTc2 MWE1MzYwHhcNMjYwMTAxMTQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTkxZjg0MzVlM2ZiZjQ2YjkwOWFhNzhkNGU2MzAzZTgzMzFjNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dNwJ+PbMU2TIV2a6fktcuBHgZ8I Aw4YbVhvZQhgI+ab2jIyQzziEvkXtt48GiL8zJh7jY56ZBJIY400+hpmlRY5oZNt kmyixzB9ks8uXoDvreOaCLBQJx2YWwZpYrF8PqNH/eB47Khtlyi/XV4FsIfVeNEx z6aBGJkjYCFd1EspUr2wn3dw8wGMtG1UYbiybjxUw/Xk0XikhIh9zwYtHeNLwso3 DzdPw9HYSV0vL2raXH1/KMzaNyTb8L2AWLCocaxg1iWuGKFAZx7AJN21Dh+Pjis4 oz9/OFsSrw0BqN4Qk1VSVdV3PBVTCKrAD2f/v2dg86jEeK2YphX+YqBikwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBmR+ENeP79GuQmqeNTmMD6DMcUYMB8GA1UdIwQY MBaAFOFYSRASSvd24w5azwVda64XYaU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUt MzFhYjMyZmY3YzY4LzEvR1pINFExNF92MGE1Q2FwNDFPWXdQb014eFJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUtMzFhYjMyZmY3YzY4 LzEvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4CeMA0G CSqGSIb3DQEBCwUAA4IBAQBmOtN1WZguCT29Cq7KYHsZ8e84HiUhSFBiPva/h8kT qoWzrbXYLvCvjtnS8W89qwmbwYeTV/BIlXO/ZIlCQn+RTgChhhgGZI3kwr3kaLS/ MM5er0be4Soa0eOxMRxpFJ4hf3Bc8lp9iVeWW5AbLzwF5PzogPPaRTl/rcDxOMbx pD0YeJW8nc0SHPd+pRm3Wy1fmFsXy21k5gCIfH/RqXU6WoZvUZMZPdRroX2jyCHv wz5RyXne/Ro8vHgT5gAZbznZ4+Lz1qCSC5yckZ4Ttyzww0M7TAUIbNAOXBLHU3EZ kS8dUf9dUSBFDCt/EzScVTjIExjXdjvvMrn18tLlOmPe -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:18 2026 by rpki-client