This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/gjzgYMADmxh6Q8pdc-WWoEw7shc.roa File: gjzgYMADmxh6Q8pdc-WWoEw7shc.roa (raw, json) Hash identifier: 0P8JuvcWmnVuYZSLeNadkGvm4K+4XLNVcmqTDBqXszk= Subject key identifier: 82:3C:E0:60:C0:03:9B:18:7A:43:CA:5D:73:E5:96:A0:4C:3B:B2:17 Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6 Certificate serial: 019B77C7706AD5DFF7982B4DD1D68286AE57 Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/gjzgYMADmxh6Q8pdc-WWoEw7shc.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15913 IP address blocks: 94.198.16.0/21 maxlen: 21 94.198.20.0/22 maxlen: 22 185.157.188.0/24 maxlen: 24 185.157.189.0/24 maxlen: 24 185.157.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:70:6a:d5:df:f7:98:2b:4d:d1:d6:82:86:ae:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=823ce060c0039b187a43ca5d73e596a04c3bb217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:6b:e7:65:1c:1c:0c:2c:41:32:38:97:d5: 9c:b0:34:21:b3:8d:80:ed:bb:07:64:ac:68:7d:72: 8c:f6:c6:ce:64:f4:89:ba:1b:6b:72:3c:74:da:05: ae:b8:59:1a:22:43:6d:c9:ef:bc:51:40:98:fd:c9: 6a:1e:84:a1:82:1c:94:87:1e:54:ac:33:3f:8c:95: 34:dd:c0:4c:83:f2:e6:7f:ae:ec:71:a4:ff:0e:3a: 0b:98:58:a9:fc:6d:89:ff:9d:3e:77:4d:06:29:e3: b8:66:9d:0e:29:19:53:e3:f0:26:5e:99:93:60:a7: 98:ad:2e:9e:e7:35:30:bd:a0:f3:db:12:8d:ce:8a: a5:ef:c5:38:c1:02:e0:69:68:dd:b3:78:35:2a:ac: 5f:ae:ed:5e:cb:89:f9:9b:38:b9:08:28:69:61:90: 73:53:eb:d3:85:1f:5b:5f:da:f4:c8:90:3b:62:55: 00:1b:ce:2f:4c:a1:92:16:9e:f3:10:5f:94:4f:cb: aa:a1:d0:fa:ff:18:d6:69:b7:83:28:ed:9c:14:09: 77:f7:60:a4:61:e2:5b:3a:1e:c5:de:d4:d0:03:cb: 0e:9d:9e:7f:0c:47:1a:da:c2:77:e9:a1:90:a6:79: a0:e5:db:bb:71:a3:20:0a:5e:98:80:41:83:19:9d: d2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3C:E0:60:C0:03:9B:18:7A:43:CA:5D:73:E5:96:A0:4C:3B:B2:17 X509v3 Authority Key Identifier: keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/gjzgYMADmxh6Q8pdc-WWoEw7shc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.198.16.0/21 185.157.188.0-185.157.190.255 Signature Algorithm: sha256WithRSAEncryption 67:12:cf:06:e7:c7:82:4b:78:a8:11:ce:92:76:60:36:0a:30: a5:cf:72:db:d8:0b:57:b4:2f:55:e3:b1:79:b2:16:28:b1:d8: 1e:6f:58:9f:59:8f:09:1e:d8:cb:ff:05:f5:cb:2d:92:c4:b4: 5d:b3:a9:4b:5d:c8:84:be:fc:a2:7e:81:e0:0c:e9:78:1e:df: 19:d9:41:28:a8:5f:e1:8b:50:53:94:ad:e8:bf:10:f7:a8:cb: c6:c9:f9:a5:f4:fa:f4:96:92:58:24:6d:7c:67:0e:ab:37:22: a5:b2:8c:eb:e0:bd:31:07:3e:f9:ef:d8:09:75:c7:dd:a2:65: d3:ac:2c:be:5c:33:38:50:a3:a4:fc:3c:30:19:90:4e:d6:b9: 5b:a3:aa:a3:3e:a2:60:10:64:24:75:f7:cc:53:05:2c:e5:31: bd:48:b6:d7:e3:bf:6a:cd:59:85:a9:9b:dd:65:8e:75:34:05: bb:9d:7b:dd:00:2f:66:37:c3:0a:78:91:07:db:17:7a:3e:6c: 1c:c7:4d:7f:a9:83:d4:87:2d:0d:dc:bd:32:41:38:2a:34:35: 97:1c:6f:34:54:2e:83:74:a8:e6:cf:bb:d8:fc:a7:37:0e:43: 4a:0e:06:cd:f3:4b:08:67:0c:ed:bb:d3:fa:e9:08:31:e4:30: b5:8f:a0:ff -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3x3Bq1d/3mCtN0daChq5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjQxZmFiM2U2M2VhZjViZGYwNzE2NmRmNWFhNjgxNjJl YWQ3YTYwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjNjZTA2MGMwMDM5YjE4N2E0M2NhNWQ3M2U1OTZhMDRjM2JiMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gpr52UcHAwsQTI4l9WcsDQhs42A 7bsHZKxofXKM9sbOZPSJuhtrcjx02gWuuFkaIkNtye+8UUCY/clqHoShghyUhx5U rDM/jJU03cBMg/Lmf67scaT/DjoLmFip/G2J/50+d00GKeO4Zp0OKRlT4/AmXpmT YKeYrS6e5zUwvaDz2xKNzoql78U4wQLgaWjds3g1Kqxfru1ey4n5mzi5CChpYZBz U+vThR9bX9r0yJA7YlUAG84vTKGSFp7zEF+UT8uqodD6/xjWabeDKO2cFAl392Ck YeJbOh7F3tTQA8sOnZ5/DEca2sJ36aGQpnmg5du7caMgCl6YgEGDGZ3SkQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFII84GDAA5sYekPKXXPllqBMO7IXMB8GA1UdIwQY MBaAFIj0H6s+Y+r1vfBxZt9apoFi6temMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMt ODk3Y2I2YTQzMGQ3LzEvZ2p6Z1lNQURteGg2UThwZGMtV1dvRXc3c2hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMtODk3Y2I2YTQzMGQ3 LzEvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDXsYQMAwD BAK5nbwDBAC5nb4wDQYJKoZIhvcNAQELBQADggEBAGcSzwbnx4JLeKgRzpJ2YDYK MKXPctvYC1e0L1XjsXmyFiix2B5vWJ9Zjwke2Mv/BfXLLZLEtF2zqUtdyIS+/KJ+ geAM6Xge3xnZQSioX+GLUFOUrei/EPeoy8bJ+aX0+vSWklgkbXxnDqs3IqWyjOvg vTEHPvnv2Al1x92iZdOsLL5cMzhQo6T8PDAZkE7WuVujqqM+omAQZCR198xTBSzl Mb1Ittfjv2rNWYWpm91ljnU0Bbude90AL2Y3wwp4kQfbF3o+bBzHTX+pg9SHLQ3c vTJBOCo0NZccbzRULoN0qObPu9j8pzcOQ0oOBs3zSwhnDO270/rpCDHkMLWPoP8= -----END CERTIFICATE-----Generated at Thu Jan 1 09:11:14 2026 by rpki-client