This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/gy_RIzTwo_3ivq0rBuKmnXuwaM4.roa File: gy_RIzTwo_3ivq0rBuKmnXuwaM4.roa (raw, json) Hash identifier: tCWSNQOzb9A+PPchWiIZ5rJnBeXKzzZ8nzXvj/Dyy5Y= Subject key identifier: 83:2F:D1:23:34:F0:A3:FD:E2:BE:AD:2B:06:E2:A6:9D:7B:B0:68:CE Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019B7BA45D8ABDECFFD6B771A04CDE2207E4 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/gy_RIzTwo_3ivq0rBuKmnXuwaM4.roa Signing time: Thu 01 Jan 2026 22:18:47 +0000 ROA not before: Thu 01 Jan 2026 22:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213619 IP address blocks: 193.29.181.0/24 maxlen: 24 2a11:1400:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:5d:8a:bd:ec:ff:d6:b7:71:a0:4c:de:22:07:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Jan 1 22:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=832fd12334f0a3fde2bead2b06e2a69d7bb068ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:d1:a4:e5:8c:3e:35:95:3b:4e:4e:50:ae: b2:57:39:e9:51:04:8e:32:41:db:c6:90:c2:7b:fa: 21:cd:92:8d:42:cc:b1:9d:98:06:9f:f0:59:77:c5: de:67:41:d0:2f:f3:43:55:86:e9:45:cd:1e:e0:df: ba:6e:1a:46:cc:05:d9:6d:49:d6:a6:42:30:1c:fe: e8:04:7e:86:1c:a9:4e:34:15:71:64:c2:2d:65:7b: 42:9d:4d:89:26:33:b4:f0:12:f9:61:bf:15:2b:d1: da:ae:cb:00:0e:bc:15:97:65:4f:ef:c0:8a:7e:8b: cc:d6:bd:f0:ba:9e:96:30:07:e0:59:a7:73:3c:67: 86:71:9c:16:70:bc:92:7d:f6:12:fa:24:d9:24:cf: b3:a2:8b:05:fe:b7:9f:27:28:67:a7:5b:94:45:fa: 33:b7:6d:6d:53:65:00:5a:d3:c1:38:a0:97:85:ab: 0f:92:7c:8f:46:0c:60:09:34:91:50:bd:b1:c2:9b: f4:40:11:db:74:b4:52:3f:dc:4b:35:57:a9:1a:f0: 72:32:4f:2f:8a:17:e6:4a:21:66:64:9b:7e:cd:c7: 28:b9:5d:65:69:43:d3:64:83:4b:32:fa:0b:07:e1: 41:1a:0a:0f:5e:fb:a2:61:63:10:61:bf:91:40:f6: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2F:D1:23:34:F0:A3:FD:E2:BE:AD:2B:06:E2:A6:9D:7B:B0:68:CE X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/gy_RIzTwo_3ivq0rBuKmnXuwaM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.181.0/24 IPv6: 2a11:1400:3000::/48 Signature Algorithm: sha256WithRSAEncryption 8d:8d:a7:d4:0a:fe:3e:36:3d:f2:67:4d:dc:e9:49:ee:0d:e6: 7d:17:ac:ad:5b:e9:71:6e:33:fc:61:50:5c:16:ff:2a:44:55: e6:68:5d:40:c4:da:c9:e7:12:c6:aa:4d:4a:c5:68:86:01:ff: db:22:90:25:db:20:e8:67:3e:00:a7:ce:19:1c:8c:24:40:bb: 60:59:61:47:7a:4b:33:3c:36:bd:de:43:37:51:e9:44:57:4f: c1:38:83:fc:e4:4c:e5:1c:01:44:6a:a0:dd:95:21:2b:c4:1b: 78:64:cd:bc:a5:bc:96:d7:ba:5d:66:7d:4a:93:c1:1e:88:06: 5a:ca:90:1d:9b:df:51:4a:86:67:69:88:2d:a6:89:f3:3d:62: fd:5b:8c:95:e0:8c:9d:dd:be:a6:b9:f0:bc:0c:07:ce:70:af: e5:be:e8:51:34:2c:2d:06:d1:6f:5d:fb:b7:5e:be:24:55:fd: b7:d3:24:02:a3:f5:ba:5c:a4:d0:af:ae:97:c2:4a:27:18:61: 1b:03:d2:29:46:66:08:fe:55:71:13:c7:0f:21:ab:8d:0e:b7: cc:27:51:a9:eb:f6:98:b2:8a:a1:54:ba:c3:6e:9d:dc:bc:b3: e3:7c:41:40:00:5c:d8:3b:0e:d9:12:18:c9:05:8e:f2:0b:11: 98:cb:78:d0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pF2Kvez/1rdxoEzeIgfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjYwMTAxMjIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzJmZDEyMzM0ZjBhM2ZkZTJiZWFkMmIwNmUyYTY5ZDdiYjA2OGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxofRpOWMPjWVO05OUK6yVznpUQSO MkHbxpDCe/ohzZKNQsyxnZgGn/BZd8XeZ0HQL/NDVYbpRc0e4N+6bhpGzAXZbUnW pkIwHP7oBH6GHKlONBVxZMItZXtCnU2JJjO08BL5Yb8VK9HarssADrwVl2VP78CK fovM1r3wup6WMAfgWadzPGeGcZwWcLySffYS+iTZJM+zoosF/refJyhnp1uURfoz t21tU2UAWtPBOKCXhasPknyPRgxgCTSRUL2xwpv0QBHbdLRSP9xLNVepGvByMk8v ihfmSiFmZJt+zccouV1laUPTZINLMvoLB+FBGgoPXvuiYWMQYb+RQPa++wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIMv0SM08KP94r6tKwbipp17sGjOMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvZ3lfUkl6VHdvXzNpdnEwckJ1S21uWHV3YU00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwR21MA8E AgACMAkDBwAqERQAMAAwDQYJKoZIhvcNAQELBQADggEBAI2Np9QK/j42PfJnTdzp Se4N5n0XrK1b6XFuM/xhUFwW/ypEVeZoXUDE2snnEsaqTUrFaIYB/9sikCXbIOhn PgCnzhkcjCRAu2BZYUd6SzM8Nr3eQzdR6URXT8E4g/zkTOUcAURqoN2VISvEG3hk zbylvJbXul1mfUqTwR6IBlrKkB2b31FKhmdpiC2mifM9Yv1bjJXgjJ3dvqa58LwM B85wr+W+6FE0LC0G0W9d+7deviRV/bfTJAKj9bpcpNCvrpfCSicYYRsD0ilGZgj+ VXETxw8hq40Ot8wnUanr9piyiqFUusNundy8s+N8QUAAXNg7DtkSGMkFjvILEZjL eNA= -----END CERTIFICATE-----Generated at Sat Jan 3 01:01:55 2026 by rpki-client