This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/ziiqrtMgnlnu-hPLFOMONS1-3pU.roa File: ziiqrtMgnlnu-hPLFOMONS1-3pU.roa (raw, json) Hash identifier: 8ZnAKWsJ3RNRSyRqd1uds5FxjmnKS3VN0RT4iyIYFXM= Subject key identifier: CE:28:AA:AE:D3:20:9E:59:EE:FA:13:CB:14:E3:0E:35:2D:7E:DE:95 Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70 Certificate serial: 019B7F8235B966B63CBA3F47C024644FDD08 Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/ziiqrtMgnlnu-hPLFOMONS1-3pU.roa Signing time: Fri 02 Jan 2026 16:19:58 +0000 ROA not before: Fri 02 Jan 2026 16:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.234.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:35:b9:66:b6:3c:ba:3f:47:c0:24:64:4f:dd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70 Validity Not Before: Jan 2 16:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce28aaaed3209e59eefa13cb14e30e352d7ede95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:eb:48:48:17:49:38:ff:fa:16:4f:67:1f:ed: ad:22:11:9a:3f:91:31:ce:1b:90:3b:ef:33:b2:1b: 12:84:a7:de:9f:3c:2f:9f:41:f5:aa:85:69:b4:9b: 94:f8:10:de:3f:2a:41:8d:36:2e:ed:55:f2:4f:18: 5b:08:5b:d6:a2:92:01:95:d6:4a:6d:c6:8a:f8:de: d4:09:5c:f5:a6:dd:30:9a:30:10:09:95:af:76:cc: 08:4b:16:7b:16:7f:4a:32:3a:2d:eb:da:c3:6b:3a: 56:6e:c3:f9:a6:53:04:45:7b:32:2a:a4:7d:8b:ed: 87:07:a6:c3:1f:01:c6:b8:dc:60:6c:22:eb:90:91: ba:1b:ee:97:01:14:0b:50:43:87:6c:80:a7:d7:26: 3f:40:be:93:9c:b3:e4:50:6a:62:c8:e1:cb:40:58: fc:bc:73:64:a1:2d:52:eb:60:a8:0b:31:e0:2f:68: 23:71:ab:fa:fa:0b:51:84:88:9e:f6:19:43:5c:c3: 1b:7a:c6:b5:cf:7a:9c:6b:45:e1:70:4e:70:eb:4e: 05:6c:6e:3b:cd:69:37:58:31:cb:bb:e1:51:ba:80: ab:42:bf:d5:73:d6:a8:8e:e3:5b:2e:20:19:ac:1e: 18:b6:32:c0:da:cc:aa:18:f4:95:ca:e6:7c:d3:96: 7e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:28:AA:AE:D3:20:9E:59:EE:FA:13:CB:14:E3:0E:35:2D:7E:DE:95 X509v3 Authority Key Identifier: keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/ziiqrtMgnlnu-hPLFOMONS1-3pU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.244.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:f7:26:84:e4:a8:12:6e:7d:3c:a6:5e:78:5a:ec:68:30:26: 6a:82:c0:86:31:0f:83:c9:1a:2c:5f:17:ad:c6:6f:7d:5c:2f: 74:c6:ec:49:0a:1a:d3:dd:1c:1e:db:8a:fc:c9:13:f1:bc:da: ba:42:b9:85:fc:da:3c:b9:79:46:6f:15:b6:c1:2e:3d:a4:3d: 64:1c:8d:bb:d6:5c:fe:81:b1:79:f5:fc:61:2a:9c:18:31:d4: 53:1d:ae:18:93:f0:c7:8d:db:7f:99:c3:bd:f1:6b:10:a3:63: c8:f9:66:35:25:d5:46:82:1d:8d:df:1b:f5:63:db:7d:27:9f: ac:34:a4:00:9a:0d:45:51:c7:35:19:d5:61:4e:28:66:c9:24: 49:b0:f8:fe:1f:d4:a7:fa:b5:32:b3:ad:f8:53:25:e9:55:3c: 26:4a:c6:c1:d7:29:68:c1:9c:1c:9d:a4:d1:8f:b0:d7:a7:0c: de:a7:a1:04:2e:26:21:5e:67:33:5e:90:3c:b7:98:fd:7c:fc: 95:d7:02:75:e2:ec:63:e1:0c:52:9c:cc:85:7d:d9:d2:f7:73: 3d:1b:94:d2:b7:52:30:c1:01:3c:95:4b:a2:e4:cc:5a:94:bc: 3a:e2:9a:37:9b:8f:6e:35:3e:ad:5a:6d:c0:f4:61:9e:f3:59: e7:45:d5:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gjW5ZrY8uj9HwCRkT90IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YTcyY2ZmNDFiZGI3YzdlMDE4NTVkMzkwNzZkYWY3MjE3 NDJjNzAwHhcNMjYwMTAyMTYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTI4YWFhZWQzMjA5ZTU5ZWVmYTEzY2IxNGUzMGUzNTJkN2VkZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAketISBdJOP/6Fk9nH+2tIhGaP5Ex zhuQO+8zshsShKfenzwvn0H1qoVptJuU+BDePypBjTYu7VXyTxhbCFvWopIBldZK bcaK+N7UCVz1pt0wmjAQCZWvdswISxZ7Fn9KMjot69rDazpWbsP5plMERXsyKqR9 i+2HB6bDHwHGuNxgbCLrkJG6G+6XARQLUEOHbICn1yY/QL6TnLPkUGpiyOHLQFj8 vHNkoS1S62CoCzHgL2gjcav6+gtRhIie9hlDXMMbesa1z3qca0XhcE5w604FbG47 zWk3WDHLu+FRuoCrQr/Vc9aojuNbLiAZrB4YtjLA2syqGPSVyuZ805Z+bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM4oqq7TIJ5Z7voTyxTjDjUtft6VMB8GA1UdIwQY MBaAFFWnLP9BvbfH4BhV05B22vchdCxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDct MzM4OTg2MTc2YjFmLzEvemlpcXJ0TWdubG51LWhQTEZPTU9OUzEtM3BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDctMzM4OTg2MTc2YjFm LzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuer0MA0G CSqGSIb3DQEBCwUAA4IBAQCd9yaE5KgSbn08pl54WuxoMCZqgsCGMQ+DyRosXxet xm99XC90xuxJChrT3Rwe24r8yRPxvNq6QrmF/No8uXlGbxW2wS49pD1kHI271lz+ gbF59fxhKpwYMdRTHa4Yk/DHjdt/mcO98WsQo2PI+WY1JdVGgh2N3xv1Y9t9J5+s NKQAmg1FUcc1GdVhTihmySRJsPj+H9Sn+rUys634UyXpVTwmSsbB1ylowZwcnaTR j7DXpwzep6EELiYhXmczXpA8t5j9fPyV1wJ14uxj4QxSnMyFfdnS93M9G5TSt1Iw wQE8lUui5MxalLw64po3m49uNT6tWm3A9GGe81nnRdUq -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:09 2026 by rpki-client