This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Zxi_uZkN-s_GBqHmZJo1qiikSa4.roa File: Zxi_uZkN-s_GBqHmZJo1qiikSa4.roa (raw, json) Hash identifier: xjsSY8fEN7ZVOkWrWmgTkUR1514VM3Yu/11sozTkGKM= Subject key identifier: 67:18:BF:B9:99:0D:FA:CF:C6:06:A1:E6:64:9A:35:AA:28:A4:49:AE Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7CA7A11DB0EDD02F77E896C30CF9B Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Zxi_uZkN-s_GBqHmZJo1qiikSa4.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35478 IP address blocks: 159.148.195.0/24 maxlen: 24 159.148.204.0/24 maxlen: 24 159.148.216.0/24 maxlen: 24 159.148.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ca:7a:11:db:0e:dd:02:f7:7e:89:6c:30:cf:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6718bfb9990dfacfc606a1e6649a35aa28a449ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:db:cf:75:15:af:8f:46:88:59:b2:9f:37:99: b3:e9:dc:66:59:75:fe:d9:17:27:19:f2:07:c4:70: 14:f3:ee:f9:08:eb:a0:6a:c2:9e:7f:38:12:ca:84: 1b:14:4c:5c:de:74:0e:f0:f3:9e:30:7f:d2:ca:60: be:a8:dc:a2:8b:27:58:a3:24:d2:97:a6:08:21:4e: 4c:8e:3c:a0:05:bd:86:09:98:16:a2:00:92:9d:d7: 8b:69:cf:89:c4:97:3d:5b:bb:66:c9:13:91:d5:0b: 4e:08:74:28:59:1e:3e:df:b2:0e:98:f0:24:2e:d2: ba:c6:52:44:3f:96:2f:01:70:1e:1a:bc:ba:4d:e9: fb:b1:76:63:05:bd:df:4f:cd:9b:28:69:90:10:cf: 79:7b:50:5e:b0:f5:55:38:e5:7e:ed:60:1b:76:2d: 00:21:f6:17:eb:8d:55:01:12:a9:0d:92:22:2c:64: 49:8f:00:c1:31:63:ba:2b:1e:a3:c8:96:80:ce:2c: 1e:b9:26:f2:5f:9b:e0:94:30:4a:23:c0:a7:8c:d7: b1:38:85:e4:f3:3e:30:b7:9b:aa:29:84:6c:2d:a8: 00:fb:b6:e9:c5:9e:7e:3b:f7:57:e0:9c:b5:e8:0b: 55:70:fb:1b:33:6e:54:49:90:48:ce:5c:fc:21:52: 54:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:18:BF:B9:99:0D:FA:CF:C6:06:A1:E6:64:9A:35:AA:28:A4:49:AE X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Zxi_uZkN-s_GBqHmZJo1qiikSa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.195.0/24 159.148.204.0/24 159.148.216.0/24 159.148.218.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:c7:00:21:69:a9:57:6f:84:77:9e:95:a0:2a:da:e6:4c:da: d2:7e:0c:8a:e2:09:c9:aa:45:b4:2d:54:a6:e8:e6:1b:04:58: aa:34:2e:ec:86:94:29:26:d5:f9:31:5b:33:93:d5:cc:b6:42: f0:b8:1b:72:70:40:2c:84:da:1c:7e:a6:b2:d5:ff:45:4f:52: 51:2d:04:1c:98:6b:35:21:2e:af:f8:e6:52:8f:b1:a5:40:f9: f2:c5:65:d0:0b:c7:db:1c:68:93:2f:95:e9:7f:ce:99:ab:92: 83:eb:dd:a2:e0:a2:b6:92:aa:5b:ca:51:0f:bf:39:8a:7e:dd: 71:4a:aa:06:90:f5:27:0c:95:8d:f3:d1:72:fd:91:48:d3:19: 81:e2:35:67:9b:09:91:34:75:e2:ac:9f:a6:cb:06:26:f2:97: 7b:ac:2e:1f:8c:24:48:39:20:e5:ae:fe:d6:a8:ee:75:1f:42: b6:dc:21:09:73:6a:09:59:9d:7b:ae:84:9b:54:75:2f:98:5c: a6:0c:45:76:73:fc:45:8b:27:9d:b5:f1:20:5d:36:6a:37:37: 84:ea:28:12:85:50:fa:34:b5:24:42:90:91:fe:eb:18:f2:42: 70:82:8f:14:e0:33:52:af:aa:48:95:70:5f:df:b7:9a:fe:72: 32:fc:74:77 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6x8p6EdsO3QL3folsMM+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzE4YmZiOTk5MGRmYWNmYzYwNmExZTY2NDlhMzVhYTI4YTQ0OWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dvPdRWvj0aIWbKfN5mz6dxmWXX+ 2RcnGfIHxHAU8+75COugasKefzgSyoQbFExc3nQO8POeMH/SymC+qNyiiydYoyTS l6YIIU5MjjygBb2GCZgWogCSndeLac+JxJc9W7tmyROR1QtOCHQoWR4+37IOmPAk LtK6xlJEP5YvAXAeGry6Ten7sXZjBb3fT82bKGmQEM95e1BesPVVOOV+7WAbdi0A IfYX641VARKpDZIiLGRJjwDBMWO6Kx6jyJaAziweuSbyX5vglDBKI8CnjNexOIXk 8z4wt5uqKYRsLagA+7bpxZ5+O/dX4Jy16AtVcPsbM25USZBIzlz8IVJUzwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGcYv7mZDfrPxgah5mSaNaoopEmuMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvWnhpX3Vaa04tc19HQnFIbVpKbzFxaWlrU2E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAn5TDAwQA n5TMAwQAn5TYAwQAn5TaMA0GCSqGSIb3DQEBCwUAA4IBAQAaxwAhaalXb4R3npWg KtrmTNrSfgyK4gnJqkW0LVSm6OYbBFiqNC7shpQpJtX5MVszk9XMtkLwuBtycEAs hNocfqay1f9FT1JRLQQcmGs1IS6v+OZSj7GlQPnyxWXQC8fbHGiTL5Xpf86Zq5KD 692i4KK2kqpbylEPvzmKft1xSqoGkPUnDJWN89Fy/ZFI0xmB4jVnmwmRNHXirJ+m ywYm8pd7rC4fjCRIOSDlrv7WqO51H0K23CEJc2oJWZ17roSbVHUvmFymDEV2c/xF iyedtfEgXTZqNzeE6igShVD6NLUkQpCR/usY8kJwgo8U4DNSr6pIlXBf37ea/nIy /HR3 -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:39 2026 by rpki-client