This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/z4VLYtswGcmvOrd3jGwZx5w_uAg.roa File: z4VLYtswGcmvOrd3jGwZx5w_uAg.roa (raw, json) Hash identifier: MY7QPHqZSOiP3oaWW8od9BPKvJMoZCzW1Qh7mRvMMC0= Subject key identifier: CF:85:4B:62:DB:30:19:C9:AF:3A:B7:77:8C:6C:19:C7:9C:3F:B8:08 Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02 Certificate serial: 019B7A5B6500EAC030B55C7C71A327A724F1 Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/z4VLYtswGcmvOrd3jGwZx5w_uAg.roa Signing time: Thu 01 Jan 2026 16:19:28 +0000 ROA not before: Thu 01 Jan 2026 16:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47745 IP address blocks: 85.187.1.0/24 maxlen: 24 87.246.6.0/24 maxlen: 24 87.246.39.0/24 maxlen: 24 151.237.60.0/23 maxlen: 23 151.237.60.0/24 maxlen: 24 151.237.61.0/24 maxlen: 24 185.255.59.0/24 maxlen: 24 212.5.56.0/23 maxlen: 23 212.5.56.0/24 maxlen: 24 212.5.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:65:00:ea:c0:30:b5:5c:7c:71:a3:27:a7:24:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02 Validity Not Before: Jan 1 16:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf854b62db3019c9af3ab7778c6c19c79c3fb808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:68:6a:e3:46:b6:d3:66:fd:83:f0:98:e7: c4:7d:eb:53:00:9c:35:b2:cd:83:c2:cd:83:59:93: 23:81:a0:e1:3b:6f:66:a2:63:1f:d5:eb:60:77:a2: 04:60:61:3b:93:c3:b9:b5:7a:bb:6f:83:e8:ae:0e: 21:a4:09:38:71:bc:cd:4a:9b:52:be:47:f1:00:c2: c7:d3:97:c6:a2:e4:ab:29:9c:cd:52:fd:6d:58:ef: c9:78:f7:a3:fd:39:35:28:a4:6e:e6:f4:c1:f1:78: f5:ca:19:80:63:c9:62:96:b7:4b:61:79:ef:b8:92: 49:4d:41:99:4a:a6:1d:36:9b:0e:d6:dc:2e:fe:6b: b3:82:3d:6f:9e:92:1b:0e:69:f6:e0:64:de:79:41: e6:62:c8:09:11:fb:7e:0f:4e:b9:9e:4f:d4:34:5c: fd:ad:7d:f1:fe:e5:52:61:66:5a:df:fd:72:ae:02: 68:b8:15:ce:fe:5b:18:57:e4:06:60:7b:5c:b8:a2: 32:82:00:ba:c1:de:cd:87:9d:cc:c6:48:b0:1e:3d: 86:bf:a9:7c:b3:37:d7:22:a4:2c:4a:29:15:b5:e0: 72:f3:93:dd:35:30:f5:0c:aa:4d:8b:66:91:61:b7: 92:3b:d4:af:ab:43:e4:15:8e:b4:33:f3:1b:55:c4: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:85:4B:62:DB:30:19:C9:AF:3A:B7:77:8C:6C:19:C7:9C:3F:B8:08 X509v3 Authority Key Identifier: keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/z4VLYtswGcmvOrd3jGwZx5w_uAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.1.0/24 87.246.6.0/24 87.246.39.0/24 151.237.60.0/23 185.255.59.0/24 212.5.56.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:b4:c3:4c:b4:02:7f:f2:67:67:6b:62:8e:bd:8b:ed:50:16: 24:2e:23:a0:a3:87:4d:81:1c:e9:d1:5e:c6:54:6e:30:0d:d7: 86:16:d0:ce:9e:ef:d7:70:bb:2c:53:1b:49:f7:55:18:78:af: ee:83:0f:a3:76:60:7e:fc:d7:db:98:90:05:e8:a1:67:5d:1f: 89:9b:d8:eb:34:18:91:2e:e4:42:6c:45:1c:d6:a7:dc:a8:25: 74:94:01:67:55:fb:9c:72:27:03:35:10:d4:a4:a6:2e:e5:54: 21:3e:65:50:e8:a6:4c:80:c9:10:b8:7d:11:47:7d:a9:81:0c: 8a:75:2f:c8:7a:68:f4:d6:2f:77:45:77:9a:65:bf:45:9d:19: c4:5b:36:c0:7f:4b:81:b6:8d:7b:dd:9e:12:b1:22:dd:ff:9a: 34:9f:62:6d:e5:50:8d:c8:59:a9:39:e4:1e:d8:bd:7a:67:38: 88:3b:c3:ee:06:0f:9b:29:2a:40:99:ee:7e:ca:84:36:02:c0: 24:13:2a:c3:3e:1f:20:6a:01:0b:83:a1:db:90:14:81:bd:ae: c2:66:cc:89:51:29:92:71:b6:3f:1f:ad:f1:42:70:2a:5a:81: 7d:d2:e7:31:6d:9c:8d:7f:3f:40:68:8c:5a:3f:20:ba:ad:5f: 63:ae:48:4d -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6W2UA6sAwtVx8caMnpyTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NzhkMzI4YmNkZTUyOTRmMzcyNzY1YzExYWVlZjI4MTU1 YjBmMDIwHhcNMjYwMTAxMTYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjg1NGI2MmRiMzAxOWM5YWYzYWI3Nzc4YzZjMTljNzljM2ZiODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCxoauNGttNm/YPwmOfEfetTAJw1 ss2Dws2DWZMjgaDhO29momMf1etgd6IEYGE7k8O5tXq7b4Porg4hpAk4cbzNSptS vkfxAMLH05fGouSrKZzNUv1tWO/JePej/Tk1KKRu5vTB8Xj1yhmAY8lilrdLYXnv uJJJTUGZSqYdNpsO1twu/muzgj1vnpIbDmn24GTeeUHmYsgJEft+D065nk/UNFz9 rX3x/uVSYWZa3/1yrgJouBXO/lsYV+QGYHtcuKIyggC6wd7Nh53MxkiwHj2Gv6l8 szfXIqQsSikVteBy85PdNTD1DKpNi2aRYbeSO9Svq0PkFY60M/MbVcR5/QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFM+FS2LbMBnJrzq3d4xsGcecP7gIMB8GA1UdIwQY MBaAFEl40yi83lKU83J2XBGu7ygVWw8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjkt OGM3ZDIwOTIzYjA4LzEvejRWTFl0c3dHY212T3JkM2pHd1p4NXdfdUFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjktOGM3ZDIwOTIzYjA4 LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVbsBAwQA V/YGAwQAV/YnAwQBl+08AwQAuf87AwQB1AU4MA0GCSqGSIb3DQEBCwUAA4IBAQBf tMNMtAJ/8mdna2KOvYvtUBYkLiOgo4dNgRzp0V7GVG4wDdeGFtDOnu/XcLssUxtJ 91UYeK/ugw+jdmB+/NfbmJAF6KFnXR+Jm9jrNBiRLuRCbEUc1qfcqCV0lAFnVfuc cicDNRDUpKYu5VQhPmVQ6KZMgMkQuH0RR32pgQyKdS/Iemj01i93RXeaZb9FnRnE WzbAf0uBto173Z4SsSLd/5o0n2Jt5VCNyFmpOeQe2L16ZziIO8PuBg+bKSpAme5+ yoQ2AsAkEyrDPh8gagELg6HbkBSBva7CZsyJUSmScbY/H63xQnAqWoF90ucxbZyN fz9AaIxaPyC6rV9jrkhN -----END CERTIFICATE-----Generated at Mon Feb 9 23:57:10 2026 by rpki-client