This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ZDi90lCOoT-neW4pUMgJFdXU8PI.roa File: ZDi90lCOoT-neW4pUMgJFdXU8PI.roa (raw, json) Hash identifier: azZat8GbEZpHjBhSI2j6PNAQyebDIp1fU7Eg9y7wZrs= Subject key identifier: 64:38:BD:D2:50:8E:A1:3F:A7:79:6E:29:50:C8:09:15:D5:D4:F0:F2 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F8383EDA0BCEE5250072FE552114AF1 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ZDi90lCOoT-neW4pUMgJFdXU8PI.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 45.11.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:83:ed:a0:bc:ee:52:50:07:2f:e5:52:11:4a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6438bdd2508ea13fa7796e2950c80915d5d4f0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:77:65:3d:51:8a:99:f6:9f:e2:07:90:9a: 30:46:b7:a4:3f:a1:97:11:a5:3b:d0:5f:31:d3:aa: e0:94:b8:47:b2:52:1b:29:27:6f:ef:70:bc:03:0c: 86:de:d3:ff:f7:83:05:44:75:40:5e:34:55:ec:09: c6:2b:ea:09:7c:2e:5a:45:b6:77:5c:73:ad:e9:fa: bc:5b:87:f4:0f:d4:7d:65:19:c0:d0:3f:9d:d0:09: d8:05:5f:14:e3:49:2e:3f:24:b2:2f:f9:17:87:0f: c0:a8:8b:14:07:f6:ff:30:80:18:18:e1:0b:77:33: f9:86:fa:59:8f:d0:ef:f2:39:8a:da:05:45:f6:70: ad:ef:71:2f:65:1d:6f:c8:e1:fb:ff:f3:df:51:6f: 90:b1:2c:05:04:f7:9d:82:31:1b:78:f9:01:3b:32: c9:07:df:0a:61:ca:30:7d:db:b5:62:66:be:6b:d4: 33:c6:93:e0:26:6a:15:ca:d8:c6:3c:c2:8b:c2:f4: 88:11:8d:0b:d6:72:4a:40:2d:af:35:c2:45:6f:03: 66:ac:91:df:ff:d4:38:12:f7:79:7b:c9:08:e6:6e: ed:02:89:51:42:d4:61:3c:d9:13:53:98:df:93:d8: 54:38:d1:e8:d0:de:5f:69:91:a4:c8:0d:5f:3e:b4: 57:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:38:BD:D2:50:8E:A1:3F:A7:79:6E:29:50:C8:09:15:D5:D4:F0:F2 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ZDi90lCOoT-neW4pUMgJFdXU8PI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.190.0/24 Signature Algorithm: sha256WithRSAEncryption a3:68:e5:6c:1e:ae:e1:54:7c:c7:75:bf:8c:19:ed:f2:aa:08: ae:5c:a1:32:17:97:c0:21:17:3e:ac:3d:e5:82:a8:39:15:69: 9d:55:58:2a:87:98:8d:06:0b:ec:e8:61:18:bf:78:7e:6c:7c: f1:02:0a:c5:6c:f6:5d:22:a0:df:22:62:59:ad:7a:19:1d:b3: b4:8c:15:6f:e8:88:29:1b:83:1e:41:73:f9:25:6f:74:91:fb: f0:88:24:d1:fb:9d:be:6f:f2:3d:c0:5a:bb:ee:f8:1d:b3:d7: 93:9a:fb:67:ae:b9:6f:73:b7:61:53:cb:f7:b1:6b:88:d8:f6: f6:47:a0:c8:e2:5a:fe:b6:78:91:d5:bb:3a:98:65:a0:15:ef: 07:02:f3:d4:1a:77:af:bf:29:74:06:18:50:64:cd:40:fd:1e: 3e:93:2e:b1:fa:e9:0a:1a:c5:97:0a:87:cc:53:0f:d5:68:e1: c8:20:50:43:76:a6:39:2c:76:dc:ee:a2:a6:84:f9:e6:32:58: b5:2e:aa:e0:83:a5:1e:b0:ef:3d:90:90:52:8b:f2:1d:fe:b1: 88:df:3e:17:0d:6c:6b:1a:7a:8e:aa:12:94:26:fc:1e:ae:7f: a7:84:d8:fa:ba:23:66:a9:e2:44:4e:d0:34:1c:e3:81:3f:37: 6d:eb:09:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4PtoLzuUlAHL+VSEUrxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDM4YmRkMjUwOGVhMTNmYTc3OTZlMjk1MGM4MDkxNWQ1ZDRmMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqp3ZT1Ripn2n+IHkJowRrekP6GX EaU70F8x06rglLhHslIbKSdv73C8AwyG3tP/94MFRHVAXjRV7AnGK+oJfC5aRbZ3 XHOt6fq8W4f0D9R9ZRnA0D+d0AnYBV8U40kuPySyL/kXhw/AqIsUB/b/MIAYGOEL dzP5hvpZj9Dv8jmK2gVF9nCt73EvZR1vyOH7//PfUW+QsSwFBPedgjEbePkBOzLJ B98KYcowfdu1Yma+a9QzxpPgJmoVytjGPMKLwvSIEY0L1nJKQC2vNcJFbwNmrJHf /9Q4Evd5e8kI5m7tAolRQtRhPNkTU5jfk9hUONHo0N5faZGkyA1fPrRXOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQ4vdJQjqE/p3luKVDICRXV1PDyMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvWkRpOTBsQ09vVC1uZVc0cFVNZ0pGZFhVOFBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu+MA0G CSqGSIb3DQEBCwUAA4IBAQCjaOVsHq7hVHzHdb+MGe3yqgiuXKEyF5fAIRc+rD3l gqg5FWmdVVgqh5iNBgvs6GEYv3h+bHzxAgrFbPZdIqDfImJZrXoZHbO0jBVv6Igp G4MeQXP5JW90kfvwiCTR+52+b/I9wFq77vgds9eTmvtnrrlvc7dhU8v3sWuI2Pb2 R6DI4lr+tniR1bs6mGWgFe8HAvPUGnevvyl0BhhQZM1A/R4+ky6x+ukKGsWXCofM Uw/VaOHIIFBDdqY5LHbc7qKmhPnmMli1Lqrgg6UesO89kJBSi/Id/rGI3z4XDWxr GnqOqhKUJvwern+nhNj6uiNmqeJETtA0HOOBPzdt6wkn -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:52 2026 by rpki-client