This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/ZjJCoFoY4vkCAYGodEJRPnkGA1E.roa File: ZjJCoFoY4vkCAYGodEJRPnkGA1E.roa (raw, json) Hash identifier: IBH/AgeMMVSuYzKj8XBPFVbLx3ITGxDTcTWy5mB/4kk= Subject key identifier: 66:32:42:A0:5A:18:E2:F9:02:01:81:A8:74:42:51:3E:79:06:03:51 Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Certificate serial: 019C24F87BC36A76CB772FB1099BCF913872 Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/ZjJCoFoY4vkCAYGodEJRPnkGA1E.roa Signing time: Tue 03 Feb 2026 19:26:30 +0000 ROA not before: Tue 03 Feb 2026 19:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.15.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 09:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:f8:7b:c3:6a:76:cb:77:2f:b1:09:9b:cf:91:38:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Validity Not Before: Feb 3 19:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=663242a05a18e2f9020181a87442513e79060351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:35:9d:ce:e6:95:16:d7:99:01:bb:40:fe: 72:5f:ba:da:60:bc:0e:d2:83:4c:8f:fc:8e:2b:7e: 30:24:3b:ec:9c:5c:d2:b2:bf:6e:21:6d:e2:f5:ca: b6:ad:48:ef:09:16:e9:15:5e:b0:5a:45:8e:12:bf: d9:d5:08:d3:c6:2a:b9:56:4c:36:8a:69:bd:68:d9: 1e:3a:1e:09:a0:99:cf:25:fb:ef:ae:f1:84:cc:08: cc:60:1f:ad:30:e1:d8:5b:74:1e:b4:fa:25:9e:81: 3e:cc:16:bd:0c:9a:57:33:5c:07:dc:80:b0:77:5d: 43:b3:35:b0:bd:f8:aa:bf:5d:39:50:74:70:81:f0: 91:79:e3:69:e2:a8:92:0c:d8:57:57:be:b5:f8:be: e3:9f:02:09:c8:2e:9c:7b:8f:25:50:09:7f:76:f6: 5c:6d:c2:bc:f4:7e:fc:8b:a7:08:66:ff:f4:09:64: c6:b8:e7:88:70:a8:79:4d:07:3f:64:89:ca:d8:21: 2a:6b:50:c7:c2:39:5f:a9:21:07:54:bb:4c:13:7a: 39:15:23:a0:c5:83:b3:8d:92:10:26:fc:7b:da:24: 67:c3:83:c4:b4:08:ce:d4:9b:a2:5f:00:ec:7d:4f: 2b:65:cb:48:65:5b:fd:0a:6d:75:6f:52:c6:70:a1: 54:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:32:42:A0:5A:18:E2:F9:02:01:81:A8:74:42:51:3E:79:06:03:51 X509v3 Authority Key Identifier: keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/ZjJCoFoY4vkCAYGodEJRPnkGA1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.106.0/23 Signature Algorithm: sha256WithRSAEncryption 72:cb:6d:c9:b5:21:6a:f6:f9:75:a2:b0:7e:24:e6:3c:0a:10: 11:06:6d:46:f1:1a:f4:36:30:06:db:f6:26:c5:3a:78:ef:a6: 5a:68:ee:d9:e9:de:00:60:d9:a0:36:f4:68:be:d1:b9:4a:82: 62:44:f6:e5:62:e3:da:86:71:8b:9d:3a:d5:fb:cb:56:47:1e: a9:78:bd:cf:04:36:9b:72:d1:d5:29:85:74:cc:1f:69:34:94: 94:ca:69:52:61:83:4e:61:a3:7a:54:a1:7a:54:75:f8:30:12: b9:1c:92:3e:dc:25:ab:31:3b:f6:0a:1c:60:be:ed:e5:b8:92: 18:84:fe:1e:91:ae:92:14:76:5e:23:f4:70:87:ea:2f:ac:05: 5c:9d:2a:bc:51:48:26:db:b3:3e:4e:d4:37:b2:3e:41:1e:2d: 90:d5:86:62:97:c1:50:6e:3d:ba:b1:11:b2:6e:d4:07:8c:2d: ff:50:73:bc:97:7b:32:fc:4b:e2:a2:0a:49:1e:07:e1:ec:75: 77:26:d6:34:b8:11:eb:fc:43:b2:dd:7b:cf:9f:f4:15:d8:0c: 2d:2e:37:11:2b:97:4c:53:ce:ec:ba:06:66:2f:d5:88:d9:4d: 36:b8:a3:bf:c6:ee:bb:b5:fa:49:67:1f:49:30:c9:f0:99:f0: 47:3c:2c:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwk+HvDanbLdy+xCZvPkThyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2 OGIzN2UwHhcNMjYwMjAzMTkyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjMyNDJhMDVhMThlMmY5MDIwMTgxYTg3NDQyNTEzZTc5MDYwMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yo1nc7mlRbXmQG7QP5yX7raYLwO 0oNMj/yOK34wJDvsnFzSsr9uIW3i9cq2rUjvCRbpFV6wWkWOEr/Z1QjTxiq5Vkw2 imm9aNkeOh4JoJnPJfvvrvGEzAjMYB+tMOHYW3QetPolnoE+zBa9DJpXM1wH3ICw d11DszWwvfiqv105UHRwgfCReeNp4qiSDNhXV761+L7jnwIJyC6ce48lUAl/dvZc bcK89H78i6cIZv/0CWTGuOeIcKh5TQc/ZInK2CEqa1DHwjlfqSEHVLtME3o5FSOg xYOzjZIQJvx72iRnw4PEtAjO1JuiXwDsfU8rZctIZVv9Cm11b1LGcKFUxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGYyQqBaGOL5AgGBqHRCUT55BgNRMB8GA1UdIwQY MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt NmM4ZmQ4NGJiNWY1LzEvWmpKQ29Gb1k0dmtDQVlHb2RFSlJQbmtHQTFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1 LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQ9qMA0G CSqGSIb3DQEBCwUAA4IBAQByy23JtSFq9vl1orB+JOY8ChARBm1G8Rr0NjAG2/Ym xTp476ZaaO7Z6d4AYNmgNvRovtG5SoJiRPblYuPahnGLnTrV+8tWRx6peL3PBDab ctHVKYV0zB9pNJSUymlSYYNOYaN6VKF6VHX4MBK5HJI+3CWrMTv2Chxgvu3luJIY hP4eka6SFHZeI/Rwh+ovrAVcnSq8UUgm27M+TtQ3sj5BHi2Q1YZil8FQbj26sRGy btQHjC3/UHO8l3sy/EviogpJHgfh7HV3JtY0uBHr/EOy3XvPn/QV2AwtLjcRK5dM U87sugZmL9WI2U02uKO/xu67tfpJZx9JMMnwmfBHPCxZ -----END CERTIFICATE-----Generated at Tue Feb 10 15:43:44 2026 by rpki-client