This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zeQqq2cOZKweI8enqsU7y2B2lOY.roa File: zeQqq2cOZKweI8enqsU7y2B2lOY.roa (raw, json) Hash identifier: p7TnGRULkdH/L3maydJdWg739Ut6IVebsaNH8kS4SsM= Subject key identifier: CD:E4:2A:AB:67:0E:64:AC:1E:23:C7:A7:AA:C5:3B:CB:60:76:94:E6 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C80138F74B99B4A8EF3C4BBE7846155 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zeQqq2cOZKweI8enqsU7y2B2lOY.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24940 IP address blocks: 45.145.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:8f:74:b9:9b:4a:8e:f3:c4:bb:e7:84:61:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cde42aab670e64ac1e23c7a7aac53bcb607694e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:c2:ed:8b:16:8f:3f:03:43:c9:98:58:6b: 1e:31:3b:5b:79:29:a7:f8:dd:d7:a1:e1:29:d9:71: 0c:53:ca:61:37:15:bb:6a:99:c4:3e:53:66:18:03: c7:23:2b:56:7b:a4:67:cd:f4:f4:9b:f7:05:de:36: 1f:9d:78:b7:70:f2:f2:92:5b:9d:b6:5e:70:dc:9f: 0f:eb:e3:df:68:d4:64:a0:97:7e:ca:00:c7:34:76: a3:58:ed:c2:89:00:8a:77:52:b4:a0:10:08:fd:e9: a1:d9:f9:29:58:68:cb:93:8c:bb:fd:d3:3c:0d:e6: 89:f0:9d:33:5c:e0:3c:c8:f9:17:1a:e9:40:a0:a6: 96:94:03:e4:53:b6:ba:2d:33:1f:0c:19:ec:74:0d: b9:b9:b5:95:0e:76:40:09:c2:d8:2c:ff:0e:9e:a0: 24:ec:c2:d8:7e:73:2e:83:61:f2:8d:18:9c:c7:eb: 19:6e:c5:70:c8:ee:28:76:fb:4e:bd:6d:01:6e:96: e8:d2:a1:02:e4:7e:71:a7:75:b5:ae:a8:6a:70:0c: a0:40:30:d1:98:87:8e:49:4c:ee:13:0e:88:69:c8: 5d:91:d4:b8:96:77:61:63:87:07:4e:c7:fc:95:83: 69:79:f8:fd:22:b3:e6:d2:a4:3f:52:1b:06:c8:c8: 6f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E4:2A:AB:67:0E:64:AC:1E:23:C7:A7:AA:C5:3B:CB:60:76:94:E6 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zeQqq2cOZKweI8enqsU7y2B2lOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.227.0/24 Signature Algorithm: sha256WithRSAEncryption 31:f1:bd:a0:9a:fd:df:4c:c8:d0:c8:8a:59:3f:60:c6:0d:41: 11:20:5a:cd:72:17:33:9a:64:ab:fc:dc:8a:52:a0:ae:5a:d1: be:f9:a7:6d:2a:e4:da:35:71:3d:f8:9a:79:55:a0:1a:15:cf: c4:a8:43:dc:e2:58:f7:81:9b:73:d6:11:b4:3c:40:92:5a:3d: 71:d4:ff:08:cc:94:9a:b2:30:12:ca:5a:31:f4:d4:e7:eb:a3: f5:d0:02:27:88:76:2f:7e:83:bf:7a:39:1c:ea:d6:7e:e5:d3: a9:22:57:92:c2:21:2f:09:8c:c5:30:2a:5f:ef:a6:b3:b0:a1: 1c:87:76:a0:6f:99:84:34:47:db:6f:92:9f:ab:77:e6:89:6c: 43:5f:62:01:6a:1a:fa:0c:36:c8:1b:b7:67:7c:f1:89:c4:4b: f0:9d:47:31:ca:0c:a1:80:25:87:b8:c2:29:ba:5e:9e:62:da: d5:9e:73:0e:61:88:e0:3f:2c:54:7a:3a:b4:78:60:9a:ba:a8: c2:a4:dd:eb:49:4e:7a:79:2a:96:74:0e:a9:2c:95:b1:3b:90: 44:99:76:cc:06:fb:90:6f:07:c5:93:6b:a2:13:4e:33:76:1c: 99:3c:1d:9e:65:e7:f4:85:96:d3:57:81:47:69:55:b5:db:3c: 11:06:c9:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBOPdLmbSo7zxLvnhGFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGU0MmFhYjY3MGU2NGFjMWUyM2M3YTdhYWM1M2JjYjYwNzY5NGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPvC7YsWjz8DQ8mYWGseMTtbeSmn +N3XoeEp2XEMU8phNxW7apnEPlNmGAPHIytWe6RnzfT0m/cF3jYfnXi3cPLyklud tl5w3J8P6+PfaNRkoJd+ygDHNHajWO3CiQCKd1K0oBAI/emh2fkpWGjLk4y7/dM8 DeaJ8J0zXOA8yPkXGulAoKaWlAPkU7a6LTMfDBnsdA25ubWVDnZACcLYLP8OnqAk 7MLYfnMug2HyjRicx+sZbsVwyO4odvtOvW0Bbpbo0qEC5H5xp3W1rqhqcAygQDDR mIeOSUzuEw6IachdkdS4lndhY4cHTsf8lYNpefj9IrPm0qQ/UhsGyMhvJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM3kKqtnDmSsHiPHp6rFO8tgdpTmMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvemVRcXEyY09aS3dlSThlbnFzVTd5MkIybE9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZHjMA0G CSqGSIb3DQEBCwUAA4IBAQAx8b2gmv3fTMjQyIpZP2DGDUERIFrNchczmmSr/NyK UqCuWtG++adtKuTaNXE9+Jp5VaAaFc/EqEPc4lj3gZtz1hG0PECSWj1x1P8IzJSa sjASylox9NTn66P10AIniHYvfoO/ejkc6tZ+5dOpIleSwiEvCYzFMCpf76azsKEc h3agb5mENEfbb5Kfq3fmiWxDX2IBahr6DDbIG7dnfPGJxEvwnUcxygyhgCWHuMIp ul6eYtrVnnMOYYjgPyxUejq0eGCauqjCpN3rSU56eSqWdA6pLJWxO5BEmXbMBvuQ bwfFk2uiE04zdhyZPB2eZef0hZbTV4FHaVW12zwRBskg -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:47 2026 by rpki-client