This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZ-D2b402H7FAnSNbab9TSLH_6g.roa File: rZ-D2b402H7FAnSNbab9TSLH_6g.roa (raw, json) Hash identifier: +qqU712lNRTHA/Hnb4vW3+upCvyxT8uIQc1/NpiZAQk= Subject key identifier: AD:9F:83:D9:BE:34:D8:7E:C5:02:74:8D:6D:A6:FD:4D:22:C7:FF:A8 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F63276B9E48111CF380C498F1CEB Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZ-D2b402H7FAnSNbab9TSLH_6g.roa Signing time: Fri 02 Jan 2026 14:21:44 +0000 ROA not before: Fri 02 Jan 2026 14:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214940 IP address blocks: 45.144.212.0/24 maxlen: 24 77.83.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f6:32:76:b9:e4:81:11:cf:38:0c:49:8f:1c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad9f83d9be34d87ec502748d6da6fd4d22c7ffa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b4:15:f3:2f:f5:31:5e:41:db:25:bc:a4:8b: cc:c7:ff:37:33:47:7f:04:3b:45:6c:f0:86:7f:73: 00:b6:3a:29:39:27:f3:8d:2b:f3:e6:32:60:b1:6a: 26:88:0b:4f:30:f8:c3:fe:e0:ad:2e:ed:0a:39:20: 1d:f4:13:ac:f6:84:26:09:e5:0b:ae:3a:38:48:1f: 9c:a0:44:26:1e:0a:6b:05:a5:60:ad:f0:d3:be:9b: d7:7e:22:8a:69:0c:f6:f4:0d:ef:23:16:e3:16:34: 8d:35:a3:74:37:20:6a:1b:3e:3d:55:b1:91:58:ce: 92:e5:15:81:1e:a8:b7:58:05:e8:79:e8:7f:68:a4: b4:28:a3:6f:16:0f:c4:d4:82:d7:f1:8a:d1:27:a4: d1:dc:08:71:95:b6:eb:2d:40:08:06:4a:6a:21:b0: bf:c7:fb:af:09:e9:2c:94:d8:02:5b:68:a8:8c:51: 9d:59:1c:8e:da:02:1d:a8:99:ed:75:6e:d1:fb:69: e5:8e:f2:75:8d:be:76:ab:69:6a:2b:65:58:d7:0b: 34:ea:37:74:bf:b1:69:2b:5c:b3:52:f3:ac:f4:0c: 02:52:95:80:40:42:d7:69:1b:04:e5:00:f0:e6:f2: 8c:48:ba:84:de:92:ba:19:75:34:f7:0b:db:9d:58: f0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9F:83:D9:BE:34:D8:7E:C5:02:74:8D:6D:A6:FD:4D:22:C7:FF:A8 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZ-D2b402H7FAnSNbab9TSLH_6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.212.0/24 77.83.39.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:15:5e:dd:b1:ba:7f:62:fa:bb:85:46:d1:a6:89:42:8f:5b: b8:a3:19:87:47:dc:98:41:b9:23:2a:02:f7:4b:95:ce:10:57: 38:04:3c:2b:be:1b:da:b4:d8:06:73:d6:87:df:08:28:1b:b7: 3b:f4:39:18:b6:86:fb:12:77:a4:c5:a9:8f:10:69:5f:c8:b8: 8a:5a:81:1b:40:3b:17:83:d4:9e:27:cd:29:7b:1b:aa:0d:62: 89:a4:09:73:42:a6:d7:5b:67:f9:44:5f:ac:6c:6b:a4:23:b6: 10:a8:06:e8:f7:2e:f0:15:ca:a0:49:ca:93:9c:e5:f1:ce:81: c2:41:76:c1:52:81:5c:f5:ac:a7:ad:95:1f:3f:d8:7a:a1:18: 97:ce:da:8f:84:a3:8b:71:e0:4e:22:d6:08:4d:dc:95:1a:d9: 91:83:9b:71:10:69:18:a0:91:1a:8b:af:71:4c:ff:59:5c:db: 53:1d:93:59:c0:9d:d7:2b:20:fb:d6:bd:b9:61:d9:81:2a:d5: 7e:4b:2a:f8:34:cf:fb:e7:b8:96:32:8e:3e:a1:10:8d:d7:0c: 8f:3b:23:31:79:fd:65:7f:9e:66:b3:89:c5:53:c4:39:11:1e: b2:1d:22:55:b4:cb:8d:8f:79:7e:3c:77:cd:6c:63:97:53:c7: 13:7b:4f:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FfYydrnkgRHPOAxJjxzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDlmODNkOWJlMzRkODdlYzUwMjc0OGQ2ZGE2ZmQ0ZDIyYzdmZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LQV8y/1MV5B2yW8pIvMx/83M0d/ BDtFbPCGf3MAtjopOSfzjSvz5jJgsWomiAtPMPjD/uCtLu0KOSAd9BOs9oQmCeUL rjo4SB+coEQmHgprBaVgrfDTvpvXfiKKaQz29A3vIxbjFjSNNaN0NyBqGz49VbGR WM6S5RWBHqi3WAXoeeh/aKS0KKNvFg/E1ILX8YrRJ6TR3AhxlbbrLUAIBkpqIbC/ x/uvCekslNgCW2iojFGdWRyO2gIdqJntdW7R+2nljvJ1jb52q2lqK2VY1ws06jd0 v7FpK1yzUvOs9AwCUpWAQELXaRsE5QDw5vKMSLqE3pK6GXU09wvbnVjwuQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK2fg9m+NNh+xQJ0jW2m/U0ix/+oMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvclotRDJiNDAySDdGQW5TTmJhYjlUU0xIXzZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZDUAwQA TVMnMA0GCSqGSIb3DQEBCwUAA4IBAQCcFV7dsbp/Yvq7hUbRpolCj1u4oxmHR9yY QbkjKgL3S5XOEFc4BDwrvhvatNgGc9aH3wgoG7c79DkYtob7EnekxamPEGlfyLiK WoEbQDsXg9SeJ80pexuqDWKJpAlzQqbXW2f5RF+sbGukI7YQqAbo9y7wFcqgScqT nOXxzoHCQXbBUoFc9aynrZUfP9h6oRiXztqPhKOLceBOItYITdyVGtmRg5txEGkY oJEai69xTP9ZXNtTHZNZwJ3XKyD71r25YdmBKtV+Syr4NM/757iWMo4+oRCN1wyP OyMxef1lf55ms4nFU8Q5ER6yHSJVtMuNj3l+PHfNbGOXU8cTe0/U -----END CERTIFICATE-----Generated at Tue Jan 6 20:49:57 2026 by rpki-client