This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/Z0Ol55vmano2z06uUQknUo3QoTc.roa File: Z0Ol55vmano2z06uUQknUo3QoTc.roa (raw, json) Hash identifier: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE= Subject key identifier: 67:43:A5:E7:9B:E6:6A:7A:36:CF:4E:AE:51:09:27:52:8D:D0:A1:37 Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Certificate serial: 019B7EA6CC50C3EEC5EAAD32C33D2BB13766 Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/Z0Ol55vmano2z06uUQknUo3QoTc.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204601 IP address blocks: 45.14.12.0/24 maxlen: 24 45.14.13.0/24 maxlen: 24 45.14.15.0/24 maxlen: 24 80.89.228.0/23 maxlen: 23 80.89.230.0/24 maxlen: 24 80.89.234.0/23 maxlen: 23 80.89.238.0/23 maxlen: 23 85.208.184.0/22 maxlen: 22 85.208.184.0/24 maxlen: 24 85.208.185.0/24 maxlen: 24 85.208.187.0/24 maxlen: 24 89.105.198.0/24 maxlen: 24 185.80.234.0/24 maxlen: 24 185.92.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cc:50:c3:ee:c5:ea:ad:32:c3:3d:2b:b1:37:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6743a5e79be66a7a36cf4eae510927528dd0a137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:5c:b1:37:6c:fc:23:12:1c:78:25:6e:a9: b6:00:06:fc:ea:40:d1:aa:95:b7:ba:ea:ba:e2:84: db:77:4c:ec:3f:87:68:b9:61:2f:12:9f:92:bf:99: f5:bd:b9:31:2c:ab:8e:e3:3b:78:c9:04:87:f0:75: 07:3a:8b:f3:78:4d:0b:0e:ec:7f:f3:6a:61:24:33: a9:9b:5d:b0:bd:df:4b:c2:d6:e3:bd:fd:42:60:5e: ee:77:a0:95:8b:14:97:a3:94:20:cf:fb:cf:b5:59: 56:b4:f4:bc:2f:4d:ac:0b:73:a4:71:c2:13:0a:b4: d0:35:f2:80:85:1e:3c:33:f4:5a:2e:c0:7b:ae:9a: c9:54:71:05:06:25:8f:4f:c6:ee:07:84:3f:01:e0: 42:07:35:e2:65:3a:19:ae:ae:5f:18:0c:68:12:ee: 88:8b:08:eb:30:54:df:00:91:06:e8:d7:35:f7:78: a0:34:88:b0:e6:3e:f1:95:52:6a:05:29:ea:ad:5d: e7:76:42:cc:19:57:28:58:97:aa:e2:8d:a4:85:37: 41:3a:de:bf:5e:7b:ba:e6:5d:ba:5e:bd:d2:4a:0a: c6:3c:76:ea:48:18:a0:1a:ef:e8:8c:c1:eb:64:15: c5:a1:1a:96:e3:5e:bc:67:7c:a9:8b:bd:0a:98:4b: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:43:A5:E7:9B:E6:6A:7A:36:CF:4E:AE:51:09:27:52:8D:D0:A1:37 X509v3 Authority Key Identifier: keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/Z0Ol55vmano2z06uUQknUo3QoTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.12.0/23 45.14.15.0/24 80.89.228.0-80.89.230.255 80.89.234.0/23 80.89.238.0/23 85.208.184.0/22 89.105.198.0/24 185.80.234.0/24 185.92.148.0/22 Signature Algorithm: sha256WithRSAEncryption 98:40:18:78:b9:ce:a6:ac:23:70:8e:0b:50:40:b0:c5:ec:63: 1e:92:84:a0:ac:9d:71:b7:d6:de:26:a6:01:32:2c:1c:e5:d7: c1:15:6a:5a:da:91:47:0b:81:38:67:f5:68:52:a3:be:9f:48: 50:78:7c:a3:90:9e:6c:56:f6:4d:e2:24:af:82:99:c7:c7:f6: 11:d0:1b:61:9a:dd:da:c6:25:a3:4a:35:bd:aa:d9:29:ba:57: 2c:76:3b:56:f1:04:71:56:a9:5a:86:5a:25:98:a8:6f:f5:33: 4b:a1:3a:51:a2:d7:9b:3b:4e:17:32:4d:7e:04:ab:b6:c8:3f: 35:ad:04:86:29:dd:69:ec:6d:a5:d2:12:60:95:a0:ac:39:e8: 31:ae:56:5a:cb:b3:5d:62:6a:cc:87:5e:b5:2c:52:89:83:44: 49:07:2e:38:dc:dc:0a:6b:4f:6a:33:7b:a6:56:fc:35:cd:98: 8b:ea:57:89:8b:fe:02:bf:21:98:c4:80:69:1d:84:17:ee:01: a5:75:cb:bc:5d:63:c0:d5:ba:ea:80:8a:00:70:4a:56:7f:60: 18:88:77:28:d9:67:a4:30:07:8f:2e:e4:9b:34:b5:df:df:2e: 1e:2e:a1:0d:53:51:df:46:fe:34:44:23:97:5a:33:5f:1f:31: 4d:8f:65:8d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt+psxQw+7F6q0ywz0rsTdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz Zjc5MzAwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzQzYTVlNzliZTY2YTdhMzZjZjRlYWU1MTA5Mjc1MjhkZDBhMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCZcsTds/CMSHHglbqm2AAb86kDR qpW3uuq64oTbd0zsP4douWEvEp+Sv5n1vbkxLKuO4zt4yQSH8HUHOovzeE0LDux/ 82phJDOpm12wvd9Lwtbjvf1CYF7ud6CVixSXo5Qgz/vPtVlWtPS8L02sC3OkccIT CrTQNfKAhR48M/RaLsB7rprJVHEFBiWPT8buB4Q/AeBCBzXiZToZrq5fGAxoEu6I iwjrMFTfAJEG6Nc193igNIiw5j7xlVJqBSnqrV3ndkLMGVcoWJeq4o2khTdBOt6/ Xnu65l26Xr3SSgrGPHbqSBigGu/ojMHrZBXFoRqW4168Z3ypi70KmEsyOwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFGdDpeeb5mp6Ns9OrlEJJ1KN0KE3MB8GA1UdIwQY MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt MDBiY2Q5YjkxYzFiLzEvWjBPbDU1dm1hbm8yejA2dVVRa25VbzNRb1RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBLQ4MAwQA LQ4PMAwDBAJQWeQDBABQWeYDBAFQWeoDBAFQWe4DBAJV0LgDBABZacYDBAC5UOoD BAK5XJQwDQYJKoZIhvcNAQELBQADggEBAJhAGHi5zqasI3COC1BAsMXsYx6ShKCs nXG31t4mpgEyLBzl18EValrakUcLgThn9WhSo76fSFB4fKOQnmxW9k3iJK+CmcfH 9hHQG2Ga3drGJaNKNb2q2Sm6Vyx2O1bxBHFWqVqGWiWYqG/1M0uhOlGi15s7Thcy TX4Eq7bIPzWtBIYp3WnsbaXSEmCVoKw56DGuVlrLs11iasyHXrUsUomDREkHLjjc 3AprT2oze6ZW/DXNmIvqV4mL/gK/IZjEgGkdhBfuAaV1y7xdY8DVuuqAigBwSlZ/ YBiIdyjZZ6QwB48u5Js0td/fLh4uoQ1TUd9G/jREI5daM18fMU2PZY0= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:29 2026 by rpki-client