This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zA1vlnlcCh-ZOa3arZ-aZqmwKGQ.roa File: zA1vlnlcCh-ZOa3arZ-aZqmwKGQ.roa (raw, json) Hash identifier: sZWR6GqshtMfpUcgDgqQ37JrCNF/VGRFIlzbNr6pb2Y= Subject key identifier: CC:0D:6F:96:79:5C:0A:1F:99:39:AD:DA:AD:9F:9A:66:A9:B0:28:64 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82BDAD8FAEC9CA4224289A648C6BC4 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zA1vlnlcCh-ZOa3arZ-aZqmwKGQ.roa Signing time: Fri 02 Jan 2026 16:20:33 +0000 ROA not before: Fri 02 Jan 2026 16:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44103 IP address blocks: 178.218.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:bd:ad:8f:ae:c9:ca:42:24:28:9a:64:8c:6b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc0d6f96795c0a1f9939addaad9f9a66a9b02864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:5e:3b:3b:2b:aa:2e:dc:26:64:8b:d5:75: 8a:0f:da:be:35:39:df:7c:d2:a2:17:bb:de:1b:89: d6:6d:67:51:c4:87:c7:d1:47:fe:a5:a4:42:6a:04: 2a:f8:0e:4c:88:e8:15:fa:96:fd:c7:88:3f:0b:cd: 7f:85:ec:b2:32:3a:86:ec:96:81:a6:f2:ae:4d:fc: 3f:ff:b8:eb:9c:54:53:7d:aa:4e:bf:fc:da:d6:29: 0b:4d:46:07:29:91:b4:4e:0f:6c:6e:e9:ef:46:09: 67:d8:74:f1:f9:d2:76:e4:fa:c1:a7:e9:ac:1b:27: fb:ed:eb:b5:3d:b3:2e:47:72:6b:b7:76:bd:3c:79: a8:13:6f:42:60:80:86:9c:9d:5d:6c:73:07:18:f9: 52:87:9b:68:5c:57:e9:f4:1d:ac:9e:ff:19:34:9c: 5b:ca:7a:89:e3:f9:71:b7:eb:48:dc:b9:f9:15:97: 24:87:90:7b:ae:18:79:de:33:00:79:bd:70:50:f8: 5e:75:ab:68:ef:a5:7d:41:1a:45:6f:5c:bf:eb:f7: 90:ed:d3:14:52:62:9c:7a:a5:2c:78:48:6f:31:23: b5:d1:4c:f4:24:aa:fd:0c:dd:c6:9b:d6:19:5c:60: 83:5f:a5:db:17:cb:28:eb:6c:d8:5f:96:61:2a:a5: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0D:6F:96:79:5C:0A:1F:99:39:AD:DA:AD:9F:9A:66:A9:B0:28:64 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zA1vlnlcCh-ZOa3arZ-aZqmwKGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.218.145.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:40:5e:1a:2d:f4:e6:58:e9:e1:2f:76:63:e8:9c:d9:d7:48: c8:d5:14:28:17:36:20:89:7b:1a:bc:e1:b9:70:db:2f:b9:bd: 2a:be:1b:7e:5e:f6:c0:40:b7:74:6d:31:0f:0a:29:81:c5:38: ee:21:68:bc:69:cc:60:67:e1:a8:e8:27:66:c1:5a:9e:ca:c7: 0a:8e:c2:fe:54:56:6c:65:b5:70:bb:2a:ac:7b:75:c1:b2:d4: 67:6f:c1:ec:04:58:00:cd:87:49:d1:5a:55:90:96:68:6b:7e: a7:70:3f:aa:5e:3e:19:a7:83:6a:51:60:a9:86:bf:5c:ad:0a: f2:a1:02:64:0c:4d:11:41:0d:6c:41:1a:96:7b:08:d9:34:00: 37:3c:eb:cd:7a:af:51:c4:02:b0:4b:b5:98:d5:a1:c6:3f:c5: 68:1d:f2:9d:75:4e:53:6c:d4:6f:43:da:58:a2:fc:59:bf:a6: 07:4d:ff:86:38:11:e5:c9:6c:ed:63:af:22:e7:cd:e2:e9:26: df:60:45:da:fd:0e:a2:0f:97:2e:0f:0d:35:94:09:21:1d:9f: 57:23:51:c9:bd:89:70:a9:4f:f5:66:f9:91:ce:d4:9c:b2:9a: 6f:80:af:7f:b0:6d:b5:5f:b4:65:6d:a1:ff:e7:6b:fe:a9:75: 09:81:79:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gr2tj67JykIkKJpkjGvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzBkNmY5Njc5NWMwYTFmOTkzOWFkZGFhZDlmOWE2NmE5YjAyODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNleOzsrqi7cJmSL1XWKD9q+NTnf fNKiF7veG4nWbWdRxIfH0Uf+paRCagQq+A5MiOgV+pb9x4g/C81/heyyMjqG7JaB pvKuTfw//7jrnFRTfapOv/za1ikLTUYHKZG0Tg9sbunvRgln2HTx+dJ25PrBp+ms Gyf77eu1PbMuR3Jrt3a9PHmoE29CYICGnJ1dbHMHGPlSh5toXFfp9B2snv8ZNJxb ynqJ4/lxt+tI3Ln5FZckh5B7rhh53jMAeb1wUPhedato76V9QRpFb1y/6/eQ7dMU UmKceqUseEhvMSO10Uz0JKr9DN3Gm9YZXGCDX6XbF8so62zYX5ZhKqVvOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMwNb5Z5XAofmTmt2q2fmmapsChkMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvekExdmxubGNDaC1aT2EzYXJaLWFacW13S0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstqRMA0G CSqGSIb3DQEBCwUAA4IBAQANQF4aLfTmWOnhL3Zj6JzZ10jI1RQoFzYgiXsavOG5 cNsvub0qvht+XvbAQLd0bTEPCimBxTjuIWi8acxgZ+Go6CdmwVqeyscKjsL+VFZs ZbVwuyqse3XBstRnb8HsBFgAzYdJ0VpVkJZoa36ncD+qXj4Zp4NqUWCphr9crQry oQJkDE0RQQ1sQRqWewjZNAA3POvNeq9RxAKwS7WY1aHGP8VoHfKddU5TbNRvQ9pY ovxZv6YHTf+GOBHlyWztY68i583i6SbfYEXa/Q6iD5cuDw01lAkhHZ9XI1HJvYlw qU/1ZvmRztScsppvgK9/sG21X7RlbaH/52v+qXUJgXlt -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:40 2026 by rpki-client