This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa File: zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa (raw, json) Hash identifier: ozB7NhhSE1yVLk2WKSYofXpTlw9D87gtz/SOBq9sRpY= Subject key identifier: CE:FE:F1:5E:BF:CA:67:C6:07:01:FE:9C:46:6F:21:F4:E8:7C:00:9B Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090 Certificate serial: 019B7758D95E688AD0FB4E633309203BC644 Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60406 IP address blocks: 5.45.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d9:5e:68:8a:d0:fb:4e:63:33:09:20:3b:c6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cefef15ebfca67c60701fe9c466f21f4e87c009b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:2f:4b:6d:84:e2:fa:5e:1f:b1:1e:2b:fe: 2a:2a:23:39:18:15:a9:e4:cc:92:0c:85:fb:34:ae: 65:09:79:a2:4c:c0:2f:f8:22:ac:50:e5:f7:cc:fd: 54:29:0d:df:be:6f:c3:50:5b:d4:6a:0b:77:2b:9f: b7:c8:49:4b:16:fd:27:7d:0b:1d:07:f3:53:3c:ba: 9c:d8:db:0a:1a:48:f4:31:c2:80:e2:d8:ff:02:60: 32:77:11:91:2c:24:57:45:0b:2e:4b:8e:8a:e2:12: f5:71:0a:99:42:23:42:9d:a6:e2:81:06:7e:72:59: 99:6a:19:33:1c:be:79:c5:05:26:8d:46:e5:34:b8: c3:21:e6:dc:02:f3:a5:4a:32:6c:9a:6a:6b:33:c1: 26:c1:db:ac:fb:b6:94:ed:33:e1:51:a8:60:e9:00: 19:6e:2e:09:8e:d8:90:b7:c8:6c:80:46:3f:39:21: 99:63:71:b5:29:52:53:40:a7:c3:d4:3e:f9:74:9f: 4f:6d:8a:93:70:2e:ee:5e:21:c9:5b:0e:38:4f:cc: 01:24:7c:03:fd:cf:5e:22:e4:bb:5a:39:72:ea:63: 4c:6d:b7:bc:42:3c:e7:c3:23:c0:9a:99:ec:f9:27: 31:91:e6:37:2e:a3:cc:6f:5c:e0:e2:04:54:3a:c8: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FE:F1:5E:BF:CA:67:C6:07:01:FE:9C:46:6F:21:F4:E8:7C:00:9B X509v3 Authority Key Identifier: keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/zv7xXr_KZ8YHAf6cRm8h9Oh8AJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.189.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:3e:31:02:f3:26:30:7f:4c:4c:36:45:d0:0f:7c:0f:60:4b: 5e:df:ad:1b:8b:6e:58:67:c0:9a:37:b6:5e:d0:de:5a:27:ee: 81:5d:27:76:2e:cd:ef:cc:2d:e1:08:f7:80:5c:e3:76:31:04: 9a:48:e9:93:78:20:5d:6e:69:65:eb:a8:34:32:ac:ed:a8:53: fc:11:fa:5c:91:33:b2:e1:ad:0a:b9:71:70:e5:b6:f8:63:d3: 03:b3:32:62:1b:87:a8:05:38:01:6b:9b:8a:30:8d:09:3b:13: 21:bc:27:42:e5:13:2f:37:8f:74:17:df:db:4d:c6:a8:49:09: cf:f9:c6:41:bb:49:e3:01:3f:b3:b4:e4:a9:b7:f6:58:89:9f: 1d:cf:8e:61:e4:74:f6:5e:76:f7:2b:3d:fd:02:b4:f0:f0:07: fc:8f:c8:cd:2d:28:4d:17:82:99:dd:31:a6:c8:7a:f4:42:e8: c4:44:ca:e8:3d:62:53:95:00:de:ac:a9:05:36:88:6a:be:72: fc:08:b0:a5:7f:a1:ba:32:cd:01:c1:f1:c2:5d:c6:f2:97:a8: 5a:36:26:ce:df:8f:9c:f6:aa:ee:e6:76:db:ad:43:eb:d9:7c: fb:0c:25:ff:02:af:7b:89:9f:8c:13:9c:8e:c2:04:c0:7b:54: 9d:9f:09:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNleaIrQ+05jMwkgO8ZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi MDEwOTAwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWZlZjE1ZWJmY2E2N2M2MDcwMWZlOWM0NjZmMjFmNGU4N2MwMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4UvS22E4vpeH7EeK/4qKiM5GBWp 5MySDIX7NK5lCXmiTMAv+CKsUOX3zP1UKQ3fvm/DUFvUagt3K5+3yElLFv0nfQsd B/NTPLqc2NsKGkj0McKA4tj/AmAydxGRLCRXRQsuS46K4hL1cQqZQiNCnabigQZ+ clmZahkzHL55xQUmjUblNLjDIebcAvOlSjJsmmprM8Emwdus+7aU7TPhUahg6QAZ bi4JjtiQt8hsgEY/OSGZY3G1KVJTQKfD1D75dJ9PbYqTcC7uXiHJWw44T8wBJHwD /c9eIuS7Wjly6mNMbbe8QjznwyPAmpns+ScxkeY3LqPMb1zg4gRUOsjzDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM7+8V6/ymfGBwH+nEZvIfTofACbMB8GA1UdIwQY MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt NjJjMWIxZmYzYTI2LzEvenY3eFhyX0taOFlIQWY2Y1JtOGg5T2g4QUpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2 LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABS29MA0G CSqGSIb3DQEBCwUAA4IBAQB8PjEC8yYwf0xMNkXQD3wPYEte360bi25YZ8CaN7Ze 0N5aJ+6BXSd2Ls3vzC3hCPeAXON2MQSaSOmTeCBdbmll66g0MqztqFP8EfpckTOy 4a0KuXFw5bb4Y9MDszJiG4eoBTgBa5uKMI0JOxMhvCdC5RMvN490F9/bTcaoSQnP +cZBu0njAT+ztOSpt/ZYiZ8dz45h5HT2Xnb3Kz39ArTw8Af8j8jNLShNF4KZ3TGm yHr0QujERMroPWJTlQDerKkFNohqvnL8CLClf6G6Ms0BwfHCXcbyl6haNibO34+c 9qru5nbbrUPr2Xz7DCX/Aq97iZ+ME5yOwgTAe1Sdnwmj -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:43 2026 by rpki-client