This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/0q89mS6gseI0D55M872evmBEmUU.roa File: 0q89mS6gseI0D55M872evmBEmUU.roa (raw, json) Hash identifier: 22eo/4LzLP0tiO+wKFngnAq1euAw4BlN9YUGvUFUe5Y= Subject key identifier: D2:AF:3D:99:2E:A0:B1:E2:34:0F:9E:4C:F3:BD:9E:BE:60:44:99:45 Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5 Certificate serial: 019B78A23E62774B05719758E81558746291 Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/0q89mS6gseI0D55M872evmBEmUU.roa Signing time: Thu 01 Jan 2026 08:17:37 +0000 ROA not before: Thu 01 Jan 2026 08:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198004 IP address blocks: 185.234.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3e:62:77:4b:05:71:97:58:e8:15:58:74:62:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5 Validity Not Before: Jan 1 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2af3d992ea0b1e2340f9e4cf3bd9ebe60449945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:ce:61:a2:6d:96:d8:38:c8:88:bd:b8:45: 85:05:41:de:59:8b:e8:f0:b3:18:25:d2:55:35:56: 2f:63:89:47:95:e9:4e:18:29:ce:8a:d5:22:88:9c: 54:ea:d5:e5:55:a4:c8:a2:71:2b:2c:c2:79:23:49: ab:d9:1c:a4:8d:91:32:74:31:a1:c3:f4:73:4b:ff: 31:25:db:1a:74:10:35:68:1f:d1:f8:1a:45:7c:95: 55:b1:85:cc:d1:68:e7:ab:fc:25:72:99:0e:fd:ca: 20:ad:b7:c0:f8:cc:31:83:d7:c8:80:73:b7:68:cf: 20:a3:5a:5a:c9:86:a5:a0:e6:bc:f6:90:72:9a:ab: 30:14:e2:67:9f:28:22:66:5e:02:1d:b9:32:8e:40: d5:c0:6b:c4:f7:2a:9a:0a:0f:6e:db:01:33:cd:da: c8:cf:c7:40:df:2a:6c:96:5b:69:15:35:5a:49:d1: 4d:2f:14:f9:dd:93:1a:76:6e:87:13:21:8f:85:9a: f4:1d:de:58:30:b1:00:8e:b6:06:ea:0f:07:56:9c: 12:3c:12:3f:4c:2a:d9:56:a6:d1:d0:4e:c9:91:e6: ac:f1:b2:f0:3c:2d:be:ae:29:7d:71:28:07:d5:66: 6f:5f:73:6f:61:93:e0:a0:1a:77:3e:9a:29:11:45: 1d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AF:3D:99:2E:A0:B1:E2:34:0F:9E:4C:F3:BD:9E:BE:60:44:99:45 X509v3 Authority Key Identifier: keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/0q89mS6gseI0D55M872evmBEmUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.240.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:87:c7:24:79:83:78:0a:98:e9:51:17:5a:82:4b:22:8b:42: 2d:9b:88:2f:77:84:f1:0c:bb:f4:5c:fd:da:8b:61:5a:ac:ea: fa:0c:74:ae:f8:55:80:fa:2c:f6:36:57:5c:76:db:f3:bc:5a: 82:0d:14:ca:fa:de:ba:5a:4c:40:8a:b5:9c:9c:73:8c:46:3f: 43:24:50:80:4d:d9:42:ec:ab:a4:c4:ff:1a:34:cf:86:b7:58: 22:51:cb:32:5d:68:58:2f:ed:83:16:0c:ef:0d:33:1c:55:cb: 45:6d:b2:72:9a:08:4c:27:1e:de:03:53:c2:79:b2:22:b4:d7: e5:38:9c:c0:73:34:e3:78:1e:93:b2:cc:eb:27:56:92:6c:17: ae:59:33:ef:fc:d3:9f:f4:c6:9a:81:a2:3c:6c:d1:bd:53:e4: a0:b8:5c:ab:42:44:a5:4e:17:c1:c8:d3:4b:2f:41:f9:1c:7f: 8b:63:60:c9:35:9b:e9:f8:cb:6e:3c:53:98:0e:44:ef:4f:28: f8:2e:7b:28:b8:10:7a:fb:cc:3a:e6:1d:36:cd:81:50:85:a5: ce:b4:62:2e:b8:a4:da:33:13:ad:0e:af:22:91:c0:3e:eb:ab: 68:44:89:7e:e9:ca:0e:1e:6c:36:a1:e1:4c:15:e2:fc:40:db: c8:6c:8d:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oj5id0sFcZdY6BVYdGKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YmIyMmY4MjJkYjc0NTFmZTFlMjE5NmNhYzYzYzU2NDdm YjFhZDUwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmFmM2Q5OTJlYTBiMWUyMzQwZjllNGNmM2JkOWViZTYwNDQ5OTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPPOYaJtltg4yIi9uEWFBUHeWYvo 8LMYJdJVNVYvY4lHlelOGCnOitUiiJxU6tXlVaTIonErLMJ5I0mr2RykjZEydDGh w/RzS/8xJdsadBA1aB/R+BpFfJVVsYXM0Wjnq/wlcpkO/cogrbfA+Mwxg9fIgHO3 aM8go1payYaloOa89pBymqswFOJnnygiZl4CHbkyjkDVwGvE9yqaCg9u2wEzzdrI z8dA3ypslltpFTVaSdFNLxT53ZMadm6HEyGPhZr0Hd5YMLEAjrYG6g8HVpwSPBI/ TCrZVqbR0E7Jkeas8bLwPC2+ril9cSgH1WZvX3NvYZPgoBp3PpopEUUdVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNKvPZkuoLHiNA+eTPO9nr5gRJlFMB8GA1UdIwQY MBaAFGS7Ivgi23RR/h4hlsrGPFZH+xrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lODEzZDQtNDEyNi00Y2ExLTkwZDYt NDVkMDVhNGIxZDk5LzEvMHE4OW1TNmdzZUkwRDU1TTg3MmV2bUJFbVVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lODEzZDQtNDEyNi00Y2ExLTkwZDYtNDVkMDVhNGIxZDk5 LzEvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuerwMA0G CSqGSIb3DQEBCwUAA4IBAQAMh8ckeYN4CpjpURdagksii0Itm4gvd4TxDLv0XP3a i2FarOr6DHSu+FWA+iz2NldcdtvzvFqCDRTK+t66WkxAirWcnHOMRj9DJFCATdlC 7KukxP8aNM+Gt1giUcsyXWhYL+2DFgzvDTMcVctFbbJymghMJx7eA1PCebIitNfl OJzAczTjeB6TsszrJ1aSbBeuWTPv/NOf9MaagaI8bNG9U+SguFyrQkSlThfByNNL L0H5HH+LY2DJNZvp+MtuPFOYDkTvTyj4LnsouBB6+8w65h02zYFQhaXOtGIuuKTa MxOtDq8ikcA+66toRIl+6coOHmw2oeFMFeL8QNvIbI26 -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:49 2026 by rpki-client