This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa File: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (raw, json) Hash identifier: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI= Subject key identifier: 36:86:52:5A:19:AA:A8:9F:A3:4F:E8:08:92:68:EA:43:CA:98:3E:1B Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019B7AC7E013D97842876E2F584130D1E471 Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 213.165.32.0/24 maxlen: 24 213.165.33.0/24 maxlen: 24 213.165.34.0/24 maxlen: 24 213.165.35.0/24 maxlen: 24 213.165.36.0/24 maxlen: 24 213.165.37.0/24 maxlen: 24 213.165.38.0/24 maxlen: 24 213.165.39.0/24 maxlen: 24 213.165.40.0/24 maxlen: 24 213.165.41.0/24 maxlen: 24 213.165.42.0/24 maxlen: 24 213.165.43.0/24 maxlen: 24 213.165.44.0/24 maxlen: 24 213.165.45.0/24 maxlen: 24 213.165.46.0/24 maxlen: 24 213.165.47.0/24 maxlen: 24 213.165.48.0/24 maxlen: 24 213.165.49.0/24 maxlen: 24 213.165.50.0/24 maxlen: 24 213.165.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e0:13:d9:78:42:87:6e:2f:58:41:30:d1:e4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3686525a19aaa89fa34fe8089268ea43ca983e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:23:2c:41:f9:88:40:26:87:82:3a:1f:7a: 5b:ad:22:d0:37:67:59:9b:5b:6c:c5:52:72:88:e4: 80:44:15:96:fb:3a:5d:63:88:e8:48:be:a2:54:a7: 6c:47:fb:58:0e:de:fd:66:26:39:fb:fe:4b:2d:5d: 00:0c:b1:4e:5b:21:1c:4a:a4:cf:c4:a4:b7:e2:47: 85:db:71:bd:17:66:d2:c3:08:cc:2d:17:91:70:3f: 39:fd:a8:1d:7a:02:05:38:a1:5e:99:16:18:f7:49: ff:4f:a6:d1:45:4c:ce:52:7b:70:48:0c:8c:17:c5: f8:0d:12:0b:e7:70:ca:5e:7f:a9:24:bd:86:c7:47: c0:08:6e:f3:98:8b:14:ea:1b:90:19:b5:6d:cd:95: ff:28:7b:e1:a6:25:80:df:5f:32:c3:90:e3:46:45: 1d:01:d1:07:06:52:64:55:ac:05:7f:d9:e4:7e:67: 8e:20:1f:27:67:e6:16:05:1f:8d:a9:e4:ba:01:65: 4f:14:44:ed:8e:b3:b1:35:9c:9e:fd:64:be:e9:f2: ed:6b:e3:09:c5:78:19:29:e8:9d:a2:09:7a:d4:be: a8:da:76:55:c0:72:bf:bf:58:24:b2:af:b6:33:61: 7a:19:48:9d:d5:bf:b9:e7:00:6e:94:f2:8c:fc:21: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:86:52:5A:19:AA:A8:9F:A3:4F:E8:08:92:68:EA:43:CA:98:3E:1B X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.165.32.0-213.165.51.255 Signature Algorithm: sha256WithRSAEncryption 07:6f:ba:72:a5:b8:e6:75:fe:e3:ce:3f:17:c4:1a:1c:82:d8: f4:6a:ad:ca:b2:d2:ef:45:7d:1b:10:84:8e:ab:fd:8f:a0:f8: b7:91:aa:d6:8b:12:9d:16:b2:4a:30:b0:78:53:6e:8b:0b:2a: 53:66:13:47:2c:b6:92:89:c4:ab:14:1d:e0:38:77:5e:6e:2f: 5a:8a:9e:51:d8:13:a0:3b:18:46:93:b8:30:9d:7b:1e:23:3d: 51:c9:ca:85:51:fe:84:59:e9:fa:0c:07:32:7c:72:8f:f9:bb: fe:75:a1:4b:ff:ba:75:4b:a1:36:8f:18:7b:0e:5f:c5:cd:70: 57:bc:b2:8d:b8:c5:59:07:4d:39:40:84:c1:04:47:be:b3:38: 4b:8c:c3:9b:9f:60:e5:33:a6:ba:d4:0c:48:82:96:81:d0:62: f0:b6:d5:af:bf:6b:4a:b2:8d:60:74:4b:0c:8f:78:2f:7a:e6: 61:ad:a3:cd:d1:bd:2b:d8:52:f4:12:11:54:9b:f5:2c:0a:5a: e2:f9:b7:b8:69:eb:04:c8:32:af:12:c0:48:47:f0:1d:85:ee: 76:e9:79:1b:5e:68:da:53:d3:2c:64:41:35:08:f4:05:81:05: 70:2b:4b:76:cf:27:e3:d9:e5:b9:fd:b9:14:03:c5:71:63:f9: 86:44:aa:35 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x+AT2XhCh24vWEEw0eRxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjg2NTI1YTE5YWFhODlmYTM0ZmU4MDg5MjY4ZWE0M2NhOTgzZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAYjLEH5iEAmh4I6H3pbrSLQN2dZ m1tsxVJyiOSARBWW+zpdY4joSL6iVKdsR/tYDt79ZiY5+/5LLV0ADLFOWyEcSqTP xKS34keF23G9F2bSwwjMLReRcD85/agdegIFOKFemRYY90n/T6bRRUzOUntwSAyM F8X4DRIL53DKXn+pJL2Gx0fACG7zmIsU6huQGbVtzZX/KHvhpiWA318yw5DjRkUd AdEHBlJkVawFf9nkfmeOIB8nZ+YWBR+NqeS6AWVPFETtjrOxNZye/WS+6fLta+MJ xXgZKeidogl61L6o2nZVwHK/v1gksq+2M2F6GUid1b+55wBulPKM/CFCWQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDaGUloZqqifo0/oCJJo6kPKmD4bMB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvTm9aU1dobXFxSi1qVC1nSWttanFROHFZUGhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXVpSAD BALVpTAwDQYJKoZIhvcNAQELBQADggEBAAdvunKluOZ1/uPOPxfEGhyC2PRqrcqy 0u9FfRsQhI6r/Y+g+LeRqtaLEp0WskowsHhTbosLKlNmE0cstpKJxKsUHeA4d15u L1qKnlHYE6A7GEaTuDCdex4jPVHJyoVR/oRZ6foMBzJ8co/5u/51oUv/unVLoTaP GHsOX8XNcFe8so24xVkHTTlAhMEER76zOEuMw5ufYOUzprrUDEiCloHQYvC21a+/ a0qyjWB0SwyPeC965mGto83RvSvYUvQSEVSb9SwKWuL5t7hp6wTIMq8SwEhH8B2F 7nbpeRteaNpT0yxkQTUI9AWBBXArS3bPJ+PZ5bn9uRQDxXFj+YZEqjU= -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:04 2026 by rpki-client