This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/zJqeRCb5j4Dd57Zj7b1drSwEVOY.roa File: zJqeRCb5j4Dd57Zj7b1drSwEVOY.roa (raw, json) Hash identifier: kMSmGuO+kRwRxKV3HZvVShc5KQnbIWPqxWeSNvdxgoM= Subject key identifier: CC:9A:9E:44:26:F9:8F:80:DD:E7:B6:63:ED:BD:5D:AD:2C:04:54:E6 Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a Certificate serial: 019B7AC7B5FF92900E62A929F1A2AAE4F2A8 Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/zJqeRCb5j4Dd57Zj7b1drSwEVOY.roa Signing time: Thu 01 Jan 2026 18:17:47 +0000 ROA not before: Thu 01 Jan 2026 18:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 45.92.12.0/24 maxlen: 24 45.92.13.0/24 maxlen: 24 45.92.14.0/24 maxlen: 24 45.92.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b5:ff:92:90:0e:62:a9:29:f1:a2:aa:e4:f2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a Validity Not Before: Jan 1 18:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc9a9e4426f98f80dde7b663edbd5dad2c0454e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9c:9d:64:ec:46:76:21:d5:bb:1f:8e:c3:fe: ed:4e:e6:83:87:fd:16:95:09:52:d7:8b:e1:9a:ad: cf:3c:72:ba:d2:b2:d5:88:52:f4:bf:96:4f:86:ab: c4:61:70:49:9b:1d:cc:f4:8d:fc:fe:bb:59:3c:d6: db:8b:cf:ad:03:f3:cc:a1:de:ea:2e:20:8e:dc:9f: 65:ec:92:d3:6d:db:dc:69:1d:a2:3d:0c:84:c9:fc: a3:75:46:d1:b5:ff:50:96:34:2b:e1:19:e1:35:c8: cd:66:8e:68:c1:5c:0d:1e:c3:1c:48:44:37:0d:24: c7:11:73:53:4b:1e:0c:cf:7e:b7:bd:07:57:2c:3a: be:e6:0e:81:09:5b:64:ed:ad:d4:bc:c7:e4:d9:a0: 37:7f:ac:59:83:c1:3b:d5:3f:a1:ea:0d:b0:93:af: 3f:c6:e3:eb:1f:49:e1:5b:88:a5:1f:17:39:ef:30: b6:8e:6d:02:be:94:f4:ff:be:ce:e8:71:9c:fd:22: 3a:8e:93:8e:80:01:3e:3a:1e:a9:91:27:18:15:c8: 9f:eb:29:e0:52:9f:5d:5a:4c:7c:83:69:c0:fa:56: 4a:18:1a:de:b0:4a:78:c9:d4:a5:8b:c2:a6:41:26: 82:55:6a:8a:28:1b:1b:66:14:ff:c2:69:1f:8c:04: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9A:9E:44:26:F9:8F:80:DD:E7:B6:63:ED:BD:5D:AD:2C:04:54:E6 X509v3 Authority Key Identifier: keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/zJqeRCb5j4Dd57Zj7b1drSwEVOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.12.0/22 Signature Algorithm: sha256WithRSAEncryption a9:c0:0f:8f:3d:49:10:63:7c:a4:39:fd:99:6a:cc:99:8e:61: 63:c9:bb:a3:15:6c:1c:74:97:b7:aa:52:04:06:32:67:54:29: 2d:b8:c8:f4:52:ef:32:b2:a4:a5:af:92:48:d0:a7:18:9f:ba: 29:e6:6f:3c:37:24:bf:f9:97:59:8c:2a:89:9b:81:97:70:d5: 2a:5d:67:b2:6c:78:fd:07:26:7a:0b:b3:a0:07:7d:fe:0d:d8: d5:87:6c:9a:39:b9:7e:34:38:f2:f3:d4:de:ee:a0:d6:e7:9c: 14:be:7d:56:ed:da:66:e9:4f:24:dd:60:24:ac:4a:32:5e:7d: c1:41:2a:18:ed:e2:9a:ba:ef:5d:88:27:58:a8:4c:47:6e:ea: f7:1b:b4:08:a0:a4:9c:3d:15:f5:65:d4:7e:d8:51:93:19:f7: 1f:f9:cb:89:f1:49:7a:ca:40:2b:f3:f7:4f:7f:a5:75:f2:13: 4d:97:2d:f9:7b:4a:52:94:0b:75:d4:80:da:25:2a:d5:e2:c8: 23:22:75:9a:a0:88:c5:52:97:ed:b3:e6:7a:d8:5a:02:f8:43: a4:82:6d:1a:89:b0:94:79:c1:8c:02:23:44:4b:12:c7:cb:68: cb:fe:3a:2e:da:51:78:ed:f7:94:fa:01:6d:53:64:9c:6e:2f: 29:41:cf:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7X/kpAOYqkp8aKq5PKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNGVkYmQxOTYzNGNiYjkxYTBkMmRhZmQ3NTlkNGM5YTdl NzdiN2EwHhcNMjYwMTAxMTgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzlhOWU0NDI2Zjk4ZjgwZGRlN2I2NjNlZGJkNWRhZDJjMDQ1NGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5ydZOxGdiHVux+Ow/7tTuaDh/0W lQlS14vhmq3PPHK60rLViFL0v5ZPhqvEYXBJmx3M9I38/rtZPNbbi8+tA/PMod7q LiCO3J9l7JLTbdvcaR2iPQyEyfyjdUbRtf9QljQr4RnhNcjNZo5owVwNHsMcSEQ3 DSTHEXNTSx4Mz363vQdXLDq+5g6BCVtk7a3UvMfk2aA3f6xZg8E71T+h6g2wk68/ xuPrH0nhW4ilHxc57zC2jm0CvpT0/77O6HGc/SI6jpOOgAE+Oh6pkScYFcif6yng Up9dWkx8g2nA+lZKGBresEp4ydSli8KmQSaCVWqKKBsbZhT/wmkfjARUNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMyankQm+Y+A3ee2Y+29Xa0sBFTmMB8GA1UdIwQY MBaAFIFO29GWNMu5Gg0tr9dZ1Mmn53t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMt YzA4OTk3YTdhMDhmLzEvekpxZVJDYjVqNERkNTdaajdiMWRyU3dFVk9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMtYzA4OTk3YTdhMDhm LzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVwMMA0G CSqGSIb3DQEBCwUAA4IBAQCpwA+PPUkQY3ykOf2ZasyZjmFjybujFWwcdJe3qlIE BjJnVCktuMj0Uu8ysqSlr5JI0KcYn7op5m88NyS/+ZdZjCqJm4GXcNUqXWeybHj9 ByZ6C7OgB33+DdjVh2yaObl+NDjy89Te7qDW55wUvn1W7dpm6U8k3WAkrEoyXn3B QSoY7eKauu9diCdYqExHbur3G7QIoKScPRX1ZdR+2FGTGfcf+cuJ8Ul6ykAr8/dP f6V18hNNly35e0pSlAt11IDaJSrV4sgjInWaoIjFUpfts+Z62FoC+EOkgm0aibCU ecGMAiNESxLHy2jL/jou2lF47feU+gFtU2Scbi8pQc8T -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:32 2026 by rpki-client