This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/pZwVWQ0lcHojahu0_rV2N3zpQcw.roa File: pZwVWQ0lcHojahu0_rV2N3zpQcw.roa (raw, json) Hash identifier: J+F2E6hLoP7AmyOiwDWr5K7X8LPnv6yqpXFURrTE1yw= Subject key identifier: A5:9C:15:59:0D:25:70:7A:23:6A:1B:B4:FE:B5:76:37:7C:E9:41:CC Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883 Certificate serial: 019B7BA4F7D6A7800FB832C46B5BA6C88200 Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/pZwVWQ0lcHojahu0_rV2N3zpQcw.roa Signing time: Thu 01 Jan 2026 22:19:27 +0000 ROA not before: Thu 01 Jan 2026 22:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 185.135.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f7:d6:a7:80:0f:b8:32:c4:6b:5b:a6:c8:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883 Validity Not Before: Jan 1 22:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a59c15590d25707a236a1bb4feb576377ce941cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:08:ef:18:c4:23:4f:5c:fb:01:6a:6c:bf:17: fd:0c:48:fb:06:5b:8a:a8:0e:47:de:6a:6d:0a:1f: e5:6c:0d:da:6f:4c:d3:da:2b:a9:86:85:18:5a:97: 20:42:fa:ca:8f:dc:d4:84:20:58:f3:1a:62:24:53: ea:49:30:94:9a:1d:da:db:6e:5b:42:2f:5b:04:2d: 77:03:7c:72:c3:7f:bc:50:68:d0:b9:f5:9a:22:54: dd:bb:41:68:39:17:3f:d2:7b:c8:a7:1d:d3:4d:ec: 58:83:3d:f9:98:b1:67:88:10:4e:6a:f9:66:e1:74: 27:2a:37:85:7b:c7:56:05:45:f2:35:27:14:64:34: 74:78:22:d5:23:1e:ed:a7:75:b1:ad:8a:f3:39:e0: b0:c3:2d:b5:b9:65:26:e5:98:0a:48:27:c6:40:a8: 87:6b:09:84:50:39:90:63:bb:f1:88:8a:8f:64:d2: fd:94:71:c4:24:ba:71:7d:10:1f:97:99:2c:47:10: 45:75:28:9d:6e:ab:8e:db:db:8b:c1:10:96:49:99: 80:b4:16:28:f8:ae:f3:d5:ec:e6:72:2b:37:b8:f4: f0:b7:ea:f8:e2:87:63:b5:04:5d:72:ce:72:48:7d: b6:25:d8:75:ae:ba:0e:81:b4:49:87:5b:39:8f:18: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9C:15:59:0D:25:70:7A:23:6A:1B:B4:FE:B5:76:37:7C:E9:41:CC X509v3 Authority Key Identifier: keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/pZwVWQ0lcHojahu0_rV2N3zpQcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.43.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:df:0f:3c:cf:67:15:be:46:15:bc:a9:64:21:c9:e5:e9:a1: bf:b8:b0:4d:34:c2:44:78:0f:27:51:b7:c6:ff:c1:22:32:03: 6f:76:8a:cc:f2:fd:6b:63:c7:30:c9:a0:8b:67:6f:fe:2a:b0: eb:f6:61:e3:b7:c9:36:1c:e5:67:4b:4f:3d:04:ae:53:57:9f: 68:4b:11:c7:63:f0:88:c0:86:5f:ac:ff:f1:b8:49:cc:15:c0: 1e:af:6c:ea:34:f9:29:88:8d:44:27:de:35:cc:41:d1:e1:84: 28:cd:98:f1:28:9d:69:39:f5:51:ba:46:8f:d3:9e:95:a9:8d: 0f:75:75:14:97:72:ba:47:b6:5c:02:8c:50:de:a7:1b:23:0e: ce:67:b0:e7:41:e1:81:29:43:49:1d:18:5d:fc:a3:46:6a:3b: 02:5b:17:6d:f3:8a:85:7d:2c:bc:a8:2f:88:f2:ef:74:bc:f2: 0b:26:f1:d2:5e:5d:a1:5f:42:cb:b9:8e:80:5d:9e:0d:f2:9c: a1:a7:21:bb:ce:d2:cc:fe:ad:03:ec:aa:50:23:03:b5:b8:09: ea:74:84:3d:8d:9f:b8:73:83:e0:51:61:a6:db:76:55:cb:8f: 9e:cc:fe:59:21:37:52:5e:e9:92:eb:25:07:c4:a0:bd:e4:14: 9c:42:50:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPfWp4APuDLEa1umyIIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNGZhNjFiMDg2NTEwMzhmYWY4MWViZjEyNWVjODQ1YjE5 NjE4ODMwHhcNMjYwMTAxMjIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTljMTU1OTBkMjU3MDdhMjM2YTFiYjRmZWI1NzYzNzdjZTk0MWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gjvGMQjT1z7AWpsvxf9DEj7BluK qA5H3mptCh/lbA3ab0zT2iuphoUYWpcgQvrKj9zUhCBY8xpiJFPqSTCUmh3a225b Qi9bBC13A3xyw3+8UGjQufWaIlTdu0FoORc/0nvIpx3TTexYgz35mLFniBBOavlm 4XQnKjeFe8dWBUXyNScUZDR0eCLVIx7tp3WxrYrzOeCwwy21uWUm5ZgKSCfGQKiH awmEUDmQY7vxiIqPZNL9lHHEJLpxfRAfl5ksRxBFdSidbquO29uLwRCWSZmAtBYo +K7z1ezmcis3uPTwt+r44odjtQRdcs5ySH22Jdh1rroOgbRJh1s5jxh0BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKWcFVkNJXB6I2obtP61djd86UHMMB8GA1UdIwQY MBaAFHNPphsIZRA4+vgevxJeyEWxlhiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMt NDBjMGE2NTI0NTBhLzEvcFp3VldRMGxjSG9qYWh1MF9yVjJOM3pwUWN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMtNDBjMGE2NTI0NTBh LzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYcrMA0G CSqGSIb3DQEBCwUAA4IBAQCP3w88z2cVvkYVvKlkIcnl6aG/uLBNNMJEeA8nUbfG /8EiMgNvdorM8v1rY8cwyaCLZ2/+KrDr9mHjt8k2HOVnS089BK5TV59oSxHHY/CI wIZfrP/xuEnMFcAer2zqNPkpiI1EJ941zEHR4YQozZjxKJ1pOfVRukaP056VqY0P dXUUl3K6R7ZcAoxQ3qcbIw7OZ7DnQeGBKUNJHRhd/KNGajsCWxdt84qFfSy8qC+I 8u90vPILJvHSXl2hX0LLuY6AXZ4N8pyhpyG7ztLM/q0D7KpQIwO1uAnqdIQ9jZ+4 c4PgUWGm23ZVy4+ezP5ZITdSXumS6yUHxKC95BScQlDy -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:36 2026 by rpki-client