This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/zjiuWoSKLx6AH4I2Xm1CmHapSEk.roa File: zjiuWoSKLx6AH4I2Xm1CmHapSEk.roa (raw, json) Hash identifier: Eq7t794MZuOUyh5WfvsvEhySf6YH7sOyOdd9K7whuQw= Subject key identifier: CE:38:AE:5A:84:8A:2F:1E:80:1F:82:36:5E:6D:42:98:76:A9:48:49 Certificate issuer: /CN=f80aef4640437f2307f79871bfb632bb8bddad21 Certificate serial: 019B7C12EB20066A65D8A786EAC7C9C47F71 Authority key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/zjiuWoSKLx6AH4I2Xm1CmHapSEk.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44671 IP address blocks: 91.202.136.0/22 maxlen: 22 178.21.232.0/21 maxlen: 21 185.41.188.0/22 maxlen: 22 2a00:7d20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:eb:20:06:6a:65:d8:a7:86:ea:c7:c9:c4:7f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80aef4640437f2307f79871bfb632bb8bddad21 Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce38ae5a848a2f1e801f82365e6d429876a94849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:5e:8d:07:8d:c0:61:82:bf:ba:f7:e3:25: 0f:6a:64:83:f2:69:22:45:2a:6e:a7:85:64:fd:a9: 0e:b1:95:2b:5b:7b:75:71:c4:42:61:be:44:fc:6d: 66:4f:01:4c:2c:1c:b0:4a:e9:f7:96:8a:e8:84:06: 8f:2e:26:28:12:a8:d7:ca:e3:f7:44:27:91:b0:5a: cb:39:b3:62:0e:f3:45:a1:e0:ca:d2:30:02:5c:ef: 2d:cf:db:dd:90:2c:dc:bb:ec:e2:67:b4:bd:fe:5f: ac:2f:9a:90:fb:a3:f1:c8:73:1f:f2:87:7e:79:28: 1e:26:53:4b:68:6e:ee:15:78:f6:6b:22:a0:c5:02: 25:4e:3e:8e:03:12:08:96:7c:cc:75:0b:f7:2a:51: 03:fa:fd:1d:af:b8:3e:75:d1:b0:66:ad:6e:16:91: 65:27:07:6d:24:d9:39:a8:07:01:23:a5:1c:93:fa: f2:a6:93:c5:29:02:f5:86:1c:e1:13:48:d6:16:6c: d4:0c:3d:3c:f3:5c:44:15:41:68:75:3a:7d:83:4b: bb:76:03:2f:fd:7c:3c:e8:de:bd:24:74:8b:3b:bf: 64:f0:bb:63:86:f7:20:94:8f:3a:f1:f9:9a:5e:0b: 9f:1f:54:a9:d5:52:25:f5:89:85:ec:6b:da:15:5c: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:38:AE:5A:84:8A:2F:1E:80:1F:82:36:5E:6D:42:98:76:A9:48:49 X509v3 Authority Key Identifier: keyid:F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/zjiuWoSKLx6AH4I2Xm1CmHapSEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.136.0/22 178.21.232.0/21 185.41.188.0/22 IPv6: 2a00:7d20::/32 Signature Algorithm: sha256WithRSAEncryption ba:b9:3f:a4:7c:b2:c1:95:07:60:3e:87:2b:f1:df:99:34:e0: af:2a:1d:7a:fa:83:0c:f8:2a:6c:00:30:99:a5:a9:db:6e:2a: f5:b2:fd:71:c1:6c:53:a1:f2:5a:9e:83:ab:58:cc:50:e3:98: b1:4d:a1:62:5a:b5:f3:70:a7:49:03:cb:6c:d5:42:9d:50:7a: 4f:d4:8f:08:39:25:98:ce:cd:70:49:b3:6b:ec:dd:c9:bb:6e: 14:13:cd:24:20:1e:bc:c1:d7:00:db:80:11:e2:08:32:f3:da: 77:9b:8c:e3:3d:05:b8:7b:ba:d5:1e:07:ba:40:c4:0a:32:f4: d8:86:82:ff:18:8c:e1:da:6c:c6:b9:3e:68:28:ae:5d:32:a3: 2a:bc:31:9d:67:3e:6b:9e:c7:e9:47:1e:40:7c:67:a1:c1:57: 62:e2:63:6a:6f:2e:93:9c:95:5c:31:70:fc:ca:4a:82:22:ea: 7f:bf:23:ac:37:4a:a6:d3:c7:a3:73:fa:08:ba:a6:d4:44:ba: 26:0a:e8:b0:17:1c:2b:0c:9c:64:c6:70:73:68:ff:12:f5:c8: f3:e2:bf:8b:5c:16:28:3a:d0:8e:f4:17:38:3f:3b:dd:5c:08: ab:1b:64:9f:e7:41:3b:27:d6:8c:12:2d:9a:67:73:5d:6e:19: 17:21:ee:93 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8EusgBmpl2KeG6sfJxH9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MGFlZjQ2NDA0MzdmMjMwN2Y3OTg3MWJmYjYzMmJiOGJk ZGFkMjEwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTM4YWU1YTg0OGEyZjFlODAxZjgyMzY1ZTZkNDI5ODc2YTk0ODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCRejQeNwGGCv7r34yUPamSD8mki RSpup4Vk/akOsZUrW3t1ccRCYb5E/G1mTwFMLBywSun3lorohAaPLiYoEqjXyuP3 RCeRsFrLObNiDvNFoeDK0jACXO8tz9vdkCzcu+ziZ7S9/l+sL5qQ+6PxyHMf8od+ eSgeJlNLaG7uFXj2ayKgxQIlTj6OAxIIlnzMdQv3KlED+v0dr7g+ddGwZq1uFpFl JwdtJNk5qAcBI6Uck/ryppPFKQL1hhzhE0jWFmzUDD0881xEFUFodTp9g0u7dgMv /Xw86N69JHSLO79k8LtjhvcglI868fmaXgufH1Sp1VIl9YmF7GvaFVyKUQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFM44rlqEii8egB+CNl5tQph2qUhJMB8GA1UdIwQY MBaAFPgK70ZAQ38jB/eYcb+2MruL3a0hMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BcnZSa0JEZnlNSDk1aHh2N1l5dTR2ZHJTRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvZTAzYjNjLTYwMjYtNDFlNy1hNTUz LWFiMTQ4MjJmODViNS8xL3pqaXVXb1NLTHg2QUg0STJYbTFDbUhhcFNFay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzMvZTAzYjNjLTYwMjYtNDFlNy1hNTUzLWFiMTQ4MjJmODVi NS8xLzEtQXJ2UmtCRGZ5TUg5NWh4djdZeXU0dmRyU0UuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJbyogD BAOyFegDBAK5KbwwDQQCAAIwBwMFACoAfSAwDQYJKoZIhvcNAQELBQADggEBALq5 P6R8ssGVB2A+hyvx35k04K8qHXr6gwz4KmwAMJmlqdtuKvWy/XHBbFOh8lqeg6tY zFDjmLFNoWJatfNwp0kDy2zVQp1Qek/Ujwg5JZjOzXBJs2vs3cm7bhQTzSQgHrzB 1wDbgBHiCDLz2nebjOM9Bbh7utUeB7pAxAoy9NiGgv8YjOHabMa5Pmgorl0yoyq8 MZ1nPmuex+lHHkB8Z6HBV2LiY2pvLpOclVwxcPzKSoIi6n+/I6w3SqbTx6Nz+gi6 ptREuiYK6LAXHCsMnGTGcHNo/xL1yPPiv4tcFig60I70Fzg/O91cCKsbZJ/nQTsn 1owSLZpnc11uGRch7pM= -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:13 2026 by rpki-client