This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ZJ5l37G_w-cxDfPyZbl3zgQo3cQ.roa File: ZJ5l37G_w-cxDfPyZbl3zgQo3cQ.roa (raw, json) Hash identifier: C20FU6s1s6KfoQi2fZft6KPIUH4rHPObiarw/5VKljg= Subject key identifier: 64:9E:65:DF:B1:BF:C3:E7:31:0D:F3:F2:65:B9:77:CE:04:28:DD:C4 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B9CDBE141D086BB2BDB002F4B82327608 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ZJ5l37G_w-cxDfPyZbl3zgQo3cQ.roa Signing time: Thu 08 Jan 2026 09:06:54 +0000 ROA not before: Thu 08 Jan 2026 09:06:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 89.249.192.0/21 maxlen: 24 89.249.203.0/24 maxlen: 24 89.249.205.0/24 maxlen: 24 89.249.206.0/23 maxlen: 24 212.42.192.0/20 maxlen: 24 212.42.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:db:e1:41:d0:86:bb:2b:db:00:2f:4b:82:32:76:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 8 09:06:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=649e65dfb1bfc3e7310df3f265b977ce0428ddc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:b1:ee:ab:72:12:5e:6a:7e:42:6e:d9:cc: 13:f3:8c:40:6f:fc:1d:63:e7:1a:a0:8b:4e:9e:8c: bc:70:6a:51:3f:b4:0d:a8:21:11:35:b1:d6:32:0b: 43:96:56:5f:f3:45:14:61:28:7a:c2:1a:4e:77:ee: 7d:01:63:38:f6:9e:dd:30:52:b8:09:cf:91:48:9e: 82:29:3e:0e:75:1e:ab:fb:87:db:6d:bb:5f:6b:a0: 30:fc:4c:79:6e:40:6f:ca:44:aa:66:d9:35:40:89: fb:b6:16:23:bf:95:e6:8e:dd:b2:92:2f:ed:be:b0: d1:15:8d:31:5e:83:4f:98:24:ff:b3:d9:a8:23:96: 88:e0:dc:59:82:d6:1e:4d:0e:36:df:82:4d:5b:59: 5a:b1:71:f0:83:78:dc:95:13:39:b0:7a:10:19:2f: 8a:b4:3e:8b:d3:9f:08:81:2c:16:ef:bf:05:ec:bf: c5:14:a7:f1:66:53:2f:7b:a7:c3:27:f9:54:13:c1: 85:d0:81:ce:19:74:e0:76:d4:9c:fa:d9:94:8f:0e: 5e:c1:d6:e6:4b:8b:d3:6e:01:9c:da:ba:13:15:6a: 03:b9:97:c9:35:8b:1e:f6:6e:c9:73:0b:44:6c:43: 40:5b:34:1e:fd:5f:49:22:5e:94:a9:a2:83:a2:e1: 44:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9E:65:DF:B1:BF:C3:E7:31:0D:F3:F2:65:B9:77:CE:04:28:DD:C4 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ZJ5l37G_w-cxDfPyZbl3zgQo3cQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.192.0/21 89.249.203.0/24 89.249.205.0-89.249.207.255 212.42.192.0/19 Signature Algorithm: sha256WithRSAEncryption 36:b1:f1:a1:2b:65:9d:40:65:c4:71:b9:94:b2:09:da:4c:db: 0f:5f:38:a4:f4:2b:c4:2e:e8:cb:22:83:d2:7c:05:db:f1:52: 99:8d:74:ba:72:c4:24:5a:a5:04:c6:b2:71:9c:7f:2f:96:75: c8:f8:fe:58:0b:d2:a7:f5:d9:cb:72:20:03:a3:51:d8:4b:12: eb:cd:cf:4a:7c:e4:f9:91:a2:cb:1d:16:0c:96:5b:be:10:19: 65:f6:46:ba:99:b3:31:2e:2c:29:c0:3a:bc:9e:e3:2d:69:06: 44:d1:b5:62:1f:ec:72:e4:cf:cf:df:77:40:a6:01:30:a1:37: d2:bd:e8:40:72:d0:3d:5b:5b:24:26:44:2f:3c:9c:34:26:70: 74:6b:00:95:84:02:91:14:ba:c6:8f:ae:23:46:3c:ad:80:61: 31:87:bc:d0:e3:49:88:f0:ac:0b:e5:fa:c2:aa:79:fa:62:c3: ba:8b:a3:3f:29:35:4b:ec:06:0d:88:e7:45:11:21:d8:45:5c: 1e:92:cf:a4:85:be:78:f4:c7:dd:65:3f:62:75:5f:02:71:5b: 73:2b:e9:f1:ac:ca:5e:4d:10:20:1d:ed:08:55:db:7d:28:d9: 7b:6f:50:f7:d2:2e:40:ef:71:60:bf:96:d8:65:5d:43:93:b7: b7:13:ef:0b -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZuc2+FB0Ia7K9sAL0uCMnYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTA4MDkwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDllNjVkZmIxYmZjM2U3MzEwZGYzZjI2NWI5NzdjZTA0MjhkZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX+x7qtyEl5qfkJu2cwT84xAb/wd Y+caoItOnoy8cGpRP7QNqCERNbHWMgtDllZf80UUYSh6whpOd+59AWM49p7dMFK4 Cc+RSJ6CKT4OdR6r+4fbbbtfa6Aw/Ex5bkBvykSqZtk1QIn7thYjv5Xmjt2yki/t vrDRFY0xXoNPmCT/s9moI5aI4NxZgtYeTQ4234JNW1lasXHwg3jclRM5sHoQGS+K tD6L058IgSwW778F7L/FFKfxZlMve6fDJ/lUE8GF0IHOGXTgdtSc+tmUjw5ewdbm S4vTbgGc2roTFWoDuZfJNYse9m7JcwtEbENAWzQe/V9JIl6UqaKDouFEbQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFGSeZd+xv8PnMQ3z8mW5d84EKN3EMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvWko1bDM3R193LWN4RGZQeVpibDN6Z1FvM2NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDWfnAAwQA WfnLMAwDBABZ+c0DBARZ+cADBAXUKsAwDQYJKoZIhvcNAQELBQADggEBADax8aEr ZZ1AZcRxuZSyCdpM2w9fOKT0K8Qu6Msig9J8BdvxUpmNdLpyxCRapQTGsnGcfy+W dcj4/lgL0qf12ctyIAOjUdhLEuvNz0p85PmRossdFgyWW74QGWX2RrqZszEuLCnA Orye4y1pBkTRtWIf7HLkz8/fd0CmATChN9K96EBy0D1bWyQmRC88nDQmcHRrAJWE ApEUusaPriNGPK2AYTGHvNDjSYjwrAvl+sKqefpiw7qLoz8pNUvsBg2I50URIdhF XB6Sz6SFvnj0x91lP2J1XwJxW3Mr6fGsyl5NECAd7QhV230o2XtvUPfSLkDvcWC/ lthlXUOTt7cT7ws= -----END CERTIFICATE-----Generated at Sat Jan 10 21:05:54 2026 by rpki-client