This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/_zNmyZce_oYm1W2-nC6_yQr4cj0.roa File: _zNmyZce_oYm1W2-nC6_yQr4cj0.roa (raw, json) Hash identifier: jvAioTt0TMDMDSO0o/M/S/bJE7PSAtrkZZIOYYhShRs= Subject key identifier: FF:33:66:C9:97:1E:FE:86:26:D5:6D:BE:9C:2E:BF:C9:0A:F8:72:3D Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA23E5CAFA6A0D2B9B172DBB382979 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/_zNmyZce_oYm1W2-nC6_yQr4cj0.roa Signing time: Fri 02 Jan 2026 08:19:17 +0000 ROA not before: Fri 02 Jan 2026 08:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26548 IP address blocks: 45.133.112.0/22 maxlen: 24 45.136.24.0/22 maxlen: 24 45.147.8.0/22 maxlen: 24 45.147.232.0/22 maxlen: 24 45.159.23.0/24 maxlen: 24 88.218.46.0/24 maxlen: 24 89.19.34.0/24 maxlen: 24 91.132.124.0/23 maxlen: 24 93.177.94.0/23 maxlen: 24 146.19.39.0/24 maxlen: 24 176.126.111.0/24 maxlen: 24 193.31.127.0/24 maxlen: 24 193.56.20.0/24 maxlen: 24 193.142.36.0/22 maxlen: 24 193.202.16.0/24 maxlen: 24 194.99.25.0/24 maxlen: 24 194.110.150.0/24 maxlen: 24 194.180.232.0/23 maxlen: 24 194.180.236.0/23 maxlen: 24 212.87.216.0/24 maxlen: 24 212.87.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:23:e5:ca:fa:6a:0d:2b:9b:17:2d:bb:38:29:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff3366c9971efe8626d56dbe9c2ebfc90af8723d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5d:db:87:e4:ae:7e:8d:64:61:f3:a3:4d:f6: 11:e2:0b:85:d5:9d:49:16:29:52:ad:91:9b:e0:b2: c4:ad:19:b6:9a:d3:86:eb:de:fe:39:d4:ac:92:4e: d1:68:6f:5c:12:d4:e0:bd:16:59:c5:ee:85:4d:47: de:98:fe:74:cb:bc:64:f1:cb:c2:5e:56:cb:42:33: c5:be:3e:fb:4c:36:cd:62:68:da:17:04:f1:91:66: 5e:84:99:80:11:28:3f:b2:67:8f:45:b8:36:52:af: fe:74:cc:89:9d:86:08:86:69:70:90:77:7a:17:61: 44:ed:a8:4f:0e:34:3e:ff:e7:f2:68:0d:62:c8:fe: 2c:08:dd:bc:9c:c7:85:e2:45:8b:9e:a3:3c:fa:e0: ff:d6:d8:2f:f4:93:2e:5f:53:31:31:88:2f:b0:2e: a6:03:82:56:6c:25:1b:48:d8:d3:14:c6:d0:60:b9: e0:00:71:43:7a:5c:f7:49:7a:51:fe:50:0f:98:51: db:11:09:0b:03:10:97:07:29:ad:db:b5:51:3d:0d: af:13:45:d3:56:4d:60:0a:db:55:a9:e0:9d:9e:93: e2:81:52:06:64:28:21:3a:22:ff:f1:ef:65:47:28: da:a5:a3:30:2e:7f:7e:b1:77:af:25:22:db:31:d8: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:33:66:C9:97:1E:FE:86:26:D5:6D:BE:9C:2E:BF:C9:0A:F8:72:3D X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/_zNmyZce_oYm1W2-nC6_yQr4cj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.112.0/22 45.136.24.0/22 45.147.8.0/22 45.147.232.0/22 45.159.23.0/24 88.218.46.0/24 89.19.34.0/24 91.132.124.0/23 93.177.94.0/23 146.19.39.0/24 176.126.111.0/24 193.31.127.0/24 193.56.20.0/24 193.142.36.0/22 193.202.16.0/24 194.99.25.0/24 194.110.150.0/24 194.180.232.0/23 194.180.236.0/23 212.87.216.0/24 212.87.218.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:17:ec:2a:db:13:de:44:b5:9b:0e:df:9e:d3:78:67:5e:70: 5a:7a:29:e7:eb:59:30:6e:7b:53:be:cd:d9:c3:77:e8:4b:9f: 1d:5d:b4:9b:8b:ba:e6:65:13:0e:59:6c:3e:d9:76:81:84:2b: f9:68:e4:eb:e7:e3:30:27:97:25:28:d8:39:b1:f0:f9:a3:a9: ba:ca:ea:96:d3:ed:c7:27:bd:42:d5:dc:10:6e:68:2d:56:a5: 33:d9:e6:76:72:38:56:69:b0:f0:ba:ed:f9:4e:55:5f:f5:e6: 92:d0:dd:d6:b9:46:92:e5:91:f6:4f:11:31:ab:0b:dc:96:7a: b2:47:80:1a:33:7c:e3:0e:f9:5e:79:b0:57:0a:b9:c1:33:1f: 6f:44:7f:ce:30:cf:21:42:3b:ba:f8:4f:8e:18:4f:40:fb:8d: 48:91:74:bb:68:db:38:7d:1b:27:5c:8b:fa:84:c4:9b:b6:bc: d8:b6:30:6b:5d:17:e8:20:41:9a:26:2f:f1:6b:e1:19:c6:aa: 29:6a:61:b1:16:bf:cf:01:a6:bb:60:9f:63:96:99:4c:d7:5f: 99:48:b7:19:80:a8:28:40:c9:0e:0d:a6:49:32:1d:8c:c6:45: 90:c3:a7:c2:56:74:b2:43:77:f3:28:12:e5:8f:a8:44:99:0a: 96:23:48:28 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt9yiPlyvpqDSubFy27OCl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjMzNjZjOTk3MWVmZTg2MjZkNTZkYmU5YzJlYmZjOTBhZjg3MjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7F3bh+Sufo1kYfOjTfYR4guF1Z1J FilSrZGb4LLErRm2mtOG697+OdSskk7RaG9cEtTgvRZZxe6FTUfemP50y7xk8cvC XlbLQjPFvj77TDbNYmjaFwTxkWZehJmAESg/smePRbg2Uq/+dMyJnYYIhmlwkHd6 F2FE7ahPDjQ+/+fyaA1iyP4sCN28nMeF4kWLnqM8+uD/1tgv9JMuX1MxMYgvsC6m A4JWbCUbSNjTFMbQYLngAHFDelz3SXpR/lAPmFHbEQkLAxCXBymt27VRPQ2vE0XT Vk1gCttVqeCdnpPigVIGZCghOiL/8e9lRyjapaMwLn9+sXevJSLbMdhxpQIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFP8zZsmXHv6GJtVtvpwuv8kK+HI9MB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvX3pObXlaY2Vfb1ltMVcyLW5DNl95UXI0Y2owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAi2F cAMEAi2IGAMEAi2TCAMEAi2T6AMEAC2fFwMEAFjaLgMEAFkTIgMEAVuEfAMEAV2x XgMEAJITJwMEALB+bwMEAMEffwMEAME4FAMEAsGOJAMEAMHKEAMEAMJjGQMEAMJu lgMEAcK06AMEAcK07AMEANRX2AMEAdRX2jANBgkqhkiG9w0BAQsFAAOCAQEAfBfs KtsT3kS1mw7fntN4Z15wWnop5+tZMG57U77N2cN36EufHV20m4u65mUTDllsPtl2 gYQr+Wjk6+fjMCeXJSjYObHw+aOpusrqltPtxye9QtXcEG5oLValM9nmdnI4Vmmw 8Lrt+U5VX/XmktDd1rlGkuWR9k8RMasL3JZ6skeAGjN84w75XnmwVwq5wTMfb0R/ zjDPIUI7uvhPjhhPQPuNSJF0u2jbOH0bJ1yL+oTEm7a82LYwa10X6CBBmiYv8Wvh GcaqKWphsRa/zwGmu2CfY5aZTNdfmUi3GYCoKEDJDg2mSTIdjMZFkMOnwlZ0skN3 8ygS5Y+oRJkKliNIKA== -----END CERTIFICATE-----Generated at Mon Jan 19 21:26:27 2026 by rpki-client