This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/2ZDYJtflCnBB_8qwON088KKU-a4.roa File: 2ZDYJtflCnBB_8qwON088KKU-a4.roa (raw, json) Hash identifier: tEciLezX+dLS/ImbpFLCNZihGdAn391R3qBRLACKNXQ= Subject key identifier: D9:90:D8:26:D7:E5:0A:70:41:FF:CA:B0:38:DD:3C:F0:A2:94:F9:AE Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67 Certificate serial: 019B77588BD96567E42A14F72122053CD720 Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/2ZDYJtflCnBB_8qwON088KKU-a4.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44056 IP address blocks: 195.244.24.0/23 maxlen: 23 195.244.24.0/24 maxlen: 24 195.244.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8b:d9:65:67:e4:2a:14:f7:21:22:05:3c:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d990d826d7e50a7041ffcab038dd3cf0a294f9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:88:35:7d:35:a0:57:a1:32:4f:2b:95:35: 1a:0e:42:80:14:f2:45:c1:23:2e:32:5e:83:d4:0d: 87:77:2c:c8:3d:ce:9c:3b:3a:47:39:fa:41:91:1a: c9:13:eb:d2:80:20:62:88:bf:ab:d5:7d:0c:99:f5: 51:b7:5a:69:f1:2f:0d:e9:d6:77:d5:20:3c:cd:87: dc:06:16:ac:16:01:9c:e1:77:95:97:38:a0:2e:44: d9:ee:ef:64:40:22:35:82:1b:73:4c:7b:79:6d:b9: a8:20:00:8f:17:8c:d5:69:1f:86:70:66:f2:a8:28: 8a:70:71:19:7e:11:44:c8:ae:69:73:98:92:1f:90: f2:a7:6c:99:b9:d3:0b:8c:62:92:ff:08:71:19:ba: 97:b0:3c:a9:4d:cf:01:1f:c7:b1:18:a0:35:0d:18: 13:75:42:ab:58:de:ea:04:ad:f1:cb:24:c9:b8:6b: 97:93:ba:a7:6b:75:52:7a:3c:85:ee:b0:18:b3:44: 5e:dd:2e:29:b3:d0:24:fd:a6:50:7c:31:f4:3e:c7: 51:bb:e5:5c:68:9b:a6:66:ac:ca:70:10:db:a4:66: 68:72:51:67:d3:f0:f1:f6:61:4f:c9:91:13:38:f0: 5d:64:1a:9a:35:1e:37:de:a9:08:cc:5f:b2:36:f0: 05:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:90:D8:26:D7:E5:0A:70:41:FF:CA:B0:38:DD:3C:F0:A2:94:F9:AE X509v3 Authority Key Identifier: keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/2ZDYJtflCnBB_8qwON088KKU-a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.244.24.0/23 Signature Algorithm: sha256WithRSAEncryption 15:65:c3:55:b0:c0:80:d1:a3:e8:c7:18:e6:9d:5b:fb:0a:02: a1:21:3c:c7:f8:9c:05:a6:4e:ab:7c:79:69:24:fc:1a:83:ca: cb:9d:5f:ba:98:b1:39:e1:77:75:95:16:5c:f8:ac:92:93:96: b8:47:25:aa:7d:2e:1a:8b:ca:39:b4:5c:9f:ff:5c:62:ff:c9: 9f:b3:15:ea:02:b0:65:33:a5:5b:e0:70:be:13:d7:25:4b:68: 47:5d:22:c1:d3:25:bf:68:db:d0:58:c2:79:45:2a:6c:f6:44: 93:88:c6:69:a2:43:7a:16:f0:61:b1:b0:a7:44:55:55:54:e7: 32:17:7d:b2:84:3a:4a:40:b1:18:a3:57:b6:32:cf:85:51:d2: bf:4c:92:ad:6c:ca:87:d2:20:fd:55:b5:cd:0f:9b:7a:6d:6f: 60:8d:bb:09:3c:7e:0f:f9:86:f0:91:d8:0f:19:64:36:e7:63: c5:cf:4d:20:db:e5:30:93:64:2c:e5:b6:9b:48:4c:ea:65:4c: bb:ae:0c:29:5f:3c:e8:d4:69:1d:a7:c7:c7:cc:92:5f:9d:1e: 90:9d:63:b3:04:04:0a:d4:7d:9e:9a:b5:71:7b:29:a1:ed:a4: 1a:e6:e4:31:4c:47:29:ee:aa:06:f0:9e:a0:97:fd:02:20:1e: 24:3c:76:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIvZZWfkKhT3ISIFPNcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTMyMTZhYzlkOTIxNzMzYmYzZjQ4NDM5M2EzNDQ5NWMw ZTJhNjcwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTkwZDgyNmQ3ZTUwYTcwNDFmZmNhYjAzOGRkM2NmMGEyOTRmOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypCINX01oFehMk8rlTUaDkKAFPJF wSMuMl6D1A2HdyzIPc6cOzpHOfpBkRrJE+vSgCBiiL+r1X0MmfVRt1pp8S8N6dZ3 1SA8zYfcBhasFgGc4XeVlzigLkTZ7u9kQCI1ghtzTHt5bbmoIACPF4zVaR+GcGby qCiKcHEZfhFEyK5pc5iSH5Dyp2yZudMLjGKS/whxGbqXsDypTc8BH8exGKA1DRgT dUKrWN7qBK3xyyTJuGuXk7qna3VSejyF7rAYs0Re3S4ps9Ak/aZQfDH0PsdRu+Vc aJumZqzKcBDbpGZoclFn0/Dx9mFPyZETOPBdZBqaNR433qkIzF+yNvAF9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNmQ2CbX5QpwQf/KsDjdPPCilPmuMB8GA1UdIwQY MBaAFEhTIWrJ2SFzO/P0hDk6NElcDipnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDct MjgyOGM0OGUzNTk5LzEvMlpEWUp0ZmxDbkJCXzhxd09OMDg4S0tVLWE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDctMjgyOGM0OGUzNTk5 LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/QYMA0G CSqGSIb3DQEBCwUAA4IBAQAVZcNVsMCA0aPoxxjmnVv7CgKhITzH+JwFpk6rfHlp JPwag8rLnV+6mLE54Xd1lRZc+KySk5a4RyWqfS4ai8o5tFyf/1xi/8mfsxXqArBl M6Vb4HC+E9clS2hHXSLB0yW/aNvQWMJ5RSps9kSTiMZpokN6FvBhsbCnRFVVVOcy F32yhDpKQLEYo1e2Ms+FUdK/TJKtbMqH0iD9VbXND5t6bW9gjbsJPH4P+YbwkdgP GWQ252PFz00g2+Uwk2Qs5babSEzqZUy7rgwpXzzo1Gkdp8fHzJJfnR6QnWOzBAQK 1H2emrVxeymh7aQa5uQxTEcp7qoG8J6gl/0CIB4kPHZC -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:43 2026 by rpki-client