This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/RZQiwmw-LTuvBT8bKGu9sePwQKA.roa File: RZQiwmw-LTuvBT8bKGu9sePwQKA.roa (raw, json) Hash identifier: 30MASV+eS5v/knDU6PvbB3wtKl60C43+n0OVN/QWwQs= Subject key identifier: 45:94:22:C2:6C:3E:2D:3B:AF:05:3F:1B:28:6B:BD:B1:E3:F0:40:A0 Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b Certificate serial: 019B7AC82EC26A5173D682B94DAC69F83911 Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/RZQiwmw-LTuvBT8bKGu9sePwQKA.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57732 IP address blocks: 37.98.128.0/20 maxlen: 20 62.106.48.0/20 maxlen: 20 85.209.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2e:c2:6a:51:73:d6:82:b9:4d:ac:69:f8:39:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=459422c26c3e2d3baf053f1b286bbdb1e3f040a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:40:f6:6c:71:3c:63:e4:0d:a2:7e:e1:a4:eb: d5:ae:c9:48:ba:cc:9c:c6:db:c3:be:c2:d7:d2:ad: 53:d1:1e:f1:da:c3:42:df:13:6a:3b:5a:f5:89:16: 71:e7:85:89:3f:c1:25:c2:c2:11:4d:dc:57:10:e4: 56:0d:e7:71:8d:04:e6:e1:9e:36:3d:20:a8:a1:e8: 49:4c:8a:dd:b5:c6:7c:6a:c1:a9:f9:63:60:89:61: 95:9f:05:cf:1d:b2:d7:6a:0f:50:7d:96:f3:f1:c0: 41:50:d0:6a:0d:d1:90:e8:09:af:e3:b8:d1:e8:b7: 02:71:0f:69:53:90:90:ab:0a:1a:00:a9:1f:1b:27: e7:1b:a2:80:c3:f1:39:e2:0d:32:dc:6f:e7:6c:22: a5:f2:29:09:7a:db:92:1d:f6:d6:2c:83:34:0a:d7: 00:7b:3f:bb:51:50:2d:8a:df:8a:af:77:65:b7:1b: d2:69:25:37:91:02:61:6f:53:20:50:c7:c7:b0:e6: ea:58:85:e8:c9:c4:45:b9:15:56:2c:70:15:b6:06: ce:d7:34:37:b4:92:9e:2f:ff:e7:4c:e4:75:3f:fc: 3b:85:65:1b:73:06:b2:52:fb:a3:08:f7:bf:c5:db: 7a:76:a3:b4:d1:27:af:82:d1:ae:81:a3:94:89:29: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:94:22:C2:6C:3E:2D:3B:AF:05:3F:1B:28:6B:BD:B1:E3:F0:40:A0 X509v3 Authority Key Identifier: keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/RZQiwmw-LTuvBT8bKGu9sePwQKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.128.0/20 62.106.48.0/20 85.209.168.0/22 Signature Algorithm: sha256WithRSAEncryption a7:6f:12:1e:fe:7b:aa:c4:76:36:0f:00:70:b6:14:fd:15:dd: 20:db:db:e8:b5:fb:7b:61:e2:82:8e:8e:b4:f8:f3:36:89:50: 07:d7:4e:f8:35:3d:06:90:3a:40:b3:e1:72:ff:fd:85:44:4b: 37:a6:66:b5:fe:32:4f:1e:8d:3d:37:d6:2a:41:ca:7b:2c:e8: 6d:a5:40:16:00:ad:95:50:46:0e:a3:ae:25:ef:75:74:ec:18: a3:28:7d:70:73:8f:05:cc:6f:d4:b6:67:fc:17:18:48:96:ee: 3d:b5:66:43:63:c5:dc:02:a5:5e:6c:d4:ad:10:17:c7:56:bd: 0d:73:16:41:4b:3b:7f:48:41:d5:23:fd:c4:b1:7f:1f:f6:d9: 5d:4c:33:c1:c5:13:db:1e:be:0a:6e:ec:8c:41:cb:28:0d:2b: b8:fd:61:48:3b:cc:0b:a7:b5:7b:53:8b:ee:bf:e8:70:24:be: 7f:a1:45:ed:20:2c:f1:3c:97:13:38:b5:39:15:d5:26:9a:37: 10:28:87:bd:ce:75:ca:db:34:44:40:5d:22:68:7c:16:47:ee: 69:5e:9f:35:3d:50:8d:a0:15:2b:74:93:8a:f6:26:dc:a7:f0: 9c:1a:18:fd:54:db:2b:03:3f:b8:4b:98:4e:25:04:18:da:9c: 2a:46:74:08 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yC7CalFz1oK5Taxp+DkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmODI3YTVhMjRlNzcxY2MxNGZhNjliYjc0YjNlNzYwMTY3 YjAyNmIwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTk0MjJjMjZjM2UyZDNiYWYwNTNmMWIyODZiYmRiMWUzZjA0MGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUD2bHE8Y+QNon7hpOvVrslIusyc xtvDvsLX0q1T0R7x2sNC3xNqO1r1iRZx54WJP8ElwsIRTdxXEORWDedxjQTm4Z42 PSCooehJTIrdtcZ8asGp+WNgiWGVnwXPHbLXag9QfZbz8cBBUNBqDdGQ6Amv47jR 6LcCcQ9pU5CQqwoaAKkfGyfnG6KAw/E54g0y3G/nbCKl8ikJetuSHfbWLIM0CtcA ez+7UVAtit+Kr3dltxvSaSU3kQJhb1MgUMfHsObqWIXoycRFuRVWLHAVtgbO1zQ3 tJKeL//nTOR1P/w7hWUbcwayUvujCPe/xdt6dqO00SevgtGugaOUiSk2vQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEWUIsJsPi07rwU/GyhrvbHj8ECgMB8GA1UdIwQY MBaAFA+Celok53HMFPppu3Sz52AWewJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGIt Y2JkYWVkMGQwMGFkLzEvUlpRaXdtdy1MVHV2QlQ4YktHdTlzZVB3UUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGItY2JkYWVkMGQwMGFk LzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEJWKAAwQE PmowAwQCVdGoMA0GCSqGSIb3DQEBCwUAA4IBAQCnbxIe/nuqxHY2DwBwthT9Fd0g 29votft7YeKCjo60+PM2iVAH1074NT0GkDpAs+Fy//2FREs3pma1/jJPHo09N9Yq Qcp7LOhtpUAWAK2VUEYOo64l73V07BijKH1wc48FzG/Utmf8FxhIlu49tWZDY8Xc AqVebNStEBfHVr0NcxZBSzt/SEHVI/3EsX8f9tldTDPBxRPbHr4KbuyMQcsoDSu4 /WFIO8wLp7V7U4vuv+hwJL5/oUXtICzxPJcTOLU5FdUmmjcQKIe9znXK2zREQF0i aHwWR+5pXp81PVCNoBUrdJOK9ibcp/CcGhj9VNsrAz+4S5hOJQQY2pwqRnQI -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:37 2026 by rpki-client