This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/ZnUp6stV5socGkmCtp3XXdwZNt4.roa File: ZnUp6stV5socGkmCtp3XXdwZNt4.roa (raw, json) Hash identifier: pcLU5hRWx9tbU/nzWNHzQ9gO7KrRDtWeT3kX5BEAeI0= Subject key identifier: 66:75:29:EA:CB:55:E6:CA:1C:1A:49:82:B6:9D:D7:5D:DC:19:36:DE Certificate issuer: /CN=b96e8b6d73f2f38548996f66621330a8d7108529 Certificate serial: 019B7A5AE7AE0B60E1AE860819FFC98445A1 Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/ZnUp6stV5socGkmCtp3XXdwZNt4.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43366 IP address blocks: 5.133.84.0/22 maxlen: 24 185.197.188.0/22 maxlen: 24 185.205.240.0/22 maxlen: 24 192.145.24.0/22 maxlen: 24 194.164.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e7:ae:0b:60:e1:ae:86:08:19:ff:c9:84:45:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=667529eacb55e6ca1c1a4982b69dd75ddc1936de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c3:a0:d7:8e:1f:6e:56:17:4a:20:d6:26:34: 89:24:77:df:dc:3f:85:6e:25:3e:81:53:81:43:95: 6a:9a:fb:c3:66:cf:a1:07:9a:4f:c9:47:d2:53:61: ab:20:d8:85:88:8e:43:31:3f:94:83:dd:c9:cc:85: 6c:c2:fb:35:d9:e6:22:54:85:bd:8a:18:a4:d1:57: 2a:f7:fd:19:83:b6:49:63:f7:4d:df:33:ab:79:c5: ed:1c:c5:fa:58:4f:e8:d6:56:ec:31:b4:95:c8:b2: 96:54:28:61:e8:b0:3f:d9:1d:6a:88:6e:30:87:60: f3:31:2d:ff:4a:45:08:94:bf:51:8f:48:e9:6b:10: d3:d6:90:ac:d2:d0:e0:f7:b0:1a:b7:6b:e6:f5:59: cc:05:b2:c5:ed:aa:e4:5e:65:08:f7:63:77:14:d2: 72:51:1d:cb:ee:bc:92:03:2a:48:89:e3:d0:99:5c: 4d:6e:c8:73:50:15:70:a6:02:8b:e1:90:f3:cf:bd: 3f:92:75:1b:05:44:f2:ef:36:05:c7:2e:fa:46:7a: 44:a6:96:a2:2f:3c:1d:71:6d:a4:4f:ef:7f:79:21: 20:90:7f:5c:44:01:f8:f8:56:3e:42:28:c4:a1:ff: a0:49:1c:92:92:e4:76:01:d7:e1:e6:20:67:f6:5b: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:75:29:EA:CB:55:E6:CA:1C:1A:49:82:B6:9D:D7:5D:DC:19:36:DE X509v3 Authority Key Identifier: keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/ZnUp6stV5socGkmCtp3XXdwZNt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.84.0/22 185.197.188.0/22 185.205.240.0/22 192.145.24.0/22 194.164.116.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:d0:d4:11:2c:d5:ea:b1:a7:5a:86:a4:1d:0d:d3:11:35:4d: 65:20:10:a2:d9:ec:6e:fa:fb:f5:2c:da:23:e3:73:bc:23:c1: 0f:fa:e1:3c:57:72:6c:5d:80:76:45:8d:17:c2:27:9e:71:72: 46:07:68:7b:e7:a5:47:54:ba:7c:cb:e6:4e:b3:38:33:55:33: e6:69:9f:b9:27:0c:06:2c:41:37:04:85:7b:8f:4d:e7:d1:12: 8b:70:eb:09:eb:3c:b1:58:40:24:58:a5:22:cd:fe:b0:4f:d7: 07:66:4c:4c:1c:c4:00:ec:9f:f5:73:86:4d:6d:bd:29:de:8f: 77:30:75:fd:ef:b0:da:77:08:ca:fe:56:ba:f7:b9:d3:c3:06: 68:a4:fb:53:b4:e3:0a:93:48:e1:e0:37:50:3f:7d:8c:17:21: 6f:45:92:64:5c:88:81:ff:09:18:4f:0c:67:cd:3a:c6:e0:7c: 20:00:26:db:ae:a5:a9:cf:f4:87:ca:08:b0:36:76:71:f6:88: fa:05:68:3c:9d:a9:51:19:03:bd:b2:2c:da:35:ea:e2:37:4a: c9:41:6e:7e:42:24:16:e3:c7:f4:ac:c6:65:2a:79:80:37:80: e6:4a:e9:16:32:80:ad:d2:89:54:d1:a2:02:b0:76:30:e6:34: 63:5e:58:1b -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6WueuC2DhroYIGf/JhEWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NmU4YjZkNzNmMmYzODU0ODk5NmY2NjYyMTMzMGE4ZDcx MDg1MjkwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Njc1MjllYWNiNTVlNmNhMWMxYTQ5ODJiNjlkZDc1ZGRjMTkzNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcOg144fblYXSiDWJjSJJHff3D+F biU+gVOBQ5VqmvvDZs+hB5pPyUfSU2GrINiFiI5DMT+Ug93JzIVswvs12eYiVIW9 ihik0Vcq9/0Zg7ZJY/dN3zOrecXtHMX6WE/o1lbsMbSVyLKWVChh6LA/2R1qiG4w h2DzMS3/SkUIlL9Rj0jpaxDT1pCs0tDg97Aat2vm9VnMBbLF7arkXmUI92N3FNJy UR3L7rySAypIiePQmVxNbshzUBVwpgKL4ZDzz70/knUbBUTy7zYFxy76RnpEppai LzwdcW2kT+9/eSEgkH9cRAH4+FY+QijEof+gSRySkuR2Adfh5iBn9lu9dQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGZ1KerLVebKHBpJgrad113cGTbeMB8GA1UdIwQY MBaAFLlui21z8vOFSJlvZmITMKjXEIUpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVc2TGJYUHk4NFZJbVc5bVloTXdxTmNRaFNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jMTRhNjItYWE2YS00ODZkLWI5ZTYt YmMwMDQ2NDllZTk5LzEvWm5VcDZzdFY1c29jR2ttQ3RwM1hYZHdaTnQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jMTRhNjItYWE2YS00ODZkLWI5ZTYtYmMwMDQ2NDllZTk5 LzEvdVc2TGJYUHk4NFZJbVc5bVloTXdxTmNRaFNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBYVUAwQC ucW8AwQCuc3wAwQCwJEYAwQBwqR0MA0GCSqGSIb3DQEBCwUAA4IBAQCO0NQRLNXq sadahqQdDdMRNU1lIBCi2exu+vv1LNoj43O8I8EP+uE8V3JsXYB2RY0XwieecXJG B2h756VHVLp8y+ZOszgzVTPmaZ+5JwwGLEE3BIV7j03n0RKLcOsJ6zyxWEAkWKUi zf6wT9cHZkxMHMQA7J/1c4ZNbb0p3o93MHX977DadwjK/la697nTwwZopPtTtOMK k0jh4DdQP32MFyFvRZJkXIiB/wkYTwxnzTrG4HwgACbbrqWpz/SHygiwNnZx9oj6 BWg8nalRGQO9sizaNeriN0rJQW5+QiQW48f0rMZlKnmAN4DmSukWMoCt0olU0aIC sHYw5jRjXlgb -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:42 2026 by rpki-client