This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/fZqDSJnUbHG62IvLERx4tiEWKgg.roa File: fZqDSJnUbHG62IvLERx4tiEWKgg.roa (raw, json) Hash identifier: GDZnevYXZ2UVLkiVPlwZRqNZ2Bo/evXbLjj481Slbr4= Subject key identifier: 7D:9A:83:48:99:D4:6C:71:BA:D8:8B:CB:11:1C:78:B6:21:16:2A:08 Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02 Certificate serial: 019B7911417B3C1BA3C8A57EFACEA03F8487 Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/fZqDSJnUbHG62IvLERx4tiEWKgg.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.215.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:41:7b:3c:1b:a3:c8:a5:7e:fa:ce:a0:3f:84:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d9a834899d46c71bad88bcb111c78b621162a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:81:54:48:58:a6:c8:d9:45:25:76:99:7e: 0c:4f:79:49:e4:c4:cc:26:dc:94:dd:05:5b:c9:b3: 35:31:5e:c7:ec:b8:d2:ad:aa:76:ed:6d:ce:7f:e1: 57:15:39:2e:c6:a3:5f:c2:a3:4b:8f:41:4e:bc:c2: 74:c2:21:24:62:5b:14:84:79:57:88:5e:1d:7a:d4: 6f:d7:60:1b:f0:d4:f8:9e:6a:fc:fa:72:3b:80:c8: 3f:25:ed:ad:50:ee:c3:a8:4a:03:8c:f0:26:f9:15: dd:1e:fc:a9:54:a8:cc:1d:18:d0:b7:31:f8:c9:2a: 9c:f0:ff:54:13:db:05:a1:e1:ae:7f:8a:ce:81:ec: db:ea:40:12:74:c5:29:fe:33:19:d2:fa:8c:54:26: c6:c1:4b:29:d8:1e:4a:e5:b5:53:5c:c0:4e:77:e2: d7:05:2e:9d:a0:9d:5c:a8:af:b9:d9:6c:73:8f:7a: 62:41:e9:93:ff:f7:33:32:60:ab:9a:4e:16:af:b8: 22:5c:77:2e:f7:a3:94:14:8e:9b:cf:b9:1f:ab:a7: 8e:2e:66:43:e5:4c:54:09:fa:57:d8:8b:6a:a2:51: 7c:94:d8:a0:b8:2a:a9:74:87:5c:8e:6f:3e:a8:b3: 1d:88:cb:ae:37:41:46:30:4a:bf:75:27:bd:62:45: 11:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9A:83:48:99:D4:6C:71:BA:D8:8B:CB:11:1C:78:B6:21:16:2A:08 X509v3 Authority Key Identifier: keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/fZqDSJnUbHG62IvLERx4tiEWKgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.115.0/24 Signature Algorithm: sha256WithRSAEncryption 49:50:1c:61:b9:5a:a3:e9:6e:8e:d7:87:39:24:01:41:30:9b: 84:39:55:da:91:06:fb:5d:99:35:f9:08:79:09:ec:9b:ba:55: c3:ed:ba:89:e3:d0:65:5a:99:c0:fb:5b:31:11:dd:c8:7c:c9: 18:d2:4f:0e:32:35:16:4d:46:96:13:6c:61:1d:2c:06:a0:3d: 9a:0b:a5:a5:85:da:cd:b0:92:d1:af:8a:74:e7:1a:8e:14:a1: f6:35:02:97:b0:37:de:61:e3:8f:99:f6:e3:e2:65:84:a5:b2: e7:54:39:d7:db:1b:cb:4f:43:3b:0d:30:0d:70:64:57:13:4b: 59:87:99:7a:c9:45:7e:c5:20:34:8c:5e:57:8a:6c:51:af:30: 16:40:83:67:3e:44:b6:21:20:6f:17:10:b6:12:01:3b:db:41: fe:4a:f2:ff:48:51:37:93:9e:af:93:3a:08:c0:de:88:b2:2a: 1e:58:c8:08:80:78:06:62:a6:16:86:ef:cf:3b:48:23:10:25: 57:23:6b:b8:fc:48:2a:9f:75:b7:55:c5:ab:38:f0:5e:22:84: a0:86:26:86:d6:44:04:31:d8:8f:47:ee:9e:d1:4c:2f:01:ff: 9a:98:d7:b6:00:94:56:13:a5:a5:5d:89:8d:ec:a4:80:f8:97: 76:ce:9d:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUF7PBujyKV++s6gP4SHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OGNkZGJmYzc2YmRhMjZhMDI5ZWE4MGM4OTg3Nzk4NzQ1 ZjFmMDIwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDlhODM0ODk5ZDQ2YzcxYmFkODhiY2IxMTFjNzhiNjIxMTYyYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuguBVEhYpsjZRSV2mX4MT3lJ5MTM JtyU3QVbybM1MV7H7LjSrap27W3Of+FXFTkuxqNfwqNLj0FOvMJ0wiEkYlsUhHlX iF4detRv12Ab8NT4nmr8+nI7gMg/Je2tUO7DqEoDjPAm+RXdHvypVKjMHRjQtzH4 ySqc8P9UE9sFoeGuf4rOgezb6kASdMUp/jMZ0vqMVCbGwUsp2B5K5bVTXMBOd+LX BS6doJ1cqK+52Wxzj3piQemT//czMmCrmk4Wr7giXHcu96OUFI6bz7kfq6eOLmZD 5UxUCfpX2ItqolF8lNiguCqpdIdcjm8+qLMdiMuuN0FGMEq/dSe9YkURVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH2ag0iZ1GxxutiLyxEceLYhFioIMB8GA1UdIwQY MBaAFLeM3b/Ha9omoCnqgMiYd5h0Xx8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYt M2M3NDEyMjBlYTAwLzEvZlpxRFNKblViSEc2Mkl2TEVSeDR0aUVXS2dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zMGI4ZTktZTdkNC00MGNjLWFkNWYtM2M3NDEyMjBlYTAw LzEvdDR6ZHY4ZHIyaWFnS2VxQXlKaDNtSFJmSHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuddzMA0G CSqGSIb3DQEBCwUAA4IBAQBJUBxhuVqj6W6O14c5JAFBMJuEOVXakQb7XZk1+Qh5 CeybulXD7bqJ49BlWpnA+1sxEd3IfMkY0k8OMjUWTUaWE2xhHSwGoD2aC6WlhdrN sJLRr4p05xqOFKH2NQKXsDfeYeOPmfbj4mWEpbLnVDnX2xvLT0M7DTANcGRXE0tZ h5l6yUV+xSA0jF5XimxRrzAWQINnPkS2ISBvFxC2EgE720H+SvL/SFE3k56vkzoI wN6IsioeWMgIgHgGYqYWhu/PO0gjECVXI2u4/Egqn3W3VcWrOPBeIoSghiaG1kQE MdiPR+6e0UwvAf+amNe2AJRWE6WlXYmN7KSA+Jd2zp0C -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:01 2026 by rpki-client