This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa File: ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa (raw, json) Hash identifier: /U4sk1hEfw6QielSTTSNVHXW385f6r5x3U3PzQsHic0= Subject key identifier: 65:1F:01:38:D3:5D:5C:A5:A9:D4:CC:2C:1B:89:8A:E9:58:D3:40:7B Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Certificate serial: 019B7A5AB3B0A2529AD13B464001FCFC2F01 Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209631 IP address blocks: 194.116.112.0/21 maxlen: 24 194.116.112.0/24 maxlen: 24 194.116.113.0/24 maxlen: 24 194.116.116.0/24 maxlen: 24 194.116.118.0/24 maxlen: 24 194.116.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b3:b0:a2:52:9a:d1:3b:46:40:01:fc:fc:2f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=651f0138d35d5ca5a9d4cc2c1b898ae958d3407b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:27:4e:a6:a9:d2:52:2a:65:5d:3b:4f:b7: 19:30:b2:4d:98:c3:ec:2b:88:a9:dd:35:d8:81:3a: 2e:69:b6:1a:83:8c:91:1b:2a:cf:09:1f:c3:a0:db: 9b:d0:8b:30:3e:c1:a1:d4:1c:3f:42:28:8f:ea:43: 09:71:17:71:99:45:a1:f0:12:8e:39:de:e1:48:fd: fd:f8:3f:b6:72:4f:25:fc:46:62:56:84:e2:be:aa: 47:87:f9:bd:10:88:0c:44:2c:aa:2f:4b:03:31:22: 7e:4b:d9:1d:ab:33:59:3d:48:d8:09:30:23:eb:6b: e0:e6:1c:f7:b2:3c:a9:19:d4:f3:1e:8e:7d:9d:6a: f4:23:07:2d:00:27:49:d1:d4:f1:69:79:84:67:e0: 32:e8:6d:d1:02:9a:3e:1e:75:90:5c:45:ae:66:88: 3d:16:3e:1c:ae:ab:61:9f:47:3c:80:59:96:78:08: c0:fb:06:1c:1e:60:24:ed:1c:f9:86:73:66:bd:de: bf:36:a0:7c:e3:28:5f:5b:b6:1a:7d:11:d8:93:94: 9c:54:58:69:32:f5:53:1b:cc:d5:14:07:de:4f:58: ca:f7:52:a2:70:3a:d8:34:af:6a:fb:08:4a:96:3a: 36:27:19:30:6a:1f:ba:e0:a8:a8:6f:37:63:58:08: f2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1F:01:38:D3:5D:5C:A5:A9:D4:CC:2C:1B:89:8A:E9:58:D3:40:7B X509v3 Authority Key Identifier: keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.112.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:b5:ec:cb:27:fd:74:e3:9c:b1:a5:2a:0d:27:14:58:3f:20: 16:8c:c2:39:42:73:99:23:c4:ef:1f:64:d2:87:5d:3c:88:da: 79:48:55:2f:d7:13:58:95:0b:af:26:21:58:29:55:73:32:a5: c2:80:c9:44:05:e0:12:1b:cc:b5:32:a5:80:ef:e5:dc:64:58: 87:36:99:18:cb:8f:7a:07:a4:d6:6d:71:a4:39:ef:70:1b:c9: 22:6b:3b:f5:9d:2a:92:25:ed:31:25:de:e1:ea:da:c9:5a:f0: b7:e8:ed:14:40:4a:28:57:26:8b:60:c5:e7:23:b8:b1:dc:ce: 8e:58:cb:6d:44:51:f7:a4:56:70:6f:a0:f4:6e:83:a0:1d:81: 48:2e:20:52:4d:2c:4b:09:22:66:d9:19:ea:3e:fc:28:24:a4: b0:63:fc:63:18:bd:7b:42:2d:15:91:9b:16:06:1d:5e:c6:8e: b3:84:ed:d2:4b:22:97:be:60:8d:60:74:28:69:47:ca:c7:5d: a7:da:2f:4a:80:4d:12:1e:c1:4e:8a:b7:c4:36:f8:47:60:a8: db:6c:87:7c:3b:7a:e5:7d:2f:62:dd:94:da:52:a7:3f:ce:7d: de:a7:9d:f0:bf:57:c3:d0:da:07:f9:34:84:54:3d:01:d1:20: 93:73:6c:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrOwolKa0TtGQAH8/C8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODg3MzAyZDFlNzQwZjVmOTg0ODFmYjRiN2E0NjE2OTZi ZmU1YzEwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTFmMDEzOGQzNWQ1Y2E1YTlkNGNjMmMxYjg5OGFlOTU4ZDM0MDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWsnTqap0lIqZV07T7cZMLJNmMPs K4ip3TXYgTouabYag4yRGyrPCR/DoNub0IswPsGh1Bw/QiiP6kMJcRdxmUWh8BKO Od7hSP39+D+2ck8l/EZiVoTivqpHh/m9EIgMRCyqL0sDMSJ+S9kdqzNZPUjYCTAj 62vg5hz3sjypGdTzHo59nWr0IwctACdJ0dTxaXmEZ+Ay6G3RApo+HnWQXEWuZog9 Fj4crqthn0c8gFmWeAjA+wYcHmAk7Rz5hnNmvd6/NqB84yhfW7YafRHYk5ScVFhp MvVTG8zVFAfeT1jK91KicDrYNK9q+whKljo2Jxkwah+64KiobzdjWAjy4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGUfATjTXVylqdTMLBuJiulY00B7MB8GA1UdIwQY MBaAFCyIcwLR50D1+YSB+0t6RhaWv+XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQt YzAyOGQ5MWViYzljLzEvWlI4Qk9OTmRYS1dwMU13c0c0bUs2VmpUUUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQtYzAyOGQ5MWViYzlj LzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwnRwMA0G CSqGSIb3DQEBCwUAA4IBAQBMtezLJ/1045yxpSoNJxRYPyAWjMI5QnOZI8TvH2TS h108iNp5SFUv1xNYlQuvJiFYKVVzMqXCgMlEBeASG8y1MqWA7+XcZFiHNpkYy496 B6TWbXGkOe9wG8kiazv1nSqSJe0xJd7h6trJWvC36O0UQEooVyaLYMXnI7ix3M6O WMttRFH3pFZwb6D0boOgHYFILiBSTSxLCSJm2RnqPvwoJKSwY/xjGL17Qi0VkZsW Bh1exo6zhO3SSyKXvmCNYHQoaUfKx12n2i9KgE0SHsFOirfENvhHYKjbbId8O3rl fS9i3ZTaUqc/zn3ep53wv1fD0NoH+TSEVD0B0SCTc2zr -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:44 2026 by rpki-client