This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/ZUVBQ1r4rM0fNpL1kCVZVyDtAbg.roa File: ZUVBQ1r4rM0fNpL1kCVZVyDtAbg.roa (raw, json) Hash identifier: XutBjsWzeDRqYrHe3w88udQRKf0KrHbNkeI/S0YKKn0= Subject key identifier: 65:45:41:43:5A:F8:AC:CD:1F:36:92:F5:90:25:59:57:20:ED:01:B8 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D19EC7F76B4B0AE9654960E1D85B4 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/ZUVBQ1r4rM0fNpL1kCVZVyDtAbg.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42007 IP address blocks: 81.177.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:19:ec:7f:76:b4:b0:ae:96:54:96:0e:1d:85:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=654541435af8accd1f3692f59025595720ed01b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:aa:48:9b:57:79:fd:8a:9f:a3:62:90:3c:39: ed:aa:86:f7:40:7d:20:05:b9:7f:22:ad:46:84:bb: e7:e4:98:c7:1f:b2:a9:49:74:43:35:00:61:2a:28: 95:66:3b:3b:a2:0b:3b:61:91:71:79:9a:b2:d7:4b: 41:d8:4f:a7:05:4e:3c:a2:22:66:2e:f0:69:b5:44: b9:f1:81:1d:ac:04:4c:fa:5f:ef:25:f6:55:1a:ba: d6:74:9d:39:26:37:18:48:fa:a8:ed:98:d6:81:de: e4:52:0d:1e:ef:75:4d:3d:b7:7e:dd:55:0f:87:16: c2:ed:99:85:ea:33:a8:99:d1:cd:08:c4:7f:59:fa: c7:8b:3b:ac:76:c5:e2:c7:72:89:d3:23:b1:2e:7b: 3b:f1:4d:1c:a8:05:f1:15:08:94:32:ab:f9:68:04: 09:dc:46:fb:96:49:6e:a5:df:4a:ca:75:d5:6d:dd: 55:61:86:42:0d:b9:e4:f5:09:7c:3d:a4:a7:d3:46: 8d:64:ee:28:d7:83:98:49:35:bb:44:ec:85:ec:79: de:30:5c:8c:d5:49:e6:12:f0:b1:7b:f3:5f:5c:9f: 09:3c:e1:cc:4e:65:21:99:42:7f:ff:3f:83:52:d1: b4:09:68:db:7d:f3:c1:bf:16:83:98:ae:87:96:6f: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:45:41:43:5A:F8:AC:CD:1F:36:92:F5:90:25:59:57:20:ED:01:B8 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/ZUVBQ1r4rM0fNpL1kCVZVyDtAbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.177.212.0/24 Signature Algorithm: sha256WithRSAEncryption 69:c6:1f:0f:bc:10:e6:8e:7b:0e:09:d9:10:db:0a:c4:49:82: e7:fe:60:95:aa:fb:f0:cd:67:6a:f9:a4:0e:42:41:32:8f:2a: 5f:fc:bd:b5:fa:95:93:16:37:c0:63:85:a4:50:40:54:7b:a8: d1:60:5b:fe:fc:4e:a5:fa:d8:7f:40:c1:e7:e9:86:79:13:2f: 6b:6e:c1:28:f9:f1:b5:05:62:51:fa:35:37:98:d0:41:67:45: 7f:6f:1c:fb:d6:aa:5d:aa:45:4f:95:5d:e9:22:44:b0:8e:2e: 81:05:91:c8:e3:f1:fc:06:6d:08:9b:e9:8c:ba:ea:51:4f:9e: bf:ed:a3:b4:c7:fb:67:21:59:ac:16:69:52:3e:6b:85:3c:d4: e0:97:74:2f:a3:2c:0e:79:93:75:bf:cd:b8:bc:f3:a0:7b:1f: f2:01:05:d5:38:bb:a4:9d:47:bf:e6:c7:d8:b1:07:af:b6:66: 7a:59:1e:16:11:da:47:5e:64:53:cb:a6:4b:68:26:64:0d:48: 44:9a:3e:ad:19:0c:3b:b3:b2:b3:c5:22:23:5e:72:6b:be:13: 1a:54:17:2e:90:45:71:c5:fc:5c:c2:a2:7a:b6:59:49:f2:bd: a1:0a:a4:57:3e:6a:ae:04:0b:63:41:ee:a6:f3:3f:23:75:7c: ff:e9:6e:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRnsf3a0sK6WVJYOHYW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTQ1NDE0MzVhZjhhY2NkMWYzNjkyZjU5MDI1NTk1NzIwZWQwMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzapIm1d5/Yqfo2KQPDntqob3QH0g Bbl/Iq1GhLvn5JjHH7KpSXRDNQBhKiiVZjs7ogs7YZFxeZqy10tB2E+nBU48oiJm LvBptUS58YEdrARM+l/vJfZVGrrWdJ05JjcYSPqo7ZjWgd7kUg0e73VNPbd+3VUP hxbC7ZmF6jOomdHNCMR/WfrHizusdsXix3KJ0yOxLns78U0cqAXxFQiUMqv5aAQJ 3Eb7lklupd9KynXVbd1VYYZCDbnk9Ql8PaSn00aNZO4o14OYSTW7ROyF7HneMFyM 1UnmEvCxe/NfXJ8JPOHMTmUhmUJ//z+DUtG0CWjbffPBvxaDmK6Hlm8zUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGVFQUNa+KzNHzaS9ZAlWVcg7QG4MB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvWlVWQlExcjRyTTBmTnBMMWtDVlpWeUR0QWJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbHUMA0G CSqGSIb3DQEBCwUAA4IBAQBpxh8PvBDmjnsOCdkQ2wrESYLn/mCVqvvwzWdq+aQO QkEyjypf/L21+pWTFjfAY4WkUEBUe6jRYFv+/E6l+th/QMHn6YZ5Ey9rbsEo+fG1 BWJR+jU3mNBBZ0V/bxz71qpdqkVPlV3pIkSwji6BBZHI4/H8Bm0Im+mMuupRT56/ 7aO0x/tnIVmsFmlSPmuFPNTgl3QvoywOeZN1v824vPOgex/yAQXVOLuknUe/5sfY sQevtmZ6WR4WEdpHXmRTy6ZLaCZkDUhEmj6tGQw7s7KzxSIjXnJrvhMaVBcukEVx xfxcwqJ6tllJ8r2hCqRXPmquBAtjQe6m8z8jdXz/6W6u -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:27 2026 by rpki-client