This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/Zem19jbYLY_TJOw1fhbbzQQpIrk.roa File: Zem19jbYLY_TJOw1fhbbzQQpIrk.roa (raw, json) Hash identifier: 4+yIb5TxfA9PdNX24aIAR4MgjiRqcH12CDhLB9IbWOk= Subject key identifier: 65:E9:B5:F6:36:D8:2D:8F:D3:24:EC:35:7E:16:DB:CD:04:29:22:B9 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 019B7D5C2A4852333EB49F75F497BB2315C2 Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/Zem19jbYLY_TJOw1fhbbzQQpIrk.roa Signing time: Fri 02 Jan 2026 06:19:10 +0000 ROA not before: Fri 02 Jan 2026 06:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 37.49.232.0/23 maxlen: 24 37.49.236.0/22 maxlen: 24 77.95.70.0/23 maxlen: 24 77.95.71.0/24 maxlen: 24 185.1.144.0/24 maxlen: 24 193.105.232.0/24 maxlen: 24 2001:7f8:47:47::/64 maxlen: 64 2001:7f8:54::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:2a:48:52:33:3e:b4:9f:75:f4:97:bb:23:15:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Jan 2 06:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65e9b5f636d82d8fd324ec357e16dbcd042922b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:9f:f2:42:7c:24:9b:b0:01:d3:c9:b4:66: 63:a9:c1:9b:5b:47:b7:c5:c2:e0:6d:9f:6d:fc:27: 23:bd:aa:a9:cd:56:f2:95:9f:7a:68:32:af:d2:1a: f7:b5:c4:b9:46:b2:6f:4d:97:ea:e4:dc:00:68:4c: d8:20:da:e5:a0:15:32:d2:00:4c:63:37:4e:3b:32: f8:d6:95:74:da:c8:f0:18:3e:3c:00:40:45:d4:be: 63:be:5a:36:08:95:e7:4a:d4:71:b4:c4:7f:7f:fd: 58:94:e2:5e:65:07:11:ac:6c:5a:5a:46:7b:02:f3: 19:4c:c6:a0:21:4c:71:58:a5:60:2c:63:f4:21:f8: e3:b7:84:c7:a6:93:38:15:90:7d:fd:83:d6:40:fb: 62:c7:3a:f9:0e:e7:7c:c2:d8:10:d0:9b:03:80:5c: cd:74:6b:ee:93:d8:96:e0:b4:79:8b:8f:d4:29:5e: 60:c3:74:e9:0a:b3:bb:45:3a:e6:8f:67:cc:b1:9c: 44:29:2e:e4:49:cb:d7:ac:9a:56:d7:41:cb:06:19: 72:c7:56:4a:07:db:b0:78:5e:0f:6e:4e:0d:93:fe: 09:8d:27:f9:93:bb:db:fa:8f:7e:d9:05:99:5d:07: 4d:8e:33:46:bd:a6:5d:dd:ff:9d:15:79:eb:8a:61: 9f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E9:B5:F6:36:D8:2D:8F:D3:24:EC:35:7E:16:DB:CD:04:29:22:B9 X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/Zem19jbYLY_TJOw1fhbbzQQpIrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.49.232.0/23 37.49.236.0/22 77.95.70.0/23 185.1.144.0/24 193.105.232.0/24 IPv6: 2001:7f8:47:47::/64 2001:7f8:54::/48 Signature Algorithm: sha256WithRSAEncryption 4a:e1:f0:5d:73:bc:51:51:7a:1d:82:79:86:d7:94:bd:b6:ed: 0d:0c:43:8a:fe:d1:27:79:16:a1:19:85:6d:8d:b7:10:2b:33: 69:04:bd:c0:2c:fa:6f:ee:80:b6:16:a5:94:e6:3e:91:06:cc: 66:f8:dd:c5:c4:91:8d:3a:53:86:a8:c1:54:80:a2:ea:7a:28: 42:28:c8:37:f2:7e:23:fc:a3:ca:45:1b:b0:5d:26:91:1c:65: 26:c3:18:c7:b3:ab:c6:68:2a:ce:00:53:8e:71:c8:ce:95:6b: 8c:9a:b9:b8:d5:76:0b:9e:65:a7:67:cf:fc:a3:af:60:66:c4: 0c:57:65:a5:74:dd:d3:7a:1c:be:68:37:8a:01:9f:d3:c4:5f: ea:49:d6:07:c5:a1:36:e2:41:da:09:53:82:29:1b:05:69:ac: 5a:0d:7a:d9:62:5c:fa:5f:9a:fd:42:03:ce:b0:3d:9a:32:15: e9:fe:02:9e:54:3b:16:4b:48:62:96:5a:a1:d7:f3:16:bf:95: b5:15:35:03:42:4d:d4:ad:4e:9a:9b:6f:57:e5:8e:66:e4:aa: 0c:58:b8:f6:94:bb:fa:26:a5:24:92:e3:a6:4e:34:44:39:9e: 5a:9f:a1:67:60:a4:a9:3d:49:39:4e:88:32:bd:2a:21:8b:ac: d9:fb:aa:05 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt9XCpIUjM+tJ919Je7IxXCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjYwMTAyMDYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWU5YjVmNjM2ZDgyZDhmZDMyNGVjMzU3ZTE2ZGJjZDA0MjkyMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkuf8kJ8JJuwAdPJtGZjqcGbW0e3 xcLgbZ9t/CcjvaqpzVbylZ96aDKv0hr3tcS5RrJvTZfq5NwAaEzYINrloBUy0gBM YzdOOzL41pV02sjwGD48AEBF1L5jvlo2CJXnStRxtMR/f/1YlOJeZQcRrGxaWkZ7 AvMZTMagIUxxWKVgLGP0Ifjjt4THppM4FZB9/YPWQPtixzr5Dud8wtgQ0JsDgFzN dGvuk9iW4LR5i4/UKV5gw3TpCrO7RTrmj2fMsZxEKS7kScvXrJpW10HLBhlyx1ZK B9uweF4Pbk4Nk/4JjSf5k7vb+o9+2QWZXQdNjjNGvaZd3f+dFXnrimGfqwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFGXptfY22C2P0yTsNX4W280EKSK5MB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvWmVtMTlqYllMWV9USk93MWZoYmJ6UVFwSXJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAkBAIAATAeAwQBJTHoAwQC JTHsAwQBTV9GAwQAuQGQAwQAwWnoMBoEAgACMBQDCQAgAQf4AEcARwMHACABB/gA VDANBgkqhkiG9w0BAQsFAAOCAQEASuHwXXO8UVF6HYJ5hteUvbbtDQxDiv7RJ3kW oRmFbY23ECszaQS9wCz6b+6AthallOY+kQbMZvjdxcSRjTpThqjBVICi6nooQijI N/J+I/yjykUbsF0mkRxlJsMYx7OrxmgqzgBTjnHIzpVrjJq5uNV2C55lp2fP/KOv YGbEDFdlpXTd03ocvmg3igGf08Rf6knWB8WhNuJB2glTgikbBWmsWg162WJc+l+a /UIDzrA9mjIV6f4CnlQ7FktIYpZaodfzFr+VtRU1A0JN1K1OmptvV+WOZuSqDFi4 9pS7+ialJJLjpk40RDmeWp+hZ2CkqT1JOU6IMr0qIYus2fuqBQ== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:02 2026 by rpki-client