This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ztILPMiztxZKnVuR9GJ5u5F_y-s.roa File: ztILPMiztxZKnVuR9GJ5u5F_y-s.roa (raw, json) Hash identifier: ZvHhqyBlwW+6xTJ6WODk6S9XW/XvXQmWA2gqKXNFMoU= Subject key identifier: CE:D2:0B:3C:C8:B3:B7:16:4A:9D:5B:91:F4:62:79:BB:91:7F:CB:EB Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791079537CF74E2D15E1985D9A5AAD9D Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ztILPMiztxZKnVuR9GJ5u5F_y-s.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216192 IP address blocks: 185.17.138.0/24 maxlen: 24 212.68.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:79:53:7c:f7:4e:2d:15:e1:98:5d:9a:5a:ad:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ced20b3cc8b3b7164a9d5b91f46279bb917fcbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:0a:09:1b:46:81:bc:81:c7:5b:75:a2:40: f5:60:89:12:67:db:a5:01:06:ac:8c:1a:3a:13:fc: 0b:32:4a:4f:9f:78:ed:60:3d:14:91:89:0e:8a:04: 4e:85:de:1d:4e:7f:63:63:37:e5:e0:cb:0f:cf:a0: 8b:4b:f9:35:84:90:09:03:be:eb:91:ce:7e:6d:2f: 70:b6:ab:22:e5:e7:ad:c0:1b:21:2f:79:3d:2b:ce: 90:76:68:5e:bf:32:18:30:7e:3a:7e:86:7a:a7:4e: 9b:5c:fb:99:17:9a:43:db:77:42:5b:da:1a:4a:ea: 4b:ad:2a:ad:19:20:2e:03:96:80:17:46:98:69:8b: 4a:d4:36:71:01:78:26:40:36:9c:2b:78:c5:10:39: 2e:bb:56:b7:84:08:47:bb:d3:22:1f:0e:47:57:15: a4:f5:52:9c:90:12:41:05:7b:d0:c9:28:72:52:c3: 43:8f:fc:c4:0e:a2:1f:70:fc:e5:a2:d2:ab:ea:fe: fd:4e:ca:3f:98:a4:9c:2c:5b:a8:de:23:8e:27:dc: 9f:40:bc:50:6a:18:e3:4f:40:c2:48:97:04:e5:73: f1:a4:15:6e:27:f0:1b:50:ac:16:0b:3e:a9:f7:0d: 8f:8b:09:8b:ba:78:4e:4f:1c:1d:ae:46:4c:5d:c8: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D2:0B:3C:C8:B3:B7:16:4A:9D:5B:91:F4:62:79:BB:91:7F:CB:EB X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ztILPMiztxZKnVuR9GJ5u5F_y-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.138.0/24 212.68.37.0/24 Signature Algorithm: sha256WithRSAEncryption 77:57:b5:f2:ab:54:b2:c0:a3:a1:d3:d3:fd:bf:bb:e4:cb:f4: 88:a9:29:2b:71:34:14:c2:93:9a:97:ed:ca:c6:1d:09:1e:23: cd:f4:e4:89:76:75:5d:34:be:de:aa:99:53:07:27:38:4c:d7: af:cb:be:4c:5c:8d:57:2a:07:29:59:99:e3:52:fd:89:aa:10: db:87:e8:8a:63:9a:77:18:1c:c8:dd:de:db:f4:c6:9d:62:ca: 2c:e4:8a:e8:3a:2e:d1:1e:fd:41:5b:c2:fd:58:e4:13:e9:1e: f5:69:fe:d8:a0:82:8e:0e:ba:a0:c0:1a:e4:7b:91:e2:91:94: 2a:db:2e:d1:5f:60:38:2c:62:53:d9:a8:ee:6f:b1:10:f7:27: 9c:47:23:e9:45:ff:c6:71:45:6a:66:24:9d:2f:7c:a8:c2:86: 02:fa:e9:c7:c3:bc:a2:48:a4:a4:4e:53:f0:2c:c1:9f:e1:8d: 39:20:5f:ff:90:d4:0a:e0:95:3f:35:bb:b1:cd:70:f7:d1:41: 53:21:ee:2d:91:01:e6:6e:56:31:0d:03:46:de:6b:75:cb:ab: ac:ab:2f:8c:17:56:96:f5:0e:d0:2e:85:1b:46:06:b1:df:69: 7b:8a:8c:56:f4:76:5f:ac:21:4b:f1:ff:30:21:1a:c7:64:76: 69:d4:14:90 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EHlTfPdOLRXhmF2aWq2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWQyMGIzY2M4YjNiNzE2NGE5ZDViOTFmNDYyNzliYjkxN2ZjYmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs68KCRtGgbyBx1t1okD1YIkSZ9ul AQasjBo6E/wLMkpPn3jtYD0UkYkOigROhd4dTn9jYzfl4MsPz6CLS/k1hJAJA77r kc5+bS9wtqsi5eetwBshL3k9K86QdmhevzIYMH46foZ6p06bXPuZF5pD23dCW9oa SupLrSqtGSAuA5aAF0aYaYtK1DZxAXgmQDacK3jFEDkuu1a3hAhHu9MiHw5HVxWk 9VKckBJBBXvQyShyUsNDj/zEDqIfcPzlotKr6v79Tso/mKScLFuo3iOOJ9yfQLxQ ahjjT0DCSJcE5XPxpBVuJ/AbUKwWCz6p9w2PiwmLunhOTxwdrkZMXcjCGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM7SCzzIs7cWSp1bkfRiebuRf8vrMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvenRJTFBNaXp0eFpLblZ1UjlHSjV1NUZfeS1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuRGKAwQA 1EQlMA0GCSqGSIb3DQEBCwUAA4IBAQB3V7Xyq1SywKOh09P9v7vky/SIqSkrcTQU wpOal+3Kxh0JHiPN9OSJdnVdNL7eqplTByc4TNevy75MXI1XKgcpWZnjUv2JqhDb h+iKY5p3GBzI3d7b9MadYsos5IroOi7RHv1BW8L9WOQT6R71af7YoIKODrqgwBrk e5HikZQq2y7RX2A4LGJT2ajub7EQ9yecRyPpRf/GcUVqZiSdL3yowoYC+unHw7yi SKSkTlPwLMGf4Y05IF//kNQK4JU/NbuxzXD30UFTIe4tkQHmblYxDQNG3mt1y6us qy+MF1aW9Q7QLoUbRgax32l7ioxW9HZfrCFL8f8wIRrHZHZp1BSQ -----END CERTIFICATE-----Generated at Wed Jan 21 13:34:20 2026 by rpki-client