This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/z-94LKFdq2I6Ue4iGlz0cM--5Nw.roa File: z-94LKFdq2I6Ue4iGlz0cM--5Nw.roa (raw, json) Hash identifier: t1Erh/Y1mR8mo+fNrkkcfdDJBfsc3dL64HC8v0NVUe4= Subject key identifier: CF:EF:78:2C:A1:5D:AB:62:3A:51:EE:22:1A:5C:F4:70:CF:BE:E4:DC Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31 Certificate serial: 019B7EA55F626A917FCCA4805AE9B9E0CC8A Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/z-94LKFdq2I6Ue4iGlz0cM--5Nw.roa Signing time: Fri 02 Jan 2026 12:18:45 +0000 ROA not before: Fri 02 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 185.150.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.mft rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5f:62:6a:91:7f:cc:a4:80:5a:e9:b9:e0:cc:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31 Validity Not Before: Jan 2 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfef782ca15dab623a51ee221a5cf470cfbee4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:b5:be:62:e3:99:ca:80:e7:df:1e:d9:82: 9f:ae:e9:72:d4:39:56:77:2c:e2:81:50:1b:1f:6c: 85:91:02:1a:ea:bd:d6:99:ad:23:6b:e5:1c:bc:92: 4f:3f:e6:26:fe:00:99:3e:a6:05:0e:ba:2a:42:c0: 33:d9:fb:7d:fe:ed:f5:c6:5f:b2:ff:5c:68:ad:0d: 43:63:a9:82:05:2d:35:83:2c:5b:15:4c:25:45:23: 2a:d4:73:ff:77:91:3a:6f:cf:b6:14:c7:f6:2b:14: c1:f1:bc:f6:8d:0c:22:cf:4b:a4:b9:9f:76:81:7c: 24:a2:15:77:49:b9:da:92:e3:32:04:4c:bb:11:fc: 69:3b:1d:74:50:2f:99:44:16:d6:4d:12:fb:ea:16: 78:41:f6:66:3e:e1:f4:1e:6b:31:cc:b6:0c:b5:3b: 49:32:ba:18:1e:bd:3b:5e:4d:a9:43:82:f3:20:d6: 1f:0d:82:42:d0:fe:e3:49:f4:02:0c:47:50:87:97: 2a:0b:01:19:0e:65:e6:35:52:6e:2b:8f:4a:f7:6a: 0e:56:c7:0c:e3:b2:64:17:70:93:f5:17:33:68:9c: 0b:77:fd:ef:41:d4:04:31:79:cb:e4:2a:c2:04:13: c5:16:b8:01:1a:35:d8:77:08:f7:4b:34:dc:e3:7d: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EF:78:2C:A1:5D:AB:62:3A:51:EE:22:1A:5C:F4:70:CF:BE:E4:DC X509v3 Authority Key Identifier: keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/z-94LKFdq2I6Ue4iGlz0cM--5Nw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.216.0/22 Signature Algorithm: sha256WithRSAEncryption 72:d1:a5:91:f6:17:9c:e6:b2:93:54:95:1b:92:df:0f:79:b0: cc:c5:13:d5:6a:c8:cf:36:ed:d5:4d:04:88:25:c1:d6:a3:a5: 3a:29:e8:65:8c:19:0e:80:6d:a0:a2:ca:be:6a:00:eb:e1:8f: 5c:00:c9:3e:23:19:d0:d4:5b:9f:85:f6:02:0d:34:a3:bb:85: 80:17:98:b7:b0:ee:8a:61:ef:04:13:bf:32:20:aa:89:4f:96: b6:da:6d:b0:be:35:f3:bc:d7:6a:4e:d0:26:5f:12:78:02:7f: e7:ca:11:d3:4f:63:32:0a:79:32:f4:31:c3:d8:28:01:59:1c: 29:3d:6c:73:24:87:3d:01:5b:eb:29:e8:b3:03:5f:59:a7:5b: 2e:19:e8:f3:40:0f:db:d4:f6:eb:90:94:a1:12:ab:6a:e3:fc: 00:3e:5a:8b:9b:d3:7c:7a:fe:3b:02:b9:aa:07:3a:9d:a4:0e: 11:55:be:30:8d:43:dc:16:25:44:4b:31:a9:fb:9e:e8:a5:18: c9:6f:2e:b9:e5:c3:29:dd:73:1b:a4:a4:a0:a6:15:4b:d5:4f: 67:ff:ff:23:c3:b6:2f:60:b2:9e:77:b3:fc:78:72:f0:e7:b6: 7e:9e:6a:47:d7:eb:05:d6:f5:40:cd:e7:86:e1:00:f9:8e:a2: 94:9c:ae:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pV9iapF/zKSAWum54MyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZDFmZjZiZWM5ZmJjYjg5ZTk1MGEzYTAxZWYyZDY4NmYw ZTdhMzEwHhcNMjYwMTAyMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmVmNzgyY2ExNWRhYjYyM2E1MWVlMjIxYTVjZjQ3MGNmYmVlNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMO1vmLjmcqA598e2YKfruly1DlW dyzigVAbH2yFkQIa6r3Wma0ja+UcvJJPP+Ym/gCZPqYFDroqQsAz2ft9/u31xl+y /1xorQ1DY6mCBS01gyxbFUwlRSMq1HP/d5E6b8+2FMf2KxTB8bz2jQwiz0ukuZ92 gXwkohV3SbnakuMyBEy7EfxpOx10UC+ZRBbWTRL76hZ4QfZmPuH0HmsxzLYMtTtJ MroYHr07Xk2pQ4LzINYfDYJC0P7jSfQCDEdQh5cqCwEZDmXmNVJuK49K92oOVscM 47JkF3CT9RczaJwLd/3vQdQEMXnL5CrCBBPFFrgBGjXYdwj3SzTc432MGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/veCyhXatiOlHuIhpc9HDPvuTcMB8GA1UdIwQY MBaAFBXR/2vsn7y4npUKOgHvLWhvDnoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmRIX2EteWZ2TGllbFFvNkFlOHRhRzhPZWpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjct OTZiODY5MWY1MjYwLzEvei05NExLRmRxMkk2VWU0aUdsejBjTS0tNU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjctOTZiODY5MWY1MjYw LzEvRmRIX2EteWZ2TGllbFFvNkFlOHRhRzhPZWpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZbYMA0G CSqGSIb3DQEBCwUAA4IBAQBy0aWR9hec5rKTVJUbkt8PebDMxRPVasjPNu3VTQSI JcHWo6U6KehljBkOgG2gosq+agDr4Y9cAMk+IxnQ1FufhfYCDTSju4WAF5i3sO6K Ye8EE78yIKqJT5a22m2wvjXzvNdqTtAmXxJ4An/nyhHTT2MyCnky9DHD2CgBWRwp PWxzJIc9AVvrKeizA19Zp1suGejzQA/b1PbrkJShEqtq4/wAPlqLm9N8ev47Armq BzqdpA4RVb4wjUPcFiVESzGp+57opRjJby655cMp3XMbpKSgphVL1U9n//8jw7Yv YLKed7P8eHLw57Z+nmpH1+sF1vVAzeeG4QD5jqKUnK6A -----END CERTIFICATE-----Generated at Tue Jan 20 02:59:25 2026 by rpki-client