This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/ZDyULkY7XdQ11kYjdum05r2DwuM.roa File: ZDyULkY7XdQ11kYjdum05r2DwuM.roa (raw, json) Hash identifier: zq3BSwMTqEueaum+sWRBlqipTKD1rJ/mmOl8XQsz7Vs= Subject key identifier: 64:3C:94:2E:46:3B:5D:D4:35:D6:46:23:76:E9:B4:E6:BD:83:C2:E3 Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047 Certificate serial: 019B7C7FDDD33377AFF813EFB44456FCCFF5 Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/ZDyULkY7XdQ11kYjdum05r2DwuM.roa Signing time: Fri 02 Jan 2026 02:18:33 +0000 ROA not before: Fri 02 Jan 2026 02:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208855 IP address blocks: 109.71.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:dd:d3:33:77:af:f8:13:ef:b4:44:56:fc:cf:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047 Validity Not Before: Jan 2 02:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=643c942e463b5dd435d6462376e9b4e6bd83c2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:80:42:11:68:c6:79:50:bc:5f:fe:bd:69:ee: ac:25:74:1a:8a:6d:0a:ff:9e:3d:f4:45:ed:8f:26: 39:24:6f:63:eb:49:35:d2:db:39:c0:96:66:ff:25: af:d2:9d:83:2e:de:db:d7:95:51:3f:8c:bb:f3:da: fe:ee:63:88:34:6a:4c:e2:c2:8b:90:9a:b9:40:68: 04:e0:08:86:f1:ae:65:e4:8c:86:ec:26:80:ca:21: de:85:29:1a:d4:d4:db:77:a8:63:f8:20:53:35:5d: 21:e5:d2:b3:42:52:db:5a:a1:03:89:0e:ab:28:04: c8:dc:ea:9b:c9:ff:0b:f1:33:47:80:40:29:2d:53: cb:43:f2:41:87:85:d9:97:c6:68:b8:e0:ff:31:c1: a0:0a:48:36:10:82:8c:d5:e0:0c:e3:35:48:fe:39: 0b:25:44:a2:17:3a:19:11:59:24:4c:34:ae:6f:6a: b5:f5:2b:8e:44:17:c2:85:5e:f4:fe:3a:5f:0b:74: a2:62:40:f9:ca:ad:c5:6d:ea:1b:6c:8a:fb:75:17: 9e:00:be:79:c7:dc:2e:76:9b:97:f7:39:56:7a:0e: e8:ae:5b:38:c7:0e:cd:1c:20:69:7b:fc:8c:dc:e1: 74:cc:7a:bc:57:c5:f1:aa:48:0f:84:ea:41:4e:73: b9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3C:94:2E:46:3B:5D:D4:35:D6:46:23:76:E9:B4:E6:BD:83:C2:E3 X509v3 Authority Key Identifier: keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/ZDyULkY7XdQ11kYjdum05r2DwuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.152.0/22 Signature Algorithm: sha256WithRSAEncryption 57:30:97:b0:51:42:cb:5a:da:77:c6:b2:87:86:36:35:2d:2f: 4c:0a:f4:cd:4b:38:ac:de:2a:8a:df:6d:e5:8a:61:d7:8d:31: db:e1:d7:2f:7d:d6:cf:79:bd:cb:76:c0:01:b0:b3:73:15:10: 41:8f:3a:0d:62:d9:43:46:8f:f7:a9:44:99:e8:d4:51:29:6f: 05:d8:83:bb:ef:6e:b6:2a:f5:43:d4:02:e9:f2:d9:38:04:c6: ef:1a:1e:74:9c:66:87:d3:f2:c7:35:94:f9:55:b8:20:f6:f5: 54:7a:7e:2a:9a:39:52:53:aa:f8:67:2a:d4:fb:82:b4:84:ab: da:11:49:5a:21:ab:b8:6a:b4:95:f0:df:ee:07:de:31:0e:8e: ce:99:57:b4:e5:7d:65:bb:cd:40:ce:cd:32:a6:5c:c4:59:44: e5:47:8e:ab:c1:09:99:f9:fa:70:1c:7c:47:2c:d3:b0:7a:8c: 49:ae:00:63:23:47:cd:05:6d:97:d9:d7:10:8f:e1:74:92:66: a4:e0:79:ed:e1:16:23:ce:34:02:5c:fa:5c:a1:54:f7:11:3f: 8d:8c:6d:bc:1f:1e:1b:77:84:e0:06:e0:df:76:a4:d0:f2:a9: 8e:1a:53:dc:7c:e7:e3:97:c6:f7:4b:d9:46:d0:f4:47:1d:d4: 9e:26:c1:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f93TM3ev+BPvtERW/M/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YWJmMGM5ODE3MDFhYmE5N2U0ZmNkMGJlZDRlNGNkYjg2 OTIwNDcwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDNjOTQyZTQ2M2I1ZGQ0MzVkNjQ2MjM3NmU5YjRlNmJkODNjMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oBCEWjGeVC8X/69ae6sJXQaim0K /5499EXtjyY5JG9j60k10ts5wJZm/yWv0p2DLt7b15VRP4y789r+7mOINGpM4sKL kJq5QGgE4AiG8a5l5IyG7CaAyiHehSka1NTbd6hj+CBTNV0h5dKzQlLbWqEDiQ6r KATI3Oqbyf8L8TNHgEApLVPLQ/JBh4XZl8ZouOD/McGgCkg2EIKM1eAM4zVI/jkL JUSiFzoZEVkkTDSub2q19SuORBfChV70/jpfC3SiYkD5yq3FbeobbIr7dReeAL55 x9wudpuX9zlWeg7orls4xw7NHCBpe/yM3OF0zHq8V8XxqkgPhOpBTnO5ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQ8lC5GO13UNdZGI3bptOa9g8LjMB8GA1UdIwQY MBaAFISr8MmBcBq6l+T80L7U5M24aSBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAt NjFiYzdlY2M0ODVjLzEvWkR5VUxrWTdYZFExMWtZamR1bTA1cjJEd3VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAtNjFiYzdlY2M0ODVj LzEvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbUeYMA0G CSqGSIb3DQEBCwUAA4IBAQBXMJewUULLWtp3xrKHhjY1LS9MCvTNSzis3iqK323l imHXjTHb4dcvfdbPeb3LdsABsLNzFRBBjzoNYtlDRo/3qUSZ6NRRKW8F2IO77262 KvVD1ALp8tk4BMbvGh50nGaH0/LHNZT5Vbgg9vVUen4qmjlSU6r4ZyrU+4K0hKva EUlaIau4arSV8N/uB94xDo7OmVe05X1lu81Azs0yplzEWUTlR46rwQmZ+fpwHHxH LNOweoxJrgBjI0fNBW2X2dcQj+F0kmak4Hnt4RYjzjQCXPpcoVT3ET+NjG28Hx4b d4TgBuDfdqTQ8qmOGlPcfOfjl8b3S9lG0PRHHdSeJsEX -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:06 2026 by rpki-client