This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/ZMvIxxGP7qocWq6cskVSeYzqx0o.roa File: ZMvIxxGP7qocWq6cskVSeYzqx0o.roa (raw, json) Hash identifier: 3C3h+rU23U84LO7lG7BTF7dtlYQvYrPkr1tHRpjMHRU= Subject key identifier: 64:CB:C8:C7:11:8F:EE:AA:1C:5A:AE:9C:B2:45:52:79:8C:EA:C7:4A Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72 Certificate serial: 019B7E373877D19AE548C6C95F66CD71F39F Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/ZMvIxxGP7qocWq6cskVSeYzqx0o.roa Signing time: Fri 02 Jan 2026 10:18:26 +0000 ROA not before: Fri 02 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199046 IP address blocks: 45.130.96.0/22 maxlen: 24 45.158.156.0/22 maxlen: 24 152.89.40.0/22 maxlen: 24 176.106.40.0/21 maxlen: 24 185.5.220.0/22 maxlen: 24 192.145.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:38:77:d1:9a:e5:48:c6:c9:5f:66:cd:71:f3:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72 Validity Not Before: Jan 2 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64cbc8c7118feeaa1c5aae9cb24552798ceac74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:d8:5c:a1:7b:81:72:70:7b:54:0a:7a:d2: 9a:81:db:de:e7:c2:71:60:40:79:cf:3e:52:d2:7b: 8a:44:c4:2b:b9:bd:eb:f3:5a:3c:c5:f0:5e:0b:99: 80:c9:7c:fe:53:70:03:0d:8a:77:f6:1f:20:60:ad: be:1d:bb:bf:6f:ce:3b:f7:0a:91:e2:63:8a:b5:fd: 3b:7b:72:6c:16:fc:6c:8d:43:33:b7:62:1d:62:16: bf:b7:d7:da:c8:d5:d6:73:64:1f:0e:21:78:9b:a3: 54:df:f8:c0:3a:1c:ae:6b:6d:16:9c:07:6d:ad:0e: 9e:44:c9:b0:cb:9b:22:82:33:43:c0:28:3a:17:33: e1:8c:6b:70:64:2f:22:8b:fc:65:7d:c1:bb:12:0f: 09:52:3b:60:0b:18:f4:d9:dd:b8:ec:f5:21:d0:b0: c7:ae:9c:45:f0:7b:7f:43:33:4e:aa:94:e2:5f:42: c3:0e:4a:68:94:d0:34:51:1c:6c:96:c4:4b:2a:9f: ef:18:fe:46:9a:83:f5:7d:62:63:bc:e3:00:6a:59: 3e:b0:8f:96:4b:5e:4d:c7:a6:a7:81:49:44:b1:ba: e3:37:93:b1:42:0e:ae:23:ee:fe:94:8e:38:a8:88: 60:39:f2:47:54:17:ae:87:1f:1b:44:c1:ac:ec:37: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CB:C8:C7:11:8F:EE:AA:1C:5A:AE:9C:B2:45:52:79:8C:EA:C7:4A X509v3 Authority Key Identifier: keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/ZMvIxxGP7qocWq6cskVSeYzqx0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.96.0/22 45.158.156.0/22 152.89.40.0/22 176.106.40.0/21 185.5.220.0/22 192.145.120.0/22 Signature Algorithm: sha256WithRSAEncryption 64:64:8d:3d:3e:a9:a6:82:21:b1:bd:28:73:7f:23:2d:7f:2e: 45:9c:f6:b7:75:9f:b0:14:71:3c:08:1a:c1:7f:a1:21:2c:0e: 15:44:6a:d5:60:93:53:8f:e3:a9:6a:29:4f:c1:65:37:33:c1: bb:cb:15:36:6f:a2:69:a5:69:ee:93:1c:a7:0b:d3:c4:c2:69: 86:e6:b3:5b:80:fe:72:79:0f:10:2d:84:cc:cc:e0:ea:93:d7: b7:c5:53:10:83:cc:e5:28:12:0e:c6:cb:a1:da:4a:a3:12:d1: fb:cd:94:34:db:77:14:34:c7:4e:9a:fc:09:bc:3b:41:0c:5a: 58:ff:87:f9:84:04:2e:3c:c3:ac:6a:57:b5:ca:ab:44:65:d8: 7f:19:95:ad:a0:ec:a3:fc:cb:45:6b:4d:cb:c9:e5:ee:5a:cf: d5:4a:e5:fc:b5:57:c8:91:2e:7b:9d:ed:27:a3:81:d9:a8:ee: db:e5:d0:7c:0d:d3:b0:56:6f:e7:ce:29:15:4b:90:0f:05:9d: 10:6f:ef:4a:b8:b4:8f:0f:77:72:0c:b1:2a:c0:45:b5:bc:5c: 9a:3d:42:cd:c6:e5:da:d3:8a:15:d6:38:06:1a:29:b3:38:f4: d4:84:25:12:98:05:3d:45:c7:6f:aa:4a:a1:36:2d:72:87:fd: 49:0a:ee:2b -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt+Nzh30ZrlSMbJX2bNcfOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTZjN2U2NjBiMWM3NGUzYjAzMThiMTQzMzhjM2YwMGRk N2JjNzIwHhcNMjYwMTAyMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGNiYzhjNzExOGZlZWFhMWM1YWFlOWNiMjQ1NTI3OThjZWFjNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSXYXKF7gXJwe1QKetKagdve58Jx YEB5zz5S0nuKRMQrub3r81o8xfBeC5mAyXz+U3ADDYp39h8gYK2+Hbu/b8479wqR 4mOKtf07e3JsFvxsjUMzt2IdYha/t9fayNXWc2QfDiF4m6NU3/jAOhyua20WnAdt rQ6eRMmwy5sigjNDwCg6FzPhjGtwZC8ii/xlfcG7Eg8JUjtgCxj02d247PUh0LDH rpxF8Ht/QzNOqpTiX0LDDkpolNA0URxslsRLKp/vGP5GmoP1fWJjvOMAalk+sI+W S15Nx6angUlEsbrjN5OxQg6uI+7+lI44qIhgOfJHVBeuhx8bRMGs7De9mQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFGTLyMcRj+6qHFqunLJFUnmM6sdKMB8GA1UdIwQY MBaAFPpWx+ZgscdOOwMYsUM4w/AN17xyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sYkg1bUN4eDA0N0F4aXhRempEOEEzWHZISS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlm LThiZjRmZTRjNzczMi8xL1pNdkl4eEdQN3FvY1dxNmNza1ZTZVl6cXgwby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlmLThiZjRmZTRjNzcz Mi8xLzEtbGJINW1DeHgwNDdBeGl4UXpqRDhBM1h2SEkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAItgmAD BAItnpwDBAKYWSgDBAOwaigDBAK5BdwDBALAkXgwDQYJKoZIhvcNAQELBQADggEB AGRkjT0+qaaCIbG9KHN/Iy1/LkWc9rd1n7AUcTwIGsF/oSEsDhVEatVgk1OP46lq KU/BZTczwbvLFTZvommlae6THKcL08TCaYbms1uA/nJ5DxAthMzM4OqT17fFUxCD zOUoEg7Gy6HaSqMS0fvNlDTbdxQ0x06a/Am8O0EMWlj/h/mEBC48w6xqV7XKq0Rl 2H8Zla2g7KP8y0VrTcvJ5e5az9VK5fy1V8iRLnud7Sejgdmo7tvl0HwN07BWb+fO KRVLkA8FnRBv70q4tI8Pd3IMsSrARbW8XJo9Qs3G5drTihXWOAYaKbM49NSEJRKY BT1Fx2+qSqE2LXKH/UkK7is= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:24 2026 by rpki-client