This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z6rUplHsvLy0me3OwYl1MvrnVHY.roa File: z6rUplHsvLy0me3OwYl1MvrnVHY.roa (raw, json) Hash identifier: 04BImIOdVQ1rPdmdq1ZNg600zP5oHTKFSEQohcynDTU= Subject key identifier: CF:AA:D4:A6:51:EC:BC:BC:B4:99:ED:CE:C1:89:75:32:FA:E7:54:76 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ACA9B55B7FA3D19F0C98D7B291228 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z6rUplHsvLy0me3OwYl1MvrnVHY.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 37.252.27.0/24 maxlen: 24 81.168.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ca:9b:55:b7:fa:3d:19:f0:c9:8d:7b:29:12:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfaad4a651ecbcbcb499edcec1897532fae75476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:1a:eb:85:76:16:33:be:76:88:75:e9:d7: ef:b3:e1:c4:eb:4c:1b:47:f0:00:51:02:d0:1b:db: 6d:66:3e:08:1b:0c:48:76:d9:2a:65:f9:55:66:b0: bd:59:e6:98:14:f1:31:39:44:d1:02:3e:55:4e:b3: e0:d2:5f:64:19:e6:54:e3:f4:06:a8:7e:37:fe:4c: e0:76:ea:0e:66:e3:ec:45:6e:6a:14:d5:17:c9:c7: c9:e3:a2:2d:97:c8:16:ab:2c:f6:c2:78:2d:b9:be: 07:51:b9:f6:74:ea:71:54:08:58:68:26:5b:58:42: 83:cf:35:0e:62:b2:b3:20:1f:1b:7c:46:17:0c:6c: 8d:df:97:6c:73:67:c5:2e:d5:30:8f:e9:b9:87:b3: 84:98:e8:a2:0e:aa:a2:29:48:82:86:5d:27:8b:58: c0:f4:6d:1d:1c:59:15:22:46:3e:82:47:86:ee:55: 31:00:dd:d0:ee:6e:cc:ae:56:49:16:98:a6:14:ba: db:ce:0f:d5:d0:30:8c:a9:b3:7b:99:bc:78:f7:d4: db:ec:59:f5:5d:20:44:a2:ad:f0:98:1c:36:2f:b6: 07:95:71:5f:d0:35:8a:cd:0d:7c:62:75:b5:24:9a: 5b:ec:44:b6:80:f5:99:74:b6:dc:9e:49:6a:47:9c: 9b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AA:D4:A6:51:EC:BC:BC:B4:99:ED:CE:C1:89:75:32:FA:E7:54:76 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z6rUplHsvLy0me3OwYl1MvrnVHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.27.0/24 81.168.50.0/24 Signature Algorithm: sha256WithRSAEncryption 35:32:da:c2:bd:46:40:5f:b3:32:05:95:c5:cb:72:d7:ee:98: b9:cb:21:b3:e9:7f:61:56:66:5b:f5:29:e5:84:42:a8:e7:54: 49:d1:81:d2:51:2d:69:f5:0a:50:2a:ac:5c:ef:22:e5:d3:74: 79:56:34:4e:8e:3a:9b:e4:22:cb:30:11:26:4f:e1:20:01:bf: ce:13:04:b0:e0:5d:ba:60:fd:ea:d2:0b:f6:43:43:7a:84:77: a4:ae:00:58:ce:cf:21:66:2a:5f:5f:11:95:74:70:78:c2:95: e4:87:9a:9f:4b:4d:4c:68:27:ea:0a:fc:18:03:ce:bd:b1:0c: 36:ea:a6:00:fc:19:05:43:17:81:22:48:6b:af:7a:1b:51:72: f9:96:3a:e5:2a:99:d4:f9:52:1f:63:cb:ae:02:39:77:a8:8a: f3:2d:34:37:c9:5e:ab:b4:10:b1:42:eb:c5:07:39:73:cb:3d: 3c:f6:6e:a1:cf:82:0d:d1:9a:2e:2e:0e:60:a1:84:a0:79:44: 74:b9:ef:1c:f9:61:0c:7b:4b:fa:28:20:67:8b:e6:20:d8:8b: ef:2b:30:cf:b4:32:9a:89:a8:8b:91:9c:e2:3a:e1:39:03:bc: cc:84:a3:03:af:17:a8:6a:1b:d7:a4:23:b6:f7:61:a3:97:c0: 01:36:4e:c8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WsqbVbf6PRnwyY17KRIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmFhZDRhNjUxZWNiY2JjYjQ5OWVkY2VjMTg5NzUzMmZhZTc1NDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEoa64V2FjO+doh16dfvs+HE60wb R/AAUQLQG9ttZj4IGwxIdtkqZflVZrC9WeaYFPExOUTRAj5VTrPg0l9kGeZU4/QG qH43/kzgduoOZuPsRW5qFNUXycfJ46Itl8gWqyz2wngtub4HUbn2dOpxVAhYaCZb WEKDzzUOYrKzIB8bfEYXDGyN35dsc2fFLtUwj+m5h7OEmOiiDqqiKUiChl0ni1jA 9G0dHFkVIkY+gkeG7lUxAN3Q7m7MrlZJFpimFLrbzg/V0DCMqbN7mbx499Tb7Fn1 XSBEoq3wmBw2L7YHlXFf0DWKzQ18YnW1JJpb7ES2gPWZdLbcnklqR5ybFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM+q1KZR7Ly8tJntzsGJdTL651R2MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvejZyVXBsSHN2THkwbWUzT3dZbDFNdnJuVkhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJfwbAwQA UagyMA0GCSqGSIb3DQEBCwUAA4IBAQA1MtrCvUZAX7MyBZXFy3LX7pi5yyGz6X9h VmZb9SnlhEKo51RJ0YHSUS1p9QpQKqxc7yLl03R5VjROjjqb5CLLMBEmT+EgAb/O EwSw4F26YP3q0gv2Q0N6hHekrgBYzs8hZipfXxGVdHB4wpXkh5qfS01MaCfqCvwY A869sQw26qYA/BkFQxeBIkhrr3obUXL5ljrlKpnU+VIfY8uuAjl3qIrzLTQ3yV6r tBCxQuvFBzlzyz089m6hz4IN0ZouLg5goYSgeUR0ue8c+WEMe0v6KCBni+Yg2Ivv KzDPtDKaiaiLkZziOuE5A7zMhKMDrxeoahvXpCO292Gjl8ABNk7I -----END CERTIFICATE-----Generated at Fri Jan 2 14:42:28 2026 by rpki-client