This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/zX07X_H3K2-11ztBe_0TWCV6UDU.roa File: zX07X_H3K2-11ztBe_0TWCV6UDU.roa (raw, json) Hash identifier: m7+UubbmMpsAyslPYtLacfeBJL7t5bWeQmDZDfKFeeY= Subject key identifier: CD:7D:3B:5F:F1:F7:2B:6F:B5:D7:3B:41:7B:FD:13:58:25:7A:50:35 Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA21D0F6E0E7F04597AFCF0E30CA3 Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/zX07X_H3K2-11ztBe_0TWCV6UDU.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 81.4.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a2:1d:0f:6e:0e:7f:04:59:7a:fc:f0:e3:0c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd7d3b5ff1f72b6fb5d73b417bfd1358257a5035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:4b:c9:8c:ac:1a:0b:08:8e:f5:1a:05:17: 13:88:14:8a:36:9d:53:d3:ad:91:00:1a:a3:09:ea: b5:c8:8d:63:4f:57:8b:8c:76:ba:86:c3:e6:a3:69: bd:7a:a6:97:bb:6e:e2:92:29:10:0b:26:f8:3c:5d: d9:33:3b:24:4c:8e:02:72:97:2e:35:15:96:50:9e: 79:1f:5b:43:1c:24:04:a7:be:04:ca:15:37:a0:a9: db:6c:0f:77:45:15:ce:16:41:6c:2e:8e:1f:af:14: 95:64:b0:fe:74:59:a0:5b:11:bb:79:4a:1b:13:2b: 7b:ee:4d:98:32:d9:cf:50:b5:5f:5a:08:37:e1:21: bd:a2:32:e7:43:d6:ae:6d:2b:f2:02:cc:0d:ea:7c: 3b:a5:ea:ae:7e:48:72:36:3c:9e:02:c3:5b:41:e8: 25:5f:1d:c2:c7:09:97:e0:a4:fe:f3:07:7f:38:53: 08:0f:e7:00:9b:dc:26:13:68:e2:07:43:63:93:c8: d3:6e:fb:a8:b8:35:9b:0f:83:b7:0f:92:b3:4d:74: 00:f7:cd:d4:4e:94:7a:ef:5c:b4:60:64:2f:fa:02: 2c:67:e4:f2:ff:41:f4:6d:d1:76:eb:da:29:43:ae: b1:72:1d:56:e0:28:a8:ea:ef:e3:22:eb:df:fb:a2: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7D:3B:5F:F1:F7:2B:6F:B5:D7:3B:41:7B:FD:13:58:25:7A:50:35 X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/zX07X_H3K2-11ztBe_0TWCV6UDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.4.186.0/23 Signature Algorithm: sha256WithRSAEncryption a5:2c:02:5d:26:02:63:4b:f6:f2:25:4b:28:01:d0:30:d5:4d: 54:89:9a:e3:dc:49:15:9b:9c:23:cc:c3:af:75:4b:c6:01:64: 91:19:35:ac:f7:13:00:16:aa:8f:b8:23:42:cd:20:3d:f3:10: fd:a3:c5:66:f5:44:b3:fd:33:95:87:6f:e3:17:c2:05:a9:af: e0:7a:bc:37:8b:a0:82:f9:a9:22:15:65:1e:e6:86:78:b3:04: 92:7a:00:52:98:e2:fc:2f:81:37:73:18:6c:ca:c6:f1:30:67: 10:00:d9:a9:5c:99:d7:76:9d:71:17:e8:2a:8b:ae:b9:d6:90: 4e:da:63:6e:91:1f:d5:96:35:93:fd:7a:42:78:50:23:a9:e3: 36:17:07:46:0c:c1:a5:42:f5:0e:ac:6b:be:68:31:a2:6b:c5: 8d:2d:47:13:72:41:60:04:f6:17:f8:eb:a3:fc:6a:3d:8b:81: ce:4f:df:e0:25:f8:57:74:41:3e:92:0c:36:02:2a:d4:fa:68: b4:ba:e3:6d:0b:47:7b:81:47:0d:ac:0e:39:0c:e2:11:4a:13: 2e:6a:3e:f4:b7:0a:02:ed:45:56:73:f7:03:b0:5f:6e:c1:cb: 6c:93:9e:8b:b3:2c:34:07:cd:0b:b5:97:29:be:68:94:c9:31: dd:c9:83:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266IdD24OfwRZevzw4wyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDdkM2I1ZmYxZjcyYjZmYjVkNzNiNDE3YmZkMTM1ODI1N2E1MDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtZLyYysGgsIjvUaBRcTiBSKNp1T 062RABqjCeq1yI1jT1eLjHa6hsPmo2m9eqaXu27ikikQCyb4PF3ZMzskTI4Ccpcu NRWWUJ55H1tDHCQEp74EyhU3oKnbbA93RRXOFkFsLo4frxSVZLD+dFmgWxG7eUob Eyt77k2YMtnPULVfWgg34SG9ojLnQ9aubSvyAswN6nw7pequfkhyNjyeAsNbQegl Xx3CxwmX4KT+8wd/OFMID+cAm9wmE2jiB0Njk8jTbvuouDWbD4O3D5KzTXQA983U TpR671y0YGQv+gIsZ+Ty/0H0bdF269opQ66xch1W4Cio6u/jIuvf+6LsRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM19O1/x9ytvtdc7QXv9E1glelA1MB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvelgwN1hfSDNLMi0xMXp0QmVfMFRXQ1Y2VURVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUQS6MA0G CSqGSIb3DQEBCwUAA4IBAQClLAJdJgJjS/byJUsoAdAw1U1UiZrj3EkVm5wjzMOv dUvGAWSRGTWs9xMAFqqPuCNCzSA98xD9o8Vm9USz/TOVh2/jF8IFqa/gerw3i6CC +akiFWUe5oZ4swSSegBSmOL8L4E3cxhsysbxMGcQANmpXJnXdp1xF+gqi6651pBO 2mNukR/VljWT/XpCeFAjqeM2FwdGDMGlQvUOrGu+aDGia8WNLUcTckFgBPYX+Ouj /Go9i4HOT9/gJfhXdEE+kgw2AirU+mi0uuNtC0d7gUcNrA45DOIRShMuaj70twoC 7UVWc/cDsF9uwctsk56Lsyw0B80LtZcpvmiUyTHdyYMZ -----END CERTIFICATE-----Generated at Tue Jan 20 07:56:30 2026 by rpki-client