This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RzVVWVJm2Gi1kx9XwhbK3ZNHo4k.roa File: RzVVWVJm2Gi1kx9XwhbK3ZNHo4k.roa (raw, json) Hash identifier: +FqbLihpvXOI6KN824+oV8MnIkevdxOCqkgHXgeGKRQ= Subject key identifier: 47:35:55:59:52:66:D8:68:B5:93:1F:57:C2:16:CA:DD:93:47:A3:89 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E38110A61297F243CCF84656078BA81 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RzVVWVJm2Gi1kx9XwhbK3ZNHo4k.roa Signing time: Fri 02 Jan 2026 10:19:22 +0000 ROA not before: Fri 02 Jan 2026 10:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 94.103.0.0/24 maxlen: 24 94.103.1.0/24 maxlen: 24 109.172.54.0/24 maxlen: 24 109.172.55.0/24 maxlen: 24 178.130.46.0/24 maxlen: 24 178.130.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:11:0a:61:29:7f:24:3c:cf:84:65:60:78:ba:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=473555595266d868b5931f57c216cadd9347a389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:a0:5f:6c:35:98:16:0f:29:9e:57:48:61: df:82:d8:9a:22:1e:79:de:73:35:2d:1e:cb:41:a6: 7d:84:b8:d0:07:60:c6:ad:4d:09:e8:14:9c:a7:5c: cc:4c:3a:1e:37:01:36:47:d4:bb:d8:02:0b:60:e8: 24:11:2c:0a:6e:48:50:52:8e:33:5e:dd:07:10:ad: eb:a9:61:d1:d8:4c:d4:f2:46:35:67:c5:c3:d0:83: f1:1a:7f:37:36:f7:ca:a9:38:38:73:cf:85:af:42: ed:ec:c7:30:31:ec:23:50:e8:4a:18:80:f4:78:ff: 79:1b:1d:8c:b4:05:f5:44:31:df:0e:44:70:c9:4c: e9:9d:8b:98:f0:86:5a:01:ef:0a:5d:ab:b0:ca:e4: 61:09:e7:c4:cc:c1:a0:3f:2b:d3:54:b8:f3:5e:d8: 2c:f0:d0:49:c3:36:ee:4e:3f:e1:93:aa:bb:57:1e: 77:d2:8f:3f:f9:af:89:b7:fe:e7:5e:c4:11:d1:8e: 73:3e:69:f0:3b:c0:64:ad:23:00:6d:01:21:d1:4d: 9d:f9:0c:ed:c3:36:f4:86:6d:45:7e:9d:28:b2:68: fb:32:d3:1d:e6:4a:9f:91:6c:29:be:70:d0:6d:4e: f2:f2:e9:dd:f5:b6:3a:f1:51:75:42:b5:a9:eb:1e: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:35:55:59:52:66:D8:68:B5:93:1F:57:C2:16:CA:DD:93:47:A3:89 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RzVVWVJm2Gi1kx9XwhbK3ZNHo4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.103.0.0/23 109.172.54.0/23 178.130.46.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:bd:c2:22:da:d9:a0:58:a9:04:06:9f:ec:9e:86:b3:01:82: 16:05:d6:d0:30:96:67:bc:f0:3d:fc:2b:f3:42:0d:ac:bc:48: c4:ed:75:a1:bb:42:c4:77:4d:bc:aa:30:38:a5:e2:50:33:09: 64:fe:55:be:70:13:48:2a:20:5b:6c:67:ce:20:2a:bf:d9:ac: dd:7c:88:fb:aa:fb:d6:33:59:63:ea:4e:3c:f7:72:30:d9:81: 34:dd:df:89:32:cf:e7:69:40:e1:93:b2:fa:cd:09:10:e0:0b: eb:d9:59:c6:a3:60:32:99:1e:0b:e7:0b:6f:f0:ed:ed:99:5d: c6:66:a7:82:50:40:c2:f3:93:7e:d5:1d:3b:e8:b4:06:30:04: dd:a3:c0:eb:c4:ca:c4:94:0f:34:a4:b0:b5:3e:b9:e6:04:4f: 2d:a9:6b:51:3d:21:b4:26:a4:37:f4:c6:d3:36:06:ae:3c:fb: 1c:46:68:59:80:78:18:46:78:77:53:10:88:6b:56:1a:f5:ff: 57:5f:2d:c8:ba:51:b2:89:a0:fe:7a:3c:79:07:ef:f2:30:42: c2:51:6d:c2:02:29:d6:73:cd:6a:90:31:95:0d:e3:94:3d:db: ac:7e:17:0b:ba:a5:6c:9e:71:af:54:40:2c:4f:ff:cc:f8:e8: 95:bd:e4:39 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OBEKYSl/JDzPhGVgeLqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzM1NTU1OTUyNjZkODY4YjU5MzFmNTdjMjE2Y2FkZDkzNDdhMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOygX2w1mBYPKZ5XSGHfgtiaIh55 3nM1LR7LQaZ9hLjQB2DGrU0J6BScp1zMTDoeNwE2R9S72AILYOgkESwKbkhQUo4z Xt0HEK3rqWHR2EzU8kY1Z8XD0IPxGn83NvfKqTg4c8+Fr0Lt7McwMewjUOhKGID0 eP95Gx2MtAX1RDHfDkRwyUzpnYuY8IZaAe8KXauwyuRhCefEzMGgPyvTVLjzXtgs 8NBJwzbuTj/hk6q7Vx530o8/+a+Jt/7nXsQR0Y5zPmnwO8BkrSMAbQEh0U2d+Qzt wzb0hm1Ffp0osmj7MtMd5kqfkWwpvnDQbU7y8und9bY68VF1QrWp6x7eNQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEc1VVlSZthotZMfV8IWyt2TR6OJMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvUnpWVldWSm0yR2kxa3g5WHdoYkszWk5IbzRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXmcAAwQB baw2AwQBsoIuMA0GCSqGSIb3DQEBCwUAA4IBAQAevcIi2tmgWKkEBp/snoazAYIW BdbQMJZnvPA9/CvzQg2svEjE7XWhu0LEd028qjA4peJQMwlk/lW+cBNIKiBbbGfO ICq/2azdfIj7qvvWM1lj6k4893Iw2YE03d+JMs/naUDhk7L6zQkQ4Avr2VnGo2Ay mR4L5wtv8O3tmV3GZqeCUEDC85N+1R076LQGMATdo8DrxMrElA80pLC1PrnmBE8t qWtRPSG0JqQ39MbTNgauPPscRmhZgHgYRnh3UxCIa1Ya9f9XXy3IulGyiaD+ejx5 B+/yMELCUW3CAinWc81qkDGVDeOUPdusfhcLuqVsnnGvVEAsT//M+OiVveQ5 -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:16 2026 by rpki-client