This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/z4Ea-_smfK8pY-O7TeNPgzC6Xm0.roa File: z4Ea-_smfK8pY-O7TeNPgzC6Xm0.roa (raw, json) Hash identifier: 1vptVTLhkufvE9Ios5V+HLnfGDLY4lc0acUg7cG/MQc= Subject key identifier: CF:81:1A:FB:FB:26:7C:AF:29:63:E3:BB:4D:E3:4F:83:30:BA:5E:6D Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24 Certificate serial: 019B7A5B255D13D9AE85B6DA198B003E6E9F Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/z4Ea-_smfK8pY-O7TeNPgzC6Xm0.roa Signing time: Thu 01 Jan 2026 16:19:12 +0000 ROA not before: Thu 01 Jan 2026 16:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56843 IP address blocks: 94.154.104.0/22 maxlen: 22 94.154.104.0/24 maxlen: 24 94.154.105.0/24 maxlen: 24 94.154.106.0/24 maxlen: 24 94.154.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:25:5d:13:d9:ae:85:b6:da:19:8b:00:3e:6e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4176719912989979e086125a2a41a133fffdc24 Validity Not Before: Jan 1 16:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf811afbfb267caf2963e3bb4de34f8330ba5e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:9f:de:00:00:4c:c5:b1:eb:c8:36:02:3c: 92:7a:ea:f6:0e:76:31:cf:43:9f:b9:43:20:2d:2d: dc:ef:f4:9c:48:46:e2:8f:28:1e:ee:52:df:ba:38: 6c:4f:54:49:a6:b2:8e:1b:2f:79:47:dd:e8:b6:38: e0:0e:89:1a:77:8f:0d:28:f8:db:9d:d3:ab:e4:f0: b6:31:2a:ef:cb:0d:0c:97:eb:ff:fc:13:49:ed:7b: 23:0d:17:de:12:c4:60:f1:ad:08:16:47:f2:0f:61: 67:db:c0:ee:a8:7d:1e:9b:4a:f8:78:46:19:22:ea: fd:af:b6:c8:e9:8c:2b:27:79:2a:cb:9d:df:a8:77: e0:01:be:05:40:68:c9:e8:4d:ed:1f:b7:de:0f:68: 34:80:b4:0f:66:82:b8:02:83:43:23:fc:22:e4:07: 9a:98:d2:2c:65:21:46:90:e1:3e:11:ec:2d:89:43: 67:cc:26:3c:fd:78:4b:a4:84:d9:b4:da:12:fa:a8: 2c:ab:74:7c:2e:7c:32:c1:fd:e9:13:8a:1d:7d:f1: 7d:3e:10:3c:80:98:29:33:4c:a4:0e:49:f0:61:23: 30:ff:b3:5c:2a:f0:8b:85:aa:9e:46:f6:e5:ba:01: 6f:93:e5:7b:b9:53:1e:bd:cb:34:7b:ab:e0:4b:77: 1e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:81:1A:FB:FB:26:7C:AF:29:63:E3:BB:4D:E3:4F:83:30:BA:5E:6D X509v3 Authority Key Identifier: keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/z4Ea-_smfK8pY-O7TeNPgzC6Xm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.104.0/22 Signature Algorithm: sha256WithRSAEncryption 46:ac:c3:9b:3b:66:ca:42:45:23:65:5d:a1:1d:dd:fc:a0:b6: a0:d8:36:c2:58:cb:5c:86:4a:05:4e:30:53:c2:72:a1:d8:b8: 4a:30:9d:c6:7c:d9:1a:50:87:c4:56:23:b8:9f:4b:40:91:7c: a9:3c:d7:63:0b:04:2e:fa:d1:4b:e8:5b:4e:6f:1f:c2:f2:5b: d9:d0:10:2a:51:43:2a:0d:e6:fb:ca:a2:03:5b:f2:87:72:6a: 3b:4e:4c:6d:be:72:da:0a:a4:de:9f:9f:c3:6f:cc:3a:f3:cd: 53:e5:d0:5a:6b:99:28:cc:aa:05:b2:c9:77:98:3a:11:75:e7: bd:24:04:d7:33:91:6d:76:55:f3:fd:b6:c1:ff:40:96:6d:33: 51:94:af:84:b5:c8:a8:d1:6d:1f:91:07:64:2a:0c:e7:f9:b0: 5d:8e:96:60:48:db:1a:03:bd:5f:5f:cb:f0:40:83:62:aa:7d: a3:34:de:32:cc:9c:b6:a8:20:c3:ec:09:0b:0e:fb:ec:61:3d: c6:c6:72:4c:fa:1a:8a:03:f9:24:df:e6:06:fa:19:e0:d0:b5: cd:8b:d1:46:a6:e8:97:40:81:60:11:8e:53:ca:18:d8:7d:10: d5:1a:ba:cd:73:d0:31:73:ff:d3:85:0e:37:a2:5a:1a:fa:24: 2f:de:47:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WyVdE9muhbbaGYsAPm6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MTc2NzE5OTEyOTg5OTc5ZTA4NjEyNWEyYTQxYTEzM2Zm ZmRjMjQwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjgxMWFmYmZiMjY3Y2FmMjk2M2UzYmI0ZGUzNGY4MzMwYmE1ZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Sf3gAATMWx68g2AjySeur2DnYx z0OfuUMgLS3c7/ScSEbijyge7lLfujhsT1RJprKOGy95R93otjjgDokad48NKPjb ndOr5PC2MSrvyw0Ml+v//BNJ7XsjDRfeEsRg8a0IFkfyD2Fn28DuqH0em0r4eEYZ Iur9r7bI6YwrJ3kqy53fqHfgAb4FQGjJ6E3tH7feD2g0gLQPZoK4AoNDI/wi5Aea mNIsZSFGkOE+EewtiUNnzCY8/XhLpITZtNoS+qgsq3R8Lnwywf3pE4odffF9PhA8 gJgpM0ykDknwYSMw/7NcKvCLhaqeRvblugFvk+V7uVMevcs0e6vgS3ceEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM+BGvv7JnyvKWPju03jT4Mwul5tMB8GA1UdIwQY MBaAFKQXZxmRKYmXnghhJaKkGhM//9wkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYTQwZjUtYjljOS00ODU2LTgzYzYt ZWYwNDBhZWJlYTYwLzEvejRFYS1fc21mSzhwWS1PN1RlTlBnekM2WG0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xYTQwZjUtYjljOS00ODU2LTgzYzYtZWYwNDBhZWJlYTYw LzEvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXppoMA0G CSqGSIb3DQEBCwUAA4IBAQBGrMObO2bKQkUjZV2hHd38oLag2DbCWMtchkoFTjBT wnKh2LhKMJ3GfNkaUIfEViO4n0tAkXypPNdjCwQu+tFL6FtObx/C8lvZ0BAqUUMq Deb7yqIDW/KHcmo7TkxtvnLaCqTen5/Db8w6881T5dBaa5kozKoFssl3mDoRdee9 JATXM5FtdlXz/bbB/0CWbTNRlK+Etcio0W0fkQdkKgzn+bBdjpZgSNsaA71fX8vw QINiqn2jNN4yzJy2qCDD7AkLDvvsYT3GxnJM+hqKA/kk3+YG+hng0LXNi9FGpuiX QIFgEY5TyhjYfRDVGrrNc9Axc//ThQ43oloa+iQv3kfl -----END CERTIFICATE-----Generated at Tue Feb 10 01:01:50 2026 by rpki-client