This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Z9HCnKx49IYIzgZOZh2MYHT4DSo.roa File: Z9HCnKx49IYIzgZOZh2MYHT4DSo.roa (raw, json) Hash identifier: XI1lX8ULxo8X6HP6ahrWv74ciSXlEZbIxb8DaokY0e8= Subject key identifier: 67:D1:C2:9C:AC:78:F4:86:08:CE:06:4E:66:1D:8C:60:74:F8:0D:2A Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA566A7CCAFD62FC863A31A1F6506F7 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Z9HCnKx49IYIzgZOZh2MYHT4DSo.roa Signing time: Thu 01 Jan 2026 22:19:55 +0000 ROA not before: Thu 01 Jan 2026 22:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 45.84.212.0/24 maxlen: 24 45.84.219.0/24 maxlen: 24 45.85.91.0/24 maxlen: 24 136.144.35.0/24 maxlen: 24 136.144.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:66:a7:cc:af:d6:2f:c8:63:a3:1a:1f:65:06:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67d1c29cac78f48608ce064e661d8c6074f80d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:45:e4:46:71:e8:bd:2e:8e:94:23:75:4f: 79:b9:60:5d:75:27:35:33:0c:1e:a9:a3:08:6b:0f: 6c:f7:e2:b8:fc:06:b2:2d:01:b8:d9:b3:15:98:f9: 31:76:03:3b:c5:0c:cc:c1:f7:06:a3:2b:75:57:92: 3b:14:c8:e2:4d:0b:3f:54:31:ca:8d:11:fc:f2:af: 63:32:10:65:5f:c6:ee:ec:e0:54:9e:1a:ef:ec:63: 5e:03:49:60:ef:80:51:6c:3e:dc:41:27:78:fb:a2: b2:1f:85:8b:83:74:fb:0a:9a:33:64:5c:c5:52:cb: 85:dd:a3:9a:30:3e:65:4d:fe:39:d5:f0:ce:df:4f: 46:38:eb:f5:d1:b0:5d:cb:af:8d:5e:f1:1e:08:7f: 68:a2:cf:f5:25:e4:f9:d7:90:f2:28:e7:52:4a:7d: 6e:29:47:99:db:54:27:39:db:70:37:67:70:a1:fc: 14:7e:b5:1c:45:3f:db:2a:d9:30:52:ad:b1:8b:3c: 92:52:96:f8:16:7a:9e:4e:0c:c3:03:d7:5a:3f:a0: 09:ab:b7:e8:61:60:e5:d7:7e:fb:54:af:a3:20:45: 0a:d0:f9:2a:3b:b2:cf:b4:da:88:f5:05:cf:8f:bd: 6d:4b:cb:9d:bc:67:36:c4:07:0c:0b:aa:cc:4f:80: 4c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D1:C2:9C:AC:78:F4:86:08:CE:06:4E:66:1D:8C:60:74:F8:0D:2A X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Z9HCnKx49IYIzgZOZh2MYHT4DSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.212.0/24 45.84.219.0/24 45.85.91.0/24 136.144.35.0/24 136.144.43.0/24 Signature Algorithm: sha256WithRSAEncryption bd:04:05:9e:b0:58:94:a1:a7:91:d0:3c:5e:9d:20:31:d3:ba: 56:9e:7b:fd:ff:05:69:22:a1:21:21:23:96:4a:18:9c:e8:2e: e7:97:96:7d:b7:cf:02:4f:eb:db:b2:db:5a:8f:21:eb:1e:f3: 1e:62:d5:c8:fb:f3:c4:c5:76:87:02:58:fb:84:4f:77:b3:ed: 03:ee:8c:cc:03:3a:f1:8f:f3:5a:11:89:a6:1d:85:b4:28:66: 24:69:5b:f9:77:eb:76:32:07:f9:7e:85:ba:13:48:9f:0e:be: 6f:ca:76:de:55:c5:60:72:b6:79:0d:d8:9f:6a:c2:1e:25:2b: 5b:21:97:08:84:d9:66:3b:53:0f:05:98:8d:f2:4c:a3:77:96: 65:f3:f6:4a:bd:ac:0e:05:3f:ce:be:3b:6c:3e:81:39:ed:1e: 59:64:41:bf:06:ed:10:53:75:70:c6:5a:78:9c:70:0a:3d:b1: dd:c0:e1:65:33:3a:17:e9:d8:cd:af:20:75:9c:bf:16:36:51: 92:f6:07:b4:27:ad:81:98:29:01:70:a7:bd:2a:9d:bd:76:a3: b6:40:df:4f:36:91:9b:6b:78:a1:a4:bc:3e:b1:a1:c6:ee:66: 8c:a8:d8:e6:89:16:25:f1:34:3d:30:11:0d:11:c4:68:8b:5e: b6:9e:31:7a -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7pWanzK/WL8hjoxofZQb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2QxYzI5Y2FjNzhmNDg2MDhjZTA2NGU2NjFkOGM2MDc0ZjgwZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubNF5EZx6L0ujpQjdU95uWBddSc1 MwweqaMIaw9s9+K4/AayLQG42bMVmPkxdgM7xQzMwfcGoyt1V5I7FMjiTQs/VDHK jRH88q9jMhBlX8bu7OBUnhrv7GNeA0lg74BRbD7cQSd4+6KyH4WLg3T7CpozZFzF UsuF3aOaMD5lTf451fDO309GOOv10bBdy6+NXvEeCH9oos/1JeT515DyKOdSSn1u KUeZ21QnOdtwN2dwofwUfrUcRT/bKtkwUq2xizySUpb4FnqeTgzDA9daP6AJq7fo YWDl1377VK+jIEUK0PkqO7LPtNqI9QXPj71tS8udvGc2xAcMC6rMT4BMOwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGfRwpysePSGCM4GTmYdjGB0+A0qMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvWjlIQ25LeDQ5SVlJemdaT1poMk1ZSFQ0RFNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVTUAwQA LVTbAwQALVVbAwQAiJAjAwQAiJArMA0GCSqGSIb3DQEBCwUAA4IBAQC9BAWesFiU oaeR0DxenSAx07pWnnv9/wVpIqEhISOWShic6C7nl5Z9t88CT+vbsttajyHrHvMe YtXI+/PExXaHAlj7hE93s+0D7ozMAzrxj/NaEYmmHYW0KGYkaVv5d+t2Mgf5foW6 E0ifDr5vynbeVcVgcrZ5DdifasIeJStbIZcIhNlmO1MPBZiN8kyjd5Zl8/ZKvawO BT/OvjtsPoE57R5ZZEG/Bu0QU3Vwxlp4nHAKPbHdwOFlMzoX6djNryB1nL8WNlGS 9ge0J62BmCkBcKe9Kp29dqO2QN9PNpGba3ihpLw+saHG7maMqNjmiRYl8TQ9MBEN EcRoi162njF6 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:52 2026 by rpki-client