This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/ZGSlEL3ZsYkMJbVBMvhKW9bkacI.roa File: ZGSlEL3ZsYkMJbVBMvhKW9bkacI.roa (raw, json) Hash identifier: GGqHD6czDexP5GBUgnHHO7EZlQS3Oh/AerMKhihhJ9k= Subject key identifier: 64:64:A5:10:BD:D9:B1:89:0C:25:B5:41:32:F8:4A:5B:D6:E4:69:C2 Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913 Certificate serial: 019B7AC7A84AE7BD8384CC495BF7889DFA28 Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/ZGSlEL3ZsYkMJbVBMvhKW9bkacI.roa Signing time: Thu 01 Jan 2026 18:17:43 +0000 ROA not before: Thu 01 Jan 2026 18:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208956 IP address blocks: 45.13.64.0/24 maxlen: 24 45.13.65.0/24 maxlen: 24 45.13.66.0/24 maxlen: 24 45.13.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a8:4a:e7:bd:83:84:cc:49:5b:f7:88:9d:fa:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913 Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6464a510bdd9b1890c25b54132f84a5bd6e469c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:5d:b9:19:cf:35:a7:08:14:2c:ee:a6:c8: 34:40:b5:64:1c:c8:78:33:07:55:cf:2f:b5:66:93: 5d:c0:c3:6a:fe:d0:14:fd:aa:34:29:33:6b:d8:27: ac:90:b3:a4:3a:fa:53:8f:04:91:b9:98:2f:70:86: 0c:b0:99:e5:75:0a:dc:f6:25:b5:2e:2f:17:76:d6: ec:12:68:28:62:11:4e:f5:14:7c:e9:da:13:b5:bd: 72:d6:16:fb:97:cd:2e:45:6b:70:fc:0b:4e:f4:8c: ee:87:c4:00:e1:0d:9e:2b:08:c8:66:cd:d0:b0:3e: df:23:f6:38:8f:52:2b:74:31:50:8f:ab:7b:8e:b6: 86:47:a8:8d:e9:e6:67:7a:99:82:3b:c8:d2:9a:97: a9:cd:be:8d:e7:fb:a0:b4:bf:68:dd:ab:b8:d1:f0: 72:2f:ae:e1:18:85:7f:f0:6c:39:65:c3:c9:6d:7b: c4:c9:e6:45:c6:d7:a8:c7:e5:7b:a7:b7:49:57:9e: d0:00:37:8f:5f:59:41:59:18:ac:55:28:31:75:67: 43:a2:32:77:e6:b7:b8:b2:44:4d:06:40:36:64:5a: 94:ae:35:37:0c:70:89:1f:bd:ec:85:f4:2a:ab:ab: 3b:b2:a8:08:39:5e:b7:c9:a9:81:4a:bb:53:bf:b6: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:64:A5:10:BD:D9:B1:89:0C:25:B5:41:32:F8:4A:5B:D6:E4:69:C2 X509v3 Authority Key Identifier: keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/ZGSlEL3ZsYkMJbVBMvhKW9bkacI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.64.0/22 Signature Algorithm: sha256WithRSAEncryption 09:38:bd:29:03:19:a5:fd:85:6a:47:56:bb:e3:d1:9e:b4:aa: 1e:aa:bd:20:39:14:d8:78:b8:63:9a:f0:a0:01:51:b8:5f:69: 23:de:a7:a3:cb:ce:73:d2:b4:7e:60:5a:94:a5:9d:2a:26:e6: 40:de:54:fe:31:1f:59:88:dd:fe:ee:b1:ab:99:78:48:d8:c6: ae:7d:d0:ab:ab:5f:55:eb:03:55:c9:2d:42:81:cc:5f:1f:95: 97:b3:53:64:45:3a:94:89:76:51:4d:b8:04:a1:d0:98:99:78: 48:1f:5b:83:56:28:33:be:9b:64:31:13:ea:5a:9d:b2:8c:ab: 65:2c:ea:45:e8:26:99:a6:a9:35:1e:aa:d3:cd:ef:be:da:dc: 64:89:2f:ca:bc:30:ed:ce:fa:2a:b6:70:36:39:51:b5:cd:f2: f4:23:cd:ee:0f:39:78:aa:5c:b8:63:93:5a:c7:36:5e:e2:19: 59:4a:72:89:f4:cf:37:99:51:ed:cc:13:22:11:e2:b3:95:9a: f3:26:a5:fe:02:6b:e3:59:78:59:25:19:b9:4e:36:eb:45:96: e8:63:d7:36:03:a5:df:94:65:ab:4a:67:b4:89:87:35:6a:0b: cd:22:85:e5:76:b8:b4:47:b4:50:53:4d:c4:b6:83:9f:09:fc: ba:b6:78:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6hK572DhMxJW/eInfooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmEwYTFkNzg0OGQyYzFiMjMxZGQzZTY4MjQ0MjBkMTg3 OTk5MTMwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDY0YTUxMGJkZDliMTg5MGMyNWI1NDEzMmY4NGE1YmQ2ZTQ2OWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sNduRnPNacIFCzupsg0QLVkHMh4 MwdVzy+1ZpNdwMNq/tAU/ao0KTNr2CeskLOkOvpTjwSRuZgvcIYMsJnldQrc9iW1 Li8XdtbsEmgoYhFO9RR86doTtb1y1hb7l80uRWtw/AtO9Izuh8QA4Q2eKwjIZs3Q sD7fI/Y4j1IrdDFQj6t7jraGR6iN6eZnepmCO8jSmpepzb6N5/ugtL9o3au40fBy L67hGIV/8Gw5ZcPJbXvEyeZFxteox+V7p7dJV57QADePX1lBWRisVSgxdWdDojJ3 5re4skRNBkA2ZFqUrjU3DHCJH73shfQqq6s7sqgIOV63yamBSrtTv7aF+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGRkpRC92bGJDCW1QTL4SlvW5GnCMB8GA1UdIwQY MBaAFCm6Ch14SNLBsjHdPmgkQg0YeZkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYt NmE1YjVmNWNhOWQzLzEvWkdTbEVMM1pzWWtNSmJWQk12aEtXOWJrYWNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zMGMwYzAtOWVjYS00NjRmLThiOWYtNmE1YjVmNWNhOWQz LzEvS2JvS0hYaEkwc0d5TWQwLWFDUkNEUmg1bVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ1AMA0G CSqGSIb3DQEBCwUAA4IBAQAJOL0pAxml/YVqR1a749GetKoeqr0gORTYeLhjmvCg AVG4X2kj3qejy85z0rR+YFqUpZ0qJuZA3lT+MR9ZiN3+7rGrmXhI2MaufdCrq19V 6wNVyS1CgcxfH5WXs1NkRTqUiXZRTbgEodCYmXhIH1uDVigzvptkMRPqWp2yjKtl LOpF6CaZpqk1HqrTze++2txkiS/KvDDtzvoqtnA2OVG1zfL0I83uDzl4qly4Y5Na xzZe4hlZSnKJ9M83mVHtzBMiEeKzlZrzJqX+AmvjWXhZJRm5TjbrRZboY9c2A6Xf lGWrSme0iYc1agvNIoXldri0R7RQU03EtoOfCfy6tnjw -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:49 2026 by rpki-client