This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/znlH05wUUI_cREyEO6A7B87acRI.roa File: znlH05wUUI_cREyEO6A7B87acRI.roa (raw, json) Hash identifier: MtJpDkpsvsN3UGCwGXX+CpXcpcwlJRAixBEzCR1dqmY= Subject key identifier: CE:79:47:D3:9C:14:50:8F:DC:44:4C:84:3B:A0:3B:07:CE:DA:71:12 Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf Certificate serial: 019B79ECD81F083F45B3C11582C56032DC94 Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/znlH05wUUI_cREyEO6A7B87acRI.roa Signing time: Thu 01 Jan 2026 14:18:43 +0000 ROA not before: Thu 01 Jan 2026 14:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210238 IP address blocks: 81.22.224.0/22 maxlen: 22 185.132.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d8:1f:08:3f:45:b3:c1:15:82:c5:60:32:dc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce7947d39c14508fdc444c843ba03b07ceda7112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:de:a9:14:36:ad:b2:2c:f5:4a:4c:fd:89:e4: e0:cf:fd:61:fd:04:5b:d1:9f:e3:66:bf:73:e4:33: ab:8b:d6:c5:37:dd:26:86:23:db:97:1b:aa:66:59: 6d:f9:5e:12:9e:12:b8:97:5d:9d:3f:55:76:5a:b8: 60:46:66:32:4b:57:7c:ff:1f:64:84:a5:64:cd:9c: da:46:01:6d:ff:c1:65:45:74:5a:db:d7:21:59:23: b7:2b:3d:3b:11:91:b1:c8:4f:19:78:f9:6d:47:5a: 47:83:4b:a7:65:51:23:37:6a:8a:6a:f3:58:c4:61: ca:c2:ac:19:bb:3c:7a:03:67:4b:d1:6e:21:da:30: 67:72:33:33:02:c8:12:d8:7c:04:59:eb:56:6d:6b: f3:33:ea:2e:bf:bc:0e:e1:f8:7c:bb:02:ee:58:c7: 7e:66:f0:9f:d1:3b:9e:3e:af:4b:08:26:ed:ab:4f: b1:e5:81:8a:bf:ee:72:ca:f5:48:56:e4:22:3b:34: f4:a7:20:5b:1e:97:fa:92:e6:1c:70:0f:a9:af:86: 9e:e6:f1:b6:46:8c:b0:1f:1e:6b:2c:88:8f:36:16: 2b:70:ec:eb:c3:2a:38:c1:f3:91:f9:e1:8f:b7:7d: bd:85:a6:0a:3f:c0:0a:8f:6f:32:70:b1:64:42:20: c2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:79:47:D3:9C:14:50:8F:DC:44:4C:84:3B:A0:3B:07:CE:DA:71:12 X509v3 Authority Key Identifier: keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/znlH05wUUI_cREyEO6A7B87acRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.224.0/22 185.132.228.0/22 Signature Algorithm: sha256WithRSAEncryption be:82:e1:c4:9e:18:9e:46:47:b7:4b:fd:77:d2:15:58:c6:85: 97:b2:40:76:26:fe:fb:d6:1b:a3:0b:62:17:e0:e7:ac:be:8d: 5a:f9:aa:ab:4c:62:00:6d:de:24:ab:0f:c1:1f:07:a4:7b:31: 40:bf:c8:7f:e7:ed:eb:db:d1:bb:5e:b9:23:1f:30:e5:83:f5: 51:98:28:c5:66:97:02:7b:83:a4:4c:e0:c6:ab:d6:8e:36:3b: 98:97:6d:54:35:4e:0d:39:e3:15:67:c4:e6:90:aa:b1:88:91: 6d:72:b5:2c:a0:26:26:e6:b4:40:76:41:d5:68:69:6e:8d:f8: 82:70:bd:a4:e2:f7:62:10:41:c6:99:e1:89:2e:d4:9c:16:2f: b3:07:2e:ee:ec:e8:ab:73:7e:77:1d:13:81:b1:ef:ed:c7:e7: 67:d5:8d:8d:36:70:71:ad:af:ac:32:3e:84:1d:29:fe:7a:b8: 57:67:3e:35:27:d5:3b:db:66:28:2b:c1:3f:85:87:99:3c:43: 15:a4:fb:d8:12:54:3b:0e:1d:5b:c1:7b:d7:07:f7:76:d9:4b: b0:be:62:c1:40:1e:7d:7a:e9:19:13:91:94:7d:31:1b:86:82: 36:33:2f:16:5b:c1:ab:49:49:18:9c:f7:09:df:3e:38:eb:50: 2c:a1:0c:5f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt57NgfCD9Fs8EVgsVgMtyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YjE4Mjg1ZjQyZWQ2N2MxMWQ4ZjgzZGY0ODhiMTBmYzg3 ZjE3YmYwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTc5NDdkMzljMTQ1MDhmZGM0NDRjODQzYmEwM2IwN2NlZGE3MTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt6pFDatsiz1Skz9ieTgz/1h/QRb 0Z/jZr9z5DOri9bFN90mhiPblxuqZllt+V4SnhK4l12dP1V2WrhgRmYyS1d8/x9k hKVkzZzaRgFt/8FlRXRa29chWSO3Kz07EZGxyE8ZePltR1pHg0unZVEjN2qKavNY xGHKwqwZuzx6A2dL0W4h2jBncjMzAsgS2HwEWetWbWvzM+ouv7wO4fh8uwLuWMd+ ZvCf0TuePq9LCCbtq0+x5YGKv+5yyvVIVuQiOzT0pyBbHpf6kuYccA+pr4ae5vG2 RoywHx5rLIiPNhYrcOzrwyo4wfOR+eGPt329haYKP8AKj28ycLFkQiDCUQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM55R9OcFFCP3ERMhDugOwfO2nESMB8GA1UdIwQY MBaAFPixgoX0LtZ8Edj4PfSIsQ/Ifxe/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MR0NoZlF1MW53UjJQZzk5SWl4RDhoX0Y3OC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvYjMzMWNjLTZiNmQtNDY5My05MjY3 LWI0MjI3NzkxNjBiYi8xL3pubEgwNXdVVUlfY1JFeUVPNkE3Qjg3YWNSSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTIvYjMzMWNjLTZiNmQtNDY5My05MjY3LWI0MjI3NzkxNjBi Yi8xLzEtTEdDaGZRdTFud1IyUGc5OUlpeEQ4aF9GNzguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJRFuAD BAK5hOQwDQYJKoZIhvcNAQELBQADggEBAL6C4cSeGJ5GR7dL/XfSFVjGhZeyQHYm /vvWG6MLYhfg56y+jVr5qqtMYgBt3iSrD8EfB6R7MUC/yH/n7evb0bteuSMfMOWD 9VGYKMVmlwJ7g6RM4Mar1o42O5iXbVQ1Tg054xVnxOaQqrGIkW1ytSygJibmtEB2 QdVoaW6N+IJwvaTi92IQQcaZ4Yku1JwWL7MHLu7s6KtzfncdE4Gx7+3H52fVjY02 cHGtr6wyPoQdKf56uFdnPjUn1TvbZigrwT+Fh5k8QxWk+9gSVDsOHVvBe9cH93bZ S7C+YsFAHn166RkTkZR9MRuGgjYzLxZbwatJSRic9wnfPjjrUCyhDF8= -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:25 2026 by rpki-client