This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/zG_KNlp2ov-Eb_r8DA6akL2rZTg.roa File: zG_KNlp2ov-Eb_r8DA6akL2rZTg.roa (raw, json) Hash identifier: AJBQtpRLkRSZKhdaLX+ia9/jPSSmkNLT+zLAkaVXhn0= Subject key identifier: CC:6F:CA:36:5A:76:A2:FF:84:6F:FA:FC:0C:0E:9A:90:BD:AB:65:38 Certificate issuer: /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9 Certificate serial: 019B7E392B6A4C916B376CF3776701739100 Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/zG_KNlp2ov-Eb_r8DA6akL2rZTg.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209322 IP address blocks: 45.67.76.0/24 maxlen: 24 45.67.77.0/24 maxlen: 24 45.67.78.0/24 maxlen: 24 45.67.79.0/24 maxlen: 24 2a07:3c80::/40 maxlen: 40 2a07:3c80:200::/40 maxlen: 40 2a07:3c80:400::/40 maxlen: 40 2a07:3c80:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2b:6a:4c:91:6b:37:6c:f3:77:67:01:73:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc6fca365a76a2ff846ffafc0c0e9a90bdab6538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:e9:99:96:72:8e:26:d6:b5:0a:8c:45:4d: 3e:45:16:1c:d1:2f:c1:0b:9c:e1:45:9f:4c:98:ef: f3:cf:8b:c3:cd:91:9c:ec:ca:dc:e0:41:8f:88:52: d6:3f:a3:6b:79:62:9e:a5:f0:35:a8:99:96:0c:3d: 1e:5c:be:29:c6:46:3c:fb:ea:cf:65:3e:cd:08:59: c2:c4:05:ba:ca:37:07:08:bf:29:ec:11:09:df:c4: dd:11:04:f8:43:b7:b9:6f:3c:83:27:36:3d:60:5e: aa:63:1c:cd:5c:03:00:21:49:37:57:58:db:b3:d8: 1e:4a:68:a6:33:37:ff:cd:27:bd:5b:7f:8d:64:28: 8f:8c:d9:bb:88:77:18:b5:83:17:13:66:b2:67:74: f4:55:27:22:be:ee:04:cc:00:b9:9b:63:70:8d:ae: 05:0d:55:58:af:65:80:90:bb:d0:84:1d:45:e3:bd: 7e:7f:b3:2d:a7:15:54:bf:f3:d1:cc:10:1b:26:fc: 54:07:dd:c5:92:a9:7a:f7:3c:6c:02:68:86:97:3b: 1d:a2:db:08:c6:74:4b:c2:8b:7c:6e:7f:3a:ff:15: ed:f8:6e:2c:eb:93:28:09:2f:8e:be:89:1d:a7:5d: 08:a1:98:b6:1d:53:6f:0c:81:84:ce:d5:5d:fe:21: c8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6F:CA:36:5A:76:A2:FF:84:6F:FA:FC:0C:0E:9A:90:BD:AB:65:38 X509v3 Authority Key Identifier: keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/zG_KNlp2ov-Eb_r8DA6akL2rZTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.76.0/22 IPv6: 2a07:3c80::/40 2a07:3c80:200::/40 2a07:3c80:400::/40 2a07:3c80:600::/40 Signature Algorithm: sha256WithRSAEncryption 46:e3:3e:d5:62:24:c9:10:28:01:81:52:97:87:db:17:6b:95: a6:93:8c:a7:e5:24:19:4b:e2:67:3a:2e:fa:3d:8c:a5:ff:7d: 3b:3e:85:de:a3:ab:55:95:dc:1b:cb:03:3f:f9:d1:d1:c8:01: c3:ff:45:a9:a9:3d:f2:26:81:38:e6:31:69:7c:80:44:03:76: 30:ba:c1:dc:19:ec:23:49:04:2a:f3:4a:9d:19:00:99:0d:e4: 6d:7c:d0:97:bc:41:62:e3:a6:90:53:72:0f:c6:b9:85:b9:38: 74:91:de:85:97:de:dc:97:52:f0:f8:43:49:47:ac:7c:7d:ed: 67:7c:09:cd:88:10:73:bc:b8:c5:b8:b1:cb:c8:d7:67:be:bc: c1:38:86:ff:8a:7a:eb:e6:0e:11:d0:6f:7f:2e:f5:0f:8f:75: 30:ca:53:fc:6f:72:9a:c1:e8:26:49:91:bb:93:5c:02:8a:08: 7a:35:f9:a3:47:d7:d6:5e:07:d1:c6:db:ac:41:b2:e7:12:8b: 73:41:ee:dd:a4:36:d8:30:46:79:98:68:d4:f4:35:be:41:c8: 22:a7:1c:ea:ff:7b:d1:36:fc:a5:11:88:90:69:d2:3d:32:ec: 9c:ed:5e:55:e4:db:ec:5d:87:27:7c:08:de:09:d3:bd:3d:8f: af:1a:16:d1 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt+OStqTJFrN2zzd2cBc5EAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzM3ZWFkNmI5YjkzZGQwZDc1OGFiZjlkN2IzMDMwNzJh OTllYjkwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzZmY2EzNjVhNzZhMmZmODQ2ZmZhZmMwYzBlOWE5MGJkYWI2NTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EbpmZZyjibWtQqMRU0+RRYc0S/B C5zhRZ9MmO/zz4vDzZGc7Mrc4EGPiFLWP6NreWKepfA1qJmWDD0eXL4pxkY8++rP ZT7NCFnCxAW6yjcHCL8p7BEJ38TdEQT4Q7e5bzyDJzY9YF6qYxzNXAMAIUk3V1jb s9geSmimMzf/zSe9W3+NZCiPjNm7iHcYtYMXE2ayZ3T0VScivu4EzAC5m2Nwja4F DVVYr2WAkLvQhB1F471+f7MtpxVUv/PRzBAbJvxUB93Fkql69zxsAmiGlzsdotsI xnRLwot8bn86/xXt+G4s65MoCS+Ovokdp10IoZi2HVNvDIGEztVd/iHIZQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFMxvyjZadqL/hG/6/AwOmpC9q2U4MB8GA1UdIwQY MBaAFOszfq1rm5PdDXWKv517MDByqZ65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iOGMzMGMtODJkOS00NmJiLWJiMDct OWNhMTAwNDI4ZjEwLzEvekdfS05scDJvdi1FYl9yOERBNmFrTDJyWlRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iOGMzMGMtODJkOS00NmJiLWJiMDctOWNhMTAwNDI4ZjEw LzEvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAMBAIAATAGAwQCLUNMMCYE AgACMCADBgAqBzyAAAMGACoHPIACAwYAKgc8gAQDBgAqBzyABjANBgkqhkiG9w0B AQsFAAOCAQEARuM+1WIkyRAoAYFSl4fbF2uVppOMp+UkGUviZzou+j2Mpf99Oz6F 3qOrVZXcG8sDP/nR0cgBw/9Fqak98iaBOOYxaXyARAN2MLrB3BnsI0kEKvNKnRkA mQ3kbXzQl7xBYuOmkFNyD8a5hbk4dJHehZfe3JdS8PhDSUesfH3tZ3wJzYgQc7y4 xbixy8jXZ768wTiG/4p66+YOEdBvfy71D491MMpT/G9ymsHoJkmRu5NcAooIejX5 o0fX1l4H0cbbrEGy5xKLc0Hu3aQ22DBGeZho1PQ1vkHIIqcc6v970Tb8pRGIkGnS PTLsnO1eVeTb7F2HJ3wI3gnTvT2PrxoW0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:29 2026 by rpki-client