This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/zSlKzVB4Na3PSrvxBdB_0eJnzzM.roa File: zSlKzVB4Na3PSrvxBdB_0eJnzzM.roa (raw, json) Hash identifier: cuiATN6CsW6UrYic6PJvMAevjZeViQMrG4aNtH1vYrg= Subject key identifier: CD:29:4A:CD:50:78:35:AD:CF:4A:BB:F1:05:D0:7F:D1:E2:67:CF:33 Certificate issuer: /CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1 Certificate serial: 019B7AC95B5044FA5AEA4193B1616584870A Authority key identifier: A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/zSlKzVB4Na3PSrvxBdB_0eJnzzM.roa Signing time: Thu 01 Jan 2026 18:19:35 +0000 ROA not before: Thu 01 Jan 2026 18:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207878 IP address blocks: 95.215.172.0/24 maxlen: 24 160.20.229.0/24 maxlen: 24 160.238.21.0/24 maxlen: 24 176.110.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:5b:50:44:fa:5a:ea:41:93:b1:61:65:84:87:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1 Validity Not Before: Jan 1 18:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd294acd507835adcf4abbf105d07fd1e267cf33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:85:e3:a9:bc:cb:39:4b:ce:57:dd:a3:e8:3f: cf:70:e1:43:52:8c:58:56:94:fa:58:ff:8d:db:72: 4a:88:95:ea:ca:13:9d:fa:d0:14:39:ba:77:8e:62: 91:98:d0:ea:9d:8c:64:50:8c:15:db:4f:e9:ae:2e: 8e:a4:30:34:7b:3f:c7:64:d2:6c:e0:44:94:c1:6e: 90:2a:eb:71:42:99:0f:a4:fa:97:4e:69:41:56:ea: 0c:72:53:79:c5:bf:ff:4d:09:01:14:ff:73:2d:71: ea:3b:74:19:4d:86:e8:32:d4:f2:d5:6b:a5:95:38: 24:7f:c8:f3:3d:ba:45:2f:7b:d4:8d:23:e1:54:24: d1:46:90:9b:6b:e2:55:0b:79:df:0d:7b:fe:ef:9b: cc:d8:1d:8a:2d:06:f0:1b:be:83:24:d3:b6:e1:5b: 8c:a8:be:2f:db:c1:2e:f1:43:94:f1:d1:f3:be:af: 69:fc:87:d8:29:15:ac:23:41:75:0f:e6:6b:fa:6d: a5:44:8d:e7:a2:93:02:37:09:4e:f0:ae:0c:47:f1: 76:80:b6:d9:92:a7:64:84:af:64:da:18:b5:25:4b: 12:a1:27:cc:e1:ce:dc:68:04:02:3b:35:6f:4e:70: 1c:a6:c3:76:0b:e6:0e:82:ec:56:86:73:28:b1:b2: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:29:4A:CD:50:78:35:AD:CF:4A:BB:F1:05:D0:7F:D1:E2:67:CF:33 X509v3 Authority Key Identifier: keyid:A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/zSlKzVB4Na3PSrvxBdB_0eJnzzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.172.0/24 160.20.229.0/24 160.238.21.0/24 176.110.101.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:2a:0a:f8:eb:0e:0a:df:74:b5:e8:af:c9:cd:35:25:d0:8b: 9c:ee:54:cc:9d:07:b4:5a:32:43:24:6b:b6:75:52:45:00:57: 23:78:40:8e:76:5f:b5:47:a6:7d:6b:80:a2:72:34:d1:c5:82: f8:f2:03:8f:8a:fc:0f:93:ce:c4:2e:8d:4e:ce:d6:c9:de:eb: 89:7a:fc:83:c5:63:aa:56:8a:c2:e8:a3:03:38:af:f1:e4:db: 41:01:67:04:0b:6a:ea:fd:1e:56:3c:f7:5a:82:64:d6:01:0a: 49:6b:97:dd:a5:12:2b:fc:8b:2e:d4:48:14:31:49:3f:b4:68: d1:a1:dd:b5:06:ce:90:5b:af:54:3e:f0:23:7b:33:00:1a:a0: b2:0b:36:3d:c7:71:59:9c:68:a1:74:49:0b:1d:37:29:88:f5: e5:c7:5a:6e:c5:19:ea:f1:df:3b:ba:1d:8a:a0:ee:df:40:7d: 55:62:ae:d8:25:8f:2f:a7:02:1b:50:90:b4:dc:70:51:c2:50: ac:81:1e:15:cd:9d:21:a8:c9:eb:28:f1:b6:41:8d:16:a6:61: f0:b7:e6:1b:1f:45:5d:c4:57:d3:2a:80:a1:c2:57:1a:f1:6e: ee:ef:56:40:e6:f4:b4:1f:39:47:a1:0b:1c:56:b0:b4:7d:73: 72:3f:cc:11 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yVtQRPpa6kGTsWFlhIcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZDkyMmUyZmUyNGJkMmNkYTc5M2EyYWFkYzEzMzYyNTAw Y2Q5YjEwHhcNMjYwMTAxMTgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDI5NGFjZDUwNzgzNWFkY2Y0YWJiZjEwNWQwN2ZkMWUyNjdjZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYXjqbzLOUvOV92j6D/PcOFDUoxY VpT6WP+N23JKiJXqyhOd+tAUObp3jmKRmNDqnYxkUIwV20/pri6OpDA0ez/HZNJs 4ESUwW6QKutxQpkPpPqXTmlBVuoMclN5xb//TQkBFP9zLXHqO3QZTYboMtTy1Wul lTgkf8jzPbpFL3vUjSPhVCTRRpCba+JVC3nfDXv+75vM2B2KLQbwG76DJNO24VuM qL4v28Eu8UOU8dHzvq9p/IfYKRWsI0F1D+Zr+m2lRI3nopMCNwlO8K4MR/F2gLbZ kqdkhK9k2hi1JUsSoSfM4c7caAQCOzVvTnAcpsN2C+YOguxWhnMosbKbLQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFM0pSs1QeDWtz0q78QXQf9HiZ88zMB8GA1UdIwQY MBaAFKDZIuL+JL0s2nk6Kq3BM2JQDNmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMt NGE2YWNlMjZiOTcyLzEvelNsS3pWQjROYTNQU3J2eEJkQl8wZUpuenpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMtNGE2YWNlMjZiOTcy LzEvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAX9esAwQA oBTlAwQAoO4VAwQAsG5lMA0GCSqGSIb3DQEBCwUAA4IBAQCbKgr46w4K33S16K/J zTUl0Iuc7lTMnQe0WjJDJGu2dVJFAFcjeECOdl+1R6Z9a4CicjTRxYL48gOPivwP k87ELo1OztbJ3uuJevyDxWOqVorC6KMDOK/x5NtBAWcEC2rq/R5WPPdagmTWAQpJ a5fdpRIr/Isu1EgUMUk/tGjRod21Bs6QW69UPvAjezMAGqCyCzY9x3FZnGihdEkL HTcpiPXlx1puxRnq8d87uh2KoO7fQH1VYq7YJY8vpwIbUJC03HBRwlCsgR4VzZ0h qMnrKPG2QY0WpmHwt+YbH0VdxFfTKoChwlca8W7u71ZA5vS0HzlHoQscVrC0fXNy P8wR -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:38 2026 by rpki-client