This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/zlPMF36fK507KHhaEr_DLJ54RXA.roa File: zlPMF36fK507KHhaEr_DLJ54RXA.roa (raw, json) Hash identifier: kLxUmeXAHI9feHJRDQlAlUFvp1o7+yM0NCeSQpcomMY= Subject key identifier: CE:53:CC:17:7E:9F:2B:9D:3B:28:78:5A:12:BF:C3:2C:9E:78:45:70 Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d Certificate serial: 019B7C1238CA048F8197FA327AE2EC70C34A Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/zlPMF36fK507KHhaEr_DLJ54RXA.roa Signing time: Fri 02 Jan 2026 00:18:47 +0000 ROA not before: Fri 02 Jan 2026 00:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200726 IP address blocks: 185.98.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:38:ca:04:8f:81:97:fa:32:7a:e2:ec:70:c3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d Validity Not Before: Jan 2 00:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce53cc177e9f2b9d3b28785a12bfc32c9e784570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:db:17:27:7b:16:2d:17:04:be:6c:42:64: 4e:ef:76:47:43:2b:07:c7:6c:61:5b:35:08:32:a4: 4f:ef:c3:e3:12:b2:16:18:4f:59:98:5e:31:71:ac: 44:1f:ba:e8:ce:63:7d:cf:0e:f9:23:b3:f6:0a:34: f9:24:f5:1d:cd:64:16:89:5c:a2:fc:dc:86:a0:58: b1:d1:63:d9:20:cf:63:b8:b9:71:8e:f8:d5:7d:b4: c5:78:c2:9f:0f:77:d6:ff:d0:e9:9e:2e:69:dd:42: e3:79:4d:b1:29:52:3a:e6:5d:c9:4b:c7:3f:c5:d9: 94:cc:8d:18:f3:2f:37:33:7b:1a:86:fa:67:9c:32: 23:ee:e6:fc:a4:d2:73:6b:b8:c9:59:31:4d:bb:e3: b2:d2:f4:9d:e1:e9:3b:3f:46:bc:17:0e:a7:fc:cb: a8:75:68:93:ed:16:3b:f0:56:24:22:dc:ad:fe:41: 00:af:33:0d:20:7d:de:d9:e7:29:d9:68:3e:58:e0: 67:c8:b7:30:49:f5:ff:24:61:df:7e:c1:29:76:12: 64:f3:d1:11:ca:ed:4c:22:b5:1b:a9:a9:dd:8f:52: 14:59:c4:51:d6:e5:92:c1:04:56:dc:3e:b6:fd:73: a0:6f:8e:3b:c0:ea:9e:18:22:67:98:d8:60:60:47: 87:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:53:CC:17:7E:9F:2B:9D:3B:28:78:5A:12:BF:C3:2C:9E:78:45:70 X509v3 Authority Key Identifier: keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/zlPMF36fK507KHhaEr_DLJ54RXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.72.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:0e:d5:86:f7:35:5f:57:a3:9e:01:26:ab:0a:a6:aa:16:69: 1b:91:f2:c7:86:64:c3:fe:94:0c:ae:f1:65:d0:9e:e3:6a:55: cd:e8:47:91:a6:94:27:ad:7d:af:63:ed:8b:74:7a:8e:3c:d2: d5:a1:2c:a0:e9:1f:b7:0b:e5:ff:c1:1b:59:6f:23:93:00:4d: c5:b5:ee:fd:e1:27:57:e5:61:57:e8:98:07:1c:88:b6:37:b3: d4:90:7d:80:ba:63:42:8b:1d:53:9a:6a:51:c1:e8:79:13:3f: f1:3f:e4:51:a8:17:13:3d:25:4f:4f:df:e2:f0:cd:1f:af:54: 2b:b9:91:cd:15:d9:e6:b1:84:3c:ba:6e:58:d6:b7:2a:bf:b5: ef:1f:1b:eb:1e:f9:87:66:1f:32:c0:34:09:4c:45:06:f7:2e: 26:cb:26:5d:9a:e9:21:18:ef:4e:34:37:39:3f:e9:e4:9e:81: 4b:b8:86:9f:61:f2:a1:bd:3d:6a:05:ac:b9:1f:2a:7f:a7:7f: 0f:10:3c:10:19:21:fb:e6:e7:73:cb:2f:9e:ba:23:d8:ea:73: 2c:2a:ab:7a:d8:00:e5:fb:75:c6:77:93:20:67:6c:bc:17:01: 63:30:d9:b0:c2:a1:0e:75:e1:5e:ac:03:e5:b1:43:9b:7d:b1: e0:87:c2:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EjjKBI+Bl/oyeuLscMNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NTViYTZlMmIzZGI1NTIxZGJjNzA2MmE1OGMxNmRkYTFi OWYyMmQwHhcNMjYwMTAyMDAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTUzY2MxNzdlOWYyYjlkM2IyODc4NWExMmJmYzMyYzllNzg0NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1XbFyd7Fi0XBL5sQmRO73ZHQysH x2xhWzUIMqRP78PjErIWGE9ZmF4xcaxEH7rozmN9zw75I7P2CjT5JPUdzWQWiVyi /NyGoFix0WPZIM9juLlxjvjVfbTFeMKfD3fW/9Dpni5p3ULjeU2xKVI65l3JS8c/ xdmUzI0Y8y83M3sahvpnnDIj7ub8pNJza7jJWTFNu+Oy0vSd4ek7P0a8Fw6n/Muo dWiT7RY78FYkItyt/kEArzMNIH3e2ecp2Wg+WOBnyLcwSfX/JGHffsEpdhJk89ER yu1MIrUbqandj1IUWcRR1uWSwQRW3D62/XOgb447wOqeGCJnmNhgYEeHhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM5TzBd+nyudOyh4WhK/wyyeeEVwMB8GA1UdIwQY MBaAFPVVum4rPbVSHbxwYqWMFt2hufItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVZXNmJpczl0VklkdkhCaXBZd1czYUc1OGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMGVhYTktMzYyMC00YmI1LWI0MmYt ZGI1MTI1ZGYzNGNkLzEvemxQTUYzNmZLNTA3S0hoYUVyX0RMSjU0UlhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMGVhYTktMzYyMC00YmI1LWI0MmYtZGI1MTI1ZGYzNGNk LzEvOVZXNmJpczl0VklkdkhCaXBZd1czYUc1OGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWJIMA0G CSqGSIb3DQEBCwUAA4IBAQAuDtWG9zVfV6OeASarCqaqFmkbkfLHhmTD/pQMrvFl 0J7jalXN6EeRppQnrX2vY+2LdHqOPNLVoSyg6R+3C+X/wRtZbyOTAE3Fte794SdX 5WFX6JgHHIi2N7PUkH2AumNCix1TmmpRweh5Ez/xP+RRqBcTPSVPT9/i8M0fr1Qr uZHNFdnmsYQ8um5Y1rcqv7XvHxvrHvmHZh8ywDQJTEUG9y4myyZdmukhGO9ONDc5 P+nknoFLuIafYfKhvT1qBay5Hyp/p38PEDwQGSH75udzyy+euiPY6nMsKqt62ADl +3XGd5MgZ2y8FwFjMNmwwqEOdeFerAPlsUObfbHgh8KW -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:17 2026 by rpki-client