This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa File: Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa (raw, json) Hash identifier: 9o3h5OJ6yuOmpiGRC8WyL9keSG9Y6pKzn5PzuEfOyaY= Subject key identifier: 67:E0:65:B5:DD:07:77:C5:A2:C2:AF:5A:FA:E2:55:75:F5:3D:92:66 Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba Certificate serial: 019B7DCA3DC52C6568A9132F79D6F6651AB7 Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa Signing time: Fri 02 Jan 2026 08:19:24 +0000 ROA not before: Fri 02 Jan 2026 08:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49463 IP address blocks: 213.215.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 23:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3d:c5:2c:65:68:a9:13:2f:79:d6:f6:65:1a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba Validity Not Before: Jan 2 08:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67e065b5dd0777c5a2c2af5afae25575f53d9266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:e3:e7:01:35:be:a9:8a:34:97:6a:b5:f3: 1b:cc:3e:d4:24:37:10:72:d1:a1:e5:0c:45:4e:26: ca:b6:50:a1:30:97:d5:be:c1:ae:f5:94:f3:02:f3: 58:18:37:e0:57:5c:07:af:fd:16:14:5f:e1:09:45: 22:c4:67:04:b1:f0:0e:c7:45:d3:a0:be:ad:26:db: b1:48:48:84:cb:6f:fb:28:d6:cb:07:e9:09:5b:41: 41:39:c2:0e:5f:d2:23:c0:54:25:65:02:09:25:73: 3e:df:55:8b:ca:e3:c5:f5:0e:1e:0c:f7:d2:6f:1f: 0b:f9:ae:48:89:8f:0f:9a:2d:d7:53:13:44:23:85: da:25:6e:3a:84:52:b4:a8:81:26:a5:81:e0:d2:dc: 46:a5:0f:a1:af:83:39:0f:7e:af:d5:59:b6:6c:41: 3b:ee:fa:99:b0:b1:94:ca:07:3e:70:d1:2e:3c:b3: ac:fd:d8:15:af:9e:87:3f:41:09:85:db:ad:9f:89: b5:c7:87:6e:e3:0b:62:90:31:9e:e3:e7:04:02:d8: 4a:af:79:c0:9f:4a:53:94:eb:15:fc:5b:54:4b:67: 03:f4:2f:8c:93:ce:74:28:ea:a1:df:2a:5e:f6:ce: a9:dc:cb:1d:78:56:56:26:fb:ed:f5:10:8a:9a:d1: 1c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E0:65:B5:DD:07:77:C5:A2:C2:AF:5A:FA:E2:55:75:F5:3D:92:66 X509v3 Authority Key Identifier: keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.215.28.0/23 Signature Algorithm: sha256WithRSAEncryption 48:f7:0f:87:0a:59:47:11:9a:68:b4:3d:19:c1:8d:be:4e:bd: 0a:4e:a7:da:5e:cd:39:e1:5f:6c:68:84:71:27:fa:1b:a7:4c: a3:2e:6f:77:34:70:fa:93:75:ee:2d:0a:57:46:1d:be:77:5c: 3b:ba:b3:08:61:2a:57:70:47:db:e5:f9:ca:e7:1c:c9:f5:34: 1d:b5:2c:2f:cf:a6:1b:2e:3b:21:72:d4:97:98:df:f5:0d:eb: 8d:24:94:9c:9a:10:c3:bd:b7:5d:49:29:c3:a6:69:37:12:2c: d4:f9:e8:a4:8c:20:c5:e1:4a:5b:38:e5:24:0d:0c:fa:16:94: b5:fa:3f:b9:43:8b:e5:1d:91:22:d8:80:27:f4:3a:18:0a:99: 1b:94:d1:61:65:96:ca:03:58:19:77:28:bd:1d:d1:0e:f1:3c: 1e:ac:2a:3c:40:9a:22:40:b9:45:ad:e4:14:93:d5:a7:b9:da: 46:6f:5f:f8:bf:c0:6a:21:c7:90:d2:36:cc:9c:c8:58:b9:3c: 04:53:fa:3e:86:69:1e:89:4c:a7:a9:bd:70:11:53:af:98:ae: 3e:3e:76:db:fc:2a:75:d5:0a:a3:45:ff:81:4d:b5:26:7b:0c: 5e:03:4a:7a:6f:bd:3a:1a:6f:f1:85:5f:b0:74:6d:a1:d2:b1: 2b:62:b3:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yj3FLGVoqRMvedb2ZRq3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZTJjZTMxMDk0ODBhZWU3YjNmZDI4NDZlYzhmODY0Njg4 NWNkYmEwHhcNMjYwMTAyMDgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2UwNjViNWRkMDc3N2M1YTJjMmFmNWFmYWUyNTU3NWY1M2Q5MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjXj5wE1vqmKNJdqtfMbzD7UJDcQ ctGh5QxFTibKtlChMJfVvsGu9ZTzAvNYGDfgV1wHr/0WFF/hCUUixGcEsfAOx0XT oL6tJtuxSEiEy2/7KNbLB+kJW0FBOcIOX9IjwFQlZQIJJXM+31WLyuPF9Q4eDPfS bx8L+a5IiY8Pmi3XUxNEI4XaJW46hFK0qIEmpYHg0txGpQ+hr4M5D36v1Vm2bEE7 7vqZsLGUygc+cNEuPLOs/dgVr56HP0EJhdutn4m1x4du4wtikDGe4+cEAthKr3nA n0pTlOsV/FtUS2cD9C+Mk850KOqh3ype9s6p3MsdeFZWJvvt9RCKmtEcXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfgZbXdB3fFosKvWvriVXX1PZJmMB8GA1UdIwQY MBaAFKfizjEJSAruez/ShG7I+GRohc26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEt NzgxOGE4OTQ1NmNiLzEvWi1CbHRkMEhkOFdpd3E5YS11SlZkZlU5a21ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEtNzgxOGE4OTQ1NmNi LzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1dccMA0G CSqGSIb3DQEBCwUAA4IBAQBI9w+HCllHEZpotD0ZwY2+Tr0KTqfaXs054V9saIRx J/obp0yjLm93NHD6k3XuLQpXRh2+d1w7urMIYSpXcEfb5fnK5xzJ9TQdtSwvz6Yb LjshctSXmN/1DeuNJJScmhDDvbddSSnDpmk3EizU+eikjCDF4UpbOOUkDQz6FpS1 +j+5Q4vlHZEi2IAn9DoYCpkblNFhZZbKA1gZdyi9HdEO8TwerCo8QJoiQLlFreQU k9WnudpGb1/4v8BqIceQ0jbMnMhYuTwEU/o+hmkeiUynqb1wEVOvmK4+Pnbb/Cp1 1QqjRf+BTbUmewxeA0p6b706Gm/xhV+wdG2h0rErYrPE -----END CERTIFICATE-----Generated at Thu Jan 8 09:14:12 2026 by rpki-client