This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa File: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (raw, json) Hash identifier: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI= Subject key identifier: 64:62:24:3D:75:1E:24:38:16:D4:35:B7:BF:5F:84:9F:EC:E3:99:55 Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Certificate serial: 019B7A5B0137B48DEB2B6A11EC8A22880619 Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39729 IP address blocks: 81.88.48.0/20 maxlen: 24 185.2.4.0/22 maxlen: 24 2a01:8100::/29 maxlen: 48 2a01:8100:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:01:37:b4:8d:eb:2b:6a:11:ec:8a:22:88:06:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6462243d751e243816d435b7bf5f849fece39955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:1b:88:64:77:ca:8b:45:53:92:24:47:29: b6:e7:e4:c8:ca:0a:5f:e4:61:c9:db:5e:48:d3:08: 13:7e:c5:67:0d:cd:0d:4a:7d:55:27:dd:04:a3:32: be:95:14:ca:06:dd:af:74:4b:28:84:2f:d1:82:45: 1e:1d:ea:0c:5e:82:52:b9:34:1d:62:2d:3f:fd:11: ef:bc:d6:26:73:ee:7f:f7:6b:5c:82:f5:a0:4d:6e: 80:e6:49:fc:03:36:69:d1:03:a1:0f:67:df:62:2e: f4:39:4d:65:b4:29:c0:b4:17:51:00:e0:2b:a3:df: fc:14:83:b2:20:03:ed:5e:79:1e:2a:c6:3b:1e:e9: 7d:bb:26:57:f0:e7:d3:ee:cc:58:9e:67:63:07:97: 3f:25:35:71:76:e5:c8:e1:d0:7a:11:e4:f7:43:21: 3a:bc:b5:6e:84:43:b9:cb:9a:6d:49:27:49:c2:0f: fe:65:c5:d5:58:34:9e:c3:69:52:55:e7:64:d0:0e: 0e:86:71:6a:4d:fe:85:19:7b:27:a4:8f:25:1e:95: 4e:7a:70:6d:14:94:7b:2c:a9:77:63:33:5c:92:2a: 0c:77:3b:66:36:1e:97:9c:fa:00:eb:ce:7d:9a:45: 1a:ab:50:70:08:2e:51:3f:10:40:60:5b:7f:e9:27: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:62:24:3D:75:1E:24:38:16:D4:35:B7:BF:5F:84:9F:EC:E3:99:55 X509v3 Authority Key Identifier: keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.88.48.0/20 185.2.4.0/22 IPv6: 2a01:8100::/29 Signature Algorithm: sha256WithRSAEncryption d5:75:f2:8a:2b:9b:db:db:e6:d4:db:2d:f0:61:fd:94:c0:75: b5:99:40:5c:4c:e8:9e:56:51:16:93:26:b4:a5:97:84:7e:51: f4:fc:20:4f:d2:50:b0:cd:31:3e:0f:f1:da:bd:ed:24:f3:ec: bb:e0:15:bf:8f:a9:f6:57:74:06:57:8c:cb:83:85:cb:bd:76: d2:32:3d:90:5b:6c:8c:48:f3:3a:a5:92:00:be:31:f8:d7:a8: 64:7b:97:60:4d:ff:3b:e2:ae:8b:3d:98:b3:77:64:38:da:6b: b3:0f:ae:0b:6a:aa:9d:d5:87:aa:2e:3a:00:ed:ef:e0:73:5d: 25:b7:fb:04:1d:dc:b8:b6:9b:7a:10:23:e5:7d:00:b1:a4:02: 4e:41:47:e5:c5:bd:72:4b:cd:fe:76:01:b1:35:80:72:69:35: e5:a6:26:26:f7:54:98:a0:e5:2d:d6:5f:8d:bd:16:59:3f:2d: 3f:3c:58:dc:52:8f:42:60:31:bb:1e:0f:c7:b1:03:a5:3a:19: 6b:c1:dd:32:71:01:4b:2a:b5:96:fd:8a:eb:cc:01:04:8e:76: f2:43:a0:b0:e0:9d:ab:b3:ac:42:98:51:14:e5:1c:7f:d4:fe: 76:81:a6:77:f0:7a:ee:dc:66:e9:1f:0c:88:7e:4c:9e:8f:6d: c2:8e:34:86 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WwE3tI3rK2oR7IoiiAYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1 ZGY1MTQwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDYyMjQzZDc1MWUyNDM4MTZkNDM1YjdiZjVmODQ5ZmVjZTM5OTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArscbiGR3yotFU5IkRym25+TIygpf 5GHJ215I0wgTfsVnDc0NSn1VJ90EozK+lRTKBt2vdEsohC/RgkUeHeoMXoJSuTQd Yi0//RHvvNYmc+5/92tcgvWgTW6A5kn8AzZp0QOhD2ffYi70OU1ltCnAtBdRAOAr o9/8FIOyIAPtXnkeKsY7Hul9uyZX8OfT7sxYnmdjB5c/JTVxduXI4dB6EeT3QyE6 vLVuhEO5y5ptSSdJwg/+ZcXVWDSew2lSVedk0A4OhnFqTf6FGXsnpI8lHpVOenBt FJR7LKl3YzNckioMdztmNh6XnPoA6859mkUaq1BwCC5RPxBAYFt/6SfafwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGRiJD11HiQ4FtQ1t79fhJ/s45lVMB8GA1UdIwQY MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt MTRjNTkwZmVjN2UzLzEvWkdJa1BYVWVKRGdXMURXM3YxLUVuLXpqbVZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUVgwAwQC uQIEMA0EAgACMAcDBQMqAYEAMA0GCSqGSIb3DQEBCwUAA4IBAQDVdfKKK5vb2+bU 2y3wYf2UwHW1mUBcTOieVlEWkya0pZeEflH0/CBP0lCwzTE+D/Have0k8+y74BW/ j6n2V3QGV4zLg4XLvXbSMj2QW2yMSPM6pZIAvjH416hke5dgTf874q6LPZizd2Q4 2muzD64Laqqd1YeqLjoA7e/gc10lt/sEHdy4tpt6ECPlfQCxpAJOQUflxb1yS83+ dgGxNYByaTXlpiYm91SYoOUt1l+NvRZZPy0/PFjcUo9CYDG7Hg/HsQOlOhlrwd0y cQFLKrWW/YrrzAEEjnbyQ6Cw4J2rs6xCmFEU5Rx/1P52gaZ38Hru3GbpHwyIfkye j23CjjSG -----END CERTIFICATE-----Generated at Tue Jan 27 15:17:36 2026 by rpki-client