This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa File: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (raw, json) Hash identifier: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU= Subject key identifier: 66:ED:98:08:E3:0D:74:5E:9A:35:C7:9E:2B:33:F6:5E:24:8F:86:55 Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859 Certificate serial: 019B7CEE3D7C789FE2C4B77394D296AED2FE Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42532 IP address blocks: 195.135.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3d:7c:78:9f:e2:c4:b7:73:94:d2:96:ae:d2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859 Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66ed9808e30d745e9a35c79e2b33f65e248f8655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:40:a4:1f:73:6c:40:4a:b2:ff:e5:1c:78: 57:20:95:f6:1f:51:d7:8d:af:9b:50:8c:80:72:54: 94:91:25:7a:d1:11:9a:a1:89:4c:de:2f:31:c5:66: 1d:0a:f4:3c:79:54:07:22:0b:54:39:56:e0:50:c4: e1:a2:ec:7f:3e:aa:58:b8:ad:02:4c:9c:35:61:b4: bc:d8:e3:56:3e:79:1f:a8:39:d8:72:ae:5a:e8:e4: 3c:b5:72:ca:a9:8d:56:62:a5:a6:2d:a8:bd:9c:78: 0d:a4:7a:2b:dd:7f:49:28:fd:f6:99:5a:d2:fd:41: 46:19:00:e2:36:08:83:80:63:ea:cc:a9:bc:85:d6: ab:31:97:97:b6:7d:b9:69:97:92:b1:64:b4:0b:0a: 03:63:3d:de:10:44:4c:55:ec:cb:d0:b5:87:98:51: ee:1a:ae:c3:11:04:af:2d:21:ff:85:a4:01:c0:39: 45:05:da:18:8c:97:7d:16:91:43:5f:30:92:1d:86: cd:ab:95:e0:3e:d5:f0:dd:2b:22:a2:03:ad:7f:d0: 4f:49:90:5f:a8:c2:2a:78:e5:04:27:31:59:d0:e9: 9c:b7:ec:94:da:99:7e:25:ee:57:df:1d:40:52:3e: 20:13:9e:ba:b4:35:f5:f0:08:d2:e7:e5:42:42:df: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:ED:98:08:E3:0D:74:5E:9A:35:C7:9E:2B:33:F6:5E:24:8F:86:55 X509v3 Authority Key Identifier: keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.135.252.0/22 Signature Algorithm: sha256WithRSAEncryption 54:18:b3:75:00:ec:99:e4:87:d7:c5:0c:21:53:86:d8:b1:c7: e3:7a:2d:1a:68:69:be:91:45:79:e6:22:b5:1c:6d:4e:d9:2a: fb:be:f9:36:05:9f:ef:21:61:68:7e:45:68:ae:1b:ee:d7:8f: 54:2e:b4:5e:39:2a:a4:02:49:8d:14:c4:37:59:fa:20:da:63: 78:22:98:48:af:74:ff:b0:d2:7b:1c:75:71:06:ff:ae:ff:75: fe:7d:e4:93:f2:fe:a1:a8:66:70:04:7c:9b:bb:a4:e0:88:fb: 2d:b5:5f:91:bf:35:11:a7:a2:0e:6a:8b:48:70:52:36:19:d0: 33:07:89:4c:9b:33:82:37:3c:f2:83:da:88:6b:36:b9:41:b9: a4:5f:6d:49:3a:2f:15:48:e9:cd:fe:c2:a7:5a:90:38:df:2a: 58:fb:05:6c:b1:98:70:5b:7f:f6:e5:89:f8:c2:97:e2:81:f4: 70:6c:6f:05:47:27:37:02:74:e8:64:70:99:68:43:39:49:28: c5:e1:af:66:d9:22:6a:c2:3c:41:75:74:d9:50:cc:0e:59:63: a6:18:d2:4a:8d:38:9e:95:c1:9e:4d:f9:13:f2:1a:7a:f7:ac: cb:fb:81:a9:f1:46:53:9f:05:bd:0f:d9:bc:ba:66:d9:f8:67: 0e:66:10:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87j18eJ/ixLdzlNKWrtL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZTkwN2RkMjAyMTUyY2YxOTAyYmVkYmVjYjE5YTJkNzJh YzA4NTkwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmVkOTgwOGUzMGQ3NDVlOWEzNWM3OWUyYjMzZjY1ZTI0OGY4NjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0hApB9zbEBKsv/lHHhXIJX2H1HX ja+bUIyAclSUkSV60RGaoYlM3i8xxWYdCvQ8eVQHIgtUOVbgUMThoux/PqpYuK0C TJw1YbS82ONWPnkfqDnYcq5a6OQ8tXLKqY1WYqWmLai9nHgNpHor3X9JKP32mVrS /UFGGQDiNgiDgGPqzKm8hdarMZeXtn25aZeSsWS0CwoDYz3eEERMVezL0LWHmFHu Gq7DEQSvLSH/haQBwDlFBdoYjJd9FpFDXzCSHYbNq5XgPtXw3SsiogOtf9BPSZBf qMIqeOUEJzFZ0Omct+yU2pl+Je5X3x1AUj4gE566tDX18AjS5+VCQt8bXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbtmAjjDXRemjXHnisz9l4kj4ZVMB8GA1UdIwQY MBaAFHvpB90gIVLPGQK+2+yxmi1yrAhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQt ZWYyMTkzODFmMTBlLzEvWnUyWUNPTU5kRjZhTmNlZUt6UDJYaVNQaGxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQtZWYyMTkzODFmMTBl LzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw4f8MA0G CSqGSIb3DQEBCwUAA4IBAQBUGLN1AOyZ5IfXxQwhU4bYscfjei0aaGm+kUV55iK1 HG1O2Sr7vvk2BZ/vIWFofkVorhvu149ULrReOSqkAkmNFMQ3Wfog2mN4IphIr3T/ sNJ7HHVxBv+u/3X+feST8v6hqGZwBHybu6TgiPsttV+RvzURp6IOaotIcFI2GdAz B4lMmzOCNzzyg9qIaza5QbmkX21JOi8VSOnN/sKnWpA43ypY+wVssZhwW3/25Yn4 wpfigfRwbG8FRyc3AnToZHCZaEM5SSjF4a9m2SJqwjxBdXTZUMwOWWOmGNJKjTie lcGeTfkT8hp696zL+4Gp8UZTnwW9D9m8umbZ+GcOZhCZ -----END CERTIFICATE-----Generated at Wed Jan 21 14:47:07 2026 by rpki-client