This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Z4qehmmIIMgRP7ObXHN1Fjvd9Cs.roa File: Z4qehmmIIMgRP7ObXHN1Fjvd9Cs.roa (raw, json) Hash identifier: 0jO7nFM/draO2m1gezepqenb1TXb8u84Y7tHyJsUFNM= Subject key identifier: 67:8A:9E:86:69:88:20:C8:11:3F:B3:9B:5C:73:75:16:3B:DD:F4:2B Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C74D52AE778366B789C1F5A793FEF8 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Z4qehmmIIMgRP7ObXHN1Fjvd9Cs.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 93.114.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4d:52:ae:77:83:66:b7:89:c1:f5:a7:93:fe:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=678a9e86698820c8113fb39b5c7375163bddf42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:9c:6e:96:70:88:c5:a9:6d:38:e1:1c:3b: ac:95:36:15:9f:a3:01:88:62:47:92:a7:53:84:64: a6:83:55:93:18:a3:3a:ff:50:d9:1f:ab:84:4c:98: 9e:05:6b:c8:31:cb:55:39:7d:87:b4:6a:bb:75:ed: 03:c9:af:52:7b:dc:15:00:81:fd:a1:ee:dc:4d:cb: c7:68:71:50:fd:18:b9:4e:d1:71:c2:2e:99:d1:cd: 84:05:d7:36:6a:5e:14:a2:3e:cc:2a:33:ce:79:5a: c7:b4:6f:8a:cf:f9:5b:ba:ae:09:4e:55:24:16:a9: d8:d9:32:fe:27:99:39:7b:94:57:24:6c:93:cf:74: b7:06:98:84:db:01:63:86:28:f2:cb:ef:a4:0d:e5: 2d:44:d7:94:c5:50:e8:9f:39:85:aa:e9:c7:e5:ef: c0:f0:7e:62:19:f1:a2:a7:17:44:aa:41:fb:92:dc: 5c:e5:a1:80:63:f2:95:f4:1e:bf:f7:e9:3b:18:58: 35:02:05:be:7c:ec:73:f9:fd:47:1b:83:e7:66:d2: fb:01:f3:13:ff:c7:33:e9:42:05:64:6d:56:2d:6d: 1f:d6:89:57:c1:13:db:4b:37:74:fd:ce:10:18:f3: 55:59:d6:2f:d3:4e:3b:f6:72:07:1b:2a:b6:c0:a6: 33:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8A:9E:86:69:88:20:C8:11:3F:B3:9B:5C:73:75:16:3B:DD:F4:2B X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Z4qehmmIIMgRP7ObXHN1Fjvd9Cs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.114.182.0/24 Signature Algorithm: sha256WithRSAEncryption 41:9e:08:44:2f:f3:47:98:4d:a7:39:9c:01:aa:d2:01:00:c3: 9a:84:41:eb:76:e1:71:7c:c3:b1:cc:7f:c3:ae:73:ae:36:c1: a4:6b:fe:3d:42:c9:f5:c2:97:60:01:89:aa:6b:ee:e7:a7:72: 78:3d:2e:f9:5d:b8:37:9d:1f:e8:f5:b6:98:0d:cd:ed:5f:a4: 58:6d:2a:b6:86:41:a4:6c:50:96:5f:c4:5e:0c:8e:58:c0:e7: 07:cc:eb:31:75:0a:99:80:ac:0b:6f:d9:a7:fb:b3:7f:d3:5c: 50:a4:d8:85:c9:0c:a3:6d:b1:a1:b5:8d:a2:99:c4:c9:42:73: ab:b5:bc:a2:86:7a:bf:b6:d8:ec:62:5f:53:40:b5:b6:07:04: aa:23:41:c3:4c:9a:80:b3:8e:e1:ad:eb:2d:6d:58:00:05:b0: b3:fc:f4:5b:48:c9:65:94:41:62:3b:c5:8e:68:b2:b6:dc:e5: e8:24:80:90:a6:a1:a9:2f:1c:c9:80:a6:f9:b7:7a:c7:80:ed: 50:48:55:73:1a:ff:68:5a:31:45:ee:68:db:b4:65:a5:06:d3: f8:4c:6b:6e:b8:f3:e1:53:28:60:e6:2e:4b:b9:08:6e:21:bb: aa:91:56:c8:63:e8:42:d1:bf:b9:16:f4:b2:bd:8f:18:d8:3c: 83:6d:b3:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x01SrneDZreJwfWnk/74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzhhOWU4NjY5ODgyMGM4MTEzZmIzOWI1YzczNzUxNjNiZGRmNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulmcbpZwiMWpbTjhHDuslTYVn6MB iGJHkqdThGSmg1WTGKM6/1DZH6uETJieBWvIMctVOX2HtGq7de0Dya9Se9wVAIH9 oe7cTcvHaHFQ/Ri5TtFxwi6Z0c2EBdc2al4Uoj7MKjPOeVrHtG+Kz/lbuq4JTlUk FqnY2TL+J5k5e5RXJGyTz3S3BpiE2wFjhijyy++kDeUtRNeUxVDonzmFqunH5e/A 8H5iGfGipxdEqkH7ktxc5aGAY/KV9B6/9+k7GFg1AgW+fOxz+f1HG4PnZtL7AfMT /8cz6UIFZG1WLW0f1olXwRPbSzd0/c4QGPNVWdYv00479nIHGyq2wKYzSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGeKnoZpiCDIET+zm1xzdRY73fQrMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvWjRxZWhtbUlJTWdSUDdPYlhITjFGanZkOUNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXK2MA0G CSqGSIb3DQEBCwUAA4IBAQBBnghEL/NHmE2nOZwBqtIBAMOahEHrduFxfMOxzH/D rnOuNsGka/49Qsn1wpdgAYmqa+7np3J4PS75Xbg3nR/o9baYDc3tX6RYbSq2hkGk bFCWX8ReDI5YwOcHzOsxdQqZgKwLb9mn+7N/01xQpNiFyQyjbbGhtY2imcTJQnOr tbyihnq/ttjsYl9TQLW2BwSqI0HDTJqAs47hrestbVgABbCz/PRbSMlllEFiO8WO aLK23OXoJICQpqGpLxzJgKb5t3rHgO1QSFVzGv9oWjFF7mjbtGWlBtP4TGtuuPPh Uyhg5i5LuQhuIbuqkVbIY+hC0b+5FvSyvY8Y2DyDbbPd -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:37 2026 by rpki-client