This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa File: zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa (raw, json) Hash identifier: S4FWvpehwaf+t86RAndAwSRdPD3fihRGtxygI5zpGMs= Subject key identifier: CC:72:69:57:76:57:C5:B6:84:E2:C8:FF:C6:EF:51:36:DD:EB:E1:D1 Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f Certificate serial: 019B78351ADFA3284747BACD63814D0B4F1B Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 37.140.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1a:df:a3:28:47:47:ba:cd:63:81:4d:0b:4f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc7269577657c5b684e2c8ffc6ef5136ddebe1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:3f:ed:0f:cc:f5:86:8f:d6:9b:92:b7:a7: 69:cd:7c:0a:97:81:07:0a:20:a9:3c:36:2e:02:c4: 21:d9:10:1e:e2:2e:18:19:05:e9:89:84:8a:c7:46: 6f:40:07:00:cc:0b:93:3a:a9:26:be:af:3d:23:7e: 4e:04:e0:bd:f3:6c:8b:ee:22:72:99:c4:07:be:ee: 37:10:46:92:36:da:1e:ad:51:7a:e5:9d:a9:4a:6e: 6a:09:0c:20:70:2f:51:ac:e8:34:32:68:87:14:4c: 6a:98:fc:85:57:da:ae:c0:ff:31:32:d9:c3:92:c5: 17:ce:2f:3f:ca:12:3e:95:be:8b:39:b2:e1:51:84: c1:5f:29:a4:40:be:a5:97:a6:be:c3:f5:6a:f9:25: 21:3a:5e:26:78:08:c8:39:fe:ee:a7:8c:99:9f:f8: 96:f3:6e:ba:4c:9e:b2:55:e7:3a:9f:2c:b1:99:73: c4:09:d1:2a:4c:e8:8f:53:3e:38:be:e1:fb:a0:01: b1:db:e5:59:ea:01:89:79:5c:dd:41:65:de:94:db: cf:d9:ed:b3:b0:57:cd:9d:0a:43:7e:ac:0b:88:f7: 28:da:51:ce:2f:3c:87:d5:d7:ae:2a:ba:60:72:77: 8e:b8:e0:16:46:72:c1:aa:f3:0c:d6:00:37:2e:5c: 0c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:72:69:57:76:57:C5:B6:84:E2:C8:FF:C6:EF:51:36:DD:EB:E1:D1 X509v3 Authority Key Identifier: keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.208.0/23 Signature Algorithm: sha256WithRSAEncryption 03:3f:40:19:1a:2e:8e:ed:30:45:0c:12:e3:a7:78:a8:4a:bb: 6d:3e:8d:61:83:e6:4e:ff:5c:0b:cd:2a:1e:0d:ef:00:81:22: b2:ef:37:5d:aa:47:9c:1c:42:61:e0:b5:b4:1c:43:3d:88:c5: 3d:54:fb:6b:66:e5:e2:48:94:b5:be:69:18:43:3b:d1:2f:5a: d6:9c:b5:75:90:c7:57:d7:7c:36:38:43:61:0f:bc:1a:5c:15: 85:ad:3d:cc:ed:7e:2c:6b:14:f9:66:9c:3b:57:c2:4c:b0:65: 53:af:35:62:34:3a:93:12:6c:e4:63:5d:2d:23:ae:f0:88:e0: 4e:23:31:69:82:c1:9d:46:99:0b:12:9c:92:c2:77:08:ab:e8: a9:85:3e:2d:0e:57:e0:f9:80:e8:44:7d:34:20:35:af:d6:e4: 6f:3c:c4:c6:e1:d8:33:ee:28:36:f6:95:1c:4d:c5:18:6d:59: 74:c7:45:41:c1:00:ef:6f:d1:5d:05:66:7c:1c:08:6d:fe:c6: ff:16:33:0d:d7:88:36:55:50:57:3e:cd:71:f1:4a:6b:ac:7a: 71:59:51:84:5d:eb:66:d2:98:a0:11:4d:00:19:61:d9:ef:ce: ae:0a:a7:45:a2:d7:89:20:cb:86:e6:66:42:c9:ff:61:f8:48: b8:a6:fd:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRrfoyhHR7rNY4FNC08bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlM2IwMzg1MjYwYWM2NmYyMWM0M2Y1YWI3OGJhYzY4MmU4 Y2U1NGYwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzcyNjk1Nzc2NTdjNWI2ODRlMmM4ZmZjNmVmNTEzNmRkZWJlMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNI/7Q/M9YaP1puSt6dpzXwKl4EH CiCpPDYuAsQh2RAe4i4YGQXpiYSKx0ZvQAcAzAuTOqkmvq89I35OBOC982yL7iJy mcQHvu43EEaSNtoerVF65Z2pSm5qCQwgcC9RrOg0MmiHFExqmPyFV9quwP8xMtnD ksUXzi8/yhI+lb6LObLhUYTBXymkQL6ll6a+w/Vq+SUhOl4meAjIOf7up4yZn/iW 8266TJ6yVec6nyyxmXPECdEqTOiPUz44vuH7oAGx2+VZ6gGJeVzdQWXelNvP2e2z sFfNnQpDfqwLiPco2lHOLzyH1deuKrpgcneOuOAWRnLBqvMM1gA3LlwM0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxyaVd2V8W2hOLI/8bvUTbd6+HRMB8GA1UdIwQY MBaAFP47A4UmCsZvIcQ/WreLrGgujOVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMmZmZDktNzQ1ZC00ZTdkLWIyYjIt NzUwMzNmOGY3MjEwLzEvekhKcFYzWlh4YmFFNHNqX3h1OVJOdDNyNGRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMmZmZDktNzQ1ZC00ZTdkLWIyYjItNzUwMzNmOGY3MjEw LzEvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJYzQMA0G CSqGSIb3DQEBCwUAA4IBAQADP0AZGi6O7TBFDBLjp3ioSrttPo1hg+ZO/1wLzSoe De8AgSKy7zddqkecHEJh4LW0HEM9iMU9VPtrZuXiSJS1vmkYQzvRL1rWnLV1kMdX 13w2OENhD7waXBWFrT3M7X4saxT5Zpw7V8JMsGVTrzViNDqTEmzkY10tI67wiOBO IzFpgsGdRpkLEpySwncIq+iphT4tDlfg+YDoRH00IDWv1uRvPMTG4dgz7ig29pUc TcUYbVl0x0VBwQDvb9FdBWZ8HAht/sb/FjMN14g2VVBXPs1x8UprrHpxWVGEXetm 0pigEU0AGWHZ786uCqdFoteJIMuG5mZCyf9h+Ei4pv3Y -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:01 2026 by rpki-client