This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa File: ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa (raw, json) Hash identifier: SIg3ToChfd1+8YW/rxSI4oA419Stw5Sb9StcFL22beM= Subject key identifier: 65:1A:F6:43:07:2A:1A:0B:7F:10:E8:93:B4:C1:68:13:E9:64:9A:8C Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019B7F1522D0E3C5AD8A4E587F56787738FF Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa Signing time: Fri 02 Jan 2026 14:20:50 +0000 ROA not before: Fri 02 Jan 2026 14:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59741 IP address blocks: 45.141.53.0/24 maxlen: 24 185.73.240.0/24 maxlen: 24 185.73.241.0/24 maxlen: 24 185.73.242.0/24 maxlen: 24 2a05:4740::/32 maxlen: 32 2a05:4742::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:22:d0:e3:c5:ad:8a:4e:58:7f:56:78:77:38:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=651af643072a1a0b7f10e893b4c16813e9649a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d3:84:0d:c2:9d:7b:da:4c:04:d8:11:9c:3f: 94:a1:77:f0:3a:1c:59:50:67:ae:c2:2a:1f:23:af: 77:84:42:ab:42:d1:9a:6b:64:bf:b7:39:59:df:b8: 31:93:47:02:17:c5:ca:bb:ae:1f:db:70:cf:25:d9: 58:d4:a0:f4:71:62:62:39:68:d9:47:fc:f2:b6:0b: f6:c9:1b:97:fe:53:66:64:01:4d:60:9a:f8:6d:91: 9b:33:8f:cd:b2:23:aa:57:e2:b7:66:f9:5d:07:d0: 42:93:01:41:3a:a9:4d:13:8c:d7:1f:b2:2a:b1:4d: 07:8a:9c:b8:1a:5e:d9:e8:0a:85:78:04:9a:9f:de: 3b:29:2a:dd:09:07:39:26:a8:bb:32:71:2f:b0:5e: 3e:58:90:4c:43:6a:30:26:a6:aa:97:a1:ba:14:ad: 42:18:36:7e:92:cb:ae:d1:bf:5a:e8:4f:82:a8:9f: 5f:52:68:14:56:0c:73:32:ba:74:4b:2a:99:72:7c: 65:3f:f6:0d:60:9e:b1:ca:3e:c4:83:6e:4d:73:c9: 96:b2:12:36:83:5d:ad:50:2e:14:2e:8b:b9:72:d3: b9:81:ec:2c:3a:27:c8:20:95:64:7f:9b:21:a4:08: 99:72:51:8d:6d:10:26:de:48:e7:d0:25:a1:48:98: 6a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1A:F6:43:07:2A:1A:0B:7F:10:E8:93:B4:C1:68:13:E9:64:9A:8C X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.53.0/24 185.73.240.0-185.73.242.255 IPv6: 2a05:4740::/32 2a05:4742::/32 Signature Algorithm: sha256WithRSAEncryption 52:90:bb:9a:02:c5:68:72:e8:e8:bc:7a:92:95:a7:0e:95:c8: 88:43:9d:b7:84:cf:98:a9:70:69:c4:69:4d:55:7b:71:4a:2e: e3:db:07:94:22:35:54:87:66:bf:7e:e8:be:20:0e:16:c7:52: 02:c5:a7:72:60:6b:5f:35:d9:4e:53:5a:9d:a5:9c:bd:cf:00: 86:9e:df:97:77:7f:dc:ec:fc:ae:40:44:c2:5b:98:7b:1a:40: fc:2d:3b:1f:d3:af:78:6b:1f:68:6b:63:86:fd:f7:f6:1a:5b: 1c:d2:95:7a:52:45:29:b4:16:94:65:e8:ee:35:a2:77:9e:d4: e0:ab:c8:12:8e:6a:64:af:80:c7:16:88:23:92:02:86:e5:5d: b4:3c:1d:f2:f9:49:9b:58:1a:4e:77:91:59:81:db:66:ee:84: d7:63:1f:f7:de:98:b4:15:22:81:2a:d9:af:ab:14:49:88:af: 33:69:5a:d5:4e:39:88:70:e8:6f:aa:04:bf:b0:54:87:44:89: a7:27:13:fa:06:51:bc:97:0e:ac:bd:d4:9b:96:13:95:1f:e7: ee:cc:a4:30:65:29:db:4d:10:64:ca:8f:23:2e:79:be:f0:2c: 9f:15:0e:b3:2a:c9:63:e6:bb:a6:21:a0:bd:73:5d:8f:48:70: 75:be:e3:9e -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/FSLQ48Wtik5Yf1Z4dzj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTFhZjY0MzA3MmExYTBiN2YxMGU4OTNiNGMxNjgxM2U5NjQ5YThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9OEDcKde9pMBNgRnD+UoXfwOhxZ UGeuwiofI693hEKrQtGaa2S/tzlZ37gxk0cCF8XKu64f23DPJdlY1KD0cWJiOWjZ R/zytgv2yRuX/lNmZAFNYJr4bZGbM4/NsiOqV+K3ZvldB9BCkwFBOqlNE4zXH7Iq sU0Hipy4Gl7Z6AqFeASan947KSrdCQc5Jqi7MnEvsF4+WJBMQ2owJqaql6G6FK1C GDZ+ksuu0b9a6E+CqJ9fUmgUVgxzMrp0SyqZcnxlP/YNYJ6xyj7Eg25Nc8mWshI2 g12tUC4ULou5ctO5gewsOifIIJVkf5shpAiZclGNbRAm3kjn0CWhSJhqawIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFGUa9kMHKhoLfxDok7TBaBPpZJqMMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvWlJyMlF3Y3FHZ3RfRU9pVHRNRm9FLWxrbW93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAaBAIAATAUAwQALY01MAwD BAS5SfADBAC5SfIwFAQCAAIwDgMFACoFR0ADBQAqBUdCMA0GCSqGSIb3DQEBCwUA A4IBAQBSkLuaAsVocujovHqSlacOlciIQ523hM+YqXBpxGlNVXtxSi7j2weUIjVU h2a/fui+IA4Wx1ICxadyYGtfNdlOU1qdpZy9zwCGnt+Xd3/c7PyuQETCW5h7GkD8 LTsf0694ax9oa2OG/ff2Glsc0pV6UkUptBaUZejuNaJ3ntTgq8gSjmpkr4DHFogj kgKG5V20PB3y+UmbWBpOd5FZgdtm7oTXYx/33pi0FSKBKtmvqxRJiK8zaVrVTjmI cOhvqgS/sFSHRImnJxP6BlG8lw6svdSblhOVH+fuzKQwZSnbTRBkyo8jLnm+8Cyf FQ6zKslj5rumIaC9c12PSHB1vuOe -----END CERTIFICATE-----Generated at Tue Feb 10 06:25:28 2026 by rpki-client