This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ZN513tQIM1bh9MB6WlUHJsqhKBw.roa File: ZN513tQIM1bh9MB6WlUHJsqhKBw.roa (raw, json) Hash identifier: Eil/ELDpihwKLEqbwQn6tCz2JqqPg7+khNqr90zxyB0= Subject key identifier: 64:DE:75:DE:D4:08:33:56:E1:F4:C0:7A:5A:55:07:26:CA:A1:28:1C Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4964E607475A36C868AB8EDB6E504 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ZN513tQIM1bh9MB6WlUHJsqhKBw.roa Signing time: Thu 01 Jan 2026 22:19:02 +0000 ROA not before: Thu 01 Jan 2026 22:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49569 IP address blocks: 45.129.238.0/23 maxlen: 23 45.129.238.0/24 maxlen: 24 45.129.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:96:4e:60:74:75:a3:6c:86:8a:b8:ed:b6:e5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64de75ded4083356e1f4c07a5a550726caa1281c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a9:70:7c:ea:b0:84:66:ce:f2:71:39:b5:00: cb:bb:db:bf:34:59:19:8c:b3:8d:1e:7e:64:00:bf: 40:af:ca:07:48:22:85:7c:b9:cc:3e:5d:0e:9c:f0: fe:2d:44:a9:31:64:25:a6:00:5e:17:45:f9:e8:4f: 36:25:62:18:ef:34:cb:0e:f0:d2:56:39:18:08:49: b3:50:87:07:09:1a:c8:6f:25:ed:f9:d5:b0:61:61: 8b:67:e4:82:64:8b:96:00:fa:72:6b:cd:9a:e8:a5: ed:36:b8:6c:1d:15:3a:0a:d2:68:4f:63:06:98:0b: 9d:0f:54:c4:ba:df:35:83:16:79:19:83:b9:32:ec: 84:ae:db:95:cc:a8:64:96:34:7a:55:c6:58:11:30: ec:1a:39:79:71:1a:74:f0:44:ed:15:68:ec:85:2b: 9e:2f:eb:2a:f3:1c:5e:48:a2:b9:f8:a1:8c:1e:51: 1f:75:e0:0d:68:c8:c0:ea:ea:3a:ee:14:92:96:ef: cd:ed:7b:fb:f0:f7:d1:10:a7:2a:5e:8d:32:d0:27: 5d:13:b8:ee:04:9d:5d:20:54:2a:d3:f5:0e:00:b7: 94:7f:76:cd:b5:84:e7:ac:36:d0:fe:50:1b:eb:8e: b0:d6:af:c6:bf:10:35:6b:73:a7:8c:72:ad:c0:8f: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DE:75:DE:D4:08:33:56:E1:F4:C0:7A:5A:55:07:26:CA:A1:28:1C X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ZN513tQIM1bh9MB6WlUHJsqhKBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.238.0/23 Signature Algorithm: sha256WithRSAEncryption 41:38:9c:a5:bf:7e:85:31:58:35:76:ca:98:f0:83:2c:77:8f: eb:7a:8c:99:45:bf:e1:a0:83:c3:0c:91:9c:ad:b0:ab:75:f0: 0d:e4:34:65:88:00:24:7f:7c:ca:8f:d4:ed:ac:a4:29:13:d0: 8e:c8:44:27:dc:c6:88:43:37:6d:8d:d0:c4:1c:1b:42:3c:be: 15:1a:82:27:76:2a:59:6b:f5:37:4f:ed:5c:34:6e:a1:d5:f2: 7d:37:be:0b:bd:c0:02:c9:a3:25:3d:f2:c8:eb:0e:2e:6e:be: e4:e2:68:46:bc:c6:b8:cd:4d:c2:55:b6:97:97:09:0a:40:03: be:c9:f5:25:b0:4b:5e:d0:17:53:f5:23:6b:e6:92:e2:55:5e: d0:e2:1a:2c:9e:55:84:d6:a1:a0:60:b9:38:eb:7a:5f:4b:85: 50:e4:d6:c1:ea:79:1d:46:2b:4d:a1:a9:b5:7d:12:57:9c:c1: 07:88:13:bb:45:67:04:91:8b:af:1e:0c:10:a2:03:5e:01:90: 71:00:18:b7:c8:a2:ac:13:6b:34:0d:5e:38:92:85:cc:63:94: 5f:42:9d:04:a5:d2:c3:f6:55:09:72:40:9c:0f:7f:2b:72:24: 57:80:75:c2:1b:79:16:f6:09:15:b9:74:75:62:a0:be:ea:c4: c0:af:df:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pJZOYHR1o2yGirjttuUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGRlNzVkZWQ0MDgzMzU2ZTFmNGMwN2E1YTU1MDcyNmNhYTEyODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8alwfOqwhGbO8nE5tQDLu9u/NFkZ jLONHn5kAL9Ar8oHSCKFfLnMPl0OnPD+LUSpMWQlpgBeF0X56E82JWIY7zTLDvDS VjkYCEmzUIcHCRrIbyXt+dWwYWGLZ+SCZIuWAPpya82a6KXtNrhsHRU6CtJoT2MG mAudD1TEut81gxZ5GYO5MuyErtuVzKhkljR6VcZYETDsGjl5cRp08ETtFWjshSue L+sq8xxeSKK5+KGMHlEfdeANaMjA6uo67hSSlu/N7Xv78PfREKcqXo0y0CddE7ju BJ1dIFQq0/UOALeUf3bNtYTnrDbQ/lAb646w1q/GvxA1a3OnjHKtwI/1TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGTedd7UCDNW4fTAelpVBybKoSgcMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvWk41MTN0UUlNMWJoOU1CNldsVUhKc3FoS0J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYHuMA0G CSqGSIb3DQEBCwUAA4IBAQBBOJylv36FMVg1dsqY8IMsd4/reoyZRb/hoIPDDJGc rbCrdfAN5DRliAAkf3zKj9TtrKQpE9COyEQn3MaIQzdtjdDEHBtCPL4VGoIndipZ a/U3T+1cNG6h1fJ9N74LvcACyaMlPfLI6w4ubr7k4mhGvMa4zU3CVbaXlwkKQAO+ yfUlsEte0BdT9SNr5pLiVV7Q4hosnlWE1qGgYLk463pfS4VQ5NbB6nkdRitNoam1 fRJXnMEHiBO7RWcEkYuvHgwQogNeAZBxABi3yKKsE2s0DV44koXMY5RfQp0EpdLD 9lUJckCcD38rciRXgHXCG3kW9gkVuXR1YqC+6sTAr9+R -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:48 2026 by rpki-client