This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa File: ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa (raw, json) Hash identifier: /yuwN8mjkUUOdBbxmmKWCbuEc9CKVHYeB+reIdnpnsM= Subject key identifier: 64:34:B0:68:ED:B3:BB:6A:A9:88:DA:10:75:F1:CE:F5:FF:FF:A9:71 Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1 Certificate serial: 019B7F15E46113B582215D8F254A8BE2D3C3 Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64396 IP address blocks: 46.229.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e4:61:13:b5:82:21:5d:8f:25:4a:8b:e2:d3:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6434b068edb3bb6aa988da1075f1cef5ffffa971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:90:c1:27:98:a5:c9:ba:6a:8e:fd:f5:e5: 66:8a:5f:b1:01:92:60:31:48:d9:58:60:b4:6f:e1: 53:c2:ae:68:17:45:5b:f5:3c:c5:27:fc:6a:53:06: 28:a5:1c:66:03:80:c8:59:15:f5:6a:36:cf:b3:45: 8c:7a:d2:a9:00:7f:3f:71:eb:51:5d:f5:5a:8e:74: 36:35:64:8a:c9:fd:ba:ab:5e:b2:43:4d:c3:a0:50: c7:d0:0b:52:b8:a4:57:66:4a:d1:e7:93:ec:df:90: a9:83:32:ab:3b:97:2d:67:10:f3:1a:2c:76:04:22: e3:ea:74:51:ed:57:95:05:4a:64:81:5a:76:42:51: 52:07:19:e0:b0:96:08:63:39:af:8b:30:58:aa:28: 56:40:43:94:7d:e3:ac:b1:7a:6b:71:96:24:61:18: 90:24:4b:f0:4a:0f:69:c7:54:9f:3e:f7:bd:7b:31: 35:e9:55:c0:14:7e:55:11:6b:e8:84:db:31:9d:cd: 63:2e:18:f5:31:1f:2e:4e:c1:ce:43:e9:e7:ea:fc: ff:1b:31:35:cd:74:2d:27:b2:56:c7:34:e2:85:da: 74:10:30:b7:75:20:fa:35:8c:27:75:13:bf:dc:2e: 7b:5b:f8:3e:e4:fd:08:92:da:e3:2c:9f:d4:84:80: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:34:B0:68:ED:B3:BB:6A:A9:88:DA:10:75:F1:CE:F5:FF:FF:A9:71 X509v3 Authority Key Identifier: keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.8.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:7c:ad:44:66:b7:4f:f2:9e:18:f3:2e:58:f8:12:7a:69:0b: 68:7f:f2:76:64:a1:5f:46:e1:70:97:6d:7e:cc:8f:77:e2:25: 1b:cb:10:2c:2e:32:05:f4:ad:d4:c4:be:09:5d:7b:ca:10:37: 8c:8f:fb:61:99:68:87:8a:22:a4:58:c0:77:3f:11:12:3c:eb: 5e:7d:c9:27:4d:b4:38:d7:9d:19:43:fa:35:67:17:a4:b4:3f: ef:47:d0:c2:5e:23:a3:58:89:24:fe:fd:af:eb:10:94:dd:b4: 16:14:ce:d4:b2:d0:37:88:39:d7:33:95:db:01:89:27:7b:3f: 45:64:b1:90:9b:87:a6:8a:de:de:4f:81:aa:e9:7e:43:90:48: f9:36:e9:f2:16:9f:ea:3c:02:0c:cc:2c:2d:c5:dc:4e:cc:9f: 9c:35:78:c6:69:8d:e2:75:5e:87:fd:58:b1:9f:eb:93:96:82: 52:3a:ae:92:82:77:0a:21:5b:9f:47:ac:f9:d2:87:32:d7:46: 9d:51:be:72:a6:60:11:fc:f8:85:a7:11:73:09:c8:b0:2c:e7: 6d:34:5c:f2:53:95:e4:97:07:dc:f1:5b:c2:f0:dc:f9:6e:5b: d6:c1:39:95:d7:78:a3:ad:8c:43:38:97:87:f6:ff:17:30:b6: 39:1f:38:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeRhE7WCIV2PJUqL4tPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi MjczYTEwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDM0YjA2OGVkYjNiYjZhYTk4OGRhMTA3NWYxY2VmNWZmZmZhOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yiQwSeYpcm6ao799eVmil+xAZJg MUjZWGC0b+FTwq5oF0Vb9TzFJ/xqUwYopRxmA4DIWRX1ajbPs0WMetKpAH8/cetR XfVajnQ2NWSKyf26q16yQ03DoFDH0AtSuKRXZkrR55Ps35CpgzKrO5ctZxDzGix2 BCLj6nRR7VeVBUpkgVp2QlFSBxngsJYIYzmvizBYqihWQEOUfeOssXprcZYkYRiQ JEvwSg9px1SfPve9ezE16VXAFH5VEWvohNsxnc1jLhj1MR8uTsHOQ+nn6vz/GzE1 zXQtJ7JWxzTihdp0EDC3dSD6NYwndRO/3C57W/g+5P0IktrjLJ/UhIB52QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQ0sGjts7tqqYjaEHXxzvX//6lxMB8GA1UdIwQY MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt MTNlZDYzM2Y5MjJhLzEvWkRTd2FPMnp1MnFwaU5vUWRmSE85Zl9fcVhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLuUIMA0G CSqGSIb3DQEBCwUAA4IBAQBefK1EZrdP8p4Y8y5Y+BJ6aQtof/J2ZKFfRuFwl21+ zI934iUbyxAsLjIF9K3UxL4JXXvKEDeMj/thmWiHiiKkWMB3PxESPOtefcknTbQ4 150ZQ/o1ZxektD/vR9DCXiOjWIkk/v2v6xCU3bQWFM7UstA3iDnXM5XbAYknez9F ZLGQm4emit7eT4Gq6X5DkEj5NunyFp/qPAIMzCwtxdxOzJ+cNXjGaY3idV6H/Vix n+uTloJSOq6SgncKIVufR6z50ocy10adUb5ypmAR/PiFpxFzCciwLOdtNFzyU5Xk lwfc8VvC8Nz5blvWwTmV13ijrYxDOJeH9v8XMLY5HzhE -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:52 2026 by rpki-client