This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa File: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (raw, json) Hash identifier: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU= Subject key identifier: 67:6B:A6:5D:D8:FC:AD:72:90:1C:60:9D:E2:6B:76:14:2E:88:8D:E3 Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8 Certificate serial: 019B7CED42C5ECBD2FF5E8AB5630A4C463DB Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa Signing time: Fri 02 Jan 2026 04:18:02 +0000 ROA not before: Fri 02 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 553 IP address blocks: 134.108.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:42:c5:ec:bd:2f:f5:e8:ab:56:30:a4:c4:63:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8 Validity Not Before: Jan 2 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=676ba65dd8fcad72901c609de26b76142e888de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:91:1b:48:f3:b2:dc:58:cb:50:f8:9d:7e:8a: 47:6e:07:d8:c3:07:5d:56:03:70:cb:81:6e:30:bb: 99:90:69:0b:a2:25:09:5d:ef:9b:29:8f:d3:3e:03: 1b:c6:45:23:ec:0b:e2:82:d4:6d:6d:da:d4:3e:6b: 73:41:8c:c8:18:9e:a3:3e:89:a9:2a:a4:9d:01:2c: 98:a1:91:60:bc:bf:26:ca:74:ab:fd:01:35:84:3e: 89:96:20:40:ff:be:87:03:aa:ac:4d:1c:48:9e:76: 47:1a:3d:a6:58:f4:fb:ec:9d:ac:a4:d7:1e:e1:5e: d1:58:b7:8b:73:d0:3e:87:83:a6:67:ec:89:e9:94: 41:a7:7b:1f:34:75:95:bf:75:65:1b:0a:7b:0b:24: fb:30:6b:96:9d:25:90:57:29:5f:c9:8e:af:52:59: bb:9a:42:af:a1:e7:c4:be:96:f4:be:25:28:4d:f5: 43:c1:31:27:f1:d7:a5:94:ad:f4:3e:42:0d:2d:0a: 76:3a:15:e1:c5:fb:37:40:24:b5:d9:b3:20:48:80: 5c:9a:8f:34:a7:6c:c0:72:78:a5:f8:b2:af:43:64: 25:b0:1c:8f:be:7a:02:67:34:dd:16:c3:c3:cb:3e: 39:38:ab:99:7b:e6:be:4b:77:27:eb:e2:0d:4d:a8: 80:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6B:A6:5D:D8:FC:AD:72:90:1C:60:9D:E2:6B:76:14:2E:88:8D:E3 X509v3 Authority Key Identifier: keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.108.0.0/16 Signature Algorithm: sha256WithRSAEncryption 52:64:86:c2:5c:18:aa:8a:61:90:a4:45:e3:d3:6b:0e:13:05: 2a:cf:2d:a4:0b:16:6a:12:4c:a1:ea:c6:ea:dd:a0:b9:5f:1e: 34:bf:cd:34:1d:00:48:7b:be:e2:ee:2c:4b:08:88:98:ed:d3: 13:83:ff:24:df:d9:b3:f8:45:71:38:6a:b2:a1:49:a8:a8:b1: ea:1d:ce:c6:c2:0c:e1:f6:a8:df:14:f5:28:23:eb:75:f9:67: 1b:89:85:c5:9b:99:9f:cc:56:87:70:84:93:78:0b:81:81:64: b4:c3:3f:93:76:05:60:8a:93:6a:4e:5e:c0:d7:f2:b2:bf:0e: 0e:d6:ac:6a:9b:de:f5:c0:7f:50:b4:66:e6:35:e8:e2:fb:85: bc:77:ec:11:0c:4f:ce:e1:ec:20:7c:53:e1:06:15:ec:c2:f6: 7c:db:fd:5d:de:21:d8:93:66:ff:de:c6:81:83:c4:f7:59:13: 93:d2:de:61:70:76:71:52:0f:bf:be:63:b0:74:83:cf:1b:c3: a4:5f:01:db:51:14:e3:dd:ab:ee:e9:74:61:d6:ac:d1:3d:64: a0:c6:d1:8a:5c:57:ff:e1:ce:92:8b:a3:81:06:9b:0d:93:20: 15:51:be:54:fb:fd:cd:e5:4f:11:f2:dd:e7:d0:09:a5:db:07: 0a:3e:47:20 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt87ULF7L0v9eirVjCkxGPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDkwZWQwMDI3ZjBlMzNhNzU0YzI1OWY3ZGM4OGJiN2E3 MmZmYTgwHhcNMjYwMTAyMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzZiYTY1ZGQ4ZmNhZDcyOTAxYzYwOWRlMjZiNzYxNDJlODg4ZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JEbSPOy3FjLUPidfopHbgfYwwdd VgNwy4FuMLuZkGkLoiUJXe+bKY/TPgMbxkUj7AvigtRtbdrUPmtzQYzIGJ6jPomp KqSdASyYoZFgvL8mynSr/QE1hD6JliBA/76HA6qsTRxInnZHGj2mWPT77J2spNce 4V7RWLeLc9A+h4OmZ+yJ6ZRBp3sfNHWVv3VlGwp7CyT7MGuWnSWQVylfyY6vUlm7 mkKvoefEvpb0viUoTfVDwTEn8dellK30PkINLQp2OhXhxfs3QCS12bMgSIBcmo80 p2zAcnil+LKvQ2QlsByPvnoCZzTdFsPDyz45OKuZe+a+S3cn6+INTaiAUwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFGdrpl3Y/K1ykBxgneJrdhQuiI3jMB8GA1UdIwQY MBaAFBgJDtACfw4zp1TCWffciLt6cv+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjIt Y2ZmYWQ1MzI5MmNlLzEvWjJ1bVhkajhyWEtRSEdDZDRtdDJGQzZJamVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjItY2ZmYWQ1MzI5MmNl LzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhmwwDQYJ KoZIhvcNAQELBQADggEBAFJkhsJcGKqKYZCkRePTaw4TBSrPLaQLFmoSTKHqxurd oLlfHjS/zTQdAEh7vuLuLEsIiJjt0xOD/yTf2bP4RXE4arKhSaioseodzsbCDOH2 qN8U9Sgj63X5ZxuJhcWbmZ/MVodwhJN4C4GBZLTDP5N2BWCKk2pOXsDX8rK/Dg7W rGqb3vXAf1C0ZuY16OL7hbx37BEMT87h7CB8U+EGFezC9nzb/V3eIdiTZv/exoGD xPdZE5PS3mFwdnFSD7++Y7B0g88bw6RfAdtRFOPdq+7pdGHWrNE9ZKDG0YpcV//h zpKLo4EGmw2TIBVRvlT7/c3lTxHy3efQCaXbBwo+RyA= -----END CERTIFICATE-----Generated at Mon Feb 2 07:54:27 2026 by rpki-client