This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/zRTotKVWrti2hz-M4NRpNGRIUBM.roa File: zRTotKVWrti2hz-M4NRpNGRIUBM.roa (raw, json) Hash identifier: drdrrvfovx7gW4WJjUvbskkmL0a3nwfWPkD6SHpFoog= Subject key identifier: CD:14:E8:B4:A5:56:AE:D8:B6:87:3F:8C:E0:D4:69:34:64:48:50:13 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2CC81CF9043095D1F809270422D48 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/zRTotKVWrti2hz-M4NRpNGRIUBM.roa Signing time: Thu 01 Jan 2026 08:18:13 +0000 ROA not before: Thu 01 Jan 2026 08:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135402 IP address blocks: 89.185.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:cc:81:cf:90:43:09:5d:1f:80:92:70:42:2d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd14e8b4a556aed8b6873f8ce0d4693464485013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d1:65:d6:1c:6f:f5:a1:88:32:ed:49:67:fb: 1a:22:86:f7:7a:a5:18:e0:75:5f:6c:a5:8e:07:63: d9:7a:c7:06:5c:26:d7:45:25:bc:54:e3:44:e4:e3: 81:81:ef:6d:e9:c0:28:fa:53:1d:e9:1f:4f:17:03: c4:22:b5:09:e4:bf:40:f5:4d:d9:cc:27:94:43:18: c0:3d:3c:26:a2:9a:ac:9a:48:5f:70:47:a5:11:61: c2:f5:46:52:1c:a8:9f:37:e3:5c:f3:0a:c2:c6:b8: 5e:56:f4:72:63:dd:f2:e1:e6:8d:84:48:5b:1d:7c: 81:63:0f:be:e8:58:3b:c1:3d:1a:32:f1:d7:45:c9: cd:c4:fe:e1:23:2e:0b:c1:1b:c1:3d:c5:20:1c:5e: 82:57:d0:cd:f3:1f:91:93:38:2d:8d:3e:75:86:ae: ac:58:0a:ab:5a:e7:f4:ea:a5:cd:07:b9:d4:b3:bc: 5c:f2:b5:84:fd:f2:12:ec:35:d7:8b:e3:b2:31:50: 76:02:c3:c6:26:95:ee:5e:f3:18:87:08:8c:c6:44: b3:41:c1:da:9d:76:1d:54:a0:ed:7a:1e:ef:6e:ea: 76:4e:a1:be:91:22:42:ad:1e:56:d6:b3:8e:69:63: 50:da:30:df:eb:51:5f:84:00:3b:da:5a:76:80:25: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:14:E8:B4:A5:56:AE:D8:B6:87:3F:8C:E0:D4:69:34:64:48:50:13 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/zRTotKVWrti2hz-M4NRpNGRIUBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.22.0/24 Signature Algorithm: sha256WithRSAEncryption 35:f1:c4:9d:28:25:b3:14:e6:33:73:05:0e:0c:81:07:db:67: 61:b1:a9:d8:7b:3e:1d:97:f5:c4:33:58:3d:9e:1c:0a:9a:15: 50:b3:af:59:c1:50:23:63:aa:c6:65:e5:ca:69:30:27:61:71: 1e:04:11:0f:38:c7:29:12:f7:63:9b:78:20:cb:50:a5:f7:9b: d4:ed:9a:90:4d:9e:67:de:b1:db:b5:80:dd:2b:16:65:8e:da: f4:84:3d:e9:8c:2f:b0:e2:6f:09:ba:4f:a0:b4:2c:b0:dd:66: 00:84:6b:d2:ae:8a:40:49:2d:01:4b:c2:f7:5c:97:23:de:4a: 9c:91:25:c4:e4:04:3b:ce:87:4c:8e:1b:36:62:32:1f:39:38: c1:46:85:73:f9:83:eb:b4:7b:15:47:91:6b:84:d0:e4:49:df: 32:2f:64:0e:80:f4:f3:b4:76:59:2b:4d:5c:e8:84:7b:65:bb: 32:44:d8:80:ef:65:81:59:dd:3a:77:0b:ad:87:7b:67:bd:28: 2e:83:89:b6:28:ab:13:74:ec:85:93:11:7c:d0:2e:8d:36:4c: d2:d3:63:4d:89:ba:2c:79:49:d7:43:85:54:c6:65:1c:47:8f: 9d:db:72:f9:c1:a9:6a:0a:71:9d:3e:dc:58:4c:87:e2:99:37: 01:d6:ca:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osyBz5BDCV0fgJJwQi1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDE0ZThiNGE1NTZhZWQ4YjY4NzNmOGNlMGQ0NjkzNDY0NDg1MDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dFl1hxv9aGIMu1JZ/saIob3eqUY 4HVfbKWOB2PZescGXCbXRSW8VONE5OOBge9t6cAo+lMd6R9PFwPEIrUJ5L9A9U3Z zCeUQxjAPTwmopqsmkhfcEelEWHC9UZSHKifN+Nc8wrCxrheVvRyY93y4eaNhEhb HXyBYw++6Fg7wT0aMvHXRcnNxP7hIy4LwRvBPcUgHF6CV9DN8x+RkzgtjT51hq6s WAqrWuf06qXNB7nUs7xc8rWE/fIS7DXXi+OyMVB2AsPGJpXuXvMYhwiMxkSzQcHa nXYdVKDteh7vbup2TqG+kSJCrR5W1rOOaWNQ2jDf61FfhAA72lp2gCUbSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM0U6LSlVq7Ytoc/jODUaTRkSFATMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvelJUb3RLVldydGkyaHotTTROUnBOR1JJVUJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkWMA0G CSqGSIb3DQEBCwUAA4IBAQA18cSdKCWzFOYzcwUODIEH22dhsanYez4dl/XEM1g9 nhwKmhVQs69ZwVAjY6rGZeXKaTAnYXEeBBEPOMcpEvdjm3ggy1Cl95vU7ZqQTZ5n 3rHbtYDdKxZljtr0hD3pjC+w4m8Juk+gtCyw3WYAhGvSropASS0BS8L3XJcj3kqc kSXE5AQ7zodMjhs2YjIfOTjBRoVz+YPrtHsVR5FrhNDkSd8yL2QOgPTztHZZK01c 6IR7ZbsyRNiA72WBWd06dwuth3tnvSgug4m2KKsTdOyFkxF80C6NNkzS02NNibos eUnXQ4VUxmUcR4+d23L5walqCnGdPtxYTIfimTcB1sqS -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:17 2026 by rpki-client