This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/00-zPMP1I2rJTW-q2mtEMKbzbeM.roa File: 00-zPMP1I2rJTW-q2mtEMKbzbeM.roa (raw, json) Hash identifier: cgTFjGaJk/3//F/TehXjKG2TiYBHQ5bxuR7MOVNN8e0= Subject key identifier: D3:4F:B3:3C:C3:F5:23:6A:C9:4D:6F:AA:DA:6B:44:30:A6:F3:6D:E3 Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4 Certificate serial: 019B7AC95BD5892EB3B7FA17C12A4A0533FD Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/00-zPMP1I2rJTW-q2mtEMKbzbeM.roa Signing time: Thu 01 Jan 2026 18:19:35 +0000 ROA not before: Thu 01 Jan 2026 18:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12496 IP address blocks: 91.135.0.0/20 maxlen: 20 93.89.128.0/20 maxlen: 20 212.69.32.0/19 maxlen: 19 217.144.80.0/20 maxlen: 20 2a02:390::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:5b:d5:89:2e:b3:b7:fa:17:c1:2a:4a:05:33:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4 Validity Not Before: Jan 1 18:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d34fb33cc3f5236ac94d6faada6b4430a6f36de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:24:e0:7d:24:81:f1:67:22:4c:e2:eb:dd: 79:0b:00:eb:f8:04:2a:b8:77:72:ce:50:33:6c:99: 50:4c:47:8c:43:df:d8:a5:7b:ac:c1:4c:fa:9b:b9: ca:32:4f:4d:94:5d:b0:12:77:95:b1:57:ef:00:aa: 2b:ea:86:82:59:5a:db:5d:c8:08:ca:45:49:f1:6c: 25:8c:41:e1:13:28:0b:fa:75:bc:11:52:7d:cf:61: e8:9e:9b:d9:2c:b9:3b:48:ab:40:08:cd:75:08:c7: 41:3b:ad:92:08:ff:7d:b4:10:d2:d9:18:49:14:d0: 9a:50:ff:39:9d:b6:35:5d:ed:93:6f:7c:eb:01:8d: c2:1e:fb:20:8f:69:25:b3:2b:b4:2d:37:36:94:b4: a4:85:d2:ed:2e:d6:d9:4d:53:ae:1a:ab:7d:6f:ff: cc:59:5b:ee:00:31:70:94:6b:17:96:9f:52:7d:43: 40:fb:4f:03:83:6e:c8:09:14:f1:50:98:b2:ce:de: 9e:7f:94:5d:0c:c7:87:89:e1:e8:16:dd:52:3f:57: 11:92:aa:48:7a:e5:1d:f2:a8:d2:83:ae:09:28:28: 76:69:25:a1:8b:86:d2:69:a0:0c:1f:70:90:af:0b: 53:33:5f:7f:43:b5:a6:77:d5:e2:74:fc:96:76:96: 7b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4F:B3:3C:C3:F5:23:6A:C9:4D:6F:AA:DA:6B:44:30:A6:F3:6D:E3 X509v3 Authority Key Identifier: keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/00-zPMP1I2rJTW-q2mtEMKbzbeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.135.0.0/20 93.89.128.0/20 212.69.32.0/19 217.144.80.0/20 IPv6: 2a02:390::/32 Signature Algorithm: sha256WithRSAEncryption 62:77:23:b7:13:f3:b0:bc:ef:c0:88:cd:b6:37:8d:4b:71:66: 00:b8:cc:6b:04:c9:a5:d0:bc:32:c1:14:72:60:62:31:bc:a7: 33:2f:ae:b5:0c:a7:6f:b4:b3:b5:17:6a:e7:05:1a:c6:a8:7f: fb:9f:f9:1a:71:56:93:64:e2:3f:61:aa:17:18:00:63:4b:a8: 4d:62:b7:b2:37:d3:4b:b7:20:14:c8:85:f8:cc:bf:ae:9b:6f: 62:e9:4e:a0:dd:f5:08:e3:23:af:0b:3c:e5:85:87:6b:14:00: d8:f1:51:73:69:62:98:56:48:2a:cc:3b:de:58:92:2d:08:9e: 0d:dc:45:52:eb:3e:da:b4:76:c0:dc:32:51:51:54:2b:79:6e: b1:f7:5a:90:d2:9c:39:b7:d1:97:31:7d:f6:0f:8b:f5:ce:7d: 32:24:39:f7:1d:f2:48:52:42:2b:d6:97:30:49:93:47:6c:d8: 37:87:af:07:22:27:06:d9:d4:42:de:ac:d9:a4:d3:42:cc:ae: 52:5e:05:21:f8:7c:51:36:02:89:96:c0:df:a6:b8:f6:68:eb: a7:b4:1c:ec:ed:ac:31:e9:a3:50:3c:5d:6e:34:9e:3e:14:da: 4d:07:d0:3e:f1:26:8c:18:fc:34:d9:b7:4d:94:5c:b6:45:5a: 46:aa:55:b9 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6yVvViS6zt/oXwSpKBTP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMGFlZjM5NjM5NGVhNTk1MGRjNzk1NmFiMWJmNDkxMzY0 NjIyYTQwHhcNMjYwMTAxMTgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzRmYjMzY2MzZjUyMzZhYzk0ZDZmYWFkYTZiNDQzMGE2ZjM2ZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsIk4H0kgfFnIkzi6915CwDr+AQq uHdyzlAzbJlQTEeMQ9/YpXuswUz6m7nKMk9NlF2wEneVsVfvAKor6oaCWVrbXcgI ykVJ8WwljEHhEygL+nW8EVJ9z2HonpvZLLk7SKtACM11CMdBO62SCP99tBDS2RhJ FNCaUP85nbY1Xe2Tb3zrAY3CHvsgj2klsyu0LTc2lLSkhdLtLtbZTVOuGqt9b//M WVvuADFwlGsXlp9SfUNA+08Dg27ICRTxUJiyzt6ef5RdDMeHieHoFt1SP1cRkqpI euUd8qjSg64JKCh2aSWhi4bSaaAMH3CQrwtTM19/Q7Wmd9XidPyWdpZ7rQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNNPszzD9SNqyU1vqtprRDCm823jMB8GA1UdIwQY MBaAFMMK7zljlOpZUNx5Vqsb9JE2RiKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3dydk9XT1U2bGxRM0hsV3F4djBrVFpHSXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZGM5YTEtNTg5Mi00NGQxLWI0OTAt MjY3ZGE5MWZiZmY4LzEvMDAtelBNUDFJMnJKVFctcTJtdEVNS2J6YmVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kZGM5YTEtNTg5Mi00NGQxLWI0OTAtMjY3ZGE5MWZiZmY4 LzEvd3dydk9XT1U2bGxRM0hsV3F4djBrVFpHSXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEW4cAAwQE XVmAAwQF1EUgAwQE2ZBQMA0EAgACMAcDBQAqAgOQMA0GCSqGSIb3DQEBCwUAA4IB AQBidyO3E/OwvO/AiM22N41LcWYAuMxrBMml0LwywRRyYGIxvKczL661DKdvtLO1 F2rnBRrGqH/7n/kacVaTZOI/YaoXGABjS6hNYreyN9NLtyAUyIX4zL+um29i6U6g 3fUI4yOvCzzlhYdrFADY8VFzaWKYVkgqzDveWJItCJ4N3EVS6z7atHbA3DJRUVQr eW6x91qQ0pw5t9GXMX32D4v1zn0yJDn3HfJIUkIr1pcwSZNHbNg3h68HIicG2dRC 3qzZpNNCzK5SXgUh+HxRNgKJlsDfprj2aOuntBzs7awx6aNQPF1uNJ4+FNpNB9A+ 8SaMGPw02bdNlFy2RVpGqlW5 -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:20 2026 by rpki-client