This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZlUNYWXa8jrVtZncGMjmLnerO3s.roa File: ZlUNYWXa8jrVtZncGMjmLnerO3s.roa (raw, json) Hash identifier: 7Xkj22PpqD4ht0IcciFn/xBJTWLo4R5N/rq4h7LyUkY= Subject key identifier: 66:55:0D:61:65:DA:F2:3A:D5:B5:99:DC:18:C8:E6:2E:77:AB:3B:7B Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13668F21D3998DBC6D8AC47CCBFF36 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZlUNYWXa8jrVtZncGMjmLnerO3s.roa Signing time: Fri 02 Jan 2026 00:20:04 +0000 ROA not before: Fri 02 Jan 2026 00:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 45.8.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:66:8f:21:d3:99:8d:bc:6d:8a:c4:7c:cb:ff:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66550d6165daf23ad5b599dc18c8e62e77ab3b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:f4:f0:6b:3e:55:72:b1:06:0c:ff:eb:90: 1c:8c:9b:10:53:c0:00:82:c9:7c:c2:c7:f5:df:37: fb:6d:b1:c9:dc:ad:fc:08:29:c4:4c:63:b5:65:35: ea:ab:98:31:ff:38:60:65:c0:05:87:4b:93:15:58: a8:85:03:19:4e:11:58:c2:59:af:f1:f2:87:36:19: 59:50:9e:37:4c:05:22:4f:73:0c:14:91:b9:af:1f: ef:b0:1d:84:09:3a:73:78:67:49:10:3f:e7:4f:2e: 1b:19:a8:9f:af:03:a1:0d:91:95:76:26:35:f1:f6: 3e:8d:cf:34:3d:cb:e0:17:25:64:43:c5:02:29:04: ac:b5:0d:9a:ec:0a:87:ce:ad:09:47:e5:6c:98:b1: 79:31:a6:5a:74:8c:33:f7:3c:58:e3:c8:be:3e:48: 6d:21:20:7d:b6:ea:6f:64:31:ec:9f:d6:f6:2c:08: 05:25:f8:b5:35:fd:b1:3b:9f:ce:47:1c:19:61:99: c5:da:f7:8c:99:a8:f1:40:48:0a:a8:49:6d:ce:58: 76:a4:fd:73:2a:a4:f7:40:12:ea:55:1e:46:07:3c: 37:f2:73:1c:75:64:64:1b:80:52:e6:72:6b:df:16: bf:1c:d1:be:e1:9c:cd:8b:34:ea:ef:f9:35:fc:5b: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:55:0D:61:65:DA:F2:3A:D5:B5:99:DC:18:C8:E6:2E:77:AB:3B:7B X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZlUNYWXa8jrVtZncGMjmLnerO3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.22.0/24 Signature Algorithm: sha256WithRSAEncryption b1:2d:ef:f8:4f:09:af:ac:f2:36:bc:67:e5:92:11:da:e2:66: 8e:be:bf:eb:3e:56:18:11:cf:8c:5c:aa:be:ae:b0:2d:04:c1: 87:08:ea:b0:12:6d:1c:13:72:e1:72:1e:f4:bb:3d:f9:32:e5: d0:c0:e2:b0:f7:f9:ff:04:65:61:a3:3b:92:06:82:4a:11:32: e2:47:a2:9b:5d:52:6d:4d:52:79:65:97:30:97:38:23:a5:48: 1a:55:b4:ba:37:8d:a4:84:12:5f:85:89:c5:a4:2b:f5:bb:83: 8a:cc:c5:62:91:76:bb:3d:7e:1b:d1:79:3b:bb:83:95:bc:70: 52:64:a1:aa:f8:dd:dc:69:4d:bf:a9:79:b9:ed:a8:5b:7c:e8: 4b:ac:9e:66:78:f4:6a:8b:16:d5:18:53:d8:74:79:60:f8:c8: 06:d4:fb:c7:f2:85:8b:4d:f4:da:06:2d:00:5a:a2:03:5e:ea: 11:4b:ab:d0:93:43:60:86:3a:22:71:0e:e3:8b:71:0c:a5:3f: ae:96:45:b9:7b:ee:77:af:d8:f6:50:c4:57:53:ad:94:56:6a: 40:f8:71:28:ff:c5:d7:30:e7:79:a1:56:fe:ec:1f:b9:6c:0f: 4d:7f:9b:68:b4:6b:eb:04:44:7e:27:7d:4f:c0:74:63:7e:9a: 19:e4:9a:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2aPIdOZjbxtisR8y/82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjU1MGQ2MTY1ZGFmMjNhZDViNTk5ZGMxOGM4ZTYyZTc3YWIzYjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4T08Gs+VXKxBgz/65AcjJsQU8AA gsl8wsf13zf7bbHJ3K38CCnETGO1ZTXqq5gx/zhgZcAFh0uTFViohQMZThFYwlmv 8fKHNhlZUJ43TAUiT3MMFJG5rx/vsB2ECTpzeGdJED/nTy4bGaifrwOhDZGVdiY1 8fY+jc80PcvgFyVkQ8UCKQSstQ2a7AqHzq0JR+VsmLF5MaZadIwz9zxY48i+Pkht ISB9tupvZDHsn9b2LAgFJfi1Nf2xO5/ORxwZYZnF2veMmajxQEgKqEltzlh2pP1z KqT3QBLqVR5GBzw38nMcdWRkG4BS5nJr3xa/HNG+4ZzNizTq7/k1/Ft3mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGZVDWFl2vI61bWZ3BjI5i53qzt7MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvWmxVTllXWGE4anJWdFpuY0dNam1MbmVyTzNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgWMA0G CSqGSIb3DQEBCwUAA4IBAQCxLe/4TwmvrPI2vGflkhHa4maOvr/rPlYYEc+MXKq+ rrAtBMGHCOqwEm0cE3Lhch70uz35MuXQwOKw9/n/BGVhozuSBoJKETLiR6KbXVJt TVJ5ZZcwlzgjpUgaVbS6N42khBJfhYnFpCv1u4OKzMVikXa7PX4b0Xk7u4OVvHBS ZKGq+N3caU2/qXm57ahbfOhLrJ5mePRqixbVGFPYdHlg+MgG1PvH8oWLTfTaBi0A WqIDXuoRS6vQk0NghjoicQ7ji3EMpT+ulkW5e+53r9j2UMRXU62UVmpA+HEo/8XX MOd5oVb+7B+5bA9Nf5totGvrBER+J31PwHRjfpoZ5JpG -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:19 2026 by rpki-client