This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jzwHG9vl8IDuxQ37fB2oLjkWqxQ.roa File: jzwHG9vl8IDuxQ37fB2oLjkWqxQ.roa (raw, json) Hash identifier: EGmkNYt8APMosYRmaC4PdOZSr/neoDyskOdsyPN78sU= Subject key identifier: 8F:3C:07:1B:DB:E5:F0:80:EE:C5:0D:FB:7C:1D:A8:2E:39:16:AB:14 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E33026026289760B8EDC096495BEF Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jzwHG9vl8IDuxQ37fB2oLjkWqxQ.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132335 IP address blocks: 45.132.15.0/24 maxlen: 24 2a06:7a02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:33:02:60:26:28:97:60:b8:ed:c0:96:49:5b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f3c071bdbe5f080eec50dfb7c1da82e3916ab14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:07:67:4b:a5:d7:56:ce:52:80:04:1a:86: bc:5b:97:4d:d2:9d:e7:9d:56:64:13:d1:36:18:64: ca:e4:15:7a:55:12:2a:e4:3b:94:f4:b7:a1:22:7d: e9:8a:fa:46:eb:ef:ed:88:3a:11:24:8f:aa:94:c1: 0d:1f:0b:05:f8:16:41:0f:b7:4e:fa:cb:7a:02:4b: c1:fd:33:a1:2b:b0:c8:9d:fc:3b:e5:97:0a:12:0f: f9:1a:71:d1:58:72:33:2e:c8:7b:5b:9c:80:30:0a: d6:73:6b:e0:df:f2:42:1a:3a:80:b0:b3:b5:a0:bb: 62:0e:40:e2:25:c8:be:95:0d:23:17:d4:c9:0f:5c: 55:eb:07:9e:ec:b0:f0:84:ce:8f:72:28:77:34:d3: 30:01:b9:41:0f:39:4f:dc:82:5c:b5:87:b0:fb:eb: 1d:0c:f6:ee:26:1a:65:31:ad:4b:94:b1:dd:67:23: 4e:4f:8a:ea:b6:4b:05:fa:8d:77:16:6b:16:95:31: 32:d8:48:25:1a:94:04:24:07:16:53:a4:6f:0b:a2: fe:b4:e1:dc:2f:f7:b2:f2:2e:d5:08:51:ea:91:39: a8:4f:9f:b7:db:bc:66:bc:30:ef:7b:e4:6d:6f:b3: bf:66:3e:28:ea:70:4b:57:77:b7:c9:65:1e:44:66: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3C:07:1B:DB:E5:F0:80:EE:C5:0D:FB:7C:1D:A8:2E:39:16:AB:14 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jzwHG9vl8IDuxQ37fB2oLjkWqxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.15.0/24 IPv6: 2a06:7a02::/48 Signature Algorithm: sha256WithRSAEncryption 79:b4:4d:45:e4:0f:05:72:aa:f0:00:17:c6:c2:b7:a2:b9:7e: 1b:fc:57:f2:97:0b:5a:bb:16:f3:25:f3:dc:ca:b2:33:6d:58: 2d:6f:a8:c1:93:42:0e:a0:b7:57:a3:c6:d7:05:ea:e9:4c:17: 00:af:a5:13:b7:31:74:19:f8:41:9c:b9:6b:91:6e:ad:14:01: 2d:56:a3:47:ca:4c:a0:e8:0a:d1:53:61:38:15:74:7a:d6:c6: 9e:a3:e7:2b:53:c1:a1:4d:b9:07:37:ee:06:1a:03:d0:a8:b4: d3:1a:36:27:95:6b:93:f2:c8:68:ee:e1:96:e5:d2:30:0c:ca: a1:fd:dc:d0:1b:24:89:1d:03:b1:fb:86:2d:fc:3b:85:3c:95: 87:40:38:1d:69:c1:96:fc:4c:4e:03:e9:1c:3f:9e:99:83:dd: 52:bf:ae:96:52:0d:72:e6:4f:d0:45:c6:7c:6e:4c:c9:5e:82: 85:75:ab:5f:73:89:18:4e:fd:5b:3d:b4:8d:92:f6:85:52:70: 87:8b:7b:4e:06:89:a0:2d:c8:78:3a:2c:8d:23:5d:40:3e:07: 35:a3:df:52:87:bc:0e:36:79:40:8d:19:f6:4e:c4:a5:84:e2: 83:eb:57:fc:66:7b:41:d0:d2:4c:a2:30:1c:eb:c9:66:e6:0f: d2:74:19:7d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fjMCYCYol2C47cCWSVvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjNjMDcxYmRiZTVmMDgwZWVjNTBkZmI3YzFkYTgyZTM5MTZhYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeAHZ0ul11bOUoAEGoa8W5dN0p3n nVZkE9E2GGTK5BV6VRIq5DuU9LehIn3pivpG6+/tiDoRJI+qlMENHwsF+BZBD7dO +st6AkvB/TOhK7DInfw75ZcKEg/5GnHRWHIzLsh7W5yAMArWc2vg3/JCGjqAsLO1 oLtiDkDiJci+lQ0jF9TJD1xV6wee7LDwhM6Pcih3NNMwAblBDzlP3IJctYew++sd DPbuJhplMa1LlLHdZyNOT4rqtksF+o13FmsWlTEy2EglGpQEJAcWU6RvC6L+tOHc L/ey8i7VCFHqkTmoT5+327xmvDDve+Rtb7O/Zj4o6nBLV3e3yWUeRGYViwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFI88Bxvb5fCA7sUN+3wdqC45FqsUMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvanp3SEc5dmw4SUR1eFEzN2ZCMm9MamtXcXhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALYQPMA8E AgACMAkDBwAqBnoCAAAwDQYJKoZIhvcNAQELBQADggEBAHm0TUXkDwVyqvAAF8bC t6K5fhv8V/KXC1q7FvMl89zKsjNtWC1vqMGTQg6gt1ejxtcF6ulMFwCvpRO3MXQZ +EGcuWuRbq0UAS1Wo0fKTKDoCtFTYTgVdHrWxp6j5ytTwaFNuQc37gYaA9CotNMa NieVa5PyyGju4Zbl0jAMyqH93NAbJIkdA7H7hi38O4U8lYdAOB1pwZb8TE4D6Rw/ npmD3VK/rpZSDXLmT9BFxnxuTMlegoV1q19ziRhO/Vs9tI2S9oVScIeLe04GiaAt yHg6LI0jXUA+BzWj31KHvA42eUCNGfZOxKWE4oPrV/xme0HQ0kyiMBzryWbmD9J0 GX0= -----END CERTIFICATE-----Generated at Mon Jan 19 20:28:19 2026 by rpki-client