This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/zposQW8-Ml33uc3ENu1a83hxjEI.roa File: zposQW8-Ml33uc3ENu1a83hxjEI.roa (raw, json) Hash identifier: aFqmx16M5gCNIMqJZ5eqfmDRHZVtOgPSXQjK2JfuQ3k= Subject key identifier: CE:9A:2C:41:6F:3E:32:5D:F7:B9:CD:C4:36:ED:5A:F3:78:71:8C:42 Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4 Certificate serial: 019B7CEDA555C67669A984B2853BC6B6A9E3 Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/zposQW8-Ml33uc3ENu1a83hxjEI.roa Signing time: Fri 02 Jan 2026 04:18:27 +0000 ROA not before: Fri 02 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50297 IP address blocks: 185.110.132.0/24 maxlen: 24 193.200.209.0/24 maxlen: 24 2a06:5600:28f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a5:55:c6:76:69:a9:84:b2:85:3b:c6:b6:a9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4 Validity Not Before: Jan 2 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce9a2c416f3e325df7b9cdc436ed5af378718c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:95:3b:b9:22:3f:e7:92:d9:76:d3:7f:ff: c1:80:bd:6e:f0:31:52:8d:5a:4a:2e:0c:41:0c:98: 84:e2:cc:73:87:e1:1c:f1:fa:21:89:db:63:27:dd: 55:96:db:65:a0:73:cc:98:91:05:23:7f:26:b9:fc: 08:0d:fc:5d:ed:45:cc:65:b5:a9:89:ba:58:ed:07: ac:72:1b:71:b3:b5:52:0e:87:cf:94:74:b8:5c:60: 23:00:3f:af:6e:31:f3:c8:de:03:a8:c3:af:5c:44: 9d:6d:e4:b5:a5:66:9e:f7:10:a6:02:81:00:25:01: 19:53:03:36:c4:4e:2e:e0:7a:39:24:02:d3:1f:8a: 16:ca:af:f2:25:eb:55:d2:b4:a4:48:57:5f:cb:35: 28:6b:a7:50:86:00:9d:43:7d:0a:6e:5b:b1:43:4e: 7a:e5:fb:93:c1:51:4a:e3:aa:6a:d6:db:ad:a9:d7: 9c:43:4c:00:a2:94:32:24:01:27:63:f6:58:6e:34: 20:b0:d8:2d:e5:f7:34:32:39:28:da:19:21:a9:5b: fb:36:c9:06:62:c6:c2:65:a5:39:40:a6:e1:7a:a4: a1:42:e8:75:84:e9:0f:5e:14:bc:bb:83:55:c6:e1: d7:e9:8d:c0:21:0d:56:3f:5a:74:d4:b6:95:0a:00: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9A:2C:41:6F:3E:32:5D:F7:B9:CD:C4:36:ED:5A:F3:78:71:8C:42 X509v3 Authority Key Identifier: keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/zposQW8-Ml33uc3ENu1a83hxjEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.132.0/24 193.200.209.0/24 IPv6: 2a06:5600:28f8::/48 Signature Algorithm: sha256WithRSAEncryption 86:08:49:03:cc:55:6e:c2:82:9b:44:0f:21:4a:c6:c1:f0:95: 99:1c:7a:f3:9f:15:b4:28:c2:5b:df:87:c1:93:ce:7b:ca:6d: bf:55:de:f4:aa:c0:69:bf:68:ed:e2:b0:f9:e3:36:12:db:20: 5c:d6:ec:45:37:44:a3:1b:92:7a:73:cf:b2:88:44:a8:f4:b5: ff:c7:df:3b:46:b6:c5:b6:7c:24:61:fa:b2:45:bc:ff:c1:76: ff:7c:78:d7:4a:b3:84:9a:21:59:7b:85:78:a8:7f:39:5c:8f: 49:a7:5f:ff:0e:37:d7:9b:c2:09:cf:59:97:45:2e:5a:59:bb: 4e:94:9a:aa:e2:08:82:10:93:32:35:d1:11:e7:4a:61:35:31: 05:f8:16:26:d5:53:50:11:86:70:9b:a6:17:14:24:99:8b:fa: 49:6d:f1:2d:8f:1b:2f:7a:f7:64:2c:e9:5e:6e:d7:31:16:84: 52:6c:98:10:75:13:ec:b5:9b:c6:ea:55:b5:4d:6b:62:7c:d1: f1:e2:94:68:57:ca:40:40:a4:a4:b3:fb:6b:86:66:08:98:b3: e2:62:41:f7:e1:32:61:07:1b:58:15:e4:d5:2b:9c:68:ea:31: 89:3b:e7:5b:f6:a8:be:ca:da:18:a5:19:56:fb:d8:07:6d:b1: d5:0b:b1:37 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87aVVxnZpqYSyhTvGtqnjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk NDYyZDQwHhcNMjYwMTAyMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTlhMmM0MTZmM2UzMjVkZjdiOWNkYzQzNmVkNWFmMzc4NzE4YzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXWVO7kiP+eS2XbTf//BgL1u8DFS jVpKLgxBDJiE4sxzh+Ec8fohidtjJ91VlttloHPMmJEFI38mufwIDfxd7UXMZbWp ibpY7Qeschtxs7VSDofPlHS4XGAjAD+vbjHzyN4DqMOvXESdbeS1pWae9xCmAoEA JQEZUwM2xE4u4Ho5JALTH4oWyq/yJetV0rSkSFdfyzUoa6dQhgCdQ30KbluxQ056 5fuTwVFK46pq1tutqdecQ0wAopQyJAEnY/ZYbjQgsNgt5fc0Mjko2hkhqVv7NskG YsbCZaU5QKbheqShQuh1hOkPXhS8u4NVxuHX6Y3AIQ1WP1p01LaVCgC3GQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFM6aLEFvPjJd97nNxDbtWvN4cYxCMB8GA1UdIwQY MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt MDliOTkyMGZlMDBmLzEvenBvc1FXOC1NbDMzdWMzRU51MWE4M2h4akVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuW6EAwQA wcjRMA8EAgACMAkDBwAqBlYAKPgwDQYJKoZIhvcNAQELBQADggEBAIYISQPMVW7C gptEDyFKxsHwlZkcevOfFbQowlvfh8GTznvKbb9V3vSqwGm/aO3isPnjNhLbIFzW 7EU3RKMbknpzz7KIRKj0tf/H3ztGtsW2fCRh+rJFvP/Bdv98eNdKs4SaIVl7hXio fzlcj0mnX/8ON9ebwgnPWZdFLlpZu06UmqriCIIQkzI10RHnSmE1MQX4FibVU1AR hnCbphcUJJmL+klt8S2PGy9692Qs6V5u1zEWhFJsmBB1E+y1m8bqVbVNa2J80fHi lGhXykBApKSz+2uGZgiYs+JiQffhMmEHG1gV5NUrnGjqMYk751v2qL7K2hilGVb7 2AdtsdULsTc= -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:25 2026 by rpki-client