This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/ZmMT2z6YESzsqLiHHksh3zTPbG4.roa File: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (raw, json) Hash identifier: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8= Subject key identifier: 66:63:13:DB:3E:98:11:2C:EC:A8:B8:87:1E:4B:21:DF:34:CF:6C:6E Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d Certificate serial: 019B7C80564F95829A4CB9DDD68B1FDFFA78 Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/ZmMT2z6YESzsqLiHHksh3zTPbG4.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 45.145.96.0/22 maxlen: 22 185.21.50.0/24 maxlen: 24 194.45.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:56:4f:95:82:9a:4c:b9:dd:d6:8b:1f:df:fa:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=666313db3e98112ceca8b8871e4b21df34cf6c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:86:f2:f8:8c:1f:d1:9b:2c:22:a5:36:e0: 3a:ff:1c:73:12:1e:7e:ed:7d:5a:01:0f:3c:30:d0: 9a:83:c6:b7:7c:c1:4b:d6:f7:f6:28:d2:b2:81:f3: 4b:00:73:9b:a1:a3:51:0f:19:94:83:86:a8:ed:a6: 00:3c:aa:75:a1:2a:4f:09:1d:d6:9a:99:b4:63:d9: f7:5a:f4:1f:64:ca:25:a8:f8:62:1b:81:c6:96:2e: 11:8b:23:90:aa:c9:6c:24:00:83:2a:a4:a6:d9:55: fd:99:7c:83:19:3e:25:36:55:81:30:23:16:c3:59: 15:d7:35:12:15:87:26:05:cc:ba:e5:18:02:04:57: 0e:99:75:64:0f:dd:7f:dd:64:78:c6:46:a5:20:15: 49:ed:8f:ed:17:79:96:71:1f:74:e8:a0:55:6f:37: 3b:6c:b0:3e:02:35:d5:01:f0:f9:0f:91:76:bc:e1: 74:5e:b0:db:1c:c6:87:13:aa:b5:e7:96:98:a1:3c: f2:65:66:1b:0e:99:c6:21:67:b4:e8:51:e0:7f:9f: 85:dc:4d:86:80:e5:fd:09:3f:05:89:38:33:9d:ca: ca:15:3c:bc:77:28:a7:48:3d:b0:2a:4b:57:02:df: 04:5d:e8:58:f5:87:ac:c7:24:92:1b:ce:a2:6f:c4: 8b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:63:13:DB:3E:98:11:2C:EC:A8:B8:87:1E:4B:21:DF:34:CF:6C:6E X509v3 Authority Key Identifier: keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/ZmMT2z6YESzsqLiHHksh3zTPbG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.96.0/22 185.21.50.0/24 194.45.100.0/24 Signature Algorithm: sha256WithRSAEncryption 97:98:be:b1:90:d9:51:a5:93:17:7c:e3:07:60:dd:68:76:9a: 0b:58:27:34:31:29:b2:b2:87:d2:2b:ec:8d:f0:26:19:e5:b3: 66:df:61:81:a7:41:71:ee:bb:ed:03:2a:7f:3a:ea:be:e2:18: a6:53:6c:ad:ae:fd:1c:74:4e:3d:ac:2e:1f:f7:bc:58:ce:00: 72:90:0c:60:bf:5e:23:25:2b:b3:98:03:6c:c0:1c:29:c2:4f: f1:2b:48:bd:7c:54:01:3c:de:90:13:df:2b:a9:c9:1d:88:2c: 3c:e9:ea:76:2b:c4:b6:37:30:16:e2:f8:1f:81:27:b4:21:8d: f2:7b:74:b5:62:6a:1b:73:ce:d5:bc:53:3a:f3:44:5a:7b:20: 5c:3a:52:03:cb:5d:21:cd:e7:c0:d5:82:71:fe:ed:ec:ec:db: 83:1c:2e:aa:85:03:5b:24:e7:ed:11:1e:a3:89:32:67:68:1d: 8f:d8:09:8d:c9:9f:a6:9a:4d:7c:89:5c:9f:79:9c:cb:e7:02: 27:d5:29:45:a1:0b:25:8e:28:58:d2:81:80:fb:3a:e9:31:31: c0:83:eb:8b:fb:27:d3:37:85:b2:35:50:3a:d0:9b:08:4f:1c: b2:13:f9:c3:52:00:44:88:29:d0:96:1c:4b:70:27:fe:4d:08: 27:7d:69:0a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gFZPlYKaTLnd1osf3/p4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk OGYxNWQwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjYzMTNkYjNlOTgxMTJjZWNhOGI4ODcxZTRiMjFkZjM0Y2Y2YzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4eG8viMH9GbLCKlNuA6/xxzEh5+ 7X1aAQ88MNCag8a3fMFL1vf2KNKygfNLAHOboaNRDxmUg4ao7aYAPKp1oSpPCR3W mpm0Y9n3WvQfZMolqPhiG4HGli4RiyOQqslsJACDKqSm2VX9mXyDGT4lNlWBMCMW w1kV1zUSFYcmBcy65RgCBFcOmXVkD91/3WR4xkalIBVJ7Y/tF3mWcR906KBVbzc7 bLA+AjXVAfD5D5F2vOF0XrDbHMaHE6q155aYoTzyZWYbDpnGIWe06FHgf5+F3E2G gOX9CT8FiTgzncrKFTy8dyinSD2wKktXAt8EXehY9YesxySSG86ib8SLowIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGZjE9s+mBEs7Ki4hx5LId80z2xuMB8GA1UdIwQY MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt YjRkZDIyNzU4OTUxLzEvWm1NVDJ6NllFU3pzcUxpSEhrc2gzelRQYkc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZFgAwQA uRUyAwQAwi1kMA0GCSqGSIb3DQEBCwUAA4IBAQCXmL6xkNlRpZMXfOMHYN1odpoL WCc0MSmysofSK+yN8CYZ5bNm32GBp0Fx7rvtAyp/Ouq+4himU2ytrv0cdE49rC4f 97xYzgBykAxgv14jJSuzmANswBwpwk/xK0i9fFQBPN6QE98rqckdiCw86ep2K8S2 NzAW4vgfgSe0IY3ye3S1Ymobc87VvFM680RaeyBcOlIDy10hzefA1YJx/u3s7NuD HC6qhQNbJOftER6jiTJnaB2P2AmNyZ+mmk18iVyfeZzL5wIn1SlFoQsljihY0oGA +zrpMTHAg+uL+yfTN4WyNVA60JsITxyyE/nDUgBEiCnQlhxLcCf+TQgnfWkK -----END CERTIFICATE-----Generated at Fri Jan 9 04:25:57 2026 by rpki-client