This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ZGpkpSAMeO1WMKT0kMgL1XrOOiI.roa File: ZGpkpSAMeO1WMKT0kMgL1XrOOiI.roa (raw, json) Hash identifier: +58mQxHwIY7KXTJKFotYUhr5PFSgp/yNeQPjJQppI/8= Subject key identifier: 64:6A:64:A5:20:0C:78:ED:56:30:A4:F4:90:C8:0B:D5:7A:CE:3A:22 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C702CD8D9B718CF5EC7B14F7B23C99 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ZGpkpSAMeO1WMKT0kMgL1XrOOiI.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 89.28.200.0/24 maxlen: 24 89.28.201.0/24 maxlen: 24 89.28.203.0/24 maxlen: 24 89.28.204.0/24 maxlen: 24 89.28.206.0/24 maxlen: 24 89.28.207.0/24 maxlen: 24 152.89.193.0/24 maxlen: 24 195.8.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:02:cd:8d:9b:71:8c:f5:ec:7b:14:f7:b2:3c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=646a64a5200c78ed5630a4f490c80bd57ace3a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:d2:7b:30:90:18:58:89:be:de:cb:8a:09: f6:4f:0f:f4:ac:23:ca:3a:f3:32:b0:ab:e4:0e:c3: ac:ee:ad:ac:76:ba:63:87:8c:dd:51:2e:52:82:9e: bb:82:31:40:70:8d:f7:41:f5:a4:8c:ee:dd:d9:91: d3:d1:3e:63:bc:a1:90:df:b7:f9:40:e0:86:8c:e2: 76:ce:42:8b:a4:cd:2f:50:c8:6f:cd:b4:e5:12:e0: 23:ca:2b:86:b8:7b:34:0c:f3:c9:7f:55:e0:8f:1b: fb:48:81:f2:32:d2:1a:36:2a:68:cf:b5:db:64:e1: 83:80:1b:34:ce:5f:be:43:53:f6:43:22:41:86:5d: c4:37:66:59:b2:8d:a6:09:ac:37:59:6a:8b:70:e5: f1:4a:f4:19:6c:d8:bb:a2:b1:37:6f:45:22:d4:46: 85:87:47:14:63:c1:bb:35:be:2e:04:13:8d:84:99: dc:ef:08:5a:da:f7:41:65:20:a1:1b:11:4d:c0:ff: f9:5b:62:14:64:23:72:f8:a1:63:eb:91:9d:d4:0f: 61:25:87:93:cd:af:e6:03:09:9f:dc:05:74:45:c2: da:c4:ed:d0:1b:85:9a:3c:b4:e6:a2:ca:c3:d7:18: 5d:75:4b:ed:88:91:9a:c5:04:b3:27:54:a2:ea:41: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6A:64:A5:20:0C:78:ED:56:30:A4:F4:90:C8:0B:D5:7A:CE:3A:22 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ZGpkpSAMeO1WMKT0kMgL1XrOOiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.28.200.0/23 89.28.203.0-89.28.204.255 89.28.206.0/23 152.89.193.0/24 195.8.200.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:e4:44:04:24:8a:ee:9a:c7:3c:8b:0f:f7:c2:64:e4:70:5d: 16:e5:6b:3b:ab:34:63:a3:79:45:69:55:07:4d:cf:23:fc:24: fa:3f:47:61:31:70:56:e4:46:89:0a:37:0a:57:05:fe:f3:81: 62:c2:fa:52:75:6f:14:01:af:6a:5a:98:1f:db:51:0e:e2:aa: 0b:3a:96:87:04:ee:77:d9:67:10:28:9a:ea:90:3d:e6:07:09: 1f:fb:95:0c:69:c2:6b:cf:77:fb:b7:4a:fc:7e:55:49:18:2f: 5a:2b:39:d3:28:3b:95:17:04:41:00:3e:8a:33:11:c3:ff:e4: 5e:69:9e:83:a5:4a:fc:1c:ea:b0:c6:19:f0:b2:e8:8e:4a:e7: 4f:5c:62:95:c0:2f:6f:35:c5:fc:00:94:17:d6:b7:14:45:29: 3e:77:d0:71:24:56:a1:92:13:6a:5c:9c:2e:12:d8:24:c8:94: 68:87:87:56:08:5d:32:ac:1c:77:34:b3:10:0b:a9:05:42:a8: 74:dd:cc:63:65:71:25:ab:0b:76:82:50:b2:67:f6:fd:1e:66: 6f:1e:0d:08:72:36:af:17:b5:c0:51:67:c1:23:d3:db:0a:c3: c2:28:5d:0c:cd:8a:66:4e:ba:a5:5b:ba:55:45:d9:79:db:f2: eb:c9:ef:11 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt3xwLNjZtxjPXsexT3sjyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDZhNjRhNTIwMGM3OGVkNTYzMGE0ZjQ5MGM4MGJkNTdhY2UzYTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+bSezCQGFiJvt7Lign2Tw/0rCPK OvMysKvkDsOs7q2sdrpjh4zdUS5Sgp67gjFAcI33QfWkjO7d2ZHT0T5jvKGQ37f5 QOCGjOJ2zkKLpM0vUMhvzbTlEuAjyiuGuHs0DPPJf1Xgjxv7SIHyMtIaNipoz7Xb ZOGDgBs0zl++Q1P2QyJBhl3EN2ZZso2mCaw3WWqLcOXxSvQZbNi7orE3b0Ui1EaF h0cUY8G7Nb4uBBONhJnc7wha2vdBZSChGxFNwP/5W2IUZCNy+KFj65Gd1A9hJYeT za/mAwmf3AV0RcLaxO3QG4WaPLTmosrD1xhddUvtiJGaxQSzJ1Si6kGwmwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFGRqZKUgDHjtVjCk9JDIC9V6zjoiMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvWkdwa3BTQU1lTzFXTUtUMGtNZ0wxWHJPT2lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBWRzIMAwD BABZHMsDBABZHMwDBAFZHM4DBACYWcEDBADDCMgwDQYJKoZIhvcNAQELBQADggEB AHrkRAQkiu6axzyLD/fCZORwXRblazurNGOjeUVpVQdNzyP8JPo/R2ExcFbkRokK NwpXBf7zgWLC+lJ1bxQBr2pamB/bUQ7iqgs6locE7nfZZxAomuqQPeYHCR/7lQxp wmvPd/u3Svx+VUkYL1orOdMoO5UXBEEAPoozEcP/5F5pnoOlSvwc6rDGGfCy6I5K 509cYpXAL281xfwAlBfWtxRFKT530HEkVqGSE2pcnC4S2CTIlGiHh1YIXTKsHHc0 sxALqQVCqHTdzGNlcSWrC3aCULJn9v0eZm8eDQhyNq8XtcBRZ8Ej09sKw8IoXQzN imZOuqVbulVF2Xnb8uvJ7xE= -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:33 2026 by rpki-client