This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/zpJa1e3p8Nx2xQVletmQoHuwL-M.roa
File: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (raw, json)
Hash identifier: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=
Subject key identifier: CE:92:5A:D5:ED:E9:F0:DC:76:C5:05:65:7A:D9:90:A0:7B:B0:2F:E3
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019B77C69F590F6743BCE3178AB3BA4D36CA
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/zpJa1e3p8Nx2xQVletmQoHuwL-M.roa
Signing time: Thu 01 Jan 2026 04:17:44 +0000
ROA not before: Thu 01 Jan 2026 04:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12337
IP address blocks: 185.174.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 21:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:9f:59:0f:67:43:bc:e3:17:8a:b3:ba:4d:36:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jan 1 04:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce925ad5ede9f0dc76c505657ad990a07bb02fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:70:db:11:3e:c5:f6:b1:29:21:d3:7b:2c:
6c:75:70:26:da:b5:5d:a6:c0:07:83:86:fb:a7:b9:
bb:9c:39:48:40:22:f7:4d:95:42:69:1a:39:7e:38:
6f:4b:67:10:e9:96:55:01:9f:da:7b:b2:d4:49:ee:
07:9c:b4:42:f2:a4:66:30:72:d9:6f:27:df:9e:e5:
dc:26:96:42:30:22:b5:33:92:ef:86:44:28:68:ce:
87:66:ce:56:aa:b5:fa:c4:7d:e6:e1:6c:94:f6:05:
90:94:a5:4d:62:07:0a:a9:dc:17:b8:9c:de:31:28:
cb:89:6a:ca:23:63:3e:9d:5d:d6:93:fa:b8:37:07:
91:c9:ec:39:a1:04:57:39:e5:21:92:3f:0b:da:69:
fb:38:49:74:15:6a:3d:bd:a3:10:82:95:a2:45:b2:
1e:8d:5b:cb:ea:52:ae:4f:e2:9d:26:78:08:11:3f:
c5:4a:11:48:b9:8b:30:a1:3e:74:35:67:01:77:b8:
28:2a:6e:78:00:fe:ba:ab:89:a5:28:09:e7:dd:e7:
f7:cd:9b:c8:45:93:aa:bd:de:a5:ee:40:15:db:a9:
a2:22:ad:ae:bc:f1:a4:7d:06:18:52:84:57:0c:27:
ee:1b:01:52:eb:15:0f:36:8d:68:a3:5c:4e:d1:b2:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:92:5A:D5:ED:E9:F0:DC:76:C5:05:65:7A:D9:90:A0:7B:B0:2F:E3
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/zpJa1e3p8Nx2xQVletmQoHuwL-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:72:99:13:c9:4d:a0:02:63:a9:0f:b3:9b:66:52:45:92:20:
ca:4c:74:1d:ca:40:3a:2a:95:e8:fc:7d:19:5c:ce:26:64:fe:
4f:b4:3a:4b:29:a1:56:df:3b:9c:b3:28:84:28:c1:e6:b4:3a:
6d:0f:39:1c:f7:63:18:6e:06:f4:a3:cf:98:d8:05:2a:74:dc:
c2:60:d2:02:0d:18:cf:f1:c1:17:9a:e6:25:bd:ef:fc:8a:86:
fa:1f:7e:f6:f9:34:33:f6:d1:ff:ec:70:52:f6:3e:d7:cc:b0:
d9:6e:7f:99:32:12:da:a0:9a:d2:db:90:aa:69:1b:75:89:db:
4e:ef:9b:85:07:da:93:d2:89:5c:91:34:27:2c:12:27:c1:bc:
34:23:a3:80:97:f8:70:e7:34:ed:1d:2d:56:6f:10:0d:84:8b:
b7:6a:b5:df:b9:c5:bb:e5:7b:28:02:61:fc:0f:65:ff:3e:2f:
e8:d0:1d:e5:d1:b8:67:2a:8e:48:a7:ff:97:64:ef:fa:a8:38:
c9:f0:16:6e:0c:13:c8:f6:a9:96:69:6c:75:e0:9d:32:0a:b5:
b1:1f:d8:80:2f:a7:57:af:6b:1a:e6:35:f2:fd:99:62:ba:de:
37:2c:50:50:5f:6f:ae:6f:b4:f5:40:72:92:a2:7f:81:a2:cc:
e8:2c:55:7f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt3xp9ZD2dDvOMXirO6TTbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzgyYjc4ZjIwYTZlNGI3MDY0MzA1MmJkMWE0MGFmMTVh
NTYzMzgwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTkyNWFkNWVkZTlmMGRjNzZjNTA1NjU3YWQ5OTBhMDdiYjAyZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUVw2xE+xfaxKSHTeyxsdXAm2rVd
psAHg4b7p7m7nDlIQCL3TZVCaRo5fjhvS2cQ6ZZVAZ/ae7LUSe4HnLRC8qRmMHLZ
byffnuXcJpZCMCK1M5LvhkQoaM6HZs5WqrX6xH3m4WyU9gWQlKVNYgcKqdwXuJze
MSjLiWrKI2M+nV3Wk/q4NweRyew5oQRXOeUhkj8L2mn7OEl0FWo9vaMQgpWiRbIe
jVvL6lKuT+KdJngIET/FShFIuYswoT50NWcBd7goKm54AP66q4mlKAnn3ef3zZvI
RZOqvd6l7kAV26miIq2uvPGkfQYYUoRXDCfuGwFS6xUPNo1oo1xO0bLzAwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFM6SWtXt6fDcdsUFZXrZkKB7sC/jMB8GA1UdIwQY
MBaAFPt4K3jyCm5LcGQwUr0aQK8VpWM4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zZ3JlUElLYmt0d1pEQlN2UnBBcnhXbFl6Zy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOWRjOTMzLTVjMGQtNDQ2MS1hNDVk
LThmN2Q1NjkxYzFiZS8xL3pwSmExZTNwOE54MnhRVmxldG1Rb0h1d0wtTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTMvOWRjOTMzLTVjMGQtNDQ2MS1hNDVkLThmN2Q1NjkxYzFi
ZS8xLzEtM2dyZVBJS2JrdHdaREJTdlJwQXJ4V2xZemcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5rpcw
DQYJKoZIhvcNAQELBQADggEBAHtymRPJTaACY6kPs5tmUkWSIMpMdB3KQDoqlej8
fRlcziZk/k+0OkspoVbfO5yzKIQowea0Om0PORz3YxhuBvSjz5jYBSp03MJg0gIN
GM/xwRea5iW97/yKhvoffvb5NDP20f/scFL2PtfMsNluf5kyEtqgmtLbkKppG3WJ
207vm4UH2pPSiVyRNCcsEifBvDQjo4CX+HDnNO0dLVZvEA2Ei7dqtd+5xbvleygC
YfwPZf8+L+jQHeXRuGcqjkin/5dk7/qoOMnwFm4ME8j2qZZpbHXgnTIKtbEf2IAv
p1evaxrmNfL9mWK63jcsUFBfb65vtPVAcpKif4GizOgsVX8=
-----END CERTIFICATE-----
Generated at Tue Feb 3 06:38:34 2026 by rpki-client