This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa File: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (raw, json) Hash identifier: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0= Subject key identifier: 65:70:EE:1A:BE:E2:18:CB:EA:9D:20:8F:23:56:5A:64:42:40:F7:84 Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 019B7DCABB42A39DCA3D5A67D151503BE64D Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa Signing time: Fri 02 Jan 2026 08:19:56 +0000 ROA not before: Fri 02 Jan 2026 08:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20709 IP address blocks: 81.17.137.0/24 maxlen: 24 81.17.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bb:42:a3:9d:ca:3d:5a:67:d1:51:50:3b:e6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6570ee1abee218cbea9d208f23565a644240f784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:00:8c:bf:86:77:fb:f3:2c:a2:09:31:1e:95: 1e:d2:ac:e9:d6:74:01:d9:8a:b5:ed:1c:68:4d:ac: b7:12:cd:c7:61:e3:c5:25:27:13:3a:88:d1:43:ec: 3b:e1:ef:a5:7b:81:85:0d:3a:f2:b6:57:dc:5a:7b: 81:1c:b8:8f:33:05:bf:35:68:88:14:8e:e9:a7:75: 86:39:aa:55:9a:43:6d:fb:08:63:89:36:cb:15:45: 5e:bc:99:84:bf:59:67:91:00:d2:15:89:73:49:80: 40:cd:af:14:a3:62:76:7d:0f:a4:10:a8:8d:f0:d1: 84:ae:f5:e2:68:f9:92:24:8f:ce:b7:05:06:c9:1e: 98:5a:74:d4:f4:5a:ff:07:ea:1c:f0:a7:45:6d:bb: 3d:6d:42:50:02:c1:7b:1c:b3:78:88:ff:de:40:47: 7a:9e:31:22:ed:51:41:08:06:3f:30:82:db:e4:c4: 57:94:07:d2:2a:28:fc:fd:d6:fa:ff:4b:b1:13:73: 99:44:84:08:b4:6d:6e:7b:b5:b7:2d:3d:d9:75:90: 30:12:98:ba:3c:1a:73:3a:e0:50:39:3e:e4:1c:3b: dc:0c:68:f5:3f:be:79:4b:d4:e7:b5:88:6c:53:a3: 06:25:0f:f5:ea:19:09:7b:5a:32:cc:f8:8f:98:a0: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:70:EE:1A:BE:E2:18:CB:EA:9D:20:8F:23:56:5A:64:42:40:F7:84 X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.17.137.0/24 81.17.143.0/24 Signature Algorithm: sha256WithRSAEncryption 85:11:c7:21:3d:98:77:40:92:c6:2a:d9:21:b9:2c:d4:14:ed: 7f:54:29:57:73:75:ac:61:bf:0a:95:c6:9e:d6:01:23:92:5a: b5:ec:c2:08:91:77:2a:16:24:ae:c7:43:19:8d:60:d6:e7:f9: 44:d8:15:56:9f:eb:4d:c5:b3:fe:f7:a3:f6:3e:5f:7e:25:75: ea:9c:4f:23:dc:df:20:95:58:8c:23:f7:f2:17:e5:4b:ed:1c: 94:05:87:27:84:5a:f7:05:06:f2:6b:6b:94:fe:3a:7d:4c:5e: cf:4c:98:c9:c0:72:7c:e8:ef:ab:36:1b:54:fe:ed:ac:3a:10: af:06:04:62:b6:cd:45:c7:5a:20:c1:8b:b7:41:20:cd:1f:2a: 26:84:05:f0:a5:c9:11:9b:37:e1:8d:c5:0c:d7:ce:2e:ca:7b: 6f:55:a3:d4:28:a4:b3:2a:b5:2e:02:32:09:bd:e9:73:7d:1c: 5c:03:e8:66:42:61:19:5f:3c:bb:96:93:ab:2f:dc:4a:8b:dd: e0:48:08:4e:25:35:97:cd:6f:82:c6:3a:79:41:17:27:01:40: 2c:95:4b:9f:f0:27:c2:89:29:80:2d:8c:b7:ea:3f:60:cf:ab: 95:24:b9:20:fc:9d:18:62:5b:83:67:75:a7:86:e7:cb:04:13: a4:7a:b1:10 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yrtCo53KPVpn0VFQO+ZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTcwZWUxYWJlZTIxOGNiZWE5ZDIwOGYyMzU2NWE2NDQyNDBmNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgCMv4Z3+/MsogkxHpUe0qzp1nQB 2Yq17RxoTay3Es3HYePFJScTOojRQ+w74e+le4GFDTrytlfcWnuBHLiPMwW/NWiI FI7pp3WGOapVmkNt+whjiTbLFUVevJmEv1lnkQDSFYlzSYBAza8Uo2J2fQ+kEKiN 8NGErvXiaPmSJI/OtwUGyR6YWnTU9Fr/B+oc8KdFbbs9bUJQAsF7HLN4iP/eQEd6 njEi7VFBCAY/MILb5MRXlAfSKij8/db6/0uxE3OZRIQItG1ue7W3LT3ZdZAwEpi6 PBpzOuBQOT7kHDvcDGj1P755S9TntYhsU6MGJQ/16hkJe1oyzPiPmKByJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGVw7hq+4hjL6p0gjyNWWmRCQPeEMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvWlhEdUdyN2lHTXZxblNDUEkxWmFaRUpBOTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAURGJAwQA URGPMA0GCSqGSIb3DQEBCwUAA4IBAQCFEcchPZh3QJLGKtkhuSzUFO1/VClXc3Ws Yb8Klcae1gEjklq17MIIkXcqFiSux0MZjWDW5/lE2BVWn+tNxbP+96P2Pl9+JXXq nE8j3N8glViMI/fyF+VL7RyUBYcnhFr3BQbya2uU/jp9TF7PTJjJwHJ86O+rNhtU /u2sOhCvBgRits1Fx1ogwYu3QSDNHyomhAXwpckRmzfhjcUM184uyntvVaPUKKSz KrUuAjIJvelzfRxcA+hmQmEZXzy7lpOrL9xKi93gSAhOJTWXzW+Cxjp5QRcnAUAs lUuf8CfCiSmALYy36j9gz6uVJLkg/J0YYluDZ3WnhufLBBOkerEQ -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:46 2026 by rpki-client