This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/zeTmjM1efMeaIVBsxyvvNq4AsaE.roa File: zeTmjM1efMeaIVBsxyvvNq4AsaE.roa (raw, json) Hash identifier: 59k70zw01dCfn2bvYSfvqkTPjOjJ1wFS22WS6baIDJI= Subject key identifier: CD:E4:E6:8C:CD:5E:7C:C7:9A:21:50:6C:C7:2B:EF:36:AE:00:B1:A1 Certificate issuer: /CN=52413f2e55907004c5ab6989de7eed1543535811 Certificate serial: 019B797EE10D2E3B86AA55C50780D7E2A2FA Authority key identifier: 52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/zeTmjM1efMeaIVBsxyvvNq4AsaE.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47546 IP address blocks: 185.142.56.0/22 maxlen: 22 185.142.56.0/23 maxlen: 23 185.142.58.0/23 maxlen: 23 188.215.33.0/24 maxlen: 24 188.215.35.0/24 maxlen: 24 195.88.64.0/24 maxlen: 24 195.88.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e1:0d:2e:3b:86:aa:55:c5:07:80:d7:e2:a2:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52413f2e55907004c5ab6989de7eed1543535811 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cde4e68ccd5e7cc79a21506cc72bef36ae00b1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:bf:ca:37:98:24:ef:67:40:fb:33:fc:e3: 2b:c2:5c:de:2f:57:f8:23:d8:7e:dc:77:44:96:25: 50:87:5c:62:85:bb:ec:cc:2f:71:87:70:03:66:77: 19:8e:78:9f:3c:c2:3f:f4:f8:10:b5:0a:9d:b2:26: 43:69:e3:84:3a:ec:e3:2c:b5:ff:d7:d2:f0:ec:45: 3e:c4:e3:37:18:69:8a:3e:fc:c5:fe:6c:fe:5c:70: d1:11:de:27:ab:95:98:0d:6e:7f:15:21:0d:a7:8a: 6a:00:d5:4e:63:0e:24:64:5e:fe:f1:df:b7:6f:f2: be:78:69:cf:dc:76:b2:9b:4f:7a:aa:8a:53:ff:36: fd:84:3d:65:23:09:fd:38:cd:ad:ba:96:d7:30:9f: a2:b9:3a:2f:20:bd:0d:0d:d8:c7:6a:41:a3:dd:44: 64:bc:1c:5c:fb:c3:11:f7:44:c0:50:b8:e9:0d:31: 9d:0d:6c:1c:bc:3e:ed:83:fe:fe:33:50:c0:32:ed: d2:e7:ca:f3:cc:61:0c:73:86:7f:6a:58:eb:f9:8d: a8:33:dd:3e:85:cc:14:0a:d1:7c:d3:1f:dc:bc:bf: 86:08:2b:44:58:a9:f4:a5:34:fb:d3:2b:9b:30:a0: 99:ec:6f:5a:6c:60:f2:21:ae:67:a8:11:6d:29:76: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E4:E6:8C:CD:5E:7C:C7:9A:21:50:6C:C7:2B:EF:36:AE:00:B1:A1 X509v3 Authority Key Identifier: keyid:52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/zeTmjM1efMeaIVBsxyvvNq4AsaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.56.0/22 188.215.33.0/24 188.215.35.0/24 195.88.64.0/23 Signature Algorithm: sha256WithRSAEncryption 49:5e:98:00:f0:a1:3e:20:4b:f6:07:31:95:79:9f:d5:f0:40: a3:f8:88:5d:16:7d:50:22:14:9c:f2:d9:7a:5a:4c:e4:5f:f3: 0c:84:9e:37:01:db:24:18:69:7a:df:ad:f1:fa:96:1f:30:aa: 16:4d:df:4c:1f:56:c2:fb:12:c4:78:e5:29:b1:bc:6e:3f:fd: 91:00:83:f2:a1:ce:47:a7:90:3d:7b:38:5d:5a:d6:26:d2:6d: 5f:be:9c:cb:da:67:65:5c:1e:c0:f7:70:ed:00:75:bb:2b:b0: 07:90:e7:68:ff:72:f7:6b:de:6f:98:c6:21:0f:27:db:a4:7e: 3e:ca:dc:6f:0a:6d:53:ff:04:eb:3a:32:c2:2c:4e:51:3b:d6: 3a:a5:11:b4:af:f2:dd:c6:c4:ff:25:5d:5f:5a:8a:59:5a:bf: 6e:44:a5:d0:9e:25:35:18:6a:c3:92:4c:e2:55:a8:74:ec:e2: 8c:40:21:e4:33:a7:9a:64:4c:42:c0:66:f5:0b:c1:a0:30:fc: 91:6e:d2:15:96:f8:04:4a:4f:f1:f7:de:73:f5:1f:c4:52:9e: b1:3c:57:65:57:fc:63:de:5b:c3:06:52:80:89:2d:e7:ac:19: ff:4f:01:e3:55:1b:95:89:04:26:9b:2c:5b:a5:a0:53:25:45: e7:03:c5:b2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5fuENLjuGqlXFB4DX4qL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNDEzZjJlNTU5MDcwMDRjNWFiNjk4OWRlN2VlZDE1NDM1 MzU4MTEwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGU0ZTY4Y2NkNWU3Y2M3OWEyMTUwNmNjNzJiZWYzNmFlMDBiMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvm/yjeYJO9nQPsz/OMrwlzeL1f4 I9h+3HdEliVQh1xihbvszC9xh3ADZncZjnifPMI/9PgQtQqdsiZDaeOEOuzjLLX/ 19Lw7EU+xOM3GGmKPvzF/mz+XHDREd4nq5WYDW5/FSENp4pqANVOYw4kZF7+8d+3 b/K+eGnP3Haym096qopT/zb9hD1lIwn9OM2tupbXMJ+iuTovIL0NDdjHakGj3URk vBxc+8MR90TAULjpDTGdDWwcvD7tg/7+M1DAMu3S58rzzGEMc4Z/aljr+Y2oM90+ hcwUCtF80x/cvL+GCCtEWKn0pTT70yubMKCZ7G9abGDyIa5nqBFtKXZAiwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFM3k5ozNXnzHmiFQbMcr7zauALGhMB8GA1UdIwQY MBaAFFJBPy5VkHAExatpid5+7RVDU1gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYmQ2YzUtNDYwZS00NGZjLWIwNzQt OGJmZGI5Njk4NTljLzEvemVUbWpNMWVmTWVhSVZCc3h5dnZOcTRBc2FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mYmQ2YzUtNDYwZS00NGZjLWIwNzQtOGJmZGI5Njk4NTlj LzEvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuY44AwQA vNchAwQAvNcjAwQBw1hAMA0GCSqGSIb3DQEBCwUAA4IBAQBJXpgA8KE+IEv2BzGV eZ/V8ECj+IhdFn1QIhSc8tl6WkzkX/MMhJ43AdskGGl6363x+pYfMKoWTd9MH1bC +xLEeOUpsbxuP/2RAIPyoc5Hp5A9ezhdWtYm0m1fvpzL2mdlXB7A93DtAHW7K7AH kOdo/3L3a95vmMYhDyfbpH4+ytxvCm1T/wTrOjLCLE5RO9Y6pRG0r/LdxsT/JV1f WopZWr9uRKXQniU1GGrDkkziVah07OKMQCHkM6eaZExCwGb1C8GgMPyRbtIVlvgE Sk/x995z9R/EUp6xPFdlV/xj3lvDBlKAiS3nrBn/TwHjVRuViQQmmyxbpaBTJUXn A8Wy -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:39 2026 by rpki-client