This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/zSJhAsH0v6Lt3ykWNTipD6DjBvo.roa File: zSJhAsH0v6Lt3ykWNTipD6DjBvo.roa (raw, json) Hash identifier: GqW80/tMAbtkCDtDVmCwRVj7WYcfpvr4HUTuVqPBK+U= Subject key identifier: CD:22:61:02:C1:F4:BF:A2:ED:DF:29:16:35:38:A9:0F:A0:E3:06:FA Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e Certificate serial: 019B7CED0A6C76D86079D76C457BC04432CC Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/zSJhAsH0v6Lt3ykWNTipD6DjBvo.roa Signing time: Fri 02 Jan 2026 04:17:48 +0000 ROA not before: Fri 02 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206341 IP address blocks: 45.82.172.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0a:6c:76:d8:60:79:d7:6c:45:7b:c0:44:32:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e Validity Not Before: Jan 2 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd226102c1f4bfa2eddf29163538a90fa0e306fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:f4:5e:1c:2b:32:d0:88:2b:a5:b7:13:4a: 9d:89:75:65:bd:d7:01:e6:b2:ba:e8:c6:87:6b:22: f9:6e:9e:79:76:71:26:8c:23:55:55:c0:70:a2:c6: 4c:00:9e:ee:0a:f8:8b:b5:a2:06:d7:af:79:df:67: 7f:3b:8a:7d:cb:53:1d:86:63:2e:c9:fb:17:57:4c: cd:78:f0:11:e3:e4:8a:41:a8:89:4f:e0:ae:2a:47: 92:c4:d7:be:49:19:48:12:fe:91:d5:e2:a1:21:c2: bb:b9:1d:74:11:4c:ed:75:0d:61:5b:e9:fa:37:d7: ea:36:b3:18:02:70:d5:08:a9:e5:97:97:81:78:e0: d6:03:68:06:d0:8b:a1:d9:87:e3:9b:dd:e9:ce:4c: 60:cd:25:ef:08:c8:96:5b:53:0e:39:94:58:dc:bb: ae:a4:0b:a4:1c:db:2d:d9:ec:73:aa:26:11:62:2b: 6e:6d:0f:a1:42:ff:df:48:57:80:28:86:08:99:db: f4:78:7d:b4:d5:ee:92:dc:a2:66:1d:12:8e:0b:d1: 63:4b:f4:6b:a7:df:2b:1b:c4:38:5c:b9:c7:94:62: 24:ff:aa:ee:a8:dd:93:29:63:e5:dd:bc:dd:ae:f6: fb:19:2e:78:f7:4a:4c:10:7f:0e:b3:34:4a:35:e5: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:22:61:02:C1:F4:BF:A2:ED:DF:29:16:35:38:A9:0F:A0:E3:06:FA X509v3 Authority Key Identifier: keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/zSJhAsH0v6Lt3ykWNTipD6DjBvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.172.0/22 Signature Algorithm: sha256WithRSAEncryption 14:b8:3b:74:05:84:a0:ac:e6:13:12:24:60:24:7f:c5:9c:27: 11:cf:f0:0d:7b:4f:c0:45:2c:88:41:85:2b:10:5f:f2:82:c5: e9:7d:e9:53:c8:92:23:38:c7:10:26:90:88:09:a4:da:bb:03: 22:96:3c:b0:43:cb:59:0a:b6:77:88:d0:1f:49:c7:e4:3b:82: 63:c1:b6:34:97:33:d5:4f:d8:22:17:2a:44:4b:39:20:9f:ee: cb:d6:4f:ff:78:d4:00:e5:ea:9c:1e:f5:7c:4b:f5:1d:f2:a3: 7a:1c:91:fc:b7:ab:19:3a:6e:58:15:60:2e:27:7b:56:91:87: 87:3c:8b:78:6c:7b:c6:83:ac:01:4f:23:9c:09:a7:64:9f:54: 57:5f:d4:00:24:5a:6c:cb:b1:60:d1:77:14:ef:e6:b1:57:10: f4:27:60:ec:23:87:0f:b4:23:51:1e:61:3a:72:58:fb:f7:bb: 7c:a7:1c:bc:0a:c9:21:b2:42:af:2b:59:a2:08:d6:0e:46:d6: f7:12:d7:ce:dc:cf:4d:9d:8a:9b:02:4e:5e:f0:b3:03:44:3f: 53:e9:b2:95:af:a5:9d:76:b2:2e:2e:f2:cf:43:13:76:7a:ac: 4d:45:f1:0a:d5:12:68:32:1f:e2:5c:aa:15:01:ae:50:1d:ca: f3:38:7d:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87QpsdthgeddsRXvARDLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZmU2ZjJhOTM3ODM4ZGYyYjE1ZGExNzQzYmNkOWZiMGUy OWNmMmUwHhcNMjYwMTAyMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDIyNjEwMmMxZjRiZmEyZWRkZjI5MTYzNTM4YTkwZmEwZTMwNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmT0XhwrMtCIK6W3E0qdiXVlvdcB 5rK66MaHayL5bp55dnEmjCNVVcBwosZMAJ7uCviLtaIG169532d/O4p9y1MdhmMu yfsXV0zNePAR4+SKQaiJT+CuKkeSxNe+SRlIEv6R1eKhIcK7uR10EUztdQ1hW+n6 N9fqNrMYAnDVCKnll5eBeODWA2gG0Iuh2Yfjm93pzkxgzSXvCMiWW1MOOZRY3Luu pAukHNst2exzqiYRYitubQ+hQv/fSFeAKIYImdv0eH201e6S3KJmHRKOC9FjS/Rr p98rG8Q4XLnHlGIk/6ruqN2TKWPl3bzdrvb7GS5490pMEH8OszRKNeUDgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM0iYQLB9L+i7d8pFjU4qQ+g4wb6MB8GA1UdIwQY MBaAFPL+byqTeDjfKxXaF0O82fsOKc8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMt YjcyNTU3NjY4YjAxLzEvelNKaEFzSDB2Nkx0M3lrV05UaXBENkRqQnZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMtYjcyNTU3NjY4YjAx LzEvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVKsMA0G CSqGSIb3DQEBCwUAA4IBAQAUuDt0BYSgrOYTEiRgJH/FnCcRz/ANe0/ARSyIQYUr EF/ygsXpfelTyJIjOMcQJpCICaTauwMiljywQ8tZCrZ3iNAfScfkO4JjwbY0lzPV T9giFypESzkgn+7L1k//eNQA5eqcHvV8S/Ud8qN6HJH8t6sZOm5YFWAuJ3tWkYeH PIt4bHvGg6wBTyOcCadkn1RXX9QAJFpsy7Fg0XcU7+axVxD0J2DsI4cPtCNRHmE6 clj797t8pxy8CskhskKvK1miCNYORtb3EtfO3M9NnYqbAk5e8LMDRD9T6bKVr6Wd drIuLvLPQxN2eqxNRfEK1RJoMh/iXKoVAa5QHcrzOH3l -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:13 2026 by rpki-client