This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/sZJjT_2snQotK3ftEGw_d9sZrf0.roa File: sZJjT_2snQotK3ftEGw_d9sZrf0.roa (raw, json) Hash identifier: ZP0upJCIf42M9db5/txOE5l9C4b/LsGAyR1WtYBipm0= Subject key identifier: B1:92:63:4F:FD:AC:9D:0A:2D:2B:77:ED:10:6C:3F:77:DB:19:AD:FD Certificate issuer: /CN=9504a09a4596d8157da69dc3346c5abce4ce4e13 Certificate serial: 019B775956F30BA7B19E5C70A3B9CFFA2DFC Authority key identifier: 95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/sZJjT_2snQotK3ftEGw_d9sZrf0.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213742 IP address blocks: 45.87.40.0/24 maxlen: 24 195.138.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:56:f3:0b:a7:b1:9e:5c:70:a3:b9:cf:fa:2d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9504a09a4596d8157da69dc3346c5abce4ce4e13 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b192634ffdac9d0a2d2b77ed106c3f77db19adfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:7d:06:b3:24:cf:b9:e0:60:80:55:83:47: 47:f7:3a:c2:41:0f:5f:95:79:39:18:20:67:d2:8d: ac:8c:d2:8a:6f:38:d5:e5:3e:80:5e:72:d7:dc:af: a8:8f:32:de:bb:07:d6:e9:95:b2:81:3d:11:e7:81: 9a:27:be:ce:e9:dc:5a:fb:ae:54:cb:3a:5a:e0:25: 67:83:23:a9:da:91:22:ce:e2:0b:9d:ec:87:ea:a6: c8:a2:19:d5:8b:2f:a7:1e:6b:78:cf:17:62:fd:8d: c0:55:91:d1:6c:20:78:7a:f3:bf:a6:2f:3f:22:af: 9c:e9:a8:b6:c3:dd:94:89:e7:97:e4:67:fa:c8:d2: ab:68:62:40:23:2f:5b:b7:74:69:df:56:2d:19:39: f3:54:84:27:6f:37:5c:2c:9e:7e:93:bd:23:16:b9: b1:ee:10:c0:54:cc:30:36:2f:75:50:4f:d9:7c:90: 9d:4d:6e:b2:92:5f:8b:e1:0f:8e:04:ae:df:5c:6f: 54:a9:4b:79:a6:1c:c2:e0:f0:01:1f:50:77:d4:89: 06:3e:93:1a:99:4b:bf:80:98:9a:2d:17:89:03:5b: 5e:5f:46:bf:d6:00:2f:58:46:11:16:37:f5:41:05: e9:d7:fe:60:55:19:d5:79:01:c9:39:2e:16:ab:fc: 26:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:92:63:4F:FD:AC:9D:0A:2D:2B:77:ED:10:6C:3F:77:DB:19:AD:FD X509v3 Authority Key Identifier: keyid:95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/sZJjT_2snQotK3ftEGw_d9sZrf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.40.0/24 195.138.40.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:79:65:2c:73:24:e7:0a:b4:b2:b3:b1:7e:22:29:13:b9:06: b8:c5:79:b1:1e:0d:0b:36:b7:e6:25:d7:03:87:c0:c4:00:a8: 9d:92:14:0c:b2:67:ac:51:79:a7:7c:62:6e:e7:a9:9d:30:af: de:c8:bc:27:06:53:44:95:d5:ca:71:f0:dd:01:41:0f:4c:ea: a8:ad:70:da:c9:1f:ee:13:f0:d2:bf:77:43:96:6f:f8:6d:1f: 60:0b:9b:0e:4d:f4:76:05:19:6b:6c:8a:bb:54:d8:3b:e0:73: 47:b1:97:2f:8b:bc:64:60:28:03:21:8d:37:98:7d:07:b4:9a: c3:50:81:f0:5c:61:e1:e3:9d:6b:ad:6c:bb:51:cb:65:61:52: 55:34:d3:da:93:e2:fc:41:f9:a4:31:f5:57:cc:e3:76:18:5d: 13:b0:32:00:e3:dd:9f:e0:64:f2:d5:99:f0:c9:5a:a3:61:a2: df:d2:7c:8a:5b:4f:2e:1e:ac:46:3b:61:24:ef:9f:c9:a8:e3: 48:c3:c9:21:37:07:d0:32:2d:e5:ba:a3:1b:40:35:c7:ae:4e: 1f:6d:5a:fd:35:ec:a2:82:0c:11:b1:12:02:6c:56:7f:94:71: 31:14:eb:44:39:0e:3b:0a:99:3f:8e:d6:ba:10:19:5e:c5:4c: b4:07:f5:64 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WVbzC6exnlxwo7nP+i38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDRhMDlhNDU5NmQ4MTU3ZGE2OWRjMzM0NmM1YWJjZTRj ZTRlMTMwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTkyNjM0ZmZkYWM5ZDBhMmQyYjc3ZWQxMDZjM2Y3N2RiMTlhZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWV9BrMkz7ngYIBVg0dH9zrCQQ9f lXk5GCBn0o2sjNKKbzjV5T6AXnLX3K+ojzLeuwfW6ZWygT0R54GaJ77O6dxa+65U yzpa4CVngyOp2pEizuILneyH6qbIohnViy+nHmt4zxdi/Y3AVZHRbCB4evO/pi8/ Iq+c6ai2w92UieeX5Gf6yNKraGJAIy9bt3Rp31YtGTnzVIQnbzdcLJ5+k70jFrmx 7hDAVMwwNi91UE/ZfJCdTW6ykl+L4Q+OBK7fXG9UqUt5phzC4PABH1B31IkGPpMa mUu/gJiaLReJA1teX0a/1gAvWEYRFjf1QQXp1/5gVRnVeQHJOS4Wq/wmtwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLGSY0/9rJ0KLSt37RBsP3fbGa39MB8GA1UdIwQY MBaAFJUEoJpFltgVfaadwzRsWrzkzk4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFTZ21rV1cyQlY5cHAzRE5HeGF2T1RPVGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85ZWFmNWMtOGM1NC00NWVkLWJmYzQt NjczYzM4ODkxNjFkLzEvc1pKalRfMnNuUW90SzNmdEVHd19kOXNacmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85ZWFmNWMtOGM1NC00NWVkLWJmYzQtNjczYzM4ODkxNjFk LzEvbFFTZ21rV1cyQlY5cHAzRE5HeGF2T1RPVGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVcoAwQA w4ooMA0GCSqGSIb3DQEBCwUAA4IBAQBOeWUscyTnCrSys7F+IikTuQa4xXmxHg0L NrfmJdcDh8DEAKidkhQMsmesUXmnfGJu56mdMK/eyLwnBlNEldXKcfDdAUEPTOqo rXDayR/uE/DSv3dDlm/4bR9gC5sOTfR2BRlrbIq7VNg74HNHsZcvi7xkYCgDIY03 mH0HtJrDUIHwXGHh451rrWy7UctlYVJVNNPak+L8QfmkMfVXzON2GF0TsDIA492f 4GTy1ZnwyVqjYaLf0nyKW08uHqxGO2Ek75/JqONIw8khNwfQMi3luqMbQDXHrk4f bVr9NeyiggwRsRICbFZ/lHExFOtEOQ47Cpk/jta6EBlexUy0B/Vk -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:25 2026 by rpki-client