This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/Z15aMKSwaav6tVruPDM8dqX-OrU.roa File: Z15aMKSwaav6tVruPDM8dqX-OrU.roa (raw, json) Hash identifier: T5sFynuOqb9ftXUvpV0JfIR7RY1qYAplZnnlFh9SU6E= Subject key identifier: 67:5E:5A:30:A4:B0:69:AB:FA:B5:5A:EE:3C:33:3C:76:A5:FE:3A:B5 Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc Certificate serial: 019B7759380A8A53B60BF141F22D7369C3C6 Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/Z15aMKSwaav6tVruPDM8dqX-OrU.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197931 IP address blocks: 45.128.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:38:0a:8a:53:b6:0b:f1:41:f2:2d:73:69:c3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=675e5a30a4b069abfab55aee3c333c76a5fe3ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:15:55:29:20:af:f4:ab:1e:fc:97:70:0d:5d: e6:6f:d4:e7:3f:86:a7:29:98:f0:12:10:d1:45:75: 0b:b4:57:e5:44:80:bd:5c:31:6c:b0:42:60:2f:8a: b5:fd:87:17:56:b4:ae:b3:18:6d:57:fb:82:1f:09: 76:c9:73:a7:e3:5d:a4:a7:e7:ef:c9:44:92:85:09: 54:fc:50:04:74:54:55:9f:63:f5:4f:46:c3:1e:8e: 47:21:b6:6d:30:55:60:19:4e:7b:09:f4:96:cb:50: b3:be:7a:8b:68:11:f0:d4:66:9d:f0:82:d9:47:bb: 9f:7a:5a:cf:31:5f:07:3f:15:cd:3d:f8:4e:dd:bc: ad:cd:f4:d7:ee:9b:81:91:7f:f3:7d:d2:aa:8a:f6: da:02:95:59:e1:f2:f4:0b:5c:e6:40:c5:71:34:39: 6d:38:9e:2e:72:e4:7e:c1:e1:fc:a3:71:4a:79:a0: f3:c6:27:a9:cd:2c:ea:d9:4b:16:4c:c8:33:3c:7f: 71:77:6a:37:de:63:a8:67:12:e7:c6:67:6f:c6:74: 36:84:ab:35:f9:f9:9f:e6:36:cb:89:7a:cc:52:cc: cc:f6:42:81:61:ba:69:9e:4e:b4:29:ab:97:fa:43: 59:69:2d:58:89:b6:0e:1a:50:ae:7b:fd:da:08:da: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5E:5A:30:A4:B0:69:AB:FA:B5:5A:EE:3C:33:3C:76:A5:FE:3A:B5 X509v3 Authority Key Identifier: keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/Z15aMKSwaav6tVruPDM8dqX-OrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.98.0/24 Signature Algorithm: sha256WithRSAEncryption 73:ad:48:c3:e5:4e:92:f4:1a:d7:01:1d:09:3b:70:3d:14:55: d8:a6:14:fe:21:0f:fd:7a:3d:d8:23:31:96:f3:c0:cb:c0:cc: b4:ef:60:31:91:8b:5b:0f:9e:91:9e:ef:f8:df:47:91:68:61: 73:9c:8d:27:54:8e:82:79:27:8c:12:74:f4:82:10:f7:ff:e1: 80:dc:de:1c:9b:d3:18:aa:08:c7:bf:6f:ea:03:07:54:43:50: e4:32:ff:5b:81:1c:f0:4b:e7:83:23:c4:d2:db:92:b9:86:52: 68:3d:5f:0d:91:18:d7:cf:e5:88:60:6e:0f:53:ea:08:16:26: 3f:00:29:7b:3d:07:0b:6a:ec:0f:56:b9:46:08:80:ce:11:e9: 7e:1c:e5:80:db:c0:30:15:e7:e0:53:fe:d6:b0:33:c5:9b:c5: 39:e5:05:c1:ee:d5:f9:3d:36:8b:1f:d3:4f:45:e2:1f:23:f3: 46:25:88:45:a1:da:78:da:56:1c:a4:12:cc:3e:ce:69:10:5c: 56:c5:0a:1f:37:1f:0d:ed:1b:b5:7b:ac:d2:9e:e7:ae:58:46: a1:e0:86:1c:cc:c3:7b:2d:90:cd:2f:4f:be:e3:44:9b:e8:68: 3c:8c:56:f0:a0:44:0a:bd:93:b6:af:fc:d3:bf:9e:f3:0d:97: 9d:c0:2c:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTgKilO2C/FB8i1zacPGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZGQ5YTEzM2E5MjQ4NmExNGVkYzRlNzYyNWIyNGY5NWQz ODkxY2MwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzVlNWEzMGE0YjA2OWFiZmFiNTVhZWUzYzMzM2M3NmE1ZmUzYWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xVVKSCv9Kse/JdwDV3mb9TnP4an KZjwEhDRRXULtFflRIC9XDFssEJgL4q1/YcXVrSusxhtV/uCHwl2yXOn412kp+fv yUSShQlU/FAEdFRVn2P1T0bDHo5HIbZtMFVgGU57CfSWy1CzvnqLaBHw1Gad8ILZ R7ufelrPMV8HPxXNPfhO3bytzfTX7puBkX/zfdKqivbaApVZ4fL0C1zmQMVxNDlt OJ4ucuR+weH8o3FKeaDzxiepzSzq2UsWTMgzPH9xd2o33mOoZxLnxmdvxnQ2hKs1 +fmf5jbLiXrMUszM9kKBYbppnk60KauX+kNZaS1YibYOGlCue/3aCNr8IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGdeWjCksGmr+rVa7jwzPHal/jq1MB8GA1UdIwQY MBaAFEvdmhM6kkhqFO3E52JbJPldOJHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAt YjcwNGVlMjdjNjVjLzEvWjE1YU1LU3dhYXY2dFZydVBETThkcVgtT3JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAtYjcwNGVlMjdjNjVj LzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYBiMA0G CSqGSIb3DQEBCwUAA4IBAQBzrUjD5U6S9BrXAR0JO3A9FFXYphT+IQ/9ej3YIzGW 88DLwMy072AxkYtbD56Rnu/430eRaGFznI0nVI6CeSeMEnT0ghD3/+GA3N4cm9MY qgjHv2/qAwdUQ1DkMv9bgRzwS+eDI8TS25K5hlJoPV8NkRjXz+WIYG4PU+oIFiY/ ACl7PQcLauwPVrlGCIDOEel+HOWA28AwFefgU/7WsDPFm8U55QXB7tX5PTaLH9NP ReIfI/NGJYhFodp42lYcpBLMPs5pEFxWxQofNx8N7Ru1e6zSnueuWEah4IYczMN7 LZDNL0++40Sb6Gg8jFbwoEQKvZO2r/zTv57zDZedwCxx -----END CERTIFICATE-----Generated at Tue Feb 10 01:15:27 2026 by rpki-client