This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/pZGlbrvPRrDTvWn_feYW76Iq3BI.roa File: pZGlbrvPRrDTvWn_feYW76Iq3BI.roa (raw, json) Hash identifier: j/VDUcf2k6fyYHL9cYumkvnabaWqMQDCybh7xh24GlM= Subject key identifier: A5:91:A5:6E:BB:CF:46:B0:D3:BD:69:FF:7D:E6:16:EF:A2:2A:DC:12 Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52 Certificate serial: 019B7D5D3995B026D96659E7D07FBA328385 Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/pZGlbrvPRrDTvWn_feYW76Iq3BI.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43366 IP address blocks: 91.215.4.0/22 maxlen: 24 194.140.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:39:95:b0:26:d9:66:59:e7:d0:7f:ba:32:83:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52 Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a591a56ebbcf46b0d3bd69ff7de616efa22adc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f5:d6:d8:97:14:09:c1:63:15:87:65:6f:5d: 25:d6:b7:5d:93:66:79:b4:50:97:32:62:75:a7:5e: cd:6e:3f:32:e3:75:79:e4:da:4f:99:7d:08:65:f2: fb:d0:d4:8f:cb:d1:a5:91:a3:6d:1b:20:1c:f3:72: 41:28:3e:9b:57:df:5c:d4:0e:e5:1a:52:5d:a6:5b: 20:5d:9f:6f:bb:92:e8:40:d2:3d:2d:1d:34:ee:ee: 67:84:1f:03:d9:e2:b2:07:1d:d6:ff:01:44:ec:0f: 2a:7d:89:3b:33:1a:bf:58:74:63:68:62:99:05:5a: 01:f8:9a:46:10:38:f9:61:2d:54:4f:c7:54:7a:11: 73:a9:c2:d7:94:4c:94:6d:ee:fa:2e:c7:80:87:08: eb:00:8c:c7:ca:41:f0:aa:f1:5d:22:1c:b4:96:a6: b1:d9:3f:1b:73:d8:b1:8c:9b:6f:68:bc:63:a2:98: 3e:66:a7:31:0b:f3:98:09:8b:b4:4a:43:98:da:dd: 73:6d:e9:36:25:5d:01:8d:24:c3:b2:bd:db:e3:5a: 98:bb:ed:8b:c6:10:e4:b3:a5:d9:bd:d8:4a:48:08: f3:eb:70:40:c9:1e:33:15:b3:1c:4e:aa:59:75:e6: 87:ba:74:50:80:48:d2:2b:8a:0c:3e:2f:c5:be:c0: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:91:A5:6E:BB:CF:46:B0:D3:BD:69:FF:7D:E6:16:EF:A2:2A:DC:12 X509v3 Authority Key Identifier: keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/pZGlbrvPRrDTvWn_feYW76Iq3BI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.4.0/22 194.140.246.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:5d:7f:3a:5f:77:f0:99:df:ed:bd:49:be:0d:93:18:40:6e: 8b:d0:6d:0f:02:f6:d2:7c:95:64:98:bd:f0:34:a7:01:d0:c2: 00:5f:47:e2:14:53:4d:1f:e9:d9:92:84:bc:33:13:b2:bd:45: db:1d:a1:e9:37:9f:d6:a1:b2:b7:4b:29:23:87:ae:8c:53:24: 5f:d5:2d:cb:89:8e:81:9c:07:4c:a2:09:57:4a:1d:f7:c6:79: 49:15:ed:2b:ed:3c:5b:32:e4:79:6a:b4:c9:59:e7:5b:9b:5a: 75:4d:f0:bd:3d:85:7c:47:94:4c:ef:49:c0:34:69:40:58:83: 9a:0b:16:2d:42:57:a7:5a:4d:d6:a2:3e:e8:f3:f9:10:c0:ff: de:01:f8:9c:f7:3a:72:56:fb:10:71:89:65:1b:b7:65:e7:41: 08:ea:d0:ce:74:82:06:73:61:42:e6:3d:da:d3:be:28:61:9b: 7e:c8:79:c5:f1:e7:d1:89:80:c3:24:e5:80:12:a3:93:cb:19: 34:b4:05:a6:98:4c:d6:9d:c7:95:71:e6:d1:00:76:9f:85:aa: 44:9f:00:71:0a:0c:d1:91:f9:2f:0d:a9:c0:04:18:7e:57:f7: 14:09:09:b0:aa:4d:74:f1:d6:21:58:53:b6:7b:26:63:72:14: 98:57:c6:0b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XTmVsCbZZlnn0H+6MoOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw ZmRlNTIwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTkxYTU2ZWJiY2Y0NmIwZDNiZDY5ZmY3ZGU2MTZlZmEyMmFkYzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fXW2JcUCcFjFYdlb10l1rddk2Z5 tFCXMmJ1p17Nbj8y43V55NpPmX0IZfL70NSPy9GlkaNtGyAc83JBKD6bV99c1A7l GlJdplsgXZ9vu5LoQNI9LR007u5nhB8D2eKyBx3W/wFE7A8qfYk7Mxq/WHRjaGKZ BVoB+JpGEDj5YS1UT8dUehFzqcLXlEyUbe76LseAhwjrAIzHykHwqvFdIhy0lqax 2T8bc9ixjJtvaLxjopg+ZqcxC/OYCYu0SkOY2t1zbek2JV0BjSTDsr3b41qYu+2L xhDks6XZvdhKSAjz63BAyR4zFbMcTqpZdeaHunRQgEjSK4oMPi/FvsDvIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKWRpW67z0aw071p/33mFu+iKtwSMB8GA1UdIwQY MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt OGNiZWY5MTNlMzQyLzEvcFpHbGJydlBSckRUdlduX2ZlWVc3NklxM0JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9cEAwQA woz2MA0GCSqGSIb3DQEBCwUAA4IBAQCLXX86X3fwmd/tvUm+DZMYQG6L0G0PAvbS fJVkmL3wNKcB0MIAX0fiFFNNH+nZkoS8MxOyvUXbHaHpN5/WobK3Sykjh66MUyRf 1S3LiY6BnAdMoglXSh33xnlJFe0r7TxbMuR5arTJWedbm1p1TfC9PYV8R5RM70nA NGlAWIOaCxYtQlenWk3Woj7o8/kQwP/eAfic9zpyVvsQcYllG7dl50EI6tDOdIIG c2FC5j3a074oYZt+yHnF8efRiYDDJOWAEqOTyxk0tAWmmEzWnceVcebRAHafhapE nwBxCgzRkfkvDanABBh+V/cUCQmwqk108dYhWFO2eyZjchSYV8YL -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:55 2026 by rpki-client