This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa File: ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa (raw, json) Hash identifier: uDFD5MRDq12e9FrZ9TcR4muF3bF0UyIZh3ZvvCBU2ko= Subject key identifier: 64:76:C7:32:85:4B:90:50:70:85:99:5F:B3:27:B2:32:8F:AB:D5:82 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019B7FF179C3AF320B91C54211841953794F Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa Signing time: Fri 02 Jan 2026 18:21:30 +0000 ROA not before: Fri 02 Jan 2026 18:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57342 IP address blocks: 194.76.112.0/24 maxlen: 24 2a0c:ffc0::/48 maxlen: 48 2a0c:ffc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:79:c3:af:32:0b:91:c5:42:11:84:19:53:79:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Jan 2 18:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6476c732854b90507085995fb327b2328fabd582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a1:fe:49:f4:32:b2:75:1b:56:33:c4:04:90: be:0e:01:9c:9d:bb:3e:2a:e9:19:47:02:da:97:61: 36:b9:57:83:02:23:85:17:a4:06:46:3b:4f:2f:26: 73:2d:74:4c:20:1f:c0:33:ef:b2:a7:e7:5c:dc:c8: 4e:f0:b1:06:d4:8b:5d:67:19:73:a0:aa:76:27:bd: 4f:d2:44:52:22:f9:84:2a:63:84:a5:f5:79:fe:77: 0e:16:3f:d1:91:09:df:5b:cb:02:67:71:b1:f9:b7: 19:1c:23:c1:a5:41:db:27:4a:e5:3a:b5:6d:a5:6b: 65:ce:7b:f5:8a:91:e4:88:ab:46:ea:b5:38:18:ef: b4:74:9c:43:b8:90:24:83:9c:46:36:d2:42:b0:c9: f4:fb:7a:73:96:94:fd:64:57:6f:77:8b:6b:f4:96: 38:f4:94:1f:8e:30:9f:76:d5:c5:7a:51:1e:72:26: 64:89:ac:35:c2:bf:4a:79:94:0f:b3:80:54:da:37: b8:d4:2e:da:41:84:d2:79:e4:c8:96:30:50:eb:2f: 66:c9:df:18:00:4d:c4:c1:df:20:3b:82:bc:a7:74: c6:fe:1a:41:db:48:63:aa:db:86:c2:b8:a9:3b:fa: bc:b8:ce:1a:71:09:9b:3c:82:4d:86:7b:14:0b:95: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:76:C7:32:85:4B:90:50:70:85:99:5F:B3:27:B2:32:8F:AB:D5:82 X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.112.0/24 IPv6: 2a0c:ffc0::/47 Signature Algorithm: sha256WithRSAEncryption 6c:fb:b6:12:50:e0:c0:fb:e0:4b:c3:82:64:7f:71:06:9f:2f: 93:d7:38:a2:ea:84:ae:92:18:15:9b:5b:3d:85:88:6e:97:2c: be:51:38:58:9b:9b:9f:50:a1:c2:3c:73:84:cc:4d:92:06:34: c6:b4:98:c7:c3:95:bd:0e:92:50:b7:00:ab:96:77:cf:9c:9a: 34:9d:d0:4e:83:8c:2b:6c:39:57:93:28:25:aa:10:21:c9:b1: b9:44:38:45:a9:1a:9a:94:8a:71:94:f2:d0:8a:68:bc:9d:43: 28:3d:2f:5c:c0:d0:e4:aa:cf:f7:44:7e:75:de:db:19:f0:70: dd:68:85:c7:36:e3:ad:38:fe:89:ac:e5:86:5e:10:3a:0c:da: 78:8d:1a:a5:18:60:be:a1:d6:65:79:16:7e:3d:66:d2:ec:bd: 2c:fa:4d:8c:ee:2f:7e:85:79:fb:05:73:ea:09:b6:99:96:e9: 4c:a3:66:a1:8c:44:ac:97:9b:c8:f7:eb:44:60:6c:f1:23:f8: 61:79:74:86:8a:9f:74:71:9d:0d:f4:9b:56:7d:81:7b:3e:03: 92:a9:1d:a7:0f:1c:82:48:f3:65:d0:1e:6a:19:1c:78:9b:ec: d6:70:67:a8:5c:5c:57:b2:d7:a1:11:53:55:ea:9a:8e:59:c7: 78:a7:b8:7c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8XnDrzILkcVCEYQZU3lPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjYwMTAyMTgyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDc2YzczMjg1NGI5MDUwNzA4NTk5NWZiMzI3YjIzMjhmYWJkNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qH+SfQysnUbVjPEBJC+DgGcnbs+ KukZRwLal2E2uVeDAiOFF6QGRjtPLyZzLXRMIB/AM++yp+dc3MhO8LEG1ItdZxlz oKp2J71P0kRSIvmEKmOEpfV5/ncOFj/RkQnfW8sCZ3Gx+bcZHCPBpUHbJ0rlOrVt pWtlznv1ipHkiKtG6rU4GO+0dJxDuJAkg5xGNtJCsMn0+3pzlpT9ZFdvd4tr9JY4 9JQfjjCfdtXFelEeciZkiaw1wr9KeZQPs4BU2je41C7aQYTSeeTIljBQ6y9myd8Y AE3Ewd8gO4K8p3TG/hpB20hjqtuGwripO/q8uM4acQmbPIJNhnsUC5UDowIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGR2xzKFS5BQcIWZX7MnsjKPq9WCMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvWkhiSE1vVkxrRkJ3aFpsZnN5ZXlNby1yMVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwkxwMA8E AgACMAkDBwEqDP/AAAAwDQYJKoZIhvcNAQELBQADggEBAGz7thJQ4MD74EvDgmR/ cQafL5PXOKLqhK6SGBWbWz2FiG6XLL5ROFibm59QocI8c4TMTZIGNMa0mMfDlb0O klC3AKuWd8+cmjSd0E6DjCtsOVeTKCWqECHJsblEOEWpGpqUinGU8tCKaLydQyg9 L1zA0OSqz/dEfnXe2xnwcN1ohcc24604/oms5YZeEDoM2niNGqUYYL6h1mV5Fn49 ZtLsvSz6TYzuL36FefsFc+oJtpmW6UyjZqGMRKyXm8j360RgbPEj+GF5dIaKn3Rx nQ30m1Z9gXs+A5KpHacPHIJI82XQHmoZHHib7NZwZ6hcXFey16ERU1Xqmo5Zx3in uHw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:20 2026 by rpki-client