This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/ZRqL0ZQYom47oCvdLADk1vcBuk4.roa File: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (raw, json) Hash identifier: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8= Subject key identifier: 65:1A:8B:D1:94:18:A2:6E:3B:A0:2B:DD:2C:00:E4:D6:F7:01:BA:4E Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c Certificate serial: 019B791042380CDF0DBD0B622BE9110C4C71 Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/ZRqL0ZQYom47oCvdLADk1vcBuk4.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57428 IP address blocks: 185.57.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:42:38:0c:df:0d:bd:0b:62:2b:e9:11:0c:4c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=651a8bd19418a26e3ba02bdd2c00e4d6f701ba4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:42:5a:73:9a:2b:51:e9:ae:8b:45:2a:19:bc: 6b:3c:a9:2c:ed:83:7a:0c:63:c1:2a:df:c6:7b:20: 1d:7c:45:de:39:c5:25:be:65:c9:32:c3:72:87:b7: 6c:1e:0a:0e:5c:a9:75:ab:56:d9:e0:95:b3:cd:f5: aa:c0:d2:d7:08:e6:1d:d4:51:8d:de:41:fc:ea:13: a8:35:0d:89:d7:50:c7:cf:1d:7d:91:d7:2e:56:22: 91:14:2c:cd:90:f6:69:68:e2:0d:47:b2:d8:42:d5: 03:95:75:29:b4:18:6f:93:5c:45:42:a1:fd:f2:bf: 1b:50:4c:45:51:0b:57:2b:c5:38:c2:4f:fd:bb:c1: e5:4f:c8:09:f9:08:6a:52:02:94:35:a5:a4:a0:e3: 52:45:8d:54:ea:45:28:43:82:0c:e6:45:5d:72:dc: 48:e3:6c:11:1f:09:03:c4:ec:56:32:37:26:bd:6d: 70:62:c7:37:35:ae:b3:a0:00:c8:c0:a4:37:07:0f: 97:87:43:b6:18:c4:ca:7b:22:7c:0e:9d:97:1e:07: 75:2f:13:ae:88:b1:d0:c8:cd:e2:57:32:e2:39:ba: 43:85:3a:15:54:5e:a4:6e:f6:6c:1c:8f:08:e3:af: 51:b3:d2:2a:08:ae:29:c1:e6:49:83:bb:0f:70:c4: 31:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1A:8B:D1:94:18:A2:6E:3B:A0:2B:DD:2C:00:E4:D6:F7:01:BA:4E X509v3 Authority Key Identifier: keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/ZRqL0ZQYom47oCvdLADk1vcBuk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.44.0/23 Signature Algorithm: sha256WithRSAEncryption 59:18:fe:6f:08:dd:85:c8:47:92:53:70:ad:44:3a:91:c3:a0: 2a:44:65:b5:f7:2f:0a:b0:88:23:c4:3f:d2:5a:4f:5f:6e:e2: 4c:9e:22:87:a1:5b:95:b5:f9:90:2e:9f:5b:40:a1:5a:0a:a8: 8a:ed:01:9a:78:53:db:36:9f:a5:33:3d:e3:b1:77:22:91:b2: 49:3c:f1:32:94:38:a7:6e:9c:b9:f4:41:04:aa:50:1f:cc:4c: 26:1d:e4:52:88:64:52:02:7f:a0:0c:c2:26:a1:12:06:70:f9: c1:7f:e9:40:9b:5c:b9:d0:61:f7:64:11:8c:39:f4:c3:ab:7f: ba:e8:42:0a:d8:5a:ca:b2:0a:9d:c9:a1:8f:15:1c:9c:8d:5f: 9d:34:39:96:18:7c:64:12:d8:ef:c3:bf:3e:e2:7f:4d:6f:fb: 18:a7:66:63:52:5b:51:db:1b:c2:3d:0e:36:12:5e:fa:2b:cf: 1d:2c:3a:c2:39:0a:6f:b3:f9:7d:f4:65:ca:22:ef:77:6d:3d: df:b4:da:b7:7b:22:39:a5:0d:ac:e2:c0:67:c4:fa:47:a1:00: 45:9d:1d:24:12:2e:31:0d:b3:40:39:0c:37:60:f5:af:46:b6: 9b:93:c1:a0:11:00:d5:da:bc:ad:66:49:1d:d3:70:ef:96:87: 5f:94:11:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EEI4DN8NvQtiK+kRDExxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNGIwZWVkMmM1YTc4N2FkODdmYjQ5ZjA0ZDNmZGYzZDBm NDlkNGMwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTFhOGJkMTk0MThhMjZlM2JhMDJiZGQyYzAwZTRkNmY3MDFiYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0Jac5orUemui0UqGbxrPKks7YN6 DGPBKt/GeyAdfEXeOcUlvmXJMsNyh7dsHgoOXKl1q1bZ4JWzzfWqwNLXCOYd1FGN 3kH86hOoNQ2J11DHzx19kdcuViKRFCzNkPZpaOINR7LYQtUDlXUptBhvk1xFQqH9 8r8bUExFUQtXK8U4wk/9u8HlT8gJ+QhqUgKUNaWkoONSRY1U6kUoQ4IM5kVdctxI 42wRHwkDxOxWMjcmvW1wYsc3Na6zoADIwKQ3Bw+Xh0O2GMTKeyJ8Dp2XHgd1LxOu iLHQyM3iVzLiObpDhToVVF6kbvZsHI8I469Rs9IqCK4pweZJg7sPcMQx1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGUai9GUGKJuO6Ar3SwA5Nb3AbpOMB8GA1UdIwQY MBaAFANLDu0sWnh62H+0nwTT/fPQ9J1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEt ZTA4NTI3NWFhMzY0LzEvWlJxTDBaUVlvbTQ3b0N2ZExBRGsxdmNCdWs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEtZTA4NTI3NWFhMzY0 LzEvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuTksMA0G CSqGSIb3DQEBCwUAA4IBAQBZGP5vCN2FyEeSU3CtRDqRw6AqRGW19y8KsIgjxD/S Wk9fbuJMniKHoVuVtfmQLp9bQKFaCqiK7QGaeFPbNp+lMz3jsXcikbJJPPEylDin bpy59EEEqlAfzEwmHeRSiGRSAn+gDMImoRIGcPnBf+lAm1y50GH3ZBGMOfTDq3+6 6EIK2FrKsgqdyaGPFRycjV+dNDmWGHxkEtjvw78+4n9Nb/sYp2ZjUltR2xvCPQ42 El76K88dLDrCOQpvs/l99GXKIu93bT3ftNq3eyI5pQ2s4sBnxPpHoQBFnR0kEi4x DbNAOQw3YPWvRrabk8GgEQDV2rytZkkd03DvlodflBGt -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:26 2026 by rpki-client