This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/ZhFjPaAaoWbGjF1XIWOMk5ROXvU.roa File: ZhFjPaAaoWbGjF1XIWOMk5ROXvU.roa (raw, json) Hash identifier: 4/naq0yHXaQrgA9XVDME9Z9XJvL09K0FBUJcLm4oQ/A= Subject key identifier: 66:11:63:3D:A0:1A:A1:66:C6:8C:5D:57:21:63:8C:93:94:4E:5E:F5 Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938 Certificate serial: 019B77C7652F89C09AA4C160C9458C54F21D Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/ZhFjPaAaoWbGjF1XIWOMk5ROXvU.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59989 IP address blocks: 185.127.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:65:2f:89:c0:9a:a4:c1:60:c9:45:8c:54:f2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6611633da01aa166c68c5d5721638c93944e5ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:5d:5c:a6:01:33:e8:7c:f1:5c:9a:86:38: 63:b2:ae:ee:a8:fc:1c:47:6e:59:a3:14:b8:0d:a0: a0:6b:ac:f3:45:64:60:78:2b:4b:85:af:9d:b7:da: 5b:2b:b4:f7:28:d3:34:ed:ed:27:d7:8f:20:bb:2b: 4a:ea:1f:27:25:a0:c4:28:cf:94:26:6b:30:ab:d0: 62:0f:2e:ab:40:e6:b7:11:4a:f7:4d:b3:11:78:77: 70:78:11:ab:e7:24:72:90:f6:6f:b6:ca:ce:48:3a: 8d:12:33:44:92:24:af:2a:3f:c2:82:ad:d2:8f:31: 24:d7:fd:0e:cd:59:b1:72:04:95:0b:7c:bf:2b:29: c6:7c:a8:d3:ed:f7:5b:2e:72:90:cc:08:20:72:25: 49:e7:55:5e:16:62:cf:30:24:13:6a:0b:fd:90:a8: 39:56:30:22:71:36:12:81:42:6f:8d:15:81:7f:57: 2e:c8:b9:94:d2:ab:4a:26:40:85:be:d1:0d:e5:11: 04:31:b4:0e:bd:e7:0d:d1:1b:a9:ae:0a:29:1d:05: 09:2c:d9:a9:08:be:12:2f:94:0a:12:c5:74:e4:1f: de:fb:55:6e:c2:b2:6e:63:ed:1d:ad:5a:9a:65:29: 6f:f6:88:b3:a0:2e:44:e1:8c:ce:55:a5:db:3e:2e: d8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:11:63:3D:A0:1A:A1:66:C6:8C:5D:57:21:63:8C:93:94:4E:5E:F5 X509v3 Authority Key Identifier: keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/ZhFjPaAaoWbGjF1XIWOMk5ROXvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.124.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:5f:6d:4b:56:f4:6e:ac:06:58:79:7b:83:ea:69:50:99:f1: 24:ea:98:7f:76:4f:45:fd:3a:2e:ff:94:72:57:b6:53:2a:92: 38:ec:a6:c7:b0:59:f7:5e:9e:8c:15:10:9b:09:d9:df:73:09: 40:64:32:a0:71:4d:10:73:da:22:18:d0:5a:a7:9d:68:1d:33: cc:a9:c9:d2:d9:11:27:6c:ad:e1:9b:cb:c5:2b:a5:7d:f2:49: ef:cf:53:e7:bc:a2:26:41:5a:aa:c7:49:b5:c4:dc:c5:af:2e: 1d:af:f8:7a:96:ca:90:dc:26:e6:b0:2b:77:90:17:49:c6:91: 16:dc:d3:eb:0c:07:22:a4:15:0b:24:38:03:fb:64:c4:22:9d: f8:27:16:4c:0c:64:fa:ca:e3:b4:7f:ee:f3:67:cc:69:f1:38: 05:f5:07:31:af:1a:3e:60:3b:7c:82:3f:09:51:9f:0c:7a:dc: dc:1e:75:42:1e:65:57:9f:3b:0e:bc:d0:e4:6f:da:39:2a:26: c9:0a:a9:78:9d:9d:78:25:4d:8b:dd:f0:ed:75:ef:98:81:5d: f8:73:cf:8f:c9:ca:cf:84:e4:e5:44:a9:00:db:ac:bd:a4:19: 11:1d:e9:f3:86:69:fb:40:16:5d:57:9b:54:91:c6:1a:65:c5: ca:59:63:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2UvicCapMFgyUWMVPIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDI4NWRmNWIwMzllMGYwNGUyZGZlY2UyOGE1YThmYmVj NmU5MzgwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjExNjMzZGEwMWFhMTY2YzY4YzVkNTcyMTYzOGM5Mzk0NGU1ZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruVdXKYBM+h88Vyahjhjsq7uqPwc R25ZoxS4DaCga6zzRWRgeCtLha+dt9pbK7T3KNM07e0n148guytK6h8nJaDEKM+U Jmswq9BiDy6rQOa3EUr3TbMReHdweBGr5yRykPZvtsrOSDqNEjNEkiSvKj/Cgq3S jzEk1/0OzVmxcgSVC3y/KynGfKjT7fdbLnKQzAggciVJ51VeFmLPMCQTagv9kKg5 VjAicTYSgUJvjRWBf1cuyLmU0qtKJkCFvtEN5REEMbQOvecN0RuprgopHQUJLNmp CL4SL5QKEsV05B/e+1VuwrJuY+0drVqaZSlv9oizoC5E4YzOVaXbPi7Y3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGYRYz2gGqFmxoxdVyFjjJOUTl71MB8GA1UdIwQY MBaAFMEChd9bA54PBOLf7OKKWo++xuk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUt NTJhZmM3N2NhMThmLzEvWmhGalBhQWFvV2JHakYxWElXT01rNVJPWHZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUtNTJhZmM3N2NhMThm LzEvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX98MA0G CSqGSIb3DQEBCwUAA4IBAQAeX21LVvRurAZYeXuD6mlQmfEk6ph/dk9F/Tou/5Ry V7ZTKpI47KbHsFn3Xp6MFRCbCdnfcwlAZDKgcU0Qc9oiGNBap51oHTPMqcnS2REn bK3hm8vFK6V98knvz1PnvKImQVqqx0m1xNzFry4dr/h6lsqQ3CbmsCt3kBdJxpEW 3NPrDAcipBULJDgD+2TEIp34JxZMDGT6yuO0f+7zZ8xp8TgF9Qcxrxo+YDt8gj8J UZ8MetzcHnVCHmVXnzsOvNDkb9o5KibJCql4nZ14JU2L3fDtde+YgV34c8+PycrP hOTlRKkA26y9pBkRHenzhmn7QBZdV5tUkcYaZcXKWWMe -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:02 2026 by rpki-client