This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/zRdC35WnIEnCYZCT4j5E7N7_rTw.roa File: zRdC35WnIEnCYZCT4j5E7N7_rTw.roa (raw, json) Hash identifier: saGXDkc1jAe459cl7aek9nzHiI4TpSoOXSkoCxsiBNU= Subject key identifier: CD:17:42:DF:95:A7:20:49:C2:61:90:93:E2:3E:44:EC:DE:FF:AD:3C Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B79106C4886197690C702624403E64CA7 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/zRdC35WnIEnCYZCT4j5E7N7_rTw.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 5.144.182.0/24 maxlen: 24 5.178.106.0/24 maxlen: 24 5.178.110.0/24 maxlen: 24 185.5.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6c:48:86:19:76:90:c7:02:62:44:03:e6:4c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd1742df95a72049c2619093e23e44ecdeffad3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:22:18:ed:b8:b7:88:fa:88:21:aa:04:4a: 7a:37:67:ce:d9:35:45:4d:93:02:a7:7f:9b:59:b9: 1a:73:62:82:dc:4d:c7:bd:db:6a:cd:31:91:0d:65: 57:8d:22:33:8f:49:b0:5b:01:45:9d:7f:64:73:8c: 3c:f2:08:65:0c:85:3f:af:30:f9:b7:a6:23:0d:ad: 99:fb:79:48:b0:05:8a:c5:15:04:87:d5:1d:51:b9: 02:fd:d9:d9:de:8f:3a:e6:18:86:55:7d:eb:16:a8: 57:3d:d3:4a:f4:0d:02:dc:d2:58:f1:26:7c:26:fc: 4d:f8:7a:89:2f:63:00:f5:02:e3:49:d5:5f:83:bf: 04:92:73:47:4e:f3:a0:a0:3f:70:47:d9:3a:6c:1c: ac:56:a8:d8:d2:ee:c4:90:50:8f:31:c5:4d:35:1c: 2e:0b:b9:96:d7:47:fd:35:e4:69:8a:77:78:5a:7e: d6:ac:87:0c:0a:97:08:a0:f2:d4:fd:29:3e:21:87: 6a:03:ce:5e:b2:fa:72:1d:a7:82:ae:4b:a4:da:28: 13:7d:aa:ea:f6:1e:a2:0c:1b:49:6f:f9:86:e9:a8: d6:d0:be:e9:72:c0:61:58:3d:9b:35:47:be:77:33: e6:f3:f2:51:87:65:a5:40:e2:48:d5:32:81:34:9a: b9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:17:42:DF:95:A7:20:49:C2:61:90:93:E2:3E:44:EC:DE:FF:AD:3C X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/zRdC35WnIEnCYZCT4j5E7N7_rTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.182.0/24 5.178.106.0/24 5.178.110.0/24 185.5.39.0/24 Signature Algorithm: sha256WithRSAEncryption a3:30:88:b6:00:9a:26:65:38:b9:0b:e5:71:e7:1e:7b:1b:6c: e1:25:84:6d:23:8c:d5:ea:72:3b:7a:49:44:b5:4a:38:9b:c0: 15:69:db:52:ed:1c:e0:21:bd:87:2b:87:1d:dd:30:32:e8:86: ef:7c:2d:ac:ef:17:ee:24:43:47:21:4d:e0:bb:63:d0:cb:3d: 68:9a:f5:ed:fe:ed:44:71:e2:aa:97:13:55:37:fb:60:90:78: 2c:d9:d1:64:92:a3:c4:82:f2:56:1e:9d:44:7a:e5:1d:16:e1: 22:fd:00:5f:73:6d:19:4a:1a:8b:cd:1c:f4:1d:8c:18:07:fc: df:29:8c:ce:6e:17:aa:74:5b:4f:e7:fc:c4:d2:39:f9:ed:a1: ad:52:46:50:00:8c:8c:08:8b:48:27:6b:c2:52:ba:1e:7f:d0: d3:29:9f:5e:2e:bb:73:3e:77:f9:b1:22:6c:dc:6b:3c:ed:fd: 88:da:9a:63:00:db:bc:3e:91:cc:9c:62:97:fd:c8:5e:53:99: 22:3d:90:e4:9c:d2:c2:20:43:9a:93:90:67:6f:34:35:09:b6: 86:38:d5:b2:df:24:c8:e5:a5:d5:06:3c:82:d6:58:88:6f:13: a6:02:3a:51:16:6c:fe:41:63:88:1d:5b:57:28:f4:ad:4d:1a: 68:b6:47:52 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EGxIhhl2kMcCYkQD5kynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDE3NDJkZjk1YTcyMDQ5YzI2MTkwOTNlMjNlNDRlY2RlZmZhZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR4iGO24t4j6iCGqBEp6N2fO2TVF TZMCp3+bWbkac2KC3E3HvdtqzTGRDWVXjSIzj0mwWwFFnX9kc4w88ghlDIU/rzD5 t6YjDa2Z+3lIsAWKxRUEh9UdUbkC/dnZ3o865hiGVX3rFqhXPdNK9A0C3NJY8SZ8 JvxN+HqJL2MA9QLjSdVfg78EknNHTvOgoD9wR9k6bBysVqjY0u7EkFCPMcVNNRwu C7mW10f9NeRpind4Wn7WrIcMCpcIoPLU/Sk+IYdqA85esvpyHaeCrkuk2igTfarq 9h6iDBtJb/mG6ajW0L7pcsBhWD2bNUe+dzPm8/JRh2WlQOJI1TKBNJq58QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFM0XQt+VpyBJwmGQk+I+ROze/608MB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvelJkQzM1V25JRW5DWVpDVDRqNUU3TjdfclR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABZC2AwQA BbJqAwQABbJuAwQAuQUnMA0GCSqGSIb3DQEBCwUAA4IBAQCjMIi2AJomZTi5C+Vx 5x57G2zhJYRtI4zV6nI7eklEtUo4m8AVadtS7RzgIb2HK4cd3TAy6IbvfC2s7xfu JENHIU3gu2PQyz1omvXt/u1EceKqlxNVN/tgkHgs2dFkkqPEgvJWHp1EeuUdFuEi /QBfc20ZShqLzRz0HYwYB/zfKYzObheqdFtP5/zE0jn57aGtUkZQAIyMCItIJ2vC Uroef9DTKZ9eLrtzPnf5sSJs3Gs87f2I2ppjANu8PpHMnGKX/cheU5kiPZDknNLC IEOak5BnbzQ1CbaGONWy3yTI5aXVBjyC1liIbxOmAjpRFmz+QWOIHVtXKPStTRpo tkdS -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:26 2026 by rpki-client