This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa File: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (raw, json) Hash identifier: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ= Subject key identifier: 67:E0:04:8B:41:2D:41:38:97:21:06:72:30:C7:7E:06:0D:5C:8E:92 Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce Certificate serial: 019B7F1398F04092100D676A88462C2622AF Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa Signing time: Fri 02 Jan 2026 14:19:09 +0000 ROA not before: Fri 02 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203273 IP address blocks: 185.95.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:98:f0:40:92:10:0d:67:6a:88:46:2c:26:22:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce Validity Not Before: Jan 2 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67e0048b412d41389721067230c77e060d5c8e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:81:66:b6:ef:38:16:82:b5:51:66:5f:9d: 3f:c2:90:c5:a6:a5:36:51:b5:e7:c5:10:4d:d8:cc: 6f:c2:46:5a:30:03:32:31:2a:29:7c:17:a9:df:9b: 44:33:42:40:5c:ac:22:2f:8a:ca:2f:0f:eb:96:b4: eb:50:75:eb:fc:96:3c:f0:8a:d9:4a:a0:bd:04:77: b9:fe:fb:13:07:56:c9:e0:30:d8:fa:79:ca:8d:d4: f6:36:c5:87:e6:44:80:11:b4:68:5f:f3:6a:35:e5: 89:b9:1c:6a:d7:d8:23:f6:64:c6:05:1e:8c:d6:81: 77:da:8c:65:47:0f:18:dd:1a:80:f3:8a:83:09:35: ee:ec:48:74:ec:16:f4:51:60:b2:fc:cd:92:70:9b: 2b:02:28:fc:dc:39:66:c7:09:90:f6:4a:b2:f5:39: 28:2d:de:b2:26:a2:6e:a5:3a:f8:c9:a7:98:0e:bf: 75:31:5e:f5:5b:59:40:26:e4:22:23:54:61:5c:d8: 25:59:d5:4b:2a:64:7d:0b:73:7c:f1:83:f6:d2:c1: 24:26:d5:6e:d5:df:59:25:ef:92:b8:6c:3a:d1:0e: b5:3f:64:51:34:fc:2f:da:f3:3a:1b:df:e8:d4:66: 98:c0:a6:08:b8:e6:ab:77:a3:a3:af:b8:69:3f:52: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E0:04:8B:41:2D:41:38:97:21:06:72:30:C7:7E:06:0D:5C:8E:92 X509v3 Authority Key Identifier: keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.4.0/24 Signature Algorithm: sha256WithRSAEncryption 76:62:81:ec:21:80:4e:23:60:61:24:06:79:b7:8f:e0:db:f5: 56:f4:50:7e:07:2a:84:a1:23:8e:e8:72:2d:91:0c:97:9c:74: a6:7b:e7:78:04:79:96:0b:8a:08:9a:f3:2f:18:35:3e:98:50: 7e:2e:05:1b:e7:af:61:03:06:a9:80:a9:13:39:69:25:f8:03: 21:40:24:6c:9f:34:43:c9:5d:a0:52:7a:e5:c4:e6:84:d3:40: a2:6c:c7:f3:55:c7:76:a8:66:39:5f:0a:ad:3a:3d:87:80:da: 6d:71:35:ea:02:04:29:c4:3e:6e:f5:dd:86:0a:82:a0:2b:66: 94:35:35:d1:d4:5f:f1:14:12:53:0e:49:5a:70:f3:00:1c:b1: c3:c5:83:b6:de:cd:54:fd:5a:bc:c5:fa:55:a7:9b:14:82:59: e0:cd:1e:5f:f3:c3:90:7c:62:a3:c9:60:24:cb:64:b7:5d:c8: 48:2d:1b:3d:b1:06:44:3a:6c:68:9c:ad:13:9d:b3:21:8b:2a: dd:32:cb:5f:94:de:6a:c7:ee:b0:9f:39:f8:6e:f8:6f:bc:4b: 43:6b:35:f7:8f:23:94:a7:42:21:47:90:c2:ea:98:0c:3f:2b: 2c:70:df:f1:08:bc:f4:8b:bc:72:d3:34:86:f0:08:2e:0b:03: de:53:91:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E5jwQJIQDWdqiEYsJiKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0 N2ZkY2UwHhcNMjYwMTAyMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2UwMDQ4YjQxMmQ0MTM4OTcyMTA2NzIzMGM3N2UwNjBkNWM4ZTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroeBZrbvOBaCtVFmX50/wpDFpqU2 UbXnxRBN2MxvwkZaMAMyMSopfBep35tEM0JAXKwiL4rKLw/rlrTrUHXr/JY88IrZ SqC9BHe5/vsTB1bJ4DDY+nnKjdT2NsWH5kSAEbRoX/NqNeWJuRxq19gj9mTGBR6M 1oF32oxlRw8Y3RqA84qDCTXu7Eh07Bb0UWCy/M2ScJsrAij83DlmxwmQ9kqy9Tko Ld6yJqJupTr4yaeYDr91MV71W1lAJuQiI1RhXNglWdVLKmR9C3N88YP20sEkJtVu 1d9ZJe+SuGw60Q61P2RRNPwv2vM6G9/o1GaYwKYIuOard6Ojr7hpP1I2owIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfgBItBLUE4lyEGcjDHfgYNXI6SMB8GA1UdIwQY MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt YjczYTM2ZDkzOWIyLzEvWi1BRWkwRXRRVGlYSVFaeU1NZC1CZzFjanBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV8EMA0G CSqGSIb3DQEBCwUAA4IBAQB2YoHsIYBOI2BhJAZ5t4/g2/VW9FB+ByqEoSOO6HIt kQyXnHSme+d4BHmWC4oImvMvGDU+mFB+LgUb569hAwapgKkTOWkl+AMhQCRsnzRD yV2gUnrlxOaE00CibMfzVcd2qGY5XwqtOj2HgNptcTXqAgQpxD5u9d2GCoKgK2aU NTXR1F/xFBJTDklacPMAHLHDxYO23s1U/Vq8xfpVp5sUglngzR5f88OQfGKjyWAk y2S3XchILRs9sQZEOmxonK0TnbMhiyrdMstflN5qx+6wnzn4bvhvvEtDazX3jyOU p0IhR5DC6pgMPysscN/xCLz0i7xy0zSG8AguCwPeU5E+ -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:29 2026 by rpki-client