This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/_z2AETln5h0EJM43e3v3oGPmobw.roa File: _z2AETln5h0EJM43e3v3oGPmobw.roa (raw, json) Hash identifier: dTSObFPPNK6gQmE+hkeFVAZehlQ/J5wYJQcm52Y6s9s= Subject key identifier: FF:3D:80:11:39:67:E6:1D:04:24:CE:37:7B:7B:F7:A0:63:E6:A1:BC Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019BF07B4B1A09106EBCCD247695B6D06582 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/_z2AETln5h0EJM43e3v3oGPmobw.roa Signing time: Sat 24 Jan 2026 14:49:30 +0000 ROA not before: Sat 24 Jan 2026 14:49:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401322 IP address blocks: 141.98.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f0:7b:4b:1a:09:10:6e:bc:cd:24:76:95:b6:d0:65:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jan 24 14:49:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff3d80113967e61d0424ce377b7bf7a063e6a1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:6c:78:e8:53:12:6a:40:33:5b:28:56:d4: 36:d4:f3:bd:88:2b:be:ff:20:b2:21:f7:e7:55:aa: 78:58:6e:2b:cf:43:6d:a6:52:43:a3:78:b9:01:70: 7c:53:2f:23:29:cc:cc:f8:6d:73:d8:bf:eb:7d:29: 4d:79:7b:16:d8:fd:c8:51:2a:20:34:84:1b:5b:7b: d1:97:53:86:c2:ca:59:01:bc:af:53:8c:bb:d7:83: f5:6c:eb:ad:a0:36:03:af:08:92:7c:81:d6:a5:05: 75:28:47:4c:bf:18:70:27:7e:ec:74:37:02:55:55: 19:8a:c0:08:a4:4b:c1:a6:ce:a6:12:e0:5f:4a:16: 6d:ae:95:6e:df:4f:e9:78:94:3a:f8:7b:72:40:6c: af:d0:e5:12:82:93:20:42:c1:07:ab:aa:fd:e6:72: 52:cd:c6:e5:4c:18:37:59:5b:b6:38:54:17:03:a4: 41:89:1c:3d:88:b8:38:b0:9f:de:09:60:e4:45:1d: f9:d2:02:36:de:87:5d:25:6d:57:a5:05:7c:39:84: db:5e:cc:ce:c1:6b:ea:7f:8c:d4:5d:44:99:89:5c: 84:49:d5:27:83:0d:12:64:4c:51:e6:e1:07:97:66: 0b:3d:16:89:47:80:9f:6d:8b:c8:2b:ea:1e:d3:3a: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3D:80:11:39:67:E6:1D:04:24:CE:37:7B:7B:F7:A0:63:E6:A1:BC X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/_z2AETln5h0EJM43e3v3oGPmobw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.149.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:ce:b6:e4:b3:d1:91:42:e2:d5:ae:e4:e7:8f:e6:72:79:ef: 7c:9b:73:bb:4f:c2:b6:e4:5d:e6:e4:4d:97:55:d2:f2:77:df: ef:03:12:61:8c:94:9c:60:11:21:ac:40:28:dc:e1:92:49:8a: a3:8f:31:1f:2d:e6:c5:8a:a4:fc:76:7d:f7:35:07:52:ce:ef: 60:70:e8:d7:99:8f:02:46:f4:5d:56:39:72:2d:fe:9f:be:e9: 61:a8:7b:6d:c4:46:a6:f0:6a:20:09:ad:fd:99:7a:20:df:12: 7a:63:86:09:45:2a:70:07:d8:3b:1f:b1:cd:8a:51:76:f7:b9: 97:60:cc:c9:7c:63:2e:13:7c:db:67:47:09:38:14:b4:13:04: f0:e2:0a:73:b3:05:58:dd:0c:98:88:0e:52:b8:49:b5:2c:dc: 5f:c2:dd:de:38:59:43:c8:73:be:32:0a:b3:5e:4e:61:8e:74: 92:5e:bf:a2:0e:b5:de:5b:4a:37:54:a1:50:3b:a5:64:1a:e0: 97:5e:21:f1:0e:18:5b:df:f6:c6:5a:d7:3f:bd:89:6c:05:20: 7d:61:7e:9b:bf:e7:5f:32:bc:ab:44:02:1d:e3:23:59:c1:32: ca:e1:d0:69:d4:71:2b:3f:49:a3:6c:4d:a1:76:a9:f4:e3:b3: c3:01:41:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvwe0saCRBuvM0kdpW20GWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMTI0MTQ0OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjNkODAxMTM5NjdlNjFkMDQyNGNlMzc3YjdiZjdhMDYzZTZhMWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgpseOhTEmpAM1soVtQ21PO9iCu+ /yCyIffnVap4WG4rz0NtplJDo3i5AXB8Uy8jKczM+G1z2L/rfSlNeXsW2P3IUSog NIQbW3vRl1OGwspZAbyvU4y714P1bOutoDYDrwiSfIHWpQV1KEdMvxhwJ37sdDcC VVUZisAIpEvBps6mEuBfShZtrpVu30/peJQ6+HtyQGyv0OUSgpMgQsEHq6r95nJS zcblTBg3WVu2OFQXA6RBiRw9iLg4sJ/eCWDkRR350gI23oddJW1XpQV8OYTbXszO wWvqf4zUXUSZiVyESdUngw0SZExR5uEHl2YLPRaJR4CfbYvIK+oe0zqrhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP89gBE5Z+YdBCTON3t796Bj5qG8MB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvX3oyQUVUbG41aDBFSk00M2UzdjNvR1Btb2J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWKVMA0G CSqGSIb3DQEBCwUAA4IBAQAtzrbks9GRQuLVruTnj+Zyee98m3O7T8K25F3m5E2X VdLyd9/vAxJhjJScYBEhrEAo3OGSSYqjjzEfLebFiqT8dn33NQdSzu9gcOjXmY8C RvRdVjlyLf6fvulhqHttxEam8GogCa39mXog3xJ6Y4YJRSpwB9g7H7HNilF297mX YMzJfGMuE3zbZ0cJOBS0EwTw4gpzswVY3QyYiA5SuEm1LNxfwt3eOFlDyHO+Mgqz Xk5hjnSSXr+iDrXeW0o3VKFQO6VkGuCXXiHxDhhb3/bGWtc/vYlsBSB9YX6bv+df MryrRAId4yNZwTLK4dBp1HErP0mjbE2hdqn047PDAUGE -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:10 2026 by rpki-client