This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/zeDR4o_SfBOszT4AEUW1U8duE-E.roa File: zeDR4o_SfBOszT4AEUW1U8duE-E.roa (raw, json) Hash identifier: DV7X0NS//RjfJsh5Wd8yUdRAZCxK0Mc4AEjjwna5jWA= Subject key identifier: CD:E0:D1:E2:8F:D2:7C:13:AC:CD:3E:00:11:45:B5:53:C7:6E:13:E1 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB51768BF6D2C5A4A18043C8002989 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/zeDR4o_SfBOszT4AEUW1U8duE-E.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50810 IP address blocks: 2.182.160.0/20 maxlen: 20 2.183.128.0/20 maxlen: 20 2.183.136.0/23 maxlen: 23 2.183.184.0/21 maxlen: 21 2.183.202.0/23 maxlen: 23 2.188.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:51:76:8b:f6:d2:c5:a4:a1:80:43:c8:00:29:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cde0d1e28fd27c13accd3e001145b553c76e13e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:3f:41:60:57:ac:ab:db:8f:19:7f:59:f4: 4e:2c:95:81:aa:ac:ef:c8:0f:50:bd:d7:57:08:70: f2:e7:0d:4d:a5:e8:ef:58:87:2f:39:c8:2a:93:d7: e1:a4:3c:ec:2c:30:b6:3a:da:d1:d9:8d:3b:4b:1a: a9:b3:bf:c3:a1:55:f5:ae:88:a4:ea:60:86:e2:5e: 29:62:f2:d2:9a:26:2f:9b:b8:32:1d:d8:2b:dd:f2: 82:86:7f:88:7a:a8:a6:f1:f5:a5:26:51:b5:e6:7a: bf:d3:87:80:8a:50:23:7d:6a:59:11:bc:39:a9:9f: f2:45:93:38:53:57:49:ad:b8:e7:a2:e3:78:68:0f: b0:b4:94:6d:ad:5b:23:2e:c8:a8:07:44:f6:5c:ff: 8e:75:90:58:b3:72:84:a6:04:8c:ae:c6:19:8c:53: b3:5d:02:db:0f:f1:d2:6f:ba:30:14:e8:3c:49:95: 7d:f5:1c:eb:92:c5:ea:99:df:d4:b4:39:97:af:51: 95:48:31:90:f0:13:f3:b6:cb:d9:cb:87:4d:a0:1a: 7e:89:59:c4:7d:ea:ee:2e:59:9e:d5:5a:ed:6a:66: 66:d8:07:09:70:46:9f:fe:ef:68:30:fb:a9:ab:77: 9e:9b:fe:fa:c3:ea:39:74:d3:26:28:23:13:0c:92: 99:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E0:D1:E2:8F:D2:7C:13:AC:CD:3E:00:11:45:B5:53:C7:6E:13:E1 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/zeDR4o_SfBOszT4AEUW1U8duE-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.182.160.0/20 2.183.128.0/20 2.183.184.0/21 2.183.202.0/23 2.188.32.0/21 Signature Algorithm: sha256WithRSAEncryption 08:3c:f6:42:97:3c:38:22:bd:5b:46:95:1c:e7:e5:91:fb:1d: 52:8b:6c:77:7d:84:54:17:aa:e4:b4:1d:21:81:45:33:f3:d1: ba:9f:39:3d:4d:73:54:2b:1f:30:6f:40:d3:01:21:74:ef:c1: 86:b2:a5:bb:be:a7:04:ce:b1:5e:67:57:d0:4d:dc:07:c7:09: 8d:18:18:00:24:0b:ed:d9:74:82:b2:62:a8:1f:0b:8e:77:8b: 8f:c9:27:c4:b1:59:f0:d6:74:51:1a:70:14:f6:d7:68:21:77: 02:ea:1c:67:f2:df:e0:5d:ed:55:db:b4:d9:40:12:3e:b9:01: f6:39:58:42:ff:d4:43:2c:a0:d0:3c:2b:a5:69:e5:ba:3c:d8: 7e:52:27:be:7d:e9:24:55:11:f3:95:b4:e3:d1:c7:a9:4f:b5: 8d:2e:ee:ae:de:ec:e9:dd:a7:8a:52:6f:bd:10:31:7b:81:32: f3:69:e5:50:2c:4b:6a:c9:84:8b:a3:05:3e:8d:14:b5:c9:c0: 37:3b:72:1b:8e:92:a9:04:6c:27:fd:85:6f:2b:8d:e2:6e:65: c7:22:d0:e1:bb:fe:cf:e9:52:de:cd:ec:73:6a:d4:ee:99:84: 0b:be:c7:0d:0d:a8:fb:1a:52:49:69:bf:7f:6b:b3:54:b4:a8: f6:69:0a:f6 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt261F2i/bSxaShgEPIACmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGUwZDFlMjhmZDI3YzEzYWNjZDNlMDAxMTQ1YjU1M2M3NmUxM2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmok/QWBXrKvbjxl/WfROLJWBqqzv yA9QvddXCHDy5w1NpejvWIcvOcgqk9fhpDzsLDC2OtrR2Y07Sxqps7/DoVX1roik 6mCG4l4pYvLSmiYvm7gyHdgr3fKChn+Ieqim8fWlJlG15nq/04eAilAjfWpZEbw5 qZ/yRZM4U1dJrbjnouN4aA+wtJRtrVsjLsioB0T2XP+OdZBYs3KEpgSMrsYZjFOz XQLbD/HSb7owFOg8SZV99RzrksXqmd/UtDmXr1GVSDGQ8BPztsvZy4dNoBp+iVnE feruLlme1VrtamZm2AcJcEaf/u9oMPupq3eem/76w+o5dNMmKCMTDJKZnQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFM3g0eKP0nwTrM0+ABFFtVPHbhPhMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvemVEUjRvX1NmQk9zelQ0QUVVVzFVOGR1RS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEAragAwQE AreAAwQDAre4AwQBArfKAwQDArwgMA0GCSqGSIb3DQEBCwUAA4IBAQAIPPZClzw4 Ir1bRpUc5+WR+x1Si2x3fYRUF6rktB0hgUUz89G6nzk9TXNUKx8wb0DTASF078GG sqW7vqcEzrFeZ1fQTdwHxwmNGBgAJAvt2XSCsmKoHwuOd4uPySfEsVnw1nRRGnAU 9tdoIXcC6hxn8t/gXe1V27TZQBI+uQH2OVhC/9RDLKDQPCulaeW6PNh+Uie+fekk VRHzlbTj0cepT7WNLu6u3uzp3aeKUm+9EDF7gTLzaeVQLEtqyYSLowU+jRS1ycA3 O3IbjpKpBGwn/YVvK43ibmXHItDhu/7P6VLezexzatTumYQLvscNDaj7GlJJab9/ a7NUtKj2aQr2 -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:11 2026 by rpki-client