This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/ZGMDMaaeutNnkXyJL58734MtHlg.roa File: ZGMDMaaeutNnkXyJL58734MtHlg.roa (raw, json) Hash identifier: Zs6W0mlBy5j5neBEaMNbSPEex6wUKIOiG0C8/ZE4ktw= Subject key identifier: 64:63:03:31:A6:9E:BA:D3:67:91:7C:89:2F:9F:3B:DF:83:2D:1E:58 Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469 Certificate serial: 019B7A5AC19A115B77CE2E714A68C0B0E176 Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/ZGMDMaaeutNnkXyJL58734MtHlg.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47856 IP address blocks: 195.10.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c1:9a:11:5b:77:ce:2e:71:4a:68:c0:b0:e1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60325c21d2fafe743398dc1e5574433280110469 Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64630331a69ebad367917c892f9f3bdf832d1e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:ea:8e:29:41:f0:ee:3f:dd:4b:01:17:a4: 9c:7f:a7:4d:1d:9e:c8:94:20:29:36:58:d4:81:ee: 4a:8d:5a:37:52:49:03:03:8d:a6:20:9b:c1:02:79: 7b:28:cd:b8:9d:c5:70:a5:e9:c6:1c:f3:71:9b:c8: ab:39:20:11:62:ec:9f:f2:5f:95:d2:d9:69:ae:67: 34:34:e8:3e:c5:71:00:b9:4c:b0:c1:f6:4d:08:cb: 70:99:bc:87:ad:d9:7e:18:82:72:5d:05:8b:b4:f6: 1c:e2:fe:7a:5f:ec:2b:e6:83:b7:a3:7e:ea:8e:6b: 67:0c:76:db:dd:d2:47:c7:28:4c:43:7b:51:38:be: 0d:a1:28:f3:c9:96:78:51:7b:d5:ad:2f:58:85:cc: 22:9e:ba:b5:56:73:2b:27:de:f5:61:41:cd:cf:87: 28:19:36:51:14:85:32:c1:81:89:cb:cd:3e:e1:1a: c9:60:fa:2e:af:45:44:b4:90:d5:54:97:41:4c:54: fc:8c:47:cd:00:63:06:6e:3a:cc:10:9e:64:a6:7c: c4:96:3a:6b:54:89:68:9b:bd:d5:10:ca:dc:cb:28: 5d:e1:26:f7:60:97:67:56:2b:52:2e:a9:bd:cd:07: f0:41:f1:1c:6f:ad:6b:61:76:b0:cd:16:f6:b4:b2: 65:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:63:03:31:A6:9E:BA:D3:67:91:7C:89:2F:9F:3B:DF:83:2D:1E:58 X509v3 Authority Key Identifier: keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/ZGMDMaaeutNnkXyJL58734MtHlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.217.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:7e:eb:85:73:6a:49:dd:0d:16:dd:6a:64:7e:91:b9:e4:b2: fc:34:63:8f:ed:0c:80:47:84:20:75:90:04:56:09:53:07:04: 4c:b4:04:9c:2f:62:f7:54:bc:45:d1:35:d7:52:bc:dd:16:66: 9b:51:ae:d7:a2:cb:90:48:12:f9:4b:24:e8:d8:c5:dc:65:c8: 08:0f:28:1a:e0:60:31:95:14:7d:c8:49:d5:49:aa:9c:cc:d2: e6:04:7d:07:29:74:6d:7d:9a:99:c3:18:ef:44:0f:2e:7b:77: c6:96:fc:1f:b6:13:c4:31:86:d6:3b:85:e0:d1:26:01:51:7c: b6:b4:3f:df:ec:7e:6d:83:cc:c1:b5:7d:44:fa:ec:9a:a8:e3: 93:d8:71:92:1e:6a:25:52:7c:8c:69:3d:c0:3c:ed:a5:ef:c1: c4:9f:5c:d6:d3:cf:ed:5d:57:a8:28:b1:7f:73:84:b7:66:b8: 7e:de:c1:07:9e:6e:45:77:43:ce:ff:78:50:ef:2b:58:35:3b: b5:a2:86:62:2c:77:b0:2f:61:cc:bf:f6:37:3e:e8:1f:72:62: 17:4c:63:14:5d:98:02:ea:c8:7c:d5:7b:07:fe:b0:b2:9b:84: 65:6a:be:86:a4:ff:7f:43:bc:c6:39:1c:4e:1a:47:6e:ba:23: 35:a5:5c:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsGaEVt3zi5xSmjAsOF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzI1YzIxZDJmYWZlNzQzMzk4ZGMxZTU1NzQ0MzMyODAx MTA0NjkwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDYzMDMzMWE2OWViYWQzNjc5MTdjODkyZjlmM2JkZjgzMmQxZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutnqjilB8O4/3UsBF6Scf6dNHZ7I lCApNljUge5KjVo3UkkDA42mIJvBAnl7KM24ncVwpenGHPNxm8irOSARYuyf8l+V 0tlprmc0NOg+xXEAuUywwfZNCMtwmbyHrdl+GIJyXQWLtPYc4v56X+wr5oO3o37q jmtnDHbb3dJHxyhMQ3tROL4NoSjzyZZ4UXvVrS9Yhcwinrq1VnMrJ971YUHNz4co GTZRFIUywYGJy80+4RrJYPour0VEtJDVVJdBTFT8jEfNAGMGbjrMEJ5kpnzEljpr VIlom73VEMrcyyhd4Sb3YJdnVitSLqm9zQfwQfEcb61rYXawzRb2tLJl+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGRjAzGmnrrTZ5F8iS+fO9+DLR5YMB8GA1UdIwQY MBaAFGAyXCHS+v50M5jcHlV0QzKAEQRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQt YzU4ZTk1Y2Q0Mjc3LzEvWkdNRE1hYWV1dE5ua1h5Skw1ODczNE10SGxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQtYzU4ZTk1Y2Q0Mjc3 LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwrZMA0G CSqGSIb3DQEBCwUAA4IBAQAbfuuFc2pJ3Q0W3WpkfpG55LL8NGOP7QyAR4QgdZAE VglTBwRMtAScL2L3VLxF0TXXUrzdFmabUa7XosuQSBL5SyTo2MXcZcgIDyga4GAx lRR9yEnVSaqczNLmBH0HKXRtfZqZwxjvRA8ue3fGlvwfthPEMYbWO4Xg0SYBUXy2 tD/f7H5tg8zBtX1E+uyaqOOT2HGSHmolUnyMaT3APO2l78HEn1zW08/tXVeoKLF/ c4S3Zrh+3sEHnm5Fd0PO/3hQ7ytYNTu1ooZiLHewL2HMv/Y3PugfcmIXTGMUXZgC 6sh81XsH/rCym4Rlar6GpP9/Q7zGORxOGkduuiM1pVwR -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:19 2026 by rpki-client