This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/_rfmzz-yZAlcXuyaot1B14TY8Rs.roa File: _rfmzz-yZAlcXuyaot1B14TY8Rs.roa (raw, json) Hash identifier: 8DQeGkceNu8QMbKHTT3KiNUtIAyxMGM9idsaD6CDdpQ= Subject key identifier: FE:B7:E6:CF:3F:B2:64:09:5C:5E:EC:9A:A2:DD:41:D7:84:D8:F1:1B Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019B7AC952D6CFAD03FD0BF8FC7C47B9682D Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/_rfmzz-yZAlcXuyaot1B14TY8Rs.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14576 IP address blocks: 45.145.128.0/23 maxlen: 23 193.187.92.0/22 maxlen: 22 193.202.12.0/22 maxlen: 22 193.202.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:52:d6:cf:ad:03:fd:0b:f8:fc:7c:47:b9:68:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feb7e6cf3fb264095c5eec9aa2dd41d784d8f11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:73:81:04:4a:92:f5:e8:8e:ae:57:d5:4e: b4:77:0c:01:90:49:bf:77:63:f2:1a:c0:df:f7:ef: 58:dd:ee:26:f0:f2:9f:44:3d:67:bf:68:b9:da:7a: 42:48:6d:36:9d:23:d2:8f:c1:17:39:0a:37:df:5f: 4b:34:3d:14:20:e2:a5:5b:11:3b:5d:82:f1:f2:99: 5b:e2:a3:65:74:d9:11:2b:ec:33:5d:08:cf:21:a8: e4:2b:90:13:f9:f4:a6:61:64:bd:ba:ac:3d:55:b3: 93:e7:f7:14:5b:3b:66:fc:d7:c6:2b:85:1a:6b:c0: 8f:10:cb:c2:4f:82:97:52:fd:d1:5b:98:d8:b2:05: 40:9b:4e:20:65:4e:f2:1f:50:89:ba:29:6f:df:f7: 3e:ca:33:63:b7:a9:3c:58:b4:35:98:4c:aa:5f:f9: 6d:f6:dc:57:e3:fc:4a:ec:b1:72:d8:0a:04:59:5e: 6b:23:c7:3b:c0:8a:80:1e:37:31:72:3d:41:e6:65: 23:85:cb:3f:02:59:fa:da:f0:9b:10:9f:93:95:2e: 2a:71:a0:96:6c:2f:81:64:63:40:f4:d7:a7:93:3a: 6f:11:50:94:4a:f4:d8:74:66:be:d8:57:95:3a:5b: 2a:e9:d5:d4:a1:42:f8:74:3c:0f:2f:d7:d0:fd:84: 5d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B7:E6:CF:3F:B2:64:09:5C:5E:EC:9A:A2:DD:41:D7:84:D8:F1:1B X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/_rfmzz-yZAlcXuyaot1B14TY8Rs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.128.0/23 193.187.92.0/22 193.202.12.0/22 193.202.84.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:4f:f1:fe:9d:9c:a4:bc:3f:df:a1:d2:f2:6a:85:21:13:83: cc:31:09:15:e4:f4:2b:4d:e0:64:b4:c0:91:54:6d:12:43:9c: 94:41:8d:ae:a9:8d:81:03:e8:c3:07:ab:c5:68:42:bc:80:cb: d5:f6:f4:78:29:de:50:17:3d:dd:70:f4:c6:49:9f:47:1c:1c: 09:6e:f2:70:af:98:40:c3:c5:47:ef:8d:16:c7:31:57:af:08: 36:30:87:2b:de:d5:9a:26:b9:c1:c8:4f:1c:a3:ad:9b:b5:58: 7b:5a:85:2a:54:e2:31:85:57:11:dc:c5:38:dc:83:78:25:a6: 12:72:5f:17:f0:99:f7:ed:f8:b7:6f:e6:d5:98:9c:20:6e:2e: b9:92:b9:54:dc:76:64:ef:05:15:32:f7:67:a8:34:61:2d:0a: 93:65:ee:c6:a5:2c:ec:9c:0d:2a:96:f0:e1:1c:ea:0d:b5:80: c1:e9:7b:00:cd:29:91:5e:14:9f:99:37:9c:56:7e:fc:f9:3f: ad:27:f6:7b:f9:9e:f1:1e:3c:37:ec:95:5a:6c:ce:5d:e8:9a: ca:28:4e:f2:02:a4:79:9d:9b:70:59:24:2b:c5:c6:57:ba:a3: d5:fe:e3:5f:3a:a1:75:be:e0:6d:7a:8d:0b:0a:7a:0f:11:48: 14:2b:8d:53 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6yVLWz60D/Qv4/HxHuWgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWI3ZTZjZjNmYjI2NDA5NWM1ZWVjOWFhMmRkNDFkNzg0ZDhmMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqpzgQRKkvXojq5X1U60dwwBkEm/ d2PyGsDf9+9Y3e4m8PKfRD1nv2i52npCSG02nSPSj8EXOQo3319LND0UIOKlWxE7 XYLx8plb4qNldNkRK+wzXQjPIajkK5AT+fSmYWS9uqw9VbOT5/cUWztm/NfGK4Ua a8CPEMvCT4KXUv3RW5jYsgVAm04gZU7yH1CJuilv3/c+yjNjt6k8WLQ1mEyqX/lt 9txX4/xK7LFy2AoEWV5rI8c7wIqAHjcxcj1B5mUjhcs/Aln62vCbEJ+TlS4qcaCW bC+BZGNA9NenkzpvEVCUSvTYdGa+2FeVOlsq6dXUoUL4dDwPL9fQ/YRddQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFP635s8/smQJXF7smqLdQdeE2PEbMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xL19yZm16ei15WkFsY1h1eWFvdDFCMTRUWThScy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2 Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAEtkYAD BALBu1wDBALBygwDBALBylQwDQYJKoZIhvcNAQELBQADggEBACpP8f6dnKS8P9+h 0vJqhSETg8wxCRXk9CtN4GS0wJFUbRJDnJRBja6pjYED6MMHq8VoQryAy9X29Hgp 3lAXPd1w9MZJn0ccHAlu8nCvmEDDxUfvjRbHMVevCDYwhyve1ZomucHITxyjrZu1 WHtahSpU4jGFVxHcxTjcg3glphJyXxfwmfft+Ldv5tWYnCBuLrmSuVTcdmTvBRUy 92eoNGEtCpNl7salLOycDSqW8OEc6g21gMHpewDNKZFeFJ+ZN5xWfvz5P60n9nv5 nvEePDfslVpszl3omsooTvICpHmdm3BZJCvFxle6o9X+4186oXW+4G16jQsKeg8R SBQrjVM= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:24 2026 by rpki-client