This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/V2Mz7lpEZqdnJnZt9Swv1vCrDfY.roa File: V2Mz7lpEZqdnJnZt9Swv1vCrDfY.roa (raw, json) Hash identifier: SpJKlMHIP1jKpgIyEhNcs3LX1OPy0pKLU5ZQbriXEB4= Subject key identifier: 57:63:33:EE:5A:44:66:A7:67:26:76:6D:F5:2C:2F:D6:F0:AB:0D:F6 Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca Certificate serial: 019B7F8510D0AEE82ECE4DFE5373E8CAF6F1 Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/V2Mz7lpEZqdnJnZt9Swv1vCrDfY.roa Signing time: Fri 02 Jan 2026 16:23:05 +0000 ROA not before: Fri 02 Jan 2026 16:23:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51440 IP address blocks: 5.34.160.0/24 maxlen: 24 46.28.136.0/24 maxlen: 24 95.215.129.0/24 maxlen: 24 195.35.85.0/24 maxlen: 24 2a03:2940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:10:d0:ae:e8:2e:ce:4d:fe:53:73:e8:ca:f6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca Validity Not Before: Jan 2 16:23:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=576333ee5a4466a76726766df52c2fd6f0ab0df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:5c:38:1a:45:76:a8:91:14:77:86:e9:36: e2:73:7d:02:fb:93:92:8b:44:40:aa:8e:79:38:da: a6:26:e5:1e:af:4a:89:b6:47:4b:df:9c:74:91:14: 76:86:9f:91:2b:d8:a7:c5:38:63:3e:c8:44:92:04: 10:76:8e:22:52:ee:83:34:f0:a1:e3:b3:6f:0d:d0: fe:55:2a:5e:92:58:99:93:01:99:90:61:68:a5:8a: 42:0c:73:43:54:e1:f8:f4:80:0b:80:f9:75:be:74: 36:3d:43:ec:9a:ef:0f:67:30:be:93:0c:2d:3f:bc: a0:b4:a0:e9:3d:b7:ab:12:55:ed:71:f3:db:7e:a1: 84:02:76:50:da:f8:4a:88:61:b0:e5:02:b0:22:db: 32:0f:a3:43:b4:07:d7:8a:87:ea:03:62:c1:4e:d6: c4:c7:85:e9:32:e8:37:2a:49:ed:e5:ff:ca:15:44: 13:ab:cc:5e:e3:de:b4:3b:02:8a:bd:1c:e3:15:12: fb:e0:56:a1:93:52:e3:9d:3d:37:70:00:15:e5:7a: 09:c1:39:6d:cf:07:9a:29:3e:3a:a3:8f:ab:bc:a4: 52:94:3f:f1:55:f7:49:8d:b7:c9:b3:e2:ef:0d:20: 26:34:47:69:25:96:57:58:03:ee:e5:4e:79:40:01: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:63:33:EE:5A:44:66:A7:67:26:76:6D:F5:2C:2F:D6:F0:AB:0D:F6 X509v3 Authority Key Identifier: keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/V2Mz7lpEZqdnJnZt9Swv1vCrDfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.160.0/24 46.28.136.0/24 95.215.129.0/24 195.35.85.0/24 IPv6: 2a03:2940::/32 Signature Algorithm: sha256WithRSAEncryption b3:d0:fd:e7:6c:88:0d:a1:62:3c:c9:fb:0a:9e:23:f3:68:bb: 5c:15:20:95:a8:81:a6:07:06:01:9a:7d:b0:c2:8f:09:e4:5d: 0e:85:10:48:2c:0a:88:8f:47:eb:fa:05:17:b0:92:36:b2:65: ac:8a:4e:29:25:b7:8d:75:18:73:c2:06:62:10:40:9c:8b:09: 01:b1:d5:ab:55:94:73:c8:bb:96:2c:06:bb:f2:08:69:e5:9f: a6:07:bb:96:6f:4f:4a:73:96:f9:f6:d0:e2:07:a4:38:3e:2f: ac:5e:6e:de:18:15:34:2d:0d:78:bf:79:49:7c:49:45:e8:d2: 9a:f8:96:c0:8a:b6:2d:81:b0:14:e0:75:d3:6a:69:ce:ff:17: 2d:89:96:7e:08:7b:d1:43:3f:1b:86:88:07:60:5c:94:a7:1e: 89:45:9d:b8:25:bf:c5:f4:af:6d:b4:b0:71:bc:d7:2d:34:a5: b6:d5:be:ae:14:ef:b7:80:b8:2b:6e:1e:d1:d6:9b:4e:16:55: 3f:d3:f7:84:fe:1f:29:06:a5:3d:4f:9b:30:b7:1b:26:6a:06: ea:04:b6:48:b8:72:40:82:20:c9:51:b6:36:7f:88:fd:a4:2e: f3:8c:01:86:c0:40:80:51:cd:89:6c:d9:39:70:65:83:76:e6: 16:1b:35:ce -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/hRDQruguzk3+U3PoyvbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3 YWRhY2EwHhcNMjYwMTAyMTYyMzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzYzMzNlZTVhNDQ2NmE3NjcyNjc2NmRmNTJjMmZkNmYwYWIwZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxERcOBpFdqiRFHeG6Tbic30C+5OS i0RAqo55ONqmJuUer0qJtkdL35x0kRR2hp+RK9inxThjPshEkgQQdo4iUu6DNPCh 47NvDdD+VSpekliZkwGZkGFopYpCDHNDVOH49IALgPl1vnQ2PUPsmu8PZzC+kwwt P7ygtKDpPberElXtcfPbfqGEAnZQ2vhKiGGw5QKwItsyD6NDtAfXiofqA2LBTtbE x4XpMug3Kknt5f/KFUQTq8xe4960OwKKvRzjFRL74Fahk1LjnT03cAAV5XoJwTlt zweaKT46o4+rvKRSlD/xVfdJjbfJs+LvDSAmNEdpJZZXWAPu5U55QAGDYQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFFdjM+5aRGanZyZ2bfUsL9bwqw32MB8GA1UdIwQY MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt MDY0NDE0ZDAzNDBmLzEvVjJNejdscEVacWRuSm5adDlTd3YxdkNyRGZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEtMDY0NDE0ZDAzNDBm LzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQABSKgAwQA LhyIAwQAX9eBAwQAwyNVMA0EAgACMAcDBQAqAylAMA0GCSqGSIb3DQEBCwUAA4IB AQCz0P3nbIgNoWI8yfsKniPzaLtcFSCVqIGmBwYBmn2wwo8J5F0OhRBILAqIj0fr +gUXsJI2smWsik4pJbeNdRhzwgZiEECciwkBsdWrVZRzyLuWLAa78ghp5Z+mB7uW b09Kc5b59tDiB6Q4Pi+sXm7eGBU0LQ14v3lJfElF6NKa+JbAirYtgbAU4HXTamnO /xctiZZ+CHvRQz8bhogHYFyUpx6JRZ24Jb/F9K9ttLBxvNctNKW21b6uFO+3gLgr bh7R1ptOFlU/0/eE/h8pBqU9T5swtxsmagbqBLZIuHJAgiDJUbY2f4j9pC7zjAGG wECAUc2JbNk5cGWDduYWGzXO -----END CERTIFICATE-----Generated at Sun Jan 25 22:51:27 2026 by rpki-client