This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/0ZP1YlMOxuFGcwCLj4TKGjg8sfM.roa File: 0ZP1YlMOxuFGcwCLj4TKGjg8sfM.roa (raw, json) Hash identifier: VhKxH0518mejo08ToVhYHPgDOHhInMaaDygZ1dTqm3Y= Subject key identifier: D1:93:F5:62:53:0E:C6:E1:46:73:00:8B:8F:84:CA:1A:38:3C:B1:F3 Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076 Certificate serial: 019B7DCB190E2887CED3FCB57C3F64B054C2 Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/0ZP1YlMOxuFGcwCLj4TKGjg8sfM.roa Signing time: Fri 02 Jan 2026 08:20:20 +0000 ROA not before: Fri 02 Jan 2026 08:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48072 IP address blocks: 46.22.80.0/20 maxlen: 20 46.22.80.0/23 maxlen: 23 46.22.85.0/24 maxlen: 24 46.22.86.0/24 maxlen: 24 46.22.87.0/24 maxlen: 24 46.22.88.0/23 maxlen: 23 46.22.91.0/24 maxlen: 24 46.22.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:19:0e:28:87:ce:d3:fc:b5:7c:3f:64:b0:54:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076 Validity Not Before: Jan 2 08:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d193f562530ec6e14673008b8f84ca1a383cb1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:e5:90:36:66:9d:5c:3a:a3:a0:e3:fc:08: c5:a7:30:c7:d0:92:cb:23:a4:27:6e:5e:ba:80:1f: 17:25:17:b5:a6:ea:8e:16:f6:8b:1f:68:03:1c:97: d9:7c:ba:f5:0c:af:8d:61:18:0f:0d:3f:90:6a:38: 43:10:a4:ff:9a:55:02:6b:25:21:5e:c2:31:80:14: 04:cf:cf:39:fa:68:80:75:06:96:cb:e4:e7:80:b4: ff:d6:0f:62:8d:81:0b:5e:eb:6f:6f:da:4f:e2:6a: e3:96:16:13:38:ba:3d:75:f6:f4:ac:a2:85:b6:cd: fd:2c:a6:97:f1:d0:c5:d7:4e:e1:04:9f:1d:64:4b: af:5e:7e:b6:2b:ce:3a:54:13:1f:93:02:1f:8e:68: 0a:68:2e:96:06:c9:9b:0d:21:66:09:fc:62:c7:32: 38:be:b4:f3:e2:06:19:7c:65:3d:b6:01:b8:46:ba: 06:a0:67:88:95:6b:d9:d7:d5:8d:c1:1f:e9:ce:a0: b6:b4:36:3d:18:28:bc:b8:bd:44:25:cd:b1:68:8b: 11:d5:2c:7c:5e:f0:e1:1a:4a:82:00:06:f8:ce:c3: bd:10:fe:5b:03:3b:31:e3:c9:b2:67:79:75:85:5e: 9b:03:e2:f9:66:86:9b:02:75:ae:55:9a:f1:fb:1e: 77:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:93:F5:62:53:0E:C6:E1:46:73:00:8B:8F:84:CA:1A:38:3C:B1:F3 X509v3 Authority Key Identifier: keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/0ZP1YlMOxuFGcwCLj4TKGjg8sfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.80.0/20 Signature Algorithm: sha256WithRSAEncryption 3b:52:25:5d:1a:94:58:25:85:0c:c7:86:4b:4c:1d:0f:7a:b5: 5c:86:e3:59:1a:38:e8:a4:4f:ef:75:1c:ac:bc:04:48:5a:c5: b4:99:1f:6c:7e:7f:1a:3d:55:a2:d7:4e:04:15:2a:97:ce:67: d3:ca:18:43:a5:d8:62:71:b2:c8:32:b5:c6:f7:59:11:e6:66: d2:6a:d9:24:79:81:fb:ee:57:af:c2:2f:03:fc:55:fc:1d:f4: cc:e9:2a:27:72:73:83:01:86:16:17:f8:b8:17:e4:42:61:8b: 0e:60:ad:2c:b5:e1:bb:ea:cc:11:3f:39:7a:a1:af:22:eb:07: f3:4c:e3:9c:ee:f0:52:97:b1:5b:93:6e:32:ac:c4:6c:89:e1: c2:e7:0f:f1:83:a4:b9:9f:0b:36:4c:23:c2:f9:82:74:d2:af: 80:b1:ac:0b:2e:7a:ef:9e:a1:49:f3:ac:9c:99:14:8d:fa:b5: d6:36:34:ee:6d:15:64:14:c2:93:e1:f2:8a:46:15:9b:03:20: c0:3e:e3:67:8e:05:aa:89:76:eb:d7:2a:19:39:42:4b:8f:6f: 5e:e1:3f:9b:be:89:a9:22:e1:d5:42:36:a1:3c:33:97:6b:18: b9:9a:e3:b7:e9:f3:c4:cc:74:05:29:9a:eb:e5:f7:9b:f4:98: 9d:56:7d:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxkOKIfO0/y1fD9ksFTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTJlNDkxYWFhNjU1YjYzMjRkYmNjMGNmZjAwYThkNjMx OTEwNzYwHhcNMjYwMTAyMDgyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTkzZjU2MjUzMGVjNmUxNDY3MzAwOGI4Zjg0Y2ExYTM4M2NiMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApezlkDZmnVw6o6Dj/AjFpzDH0JLL I6Qnbl66gB8XJRe1puqOFvaLH2gDHJfZfLr1DK+NYRgPDT+QajhDEKT/mlUCayUh XsIxgBQEz885+miAdQaWy+TngLT/1g9ijYELXutvb9pP4mrjlhYTOLo9dfb0rKKF ts39LKaX8dDF107hBJ8dZEuvXn62K846VBMfkwIfjmgKaC6WBsmbDSFmCfxixzI4 vrTz4gYZfGU9tgG4RroGoGeIlWvZ19WNwR/pzqC2tDY9GCi8uL1EJc2xaIsR1Sx8 XvDhGkqCAAb4zsO9EP5bAzsx48myZ3l1hV6bA+L5ZoabAnWuVZrx+x531QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGT9WJTDsbhRnMAi4+Eyho4PLHzMB8GA1UdIwQY MBaAFJgS5JGqplW2Mk28wM/wCo1jGRB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUt ZGZmZTE3ZjNkYjU0LzEvMFpQMVlsTU94dUZHY3dDTGo0VEtHamc4c2ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUtZGZmZTE3ZjNkYjU0 LzEvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELhZQMA0G CSqGSIb3DQEBCwUAA4IBAQA7UiVdGpRYJYUMx4ZLTB0PerVchuNZGjjopE/vdRys vARIWsW0mR9sfn8aPVWi104EFSqXzmfTyhhDpdhicbLIMrXG91kR5mbSatkkeYH7 7levwi8D/FX8HfTM6SoncnODAYYWF/i4F+RCYYsOYK0steG76swRPzl6oa8i6wfz TOOc7vBSl7Fbk24yrMRsieHC5w/xg6S5nws2TCPC+YJ00q+AsawLLnrvnqFJ86yc mRSN+rXWNjTubRVkFMKT4fKKRhWbAyDAPuNnjgWqiXbr1yoZOUJLj29e4T+bvomp IuHVQjahPDOXaxi5muO36fPEzHQFKZrr5feb9JidVn0s -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:43 2026 by rpki-client