This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/za3m6PhE_hPH-pcVQtgtjootjOk.roa File: za3m6PhE_hPH-pcVQtgtjootjOk.roa (raw, json) Hash identifier: STZds7jNIKyzSG0k0Vxd1saxJCfI11wgP3wf9Rn3Hkc= Subject key identifier: CD:AD:E6:E8:F8:44:FE:13:C7:FA:97:15:42:D8:2D:8E:8A:2D:8C:E9 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA660531E02E24628ACD33867C6B17E Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/za3m6PhE_hPH-pcVQtgtjootjOk.roa Signing time: Fri 02 Jan 2026 12:19:51 +0000 ROA not before: Fri 02 Jan 2026 12:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6855 IP address blocks: 85.248.31.0/24 maxlen: 24 85.248.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:60:53:1e:02:e2:46:28:ac:d3:38:67:c6:b1:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdade6e8f844fe13c7fa971542d82d8e8a2d8ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:07:fb:40:54:ef:8e:06:2b:70:50:6a:d0: e9:bf:b8:e2:09:64:59:56:18:b3:e1:46:72:fc:5f: 1f:9f:e7:36:b2:ef:fd:61:bc:05:96:9a:45:de:a4: 14:d0:1b:5d:18:32:c7:0f:42:a7:e7:cd:f0:0a:04: e4:8d:39:55:74:de:91:80:a1:df:39:82:0d:be:d7: e0:59:f8:7f:8c:8d:48:48:93:bb:1e:4c:c9:d9:23: a0:43:08:02:30:58:1c:3a:b8:27:7f:3b:3e:4c:f7: fe:a2:d5:fa:ac:73:9b:8f:f0:a6:cd:ee:43:e9:72: bb:0e:e1:3f:2e:07:19:0c:75:ad:b2:79:3a:ee:52: 26:77:d7:c3:3b:8d:51:ce:cc:08:52:67:12:6f:8f: fe:94:2a:90:f2:07:ea:0d:68:41:02:f2:02:5c:6a: 3e:d0:b5:8a:fe:40:7a:a4:5d:b9:47:3c:23:4e:63: 63:22:97:20:53:91:32:e7:83:93:20:c1:95:5f:80: f7:68:cf:c4:e0:82:73:f7:1b:4d:b1:b2:35:2a:7f: 47:42:2d:cb:88:6c:4c:7a:f7:4c:d9:7a:32:fc:e5: 5a:1d:a3:d7:69:ff:5c:86:4e:15:a2:af:f3:a9:96: 7c:4b:71:cc:fc:b3:8a:84:d8:38:4b:b6:c6:47:ec: bc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AD:E6:E8:F8:44:FE:13:C7:FA:97:15:42:D8:2D:8E:8A:2D:8C:E9 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/za3m6PhE_hPH-pcVQtgtjootjOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.248.31.0/24 85.248.74.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:df:6b:3d:f4:53:a2:94:6e:f3:0f:ad:9b:95:d2:4b:03:0f: ce:da:1c:e8:00:43:d4:b0:52:38:93:b3:ff:98:b0:ef:b0:1d: 02:24:bd:1a:6f:d7:ed:15:35:3d:93:d3:14:2a:71:a8:bd:7c: 8d:14:58:9e:c0:6c:9c:a7:60:9f:9a:99:ab:68:f4:4a:a4:1b: 32:05:89:a4:5b:9e:23:84:44:17:55:8f:cb:49:00:0e:d1:41: 05:fc:07:a1:71:22:0d:f7:c9:8a:50:71:8f:3d:f3:86:61:c7: 30:36:74:3c:ec:e6:dc:6c:a3:95:bf:6b:fa:ff:c0:da:d4:a3: 57:96:90:67:31:7f:5f:11:cb:b4:27:41:ab:09:9f:cb:5e:59: b4:a3:d9:8a:26:ad:65:68:49:bf:45:7d:a9:31:7a:04:65:54: 06:78:dd:4c:ab:b4:b6:4e:d1:16:c4:40:0d:a6:c9:87:eb:0e: c9:e3:d7:e7:e3:12:f6:2e:be:40:fe:1d:25:e3:b8:7d:ca:44: e0:f3:91:b3:b1:79:0b:95:24:93:61:ea:7b:61:aa:91:f2:fc: d4:64:16:a6:e7:77:35:51:b8:4a:8b:4e:47:5f:75:99:1b:12: 4d:0d:02:87:6a:74:dd:8d:82:6a:65:32:84:f5:a8:23:50:db: 5e:21:88:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pmBTHgLiRiis0zhnxrF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGFkZTZlOGY4NDRmZTEzYzdmYTk3MTU0MmQ4MmQ4ZThhMmQ4Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMIH+0BU744GK3BQatDpv7jiCWRZ Vhiz4UZy/F8fn+c2su/9YbwFlppF3qQU0BtdGDLHD0Kn583wCgTkjTlVdN6RgKHf OYINvtfgWfh/jI1ISJO7HkzJ2SOgQwgCMFgcOrgnfzs+TPf+otX6rHObj/Cmze5D 6XK7DuE/LgcZDHWtsnk67lImd9fDO41RzswIUmcSb4/+lCqQ8gfqDWhBAvICXGo+ 0LWK/kB6pF25RzwjTmNjIpcgU5Ey54OTIMGVX4D3aM/E4IJz9xtNsbI1Kn9HQi3L iGxMevdM2Xoy/OVaHaPXaf9chk4Voq/zqZZ8S3HM/LOKhNg4S7bGR+y87wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM2t5uj4RP4Tx/qXFULYLY6KLYzpMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvemEzbTZQaEVfaFBILXBjVlF0Z3Rqb290ak9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVfgfAwQA VfhKMA0GCSqGSIb3DQEBCwUAA4IBAQCf32s99FOilG7zD62bldJLAw/O2hzoAEPU sFI4k7P/mLDvsB0CJL0ab9ftFTU9k9MUKnGovXyNFFiewGycp2CfmpmraPRKpBsy BYmkW54jhEQXVY/LSQAO0UEF/AehcSIN98mKUHGPPfOGYccwNnQ87ObcbKOVv2v6 /8Da1KNXlpBnMX9fEcu0J0GrCZ/LXlm0o9mKJq1laEm/RX2pMXoEZVQGeN1Mq7S2 TtEWxEANpsmH6w7J49fn4xL2Lr5A/h0l47h9ykTg85GzsXkLlSSTYep7YaqR8vzU ZBam53c1UbhKi05HX3WZGxJNDQKHanTdjYJqZTKE9agjUNteIYiX -----END CERTIFICATE-----Generated at Mon Jan 26 12:17:57 2026 by rpki-client