This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/Z0hS5fWo-y_SX9oUly3wZoFqg80.roa File: Z0hS5fWo-y_SX9oUly3wZoFqg80.roa (raw, json) Hash identifier: QItwS85WIhN170At5hmC7mNxoC4+AyHXJZmT2uZ7v2I= Subject key identifier: 67:48:52:E5:F5:A8:FB:2F:D2:5F:DA:14:97:2D:F0:66:81:6A:83:CD Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89 Certificate serial: 019B7D5B6DD5C227BC58570E75EC8277F813 Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/Z0hS5fWo-y_SX9oUly3wZoFqg80.roa Signing time: Fri 02 Jan 2026 06:18:22 +0000 ROA not before: Fri 02 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48220 IP address blocks: 185.102.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6d:d5:c2:27:bc:58:57:0e:75:ec:82:77:f8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89 Validity Not Before: Jan 2 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=674852e5f5a8fb2fd25fda14972df066816a83cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:58:cd:d2:b7:ff:07:64:6f:17:bd:f9:57:a7: 7c:bf:43:b7:fc:da:5f:bd:f3:30:63:d0:b8:5a:0a: 18:26:b7:a8:8c:e0:ba:72:6a:75:e2:e0:28:c3:73: 03:48:99:a7:3b:5a:0e:f4:80:9d:7d:80:df:b7:5f: cc:97:10:e0:28:80:73:c8:84:dc:d3:65:d4:4e:7a: af:8b:12:e6:d4:98:02:71:ef:0d:b0:1e:f7:62:be: ac:6e:99:4e:69:12:79:c7:0f:07:00:c8:79:40:c5: 6a:f9:ce:77:7c:4a:1a:f6:19:4e:92:b4:b9:94:70: f7:ce:b1:2a:dd:07:a5:42:27:1f:dd:49:43:af:fb: fe:88:84:c0:a4:0b:e2:e3:79:80:ce:13:61:e5:f5: 70:a5:6f:c9:da:43:2b:be:dd:55:91:77:99:e9:9d: 9c:93:72:6e:ce:1b:03:2e:4f:31:73:07:bc:8b:16: c7:27:34:e7:b1:02:03:fb:5c:e5:08:5f:a2:72:53: b7:8c:f7:aa:21:a8:77:78:0c:f5:c4:57:6f:79:b4: 29:51:62:b8:e8:a7:fb:9b:56:52:7e:93:54:5b:4b: b0:ee:46:13:18:6a:f1:fa:d2:1a:7d:64:8e:45:d5: ba:05:6c:bb:8c:6d:0a:fc:07:fd:7e:9c:f1:b3:51: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:48:52:E5:F5:A8:FB:2F:D2:5F:DA:14:97:2D:F0:66:81:6A:83:CD X509v3 Authority Key Identifier: keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/Z0hS5fWo-y_SX9oUly3wZoFqg80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.102.32.0/22 Signature Algorithm: sha256WithRSAEncryption 10:1e:48:03:4c:85:66:ca:7a:47:ec:8e:a8:22:97:6c:dd:9d: ee:cf:1f:7e:d3:79:18:43:0f:ae:a8:dd:c9:b9:51:ac:1e:1a: aa:24:08:d4:a4:a7:c7:d5:3e:1e:28:13:5c:82:96:d3:5d:49: d4:b3:1b:dd:c3:36:fa:d9:78:3a:39:44:9a:2c:c5:9a:65:74: 28:a6:06:98:f9:93:64:8b:4b:a3:1d:1d:c5:c9:34:e8:41:9e: 0f:73:9c:47:8d:20:12:24:93:a8:45:78:ef:2d:51:7a:73:c1: 72:54:98:dc:51:61:7a:f9:c5:0a:e1:74:16:b2:1c:9e:91:8d: 38:28:17:fa:e5:de:96:e5:53:96:f9:b9:b7:d4:35:95:2b:45: 6d:78:03:eb:0d:44:10:e6:30:44:45:1d:b7:3a:25:dd:77:c5: 49:08:c7:85:11:bf:e7:67:7f:54:25:42:8c:7b:d7:90:f9:1a: b7:ec:f3:5e:99:e7:5e:96:ef:61:26:ba:58:b0:73:b1:a5:d9: 1d:24:22:c8:f1:ad:cb:4e:07:43:d9:fa:6d:dd:34:c2:51:7d: 8e:52:f6:2c:ca:29:98:16:0b:a5:b3:bd:bd:ee:c2:34:30:63: 35:4b:35:1f:a6:c4:dd:08:5e:e2:9f:d7:05:3e:d4:95:bd:49: 07:0a:9d:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W23Vwie8WFcOdeyCd/gTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTUyOTAwYjBkMzIzZDM2ZDk0NTEwYWIwYjAxYzkzZjQ1 MTdjODkwHhcNMjYwMTAyMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzQ4NTJlNWY1YThmYjJmZDI1ZmRhMTQ5NzJkZjA2NjgxNmE4M2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFjN0rf/B2RvF735V6d8v0O3/Npf vfMwY9C4WgoYJreojOC6cmp14uAow3MDSJmnO1oO9ICdfYDft1/MlxDgKIBzyITc 02XUTnqvixLm1JgCce8NsB73Yr6sbplOaRJ5xw8HAMh5QMVq+c53fEoa9hlOkrS5 lHD3zrEq3QelQicf3UlDr/v+iITApAvi43mAzhNh5fVwpW/J2kMrvt1VkXeZ6Z2c k3JuzhsDLk8xcwe8ixbHJzTnsQID+1zlCF+iclO3jPeqIah3eAz1xFdvebQpUWK4 6Kf7m1ZSfpNUW0uw7kYTGGrx+tIafWSORdW6BWy7jG0K/Af9fpzxs1G36wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGdIUuX1qPsv0l/aFJct8GaBaoPNMB8GA1UdIwQY MBaAFE8VKQCw0yPTbZRRCrCwHJP0UXyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQt MjNkZjhkZGRmOTc4LzEvWjBoUzVmV28teV9TWDlvVWx5M3dab0ZxZzgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQtMjNkZjhkZGRmOTc4 LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWYgMA0G CSqGSIb3DQEBCwUAA4IBAQAQHkgDTIVmynpH7I6oIpds3Z3uzx9+03kYQw+uqN3J uVGsHhqqJAjUpKfH1T4eKBNcgpbTXUnUsxvdwzb62Xg6OUSaLMWaZXQopgaY+ZNk i0ujHR3FyTToQZ4Pc5xHjSASJJOoRXjvLVF6c8FyVJjcUWF6+cUK4XQWshyekY04 KBf65d6W5VOW+bm31DWVK0VteAPrDUQQ5jBERR23OiXdd8VJCMeFEb/nZ39UJUKM e9eQ+Rq37PNemedelu9hJrpYsHOxpdkdJCLI8a3LTgdD2fpt3TTCUX2OUvYsyimY Fguls7297sI0MGM1SzUfpsTdCF7in9cFPtSVvUkHCp02 -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:02 2026 by rpki-client