This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/Z03CvgZnFdZytl33-YciJtYTgkU.roa File: Z03CvgZnFdZytl33-YciJtYTgkU.roa (raw, json) Hash identifier: QAeqd5R10qGg/87fO27tsqGhGaG/xmcTXnHVP0UeCmo= Subject key identifier: 67:4D:C2:BE:06:67:15:D6:72:B6:5D:F7:F9:87:22:26:D6:13:82:45 Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Certificate serial: 019B7EA4B2BFFD99A092C5EA6A7968E0F7F6 Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/Z03CvgZnFdZytl33-YciJtYTgkU.roa Signing time: Fri 02 Jan 2026 12:18:01 +0000 ROA not before: Fri 02 Jan 2026 12:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208715 IP address blocks: 37.140.252.0/24 maxlen: 25 185.200.132.0/22 maxlen: 24 194.61.128.0/22 maxlen: 24 194.61.128.0/24 maxlen: 24 194.61.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:b2:bf:fd:99:a0:92:c5:ea:6a:79:68:e0:f7:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Validity Not Before: Jan 2 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=674dc2be066715d672b65df7f9872226d6138245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:e4:2f:76:e6:29:3e:2e:69:eb:36:eb:41: 42:77:91:60:59:e4:f3:13:9c:27:c8:3a:4a:7d:8c: ed:ca:7c:1e:65:4a:05:fa:c1:80:4c:fe:61:84:97: d1:86:f1:3d:6c:bc:93:b7:ca:0a:5b:51:63:64:d5: 85:55:51:fe:fd:64:1c:9f:d6:9b:e2:2f:c6:83:fa: 44:71:8c:1f:b1:98:21:b8:6a:6f:87:09:d9:b2:31: 2a:36:36:cd:4b:59:88:85:2b:86:1b:ec:a4:7d:e0: df:89:7b:3c:ec:b5:fe:1a:bc:0e:d2:3f:94:b6:6e: 6d:3e:c5:43:52:ce:11:65:9b:c0:0e:f6:92:22:5c: 44:46:94:dc:21:ad:b9:39:8d:3c:c6:98:ab:a9:0a: 08:00:08:27:13:c3:8d:b7:8e:08:86:9b:94:43:00: 78:63:b8:40:d8:9d:ef:b8:74:42:ab:1d:ad:fe:14: df:0a:5e:50:3f:dd:7b:32:b5:c1:50:3d:ae:ea:98: 96:27:7c:5f:f4:3e:f4:e6:39:ac:9c:4c:61:c9:34: 67:98:8b:db:be:d0:e2:ac:27:ae:98:d5:af:b7:2c: 69:11:0c:bf:fb:74:5c:f8:64:ff:0e:06:aa:09:43: 78:08:87:b9:62:05:c2:4f:2b:36:8f:82:a6:f6:6f: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4D:C2:BE:06:67:15:D6:72:B6:5D:F7:F9:87:22:26:D6:13:82:45 X509v3 Authority Key Identifier: keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/Z03CvgZnFdZytl33-YciJtYTgkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.252.0/24 185.200.132.0/22 194.61.128.0/22 Signature Algorithm: sha256WithRSAEncryption df:46:93:8d:66:87:3d:90:85:53:4b:52:ab:4b:13:55:9a:d5: 35:7f:62:9b:be:e7:8d:e8:39:7a:1e:b5:02:4e:7a:b0:96:25: 54:37:0f:a6:ad:20:30:a2:8a:0f:76:44:e5:75:fa:5a:bc:04: 28:10:27:04:cc:1b:7c:13:4c:5a:a5:02:e1:a7:bd:1a:00:d5: a6:ea:5c:82:1f:13:fc:84:c0:0c:87:47:54:aa:eb:72:a9:52: 52:ac:78:66:0a:93:2f:77:6b:a2:46:6c:0a:ec:42:1d:a1:8a: c7:bd:fd:56:94:be:46:eb:e3:1e:6b:e8:73:eb:32:ad:ff:d0: e3:d8:64:2f:36:50:f7:92:e8:3b:d3:75:b4:17:5e:8d:b9:8d: 30:62:e1:a4:48:14:f5:62:90:fa:9e:4e:98:0e:1d:d2:2c:09: d5:91:72:0d:35:0a:2e:b1:b9:ea:df:cc:1e:2c:25:12:63:cb: 68:cf:6b:b1:f5:40:5c:0a:8f:2d:98:f9:cc:59:ac:91:27:0c: 02:c5:fe:3a:eb:14:34:45:a6:6e:b9:97:0d:4a:ea:33:4e:b5: 42:de:b9:0a:3e:3e:d6:bf:7d:96:0a:51:61:43:a3:3c:5b:5c: 81:e6:71:9a:e8:38:e8:f1:7f:74:70:74:15:2e:8c:75:da:70: 84:a1:75:83 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pLK//ZmgksXqanlo4Pf2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzQ5MmU0ZDI1YzNiYmQwYzVlMjBjNWE4NWVjYjIyZWM5 NzM2MGEwHhcNMjYwMTAyMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzRkYzJiZTA2NjcxNWQ2NzJiNjVkZjdmOTg3MjIyNmQ2MTM4MjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoHkL3bmKT4uaes260FCd5FgWeTz E5wnyDpKfYztynweZUoF+sGATP5hhJfRhvE9bLyTt8oKW1FjZNWFVVH+/WQcn9ab 4i/Gg/pEcYwfsZghuGpvhwnZsjEqNjbNS1mIhSuGG+ykfeDfiXs87LX+GrwO0j+U tm5tPsVDUs4RZZvADvaSIlxERpTcIa25OY08xpirqQoIAAgnE8ONt44IhpuUQwB4 Y7hA2J3vuHRCqx2t/hTfCl5QP917MrXBUD2u6piWJ3xf9D705jmsnExhyTRnmIvb vtDirCeumNWvtyxpEQy/+3Rc+GT/DgaqCUN4CIe5YgXCTys2j4Km9m+nPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGdNwr4GZxXWcrZd9/mHIibWE4JFMB8GA1UdIwQY MBaAFNc0kuTSXDu9DF4gxaheyyLslzYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgt ZGVjMjFlZWZhMzhiLzEvWjAzQ3ZnWm5GZFp5dGwzMy1ZY2lKdFlUZ2tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgtZGVjMjFlZWZhMzhi LzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJYz8AwQC uciEAwQCwj2AMA0GCSqGSIb3DQEBCwUAA4IBAQDfRpONZoc9kIVTS1KrSxNVmtU1 f2KbvueN6Dl6HrUCTnqwliVUNw+mrSAwoooPdkTldfpavAQoECcEzBt8E0xapQLh p70aANWm6lyCHxP8hMAMh0dUqutyqVJSrHhmCpMvd2uiRmwK7EIdoYrHvf1WlL5G 6+Mea+hz6zKt/9Dj2GQvNlD3kug703W0F16NuY0wYuGkSBT1YpD6nk6YDh3SLAnV kXINNQousbnq38weLCUSY8toz2ux9UBcCo8tmPnMWayRJwwCxf466xQ0RaZuuZcN SuozTrVC3rkKPj7Wv32WClFhQ6M8W1yB5nGa6Djo8X90cHQVLox12nCEoXWD -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:22 2026 by rpki-client