This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ZRIHFb09Mm1K55dH2vncQglBaXI.roa File: ZRIHFb09Mm1K55dH2vncQglBaXI.roa (raw, json) Hash identifier: WFUjrCrkcCkKZQJsNV3ho4q8qDbHnlkrC4J5Z75DuBs= Subject key identifier: 65:12:07:15:BD:3D:32:6D:4A:E7:97:47:DA:F9:DC:42:09:41:69:72 Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316 Certificate serial: 019B7D5C7EDD54A68D49FDBDC3EA337A7CC9 Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ZRIHFb09Mm1K55dH2vncQglBaXI.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50889 IP address blocks: 37.186.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7e:dd:54:a6:8d:49:fd:bd:c3:ea:33:7a:7c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316 Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65120715bd3d326d4ae79747daf9dc4209416972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:9a:eb:0e:73:53:48:31:f3:55:21:4b:bd: 9d:6b:0c:23:31:27:81:4f:ab:2c:0d:cd:f0:77:1a: f3:7d:12:f4:0e:bc:cb:9b:69:55:c0:c7:9c:0c:a1: ac:3c:74:f0:6d:a8:52:05:0b:1c:9d:c4:c2:5e:04: 98:15:82:78:af:cf:dc:79:db:d7:45:ad:47:cb:3a: 27:2a:30:e5:2e:cc:b6:b4:bf:79:6d:22:58:3c:d8: 7e:cb:c2:2b:78:1c:30:55:67:bd:4c:72:04:a9:73: 28:b7:c4:73:5c:b1:bc:47:34:69:4c:af:4d:5b:d5: 8e:1b:41:4a:f2:b6:37:38:c5:72:6d:73:3c:a0:7d: 16:9c:6a:88:e8:43:06:a6:07:2f:2d:d0:93:34:71: 46:06:39:ea:ab:2d:dd:40:ee:92:84:14:93:fc:b3: bb:00:02:92:e8:ab:0b:fa:c5:2d:bb:ba:15:cd:60: b5:b4:e5:18:7c:8c:f5:7c:2f:a8:fc:bd:cb:a4:80: 3b:f2:55:9b:79:53:3a:dd:00:f2:4c:5d:df:41:85: fb:48:51:5a:2f:b9:bf:0d:f3:4d:79:9d:60:4d:63: 06:d1:1e:cf:ba:b6:39:0e:7c:40:39:e4:cf:c1:8d: eb:0c:2d:17:92:64:be:64:6b:78:7f:7b:06:5f:a0: e6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:12:07:15:BD:3D:32:6D:4A:E7:97:47:DA:F9:DC:42:09:41:69:72 X509v3 Authority Key Identifier: keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ZRIHFb09Mm1K55dH2vncQglBaXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.186.111.0/24 Signature Algorithm: sha256WithRSAEncryption 39:aa:6b:bb:58:2e:e9:45:da:0b:f3:91:57:f1:ab:e1:6c:14: 5f:fa:5e:92:ac:6c:c1:fb:c2:fc:ab:6e:97:50:3d:eb:60:07: 5e:0c:00:b4:e7:53:12:13:e4:61:29:2c:76:7f:5a:82:d6:30: c3:58:f6:4e:41:da:c0:d7:81:92:d9:6d:26:aa:6e:86:15:28: 51:8c:90:4b:23:ce:50:f5:bc:0e:f4:5d:30:a6:fb:c6:53:61: 6e:b6:88:0c:42:eb:33:39:39:93:70:11:ae:8d:1c:74:aa:bb: 6e:c5:5f:c2:37:77:f9:34:d0:54:9e:2c:2a:d1:d9:4a:12:c5: 6f:a5:1f:d7:91:d5:fb:ce:2c:53:72:75:c1:bd:dc:5d:f3:89: c6:c3:76:95:0c:6a:1c:38:44:d8:7e:0a:4c:e1:d7:94:f5:df: fb:19:28:64:a7:76:ba:c1:22:27:0a:50:47:d2:a9:65:aa:a2: 8f:18:b5:32:cc:4c:c0:c6:cc:f9:5d:2c:8d:a7:fd:ce:7f:f0: 62:d1:62:89:0a:ae:ea:b9:96:62:f1:79:55:d7:66:35:66:71: 77:0e:8f:79:59:cb:80:94:6b:75:63:72:60:84:75:48:b8:77: 2d:e5:1b:1c:57:f3:0a:ba:a4:34:46:0b:00:ec:5a:d1:67:54: 2c:2b:33:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XH7dVKaNSf29w+ozenzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOTMwZjhjNjg4YzA0ZDE3NDMzYTJiOWM3MjQ5YmM2MjVi Y2UzMTYwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTEyMDcxNWJkM2QzMjZkNGFlNzk3NDdkYWY5ZGM0MjA5NDE2OTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ma6w5zU0gx81UhS72dawwjMSeB T6ssDc3wdxrzfRL0DrzLm2lVwMecDKGsPHTwbahSBQscncTCXgSYFYJ4r8/cedvX Ra1HyzonKjDlLsy2tL95bSJYPNh+y8IreBwwVWe9THIEqXMot8RzXLG8RzRpTK9N W9WOG0FK8rY3OMVybXM8oH0WnGqI6EMGpgcvLdCTNHFGBjnqqy3dQO6ShBST/LO7 AAKS6KsL+sUtu7oVzWC1tOUYfIz1fC+o/L3LpIA78lWbeVM63QDyTF3fQYX7SFFa L7m/DfNNeZ1gTWMG0R7PurY5DnxAOeTPwY3rDC0XkmS+ZGt4f3sGX6Dm/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGUSBxW9PTJtSueXR9r53EIJQWlyMB8GA1UdIwQY MBaAFAKTD4xojATRdDOiucckm8YlvOMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODct YTRlOTkxYjBmMTQ0LzEvWlJJSEZiMDlNbTFLNTVkSDJ2bmNRZ2xCYVhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODctYTRlOTkxYjBmMTQ0 LzEvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJbpvMA0G CSqGSIb3DQEBCwUAA4IBAQA5qmu7WC7pRdoL85FX8avhbBRf+l6SrGzB+8L8q26X UD3rYAdeDAC051MSE+RhKSx2f1qC1jDDWPZOQdrA14GS2W0mqm6GFShRjJBLI85Q 9bwO9F0wpvvGU2FutogMQuszOTmTcBGujRx0qrtuxV/CN3f5NNBUniwq0dlKEsVv pR/XkdX7zixTcnXBvdxd84nGw3aVDGocOETYfgpM4deU9d/7GShkp3a6wSInClBH 0qllqqKPGLUyzEzAxsz5XSyNp/3Of/Bi0WKJCq7quZZi8XlV12Y1ZnF3Do95WcuA lGt1Y3JghHVIuHct5RscV/MKuqQ0RgsA7FrRZ1QsKzPU -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:18 2026 by rpki-client