This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/ZqdZ82l6x_sImb0z2qHfrZ32niI.roa File: ZqdZ82l6x_sImb0z2qHfrZ32niI.roa (raw, json) Hash identifier: 5tEujsZakk6ZY2BbCuw7ovz7bymmGnvvS7AlQ1ZU4NA= Subject key identifier: 66:A7:59:F3:69:7A:C7:FB:08:99:BD:33:DA:A1:DF:AD:9D:F6:9E:22 Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Certificate serial: 019B797EFF49B493F82E19C514F96BF7296A Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/ZqdZ82l6x_sImb0z2qHfrZ32niI.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1136 IP address blocks: 141.93.240.0/22 maxlen: 22 2a0d:f0c0:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ff:49:b4:93:f8:2e:19:c5:14:f9:6b:f7:29:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66a759f3697ac7fb0899bd33daa1dfad9df69e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:a1:48:f6:66:ff:b2:46:8b:35:17:49:2c: 58:a0:87:47:9d:87:8e:82:f8:a3:0a:e7:84:7b:77: 72:68:92:f6:b6:4b:c5:b1:ea:65:44:d1:58:ef:d7: f2:96:7d:79:66:9e:78:d6:a9:90:38:51:f0:00:22: 2f:60:2a:8b:a0:39:b5:d0:7a:07:1e:9b:f8:f7:a3: c4:22:95:65:6f:7f:0c:fd:ef:79:5d:46:b1:b3:0b: dc:df:3d:06:1b:b6:ef:c2:63:9e:08:9c:23:05:0d: b9:64:35:02:c8:55:99:74:b5:ee:c6:9f:89:58:7b: a2:14:06:62:98:8c:fe:44:c1:7b:7a:1b:8b:91:31: 6e:ac:f4:69:5c:cf:27:6e:df:a8:14:99:03:6f:f2: 7c:ee:b3:79:05:12:37:d0:a8:0a:d7:22:f6:3c:d9: ce:45:9e:5d:56:82:7c:bb:51:49:b7:70:8a:62:69: 73:18:1f:58:8d:11:ce:e0:05:36:76:fa:ca:d8:56: 06:30:f1:da:e8:2d:55:98:ef:a3:b5:c0:0a:e0:bb: 62:f3:32:cf:40:f1:a8:7a:96:e4:7a:28:af:83:21: f3:72:25:54:c1:e2:1e:61:49:cc:a4:34:25:e2:8e: 74:af:ca:42:35:9b:2e:34:ae:03:77:91:57:8d:07: 40:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A7:59:F3:69:7A:C7:FB:08:99:BD:33:DA:A1:DF:AD:9D:F6:9E:22 X509v3 Authority Key Identifier: keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/ZqdZ82l6x_sImb0z2qHfrZ32niI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.93.240.0/22 IPv6: 2a0d:f0c0:e000::/40 Signature Algorithm: sha256WithRSAEncryption 58:b3:2d:83:bc:b9:a4:55:92:ad:95:1a:6f:0d:07:aa:40:0e: dd:5b:1d:ca:f5:49:c7:c1:fd:86:9a:b6:1f:e0:6a:3b:8a:7e: 5b:db:1c:a5:21:b3:34:cf:04:7e:16:7c:72:18:d6:60:dc:9f: e0:3c:55:f2:b3:30:3d:b0:24:fe:06:a2:d3:e1:e7:95:78:80: 7e:75:d3:a1:38:33:61:89:2f:7f:f9:49:60:a9:1e:fa:8e:13: a0:67:c4:f3:c8:a2:5e:d2:59:89:c5:fe:cb:69:a4:4e:7a:99: d8:f3:62:bc:f7:df:ea:0b:40:c0:04:7e:c1:9d:65:6f:34:fb: d6:50:db:68:6b:09:df:0b:fd:8b:02:38:92:40:a2:3c:0b:7f: ac:c0:1a:e7:e8:35:dd:18:1f:5a:30:7e:d5:eb:fb:2b:d1:66: cf:e3:57:38:e7:ed:2b:6f:ad:76:46:aa:82:a6:57:22:71:c0: c2:b1:6b:72:1b:2e:b6:d6:d3:3c:8d:6c:0e:35:4d:80:5c:03: 9b:1f:d1:4a:ee:4c:5c:dd:8f:48:8a:ee:9e:6a:70:c2:87:bf: ba:a0:72:ce:d8:4c:1f:51:bb:f0:63:30:e4:28:65:8e:39:c6: 7c:ca:97:49:85:ec:df:6d:40:8d:43:98:3e:88:b4:c1:72:87: 76:a4:46:0b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5fv9JtJP4LhnFFPlr9ylqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk OWJlMWQwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmE3NTlmMzY5N2FjN2ZiMDg5OWJkMzNkYWExZGZhZDlkZjY5ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP+hSPZm/7JGizUXSSxYoIdHnYeO gvijCueEe3dyaJL2tkvFseplRNFY79fyln15Zp541qmQOFHwACIvYCqLoDm10HoH Hpv496PEIpVlb38M/e95XUaxswvc3z0GG7bvwmOeCJwjBQ25ZDUCyFWZdLXuxp+J WHuiFAZimIz+RMF7ehuLkTFurPRpXM8nbt+oFJkDb/J87rN5BRI30KgK1yL2PNnO RZ5dVoJ8u1FJt3CKYmlzGB9YjRHO4AU2dvrK2FYGMPHa6C1VmO+jtcAK4Lti8zLP QPGoepbkeiivgyHzciVUweIeYUnMpDQl4o50r8pCNZsuNK4Dd5FXjQdApQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFGanWfNpesf7CJm9M9qh362d9p4iMB8GA1UdIwQY MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct N2EwMzRkMTcwYjg1LzEvWnFkWjgybDZ4X3NJbWIwejJxSGZyWjMybmlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1 LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCjV3wMA4E AgACMAgDBgAqDfDA4DANBgkqhkiG9w0BAQsFAAOCAQEAWLMtg7y5pFWSrZUabw0H qkAO3VsdyvVJx8H9hpq2H+BqO4p+W9scpSGzNM8EfhZ8chjWYNyf4DxV8rMwPbAk /gai0+HnlXiAfnXToTgzYYkvf/lJYKke+o4ToGfE88iiXtJZicX+y2mkTnqZ2PNi vPff6gtAwAR+wZ1lbzT71lDbaGsJ3wv9iwI4kkCiPAt/rMAa5+g13RgfWjB+1ev7 K9Fmz+NXOOftK2+tdkaqgqZXInHAwrFrchsuttbTPI1sDjVNgFwDmx/RSu5MXN2P SIrunmpwwoe/uqByzthMH1G78GMw5ChljjnGfMqXSYXs321AjUOYPoi0wXKHdqRG Cw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:45 2026 by rpki-client