This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Rfztg_t5JVeMZSj2mDqPGyp9q44.roa File: Rfztg_t5JVeMZSj2mDqPGyp9q44.roa (raw, json) Hash identifier: /89m2QYUYW/bhcHvnKgQT+IpW6Y9wQwv8T9fEb+5DrQ= Subject key identifier: 45:FC:ED:83:FB:79:25:57:8C:65:28:F6:98:3A:8F:1B:2A:7D:AB:8E Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B762A26E3DC348DAE3DD9D76BF26C Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Rfztg_t5JVeMZSj2mDqPGyp9q44.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 185.243.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:76:2a:26:e3:dc:34:8d:ae:3d:d9:d7:6b:f2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45fced83fb7925578c6528f6983a8f1b2a7dab8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:6e:b7:20:4c:bf:58:c8:3a:ad:19:24:53: e9:c2:1c:d4:4b:74:93:c4:b2:28:fa:51:5f:9a:4d: 55:1d:1b:34:c3:ad:81:f2:b4:63:3e:d5:2c:e5:4e: a1:f5:4c:d3:ed:8f:c5:31:af:d4:9c:5c:70:6c:c0: 0a:6d:70:79:e7:fc:e8:29:92:e4:25:22:c4:01:f6: 3a:e7:5c:bc:53:52:d4:a5:9e:ef:ed:ab:8a:d1:84: 94:7e:c6:d5:11:17:76:29:b8:b9:71:4d:3c:ca:ed: cb:81:d0:17:e9:da:02:ef:40:db:db:ca:42:a8:88: d3:81:b6:ca:0e:d5:03:9a:0d:1c:b8:91:fb:d6:f3: f4:46:85:37:2b:83:a4:34:18:db:f5:11:74:cf:14: 81:41:7b:6b:3b:ce:cd:35:8d:ec:04:54:55:01:d7: 05:94:48:5f:c7:4e:9e:5f:66:9f:a9:eb:05:a6:f4: f2:c1:6e:3f:95:4c:c7:68:6e:23:64:1a:63:ef:c7: 96:17:9c:8f:d5:8f:12:b1:8f:dd:39:ef:66:2f:5c: 35:35:01:ed:40:e9:14:66:e3:fa:b4:bc:e4:f5:6b: 0a:fb:9b:95:1c:66:65:00:33:0d:66:7f:ea:17:9d: 19:ae:1e:57:6e:39:05:36:1a:16:e3:90:81:f2:90: 0b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FC:ED:83:FB:79:25:57:8C:65:28:F6:98:3A:8F:1B:2A:7D:AB:8E X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Rfztg_t5JVeMZSj2mDqPGyp9q44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.152.0/24 Signature Algorithm: sha256WithRSAEncryption 79:5a:dc:17:23:c9:19:27:2a:2f:07:39:66:f5:ae:2d:a6:2b: cc:19:45:ee:94:9d:9a:de:15:50:4d:52:f8:b0:4c:63:23:dc: 3d:a7:d1:ea:8a:11:f2:9c:d8:57:02:41:a7:c6:bd:44:25:c5: 6d:41:2c:f8:bf:39:29:a4:9f:9d:44:74:db:33:37:78:9c:0c: 0e:09:f7:8c:f7:68:54:9f:28:79:7b:2e:bd:f6:05:c6:a2:e8: 25:fa:cb:20:c0:81:26:72:d9:a6:38:12:02:3c:69:f7:54:dc: d2:40:6c:61:c5:1a:61:f9:f3:bb:de:cc:9a:41:92:9f:0b:5f: e0:0a:6c:b1:39:bd:32:a7:5b:c2:ec:e8:49:70:02:c5:58:a5: d9:50:e1:8e:eb:e3:ff:96:90:b0:06:b9:2b:32:5a:25:52:bd: 9f:eb:f6:61:bc:fb:5e:20:76:09:10:0b:44:a9:6f:0a:d4:34: 12:0c:c9:49:ed:41:2c:08:6b:66:1e:20:03:66:0a:d3:98:4b: e1:38:e4:3d:ff:aa:6b:60:d9:0d:ff:5b:ef:ac:4a:e7:58:9c: 2c:04:2e:a6:4e:bd:aa:47:4f:76:a1:8e:7d:49:48:62:9a:2e: fd:57:71:85:2b:a4:8b:ee:55:9c:c6:7f:23:16:7e:48:55:ae: 7b:6f:18:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3YqJuPcNI2uPdnXa/JsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWZjZWQ4M2ZiNzkyNTU3OGM2NTI4ZjY5ODNhOGYxYjJhN2RhYjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg9utyBMv1jIOq0ZJFPpwhzUS3ST xLIo+lFfmk1VHRs0w62B8rRjPtUs5U6h9UzT7Y/FMa/UnFxwbMAKbXB55/zoKZLk JSLEAfY651y8U1LUpZ7v7auK0YSUfsbVERd2Kbi5cU08yu3LgdAX6doC70Db28pC qIjTgbbKDtUDmg0cuJH71vP0RoU3K4OkNBjb9RF0zxSBQXtrO87NNY3sBFRVAdcF lEhfx06eX2afqesFpvTywW4/lUzHaG4jZBpj78eWF5yP1Y8SsY/dOe9mL1w1NQHt QOkUZuP6tLzk9WsK+5uVHGZlADMNZn/qF50Zrh5XbjkFNhoW45CB8pALGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEX87YP7eSVXjGUo9pg6jxsqfauOMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvUmZ6dGdfdDVKVmVNWlNqMm1EcVBHeXA5cTQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufOYMA0G CSqGSIb3DQEBCwUAA4IBAQB5WtwXI8kZJyovBzlm9a4tpivMGUXulJ2a3hVQTVL4 sExjI9w9p9HqihHynNhXAkGnxr1EJcVtQSz4vzkppJ+dRHTbMzd4nAwOCfeM92hU nyh5ey699gXGougl+ssgwIEmctmmOBICPGn3VNzSQGxhxRph+fO73syaQZKfC1/g CmyxOb0yp1vC7OhJcALFWKXZUOGO6+P/lpCwBrkrMlolUr2f6/ZhvPteIHYJEAtE qW8K1DQSDMlJ7UEsCGtmHiADZgrTmEvhOOQ9/6prYNkN/1vvrErnWJwsBC6mTr2q R092oY59SUhimi79V3GFK6SL7lWcxn8jFn5IVa57bxgE -----END CERTIFICATE-----Generated at Sun Jan 25 10:10:58 2026 by rpki-client