This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/RZPlUQ-_Cc0IRWMLHv1pcJJqcY4.roa File: RZPlUQ-_Cc0IRWMLHv1pcJJqcY4.roa (raw, json) Hash identifier: fLckeaqRp6EH0MIb6WqLGIVdk4naPv7XqR6uKgb5zT8= Subject key identifier: 45:93:E5:51:0F:BF:09:CD:08:45:63:0B:1E:FD:69:70:92:6A:71:8E Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Certificate serial: 019B7B35862F3D4E6153DD252F7C32C133C0 Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/RZPlUQ-_Cc0IRWMLHv1pcJJqcY4.roa Signing time: Thu 01 Jan 2026 20:17:43 +0000 ROA not before: Thu 01 Jan 2026 20:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.146.122.0/24 maxlen: 24 45.146.123.0/24 maxlen: 24 92.118.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:86:2f:3d:4e:61:53:dd:25:2f:7c:32:c1:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2 Validity Not Before: Jan 1 20:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4593e5510fbf09cd0845630b1efd6970926a718e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:f6:89:0a:5b:9f:e3:8b:57:51:f4:a1:bf: b5:1b:f7:d8:6f:33:93:ce:f4:d6:82:cf:c0:97:2d: 6d:73:67:c3:db:62:57:b3:84:f5:be:b9:8e:5f:7b: 80:bb:0c:e6:aa:6c:08:36:af:e3:a3:87:ab:b2:96: 4f:d0:bd:ef:27:b7:1d:53:8b:7d:1a:5e:e4:9b:73: f2:8e:fc:4e:85:03:e4:62:fb:48:a1:07:27:d2:1f: 0e:af:21:87:a1:cf:96:10:71:e3:4f:96:36:d8:96: 1b:12:59:b7:35:08:09:b1:67:2a:3f:5a:58:08:37: 00:c2:ca:c4:f1:7a:e0:9b:90:43:a9:7b:86:9f:38: 1b:d8:4a:33:d9:eb:78:44:76:3d:d6:aa:7d:8e:04: 6a:01:98:4a:9d:3a:28:07:e2:a1:9f:82:16:30:bf: 5a:6d:75:4c:ea:8b:08:43:94:3d:8f:31:79:99:3d: e2:fa:8f:d8:de:eb:a5:25:2b:3a:1c:73:5c:9c:85: bc:b7:45:0f:7c:e4:1d:17:2a:7b:4a:ac:5e:39:76: d9:4b:3e:84:e6:8a:bc:5b:91:4b:fc:f0:8c:8d:57: 57:7f:66:d9:48:ba:f9:cd:a4:91:59:cf:0a:4d:51: 54:a4:22:41:2d:c7:b4:2f:34:61:07:eb:0e:03:62: 53:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:93:E5:51:0F:BF:09:CD:08:45:63:0B:1E:FD:69:70:92:6A:71:8E X509v3 Authority Key Identifier: keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/RZPlUQ-_Cc0IRWMLHv1pcJJqcY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.122.0/23 92.118.46.0/24 Signature Algorithm: sha256WithRSAEncryption 43:56:d6:94:cf:6c:94:66:6d:35:6d:8f:6a:dc:a7:7c:40:53: b7:90:6c:94:32:bc:0f:35:51:15:0a:d5:4b:a7:eb:de:6c:36: 00:16:da:c1:fb:92:eb:79:7c:6a:de:b3:fa:f0:d4:a1:4e:f5: 7a:81:b9:85:cb:59:1a:49:c9:7a:c7:49:d3:f9:ae:76:1c:35: 0d:77:bc:3c:5c:02:85:80:06:39:54:b9:a0:8c:75:50:f7:fa: 7f:4b:9e:9f:5a:59:f5:da:46:38:14:6a:d6:dd:e8:e6:43:25: c4:92:59:91:b6:ed:71:e8:3e:07:7a:f5:8e:15:a8:69:4b:c6: 6d:e4:a0:27:64:64:a2:5b:83:bc:0f:ff:2a:a2:79:1e:1d:88: 20:52:00:51:85:56:e7:99:07:de:56:2f:78:77:61:3f:92:c4: 4b:1c:90:46:b8:71:75:b9:28:55:2c:b2:58:b0:4c:2a:36:f9: d9:e5:9e:a9:47:9d:ef:47:bb:3f:5d:d9:f2:e6:b8:62:1d:09: c4:db:4b:72:bb:59:9e:da:69:9e:69:cf:90:13:fa:34:e6:43: 1c:6b:7b:23:3b:a3:10:60:de:d2:8b:e1:72:ed:f7:6f:e6:93: f5:59:a3:f2:03:f3:75:b6:67:7a:6f:d9:89:c6:08:86:7a:5e: c1:d7:84:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NYYvPU5hU90lL3wywTPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2 MThkZDIwHhcNMjYwMTAxMjAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTkzZTU1MTBmYmYwOWNkMDg0NTYzMGIxZWZkNjk3MDkyNmE3MThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5H2iQpbn+OLV1H0ob+1G/fYbzOT zvTWgs/Aly1tc2fD22JXs4T1vrmOX3uAuwzmqmwINq/jo4erspZP0L3vJ7cdU4t9 Gl7km3PyjvxOhQPkYvtIoQcn0h8OryGHoc+WEHHjT5Y22JYbElm3NQgJsWcqP1pY CDcAwsrE8Xrgm5BDqXuGnzgb2Eoz2et4RHY91qp9jgRqAZhKnTooB+Khn4IWML9a bXVM6osIQ5Q9jzF5mT3i+o/Y3uulJSs6HHNcnIW8t0UPfOQdFyp7SqxeOXbZSz6E 5oq8W5FL/PCMjVdXf2bZSLr5zaSRWc8KTVFUpCJBLce0LzRhB+sOA2JT2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEWT5VEPvwnNCEVjCx79aXCSanGOMB8GA1UdIwQY MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt ZGQxZWM1N2Q3ZTc0LzEvUlpQbFVRLV9DYzBJUldNTEh2MXBjSkpxY1k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0 LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZJ6AwQA XHYuMA0GCSqGSIb3DQEBCwUAA4IBAQBDVtaUz2yUZm01bY9q3Kd8QFO3kGyUMrwP NVEVCtVLp+vebDYAFtrB+5LreXxq3rP68NShTvV6gbmFy1kaScl6x0nT+a52HDUN d7w8XAKFgAY5VLmgjHVQ9/p/S56fWln12kY4FGrW3ejmQyXEklmRtu1x6D4HevWO FahpS8Zt5KAnZGSiW4O8D/8qonkeHYggUgBRhVbnmQfeVi94d2E/ksRLHJBGuHF1 uShVLLJYsEwqNvnZ5Z6pR53vR7s/Xdny5rhiHQnE20tyu1me2mmeac+QE/o05kMc a3sjO6MQYN7Si+Fy7fdv5pP1WaPyA/N1tmd6b9mJxgiGel7B14Qg -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:07 2026 by rpki-client