This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/zDLOCSi1qTaDlvm9zlxMtRreOMU.roa File: zDLOCSi1qTaDlvm9zlxMtRreOMU.roa (raw, json) Hash identifier: XRIemQPqfuXQ1CqQ2AN8C0WPUAHZMu6of/6OYKLQobI= Subject key identifier: CC:32:CE:09:28:B5:A9:36:83:96:F9:BD:CE:5C:4C:B5:1A:DE:38:C5 Certificate issuer: /CN=9bed36af13da482fdf79fb5403e5074860eecd0d Certificate serial: 019B7A5ACC6CD8265554987234D646E1B452 Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/zDLOCSi1qTaDlvm9zlxMtRreOMU.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197830 IP address blocks: 149.126.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cc:6c:d8:26:55:54:98:72:34:d6:46:e1:b4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc32ce0928b5a9368396f9bdce5c4cb51ade38c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:fb:c6:8d:b4:ee:90:c2:85:a7:8f:61:ae: 68:d0:dd:41:d4:04:5f:e0:c7:8b:e6:91:36:6c:d3: ee:ea:f6:d5:48:96:53:7a:c8:73:a0:0c:a0:20:b0: 4f:e2:26:21:25:86:e4:a2:22:43:82:94:94:7a:54: 40:c0:9e:49:f4:a4:ba:f4:8f:12:ed:8f:ec:4b:f5: dd:95:b9:cb:34:0c:ee:0e:8f:0f:62:b9:14:b9:41: 4e:12:57:f6:8a:a9:b1:ed:0a:45:da:ed:b6:68:a5: 29:ba:fa:01:06:56:a2:58:91:bb:36:db:0e:62:e7: c1:ec:7b:ef:6b:66:4e:86:75:10:73:e4:8b:75:9a: 65:eb:d2:bc:3a:4c:53:d1:6b:84:95:00:06:fd:8b: e9:cc:2f:9d:f6:3d:29:3c:4e:a9:52:b9:68:2e:ae: af:6e:d1:e4:90:13:da:fe:89:06:dc:7f:15:4f:a0: 01:e1:6f:87:51:46:e6:24:d1:08:2a:f2:51:4c:cd: 6c:4d:40:ae:8c:a8:e0:9e:84:13:ed:fb:08:0c:9e: a4:9a:e3:3b:a9:63:ff:72:9e:ad:a2:01:eb:48:c8: 82:a3:46:6a:14:a1:81:57:c4:09:42:6d:9b:6d:ca: 33:0c:01:7d:18:2b:2f:07:bd:07:0b:d6:c4:67:35: 80:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:32:CE:09:28:B5:A9:36:83:96:F9:BD:CE:5C:4C:B5:1A:DE:38:C5 X509v3 Authority Key Identifier: keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/zDLOCSi1qTaDlvm9zlxMtRreOMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.126.113.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ea:88:bb:de:86:f9:b8:86:60:c9:87:37:9f:f8:b1:f5:9c: d7:d4:cd:66:3e:c5:90:61:d3:be:c6:72:e7:ce:b2:8d:78:47: b3:76:15:e7:b5:a1:94:3a:52:0a:ae:b5:03:16:1d:73:81:39: 7c:2d:c1:23:f9:ee:9b:48:6e:52:9f:66:5e:1d:ad:be:86:f2: fc:eb:82:f1:86:ff:47:61:30:33:56:d1:88:75:5a:0f:d1:78: 6e:12:ee:d7:69:c6:02:2b:42:98:d8:5e:bc:91:d1:a2:14:40: ca:c4:6c:cd:9c:0f:e1:14:da:cf:d1:d7:11:bd:a3:5c:4d:93: 17:da:ab:9b:1c:d4:30:9f:d7:c4:5c:e3:75:52:16:89:37:24: 35:66:5a:50:c0:1b:1e:11:3d:4d:9a:1e:d6:a4:ab:6b:97:5c: 32:f3:49:55:0a:12:2d:b5:00:c8:f9:76:a1:76:2d:d4:59:83: d9:08:dc:eb:06:ae:02:ec:a1:15:2a:f3:4b:b1:6e:f4:8f:e2: 93:cd:74:5d:45:a6:53:4d:84:aa:0c:45:c3:6d:b1:36:71:56: c6:fe:17:08:98:d9:cf:3e:a3:f1:cd:f3:ab:95:cb:dc:2e:37: 4c:4a:6f:e3:48:4e:d7:9e:b0:6c:77:11:ed:5b:ad:19:84:3f: 88:26:18:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wsxs2CZVVJhyNNZG4bRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZWQzNmFmMTNkYTQ4MmZkZjc5ZmI1NDAzZTUwNzQ4NjBl ZWNkMGQwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzMyY2UwOTI4YjVhOTM2ODM5NmY5YmRjZTVjNGNiNTFhZGUzOGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQv7xo207pDChaePYa5o0N1B1ARf 4MeL5pE2bNPu6vbVSJZTeshzoAygILBP4iYhJYbkoiJDgpSUelRAwJ5J9KS69I8S 7Y/sS/XdlbnLNAzuDo8PYrkUuUFOElf2iqmx7QpF2u22aKUpuvoBBlaiWJG7NtsO YufB7Hvva2ZOhnUQc+SLdZpl69K8OkxT0WuElQAG/YvpzC+d9j0pPE6pUrloLq6v btHkkBPa/okG3H8VT6AB4W+HUUbmJNEIKvJRTM1sTUCujKjgnoQT7fsIDJ6kmuM7 qWP/cp6togHrSMiCo0ZqFKGBV8QJQm2bbcozDAF9GCsvB70HC9bEZzWAAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMwyzgkotak2g5b5vc5cTLUa3jjFMB8GA1UdIwQY MBaAFJvtNq8T2kgv33n7VAPlB0hg7s0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80YjAyODMtYTkwYy00ZDY0LTgzMDEt ZDIyMWViZDA4MThkLzEvekRMT0NTaTFxVGFEbHZtOXpseE10UnJlT01VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni80YjAyODMtYTkwYy00ZDY0LTgzMDEtZDIyMWViZDA4MThk LzEvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlX5xMA0G CSqGSIb3DQEBCwUAA4IBAQAM6oi73ob5uIZgyYc3n/ix9ZzX1M1mPsWQYdO+xnLn zrKNeEezdhXntaGUOlIKrrUDFh1zgTl8LcEj+e6bSG5Sn2ZeHa2+hvL864Lxhv9H YTAzVtGIdVoP0XhuEu7XacYCK0KY2F68kdGiFEDKxGzNnA/hFNrP0dcRvaNcTZMX 2qubHNQwn9fEXON1UhaJNyQ1ZlpQwBseET1Nmh7WpKtrl1wy80lVChIttQDI+Xah di3UWYPZCNzrBq4C7KEVKvNLsW70j+KTzXRdRaZTTYSqDEXDbbE2cVbG/hcImNnP PqPxzfOrlcvcLjdMSm/jSE7XnrBsdxHtW60ZhD+IJhi4 -----END CERTIFICATE-----Generated at Mon Jan 26 13:46:25 2026 by rpki-client