This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/ZFxceImgdOll43mTIb-2CEd5iZU.roa File: ZFxceImgdOll43mTIb-2CEd5iZU.roa (raw, json) Hash identifier: LEd9mfjkTgsQciD0Ian4mosID5/HXYAOaKPSHE8Z4vM= Subject key identifier: 64:5C:5C:78:89:A0:74:E9:65:E3:79:93:21:BF:B6:08:47:79:89:95 Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931 Certificate serial: 019B7BA3880ADF4AE9F7B784E7DF3AB8F496 Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/ZFxceImgdOll43mTIb-2CEd5iZU.roa Signing time: Thu 01 Jan 2026 22:17:53 +0000 ROA not before: Thu 01 Jan 2026 22:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20743 IP address blocks: 146.109.145.0/24 maxlen: 24 146.109.153.0/24 maxlen: 24 146.109.160.0/19 maxlen: 19 146.109.161.0/24 maxlen: 24 2a01:4642:100::/40 maxlen: 40 2a01:4642:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:88:0a:df:4a:e9:f7:b7:84:e7:df:3a:b8:f4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931 Validity Not Before: Jan 1 22:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=645c5c7889a074e965e3799321bfb60847798995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:25:fb:64:6a:19:83:b1:99:d4:9b:71:56: c3:25:75:c8:92:f3:02:b8:a8:8d:65:c1:83:66:5a: 4d:a1:fe:5c:45:85:4f:81:db:17:40:79:0c:b3:24: e1:5b:98:0c:cf:1f:31:46:cb:9a:ea:94:3a:ca:cf: 65:75:c4:74:a3:f0:0b:10:af:f1:00:ea:21:cc:27: fe:4e:69:22:d5:c6:00:a4:8f:1e:21:73:4a:59:18: d9:2c:d1:83:83:86:29:d0:de:b0:8f:cb:86:01:5f: b5:6d:be:f7:f5:5d:71:e0:29:97:3c:17:91:eb:82: 27:a8:86:87:b6:5c:e1:ec:de:76:12:10:63:52:b3: b6:db:ec:8b:39:56:63:c9:6e:b2:26:17:c7:82:f4: 53:1b:39:49:33:d1:7d:33:16:7b:2f:e3:e1:ca:b2: 1c:fc:2a:d6:9b:73:3d:b8:a6:d3:c6:2e:c7:66:96: 6e:34:13:2b:a4:7f:7c:1c:ff:76:3e:52:79:f9:b8: ea:5b:74:36:9d:a4:27:e2:80:af:eb:97:d8:d7:ef: ac:1c:0e:0a:38:fb:80:5a:57:d3:77:3c:f0:82:61: 0b:40:ae:6a:6f:4a:ee:19:e5:0a:a1:0f:6c:6a:43: b5:3a:e0:83:43:ab:c7:26:88:2a:b2:41:29:b9:bb: 97:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5C:5C:78:89:A0:74:E9:65:E3:79:93:21:BF:B6:08:47:79:89:95 X509v3 Authority Key Identifier: keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/ZFxceImgdOll43mTIb-2CEd5iZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.109.145.0/24 146.109.153.0/24 146.109.160.0/19 IPv6: 2a01:4642:100::-2a01:4642:2ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 66:dd:08:ff:e1:0c:a0:87:16:c1:d9:7a:4c:72:cc:6b:25:45: 7c:38:9b:66:f1:6f:6b:d9:9f:5d:b4:30:01:77:4d:67:4a:ae: 52:22:ad:e4:f9:b2:8f:bf:c3:50:44:42:15:5a:3b:52:4b:f0: 8c:8d:24:94:38:f7:fd:67:f3:aa:0c:e3:32:c4:a1:df:85:dd: 2b:11:ef:f9:64:9f:30:33:23:50:b2:ed:a4:49:2e:a4:a9:9b: 4d:d3:6c:3e:9f:95:f5:a7:18:0f:7f:c3:8e:cb:6c:39:e4:8c: 47:b8:12:51:9c:ce:5c:41:f0:3a:af:a0:da:49:d2:3f:40:7c: 28:11:31:42:fa:82:38:59:24:83:28:7d:21:07:6d:da:f3:e9: ee:e9:db:69:48:77:22:f5:ee:9c:ef:fb:cf:e2:67:0c:2e:bb: ee:23:19:7e:c5:6a:ef:14:92:f4:dd:16:6f:74:d8:3f:cd:25: 43:0e:3f:59:1d:46:85:81:09:70:89:ee:14:4e:2c:a3:5f:e9: 90:d1:29:57:0b:87:7b:12:a1:2a:4a:05:5f:da:8a:7c:97:0f: 0d:6a:c5:d9:4c:7f:a0:f5:be:9c:32:14:df:11:46:93:e2:87: 65:ed:0f:8c:63:40:32:d2:21:b0:f8:04:4f:3b:5f:21:3f:56: 49:aa:d2:a1 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt7o4gK30rp97eE5986uPSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjQyNzc2YmU1MzJiZDA1NzUzMzI4NTVkOGM0MmM0OTUy ZWQ5MzEwHhcNMjYwMTAxMjIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDVjNWM3ODg5YTA3NGU5NjVlMzc5OTMyMWJmYjYwODQ3Nzk4OTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+El+2RqGYOxmdSbcVbDJXXIkvMC uKiNZcGDZlpNof5cRYVPgdsXQHkMsyThW5gMzx8xRsua6pQ6ys9ldcR0o/ALEK/x AOohzCf+Tmki1cYApI8eIXNKWRjZLNGDg4Yp0N6wj8uGAV+1bb739V1x4CmXPBeR 64InqIaHtlzh7N52EhBjUrO22+yLOVZjyW6yJhfHgvRTGzlJM9F9MxZ7L+PhyrIc /CrWm3M9uKbTxi7HZpZuNBMrpH98HP92PlJ5+bjqW3Q2naQn4oCv65fY1++sHA4K OPuAWlfTdzzwgmELQK5qb0ruGeUKoQ9sakO1OuCDQ6vHJogqskEpubuXWwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFGRcXHiJoHTpZeN5kyG/tghHeYmVMB8GA1UdIwQY MBaAFOz0J3a+UyvQV1MyhV2MQsSVLtkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgt NWU1M2MyM2I1NWIwLzEvWkZ4Y2VJbWdkT2xsNDNtVEliLTJDRWQ1aVpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgtNWU1M2MyM2I1NWIw LzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAkm2RAwQA km2ZAwQFkm2gMBgEAgACMBIwEAMGACoBRkIBAwYAKgFGQgIwDQYJKoZIhvcNAQEL BQADggEBAGbdCP/hDKCHFsHZekxyzGslRXw4m2bxb2vZn120MAF3TWdKrlIireT5 so+/w1BEQhVaO1JL8IyNJJQ49/1n86oM4zLEod+F3SsR7/lknzAzI1Cy7aRJLqSp m03TbD6flfWnGA9/w47LbDnkjEe4ElGczlxB8DqvoNpJ0j9AfCgRMUL6gjhZJIMo fSEHbdrz6e7p22lIdyL17pzv+8/iZwwuu+4jGX7Fau8UkvTdFm902D/NJUMOP1kd RoWBCXCJ7hROLKNf6ZDRKVcLh3sSoSpKBV/ainyXDw1qxdlMf6D1vpwyFN8RRpPi h2XtD4xjQDLSIbD4BE87XyE/Vkmq0qE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:34 2026 by rpki-client