This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/ZQpYmqUtlkWQcWjn2EUKSbAvOvo.roa File: ZQpYmqUtlkWQcWjn2EUKSbAvOvo.roa (raw, json) Hash identifier: bYXBLdaB4r96pfWbkmcAKS0XDR9kCdH5qkm7slBxPH8= Subject key identifier: 65:0A:58:9A:A5:2D:96:45:90:71:68:E7:D8:45:0A:49:B0:2F:3A:FA Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0 Certificate serial: 019B7B36D40C3ABA3983EE393EBF6E51DB20 Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/ZQpYmqUtlkWQcWjn2EUKSbAvOvo.roa Signing time: Thu 01 Jan 2026 20:19:09 +0000 ROA not before: Thu 01 Jan 2026 20:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 912 IP address blocks: 185.156.184.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d4:0c:3a:ba:39:83:ee:39:3e:bf:6e:51:db:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0 Validity Not Before: Jan 1 20:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=650a589aa52d9645907168e7d8450a49b02f3afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:70:99:ab:ac:8c:6d:1a:d0:eb:f5:d3:67:e6: 3e:bf:31:5a:03:5b:d1:eb:f8:23:c8:8a:f9:26:74: 25:f3:5a:ef:4a:64:72:61:98:1b:7d:9f:2d:e7:3a: 11:71:c1:11:4d:d0:85:ba:c5:de:8c:29:74:9d:dc: d6:45:20:23:33:e2:13:fe:4a:f1:0a:9e:8b:4d:31: cc:d5:ca:f6:17:1a:82:1b:ad:28:7e:6a:3b:32:d5: c4:1f:8a:c3:46:51:92:1e:37:dc:cb:ca:e8:6e:d2: 53:8e:5d:ce:1d:c7:d4:ee:a9:74:80:53:d3:57:7f: e3:cc:3b:c8:5b:a9:e5:bb:6f:f5:30:2d:b6:52:1c: 54:c0:12:cd:7e:06:ff:fe:5a:b2:77:b7:4c:ef:e0: ae:a6:88:e0:14:d0:1e:a5:6f:ad:5b:3c:a8:72:c9: d3:b3:f4:2a:78:e7:98:ba:f9:0b:a8:71:b1:91:57: 3a:83:e7:2f:ba:c4:95:c3:73:ae:a8:05:a3:65:5c: cf:98:d5:de:a6:cd:e1:f5:80:2b:d5:ad:32:c8:bc: 83:56:48:e5:4a:8b:50:5a:c9:ba:25:f9:08:6d:20: bd:00:b1:1e:0b:1f:3f:03:c5:9f:25:c5:8d:0d:e9: 37:67:46:ec:12:66:86:dc:e5:97:38:7f:02:03:46: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0A:58:9A:A5:2D:96:45:90:71:68:E7:D8:45:0A:49:B0:2F:3A:FA X509v3 Authority Key Identifier: keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/ZQpYmqUtlkWQcWjn2EUKSbAvOvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.184.0/22 Signature Algorithm: sha256WithRSAEncryption 55:ba:46:75:c1:9c:bb:cb:e6:07:5d:ac:05:72:02:d0:bb:1a: 86:78:33:b3:dc:89:3a:5a:ee:0d:c7:b2:53:d0:76:d1:92:0b: 54:51:a9:d5:37:11:51:9a:0e:87:bc:c9:5b:e7:3e:45:bd:29: 48:9d:94:67:0b:d2:99:ff:d2:5e:b9:7b:9f:13:82:fe:9c:ea: 39:1f:a1:47:be:d0:fa:13:17:20:64:ee:75:e5:55:10:f8:5b: 54:ec:dc:49:6b:09:06:28:2c:03:7a:a5:32:ab:bd:a7:36:20: ef:67:fc:1f:ee:8a:bb:77:cd:c7:21:29:30:10:07:0e:df:c1: bf:ee:62:6a:7b:ca:51:07:3c:4f:ac:34:24:15:57:b4:e9:30: cd:3a:2e:fb:f3:bb:12:9f:ae:26:e4:a8:10:47:cf:81:a7:6e: 5d:4b:0d:c8:6f:45:6c:2f:ec:2b:b0:99:42:e1:e9:c0:95:8d: 5c:a7:c3:cb:e8:fe:43:63:b7:c5:cd:02:56:b7:21:4f:b2:1e: 8a:40:44:3a:bd:1b:3b:46:2d:0c:ea:8d:35:d1:85:03:e6:95: d5:fe:bc:7e:9a:5e:be:eb:ef:22:a6:d8:9c:f3:7c:02:0f:33: 2b:72:dc:ca:41:ca:e4:1f:82:50:38:52:7c:f8:98:61:5c:94: 57:e2:fd:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtQMOro5g+45Pr9uUdsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZWZiNTNmMjY2ZTExZTZlZDVhMTNlYjNlOTdmNGI5NjAx ZGQ2ZTAwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTBhNTg5YWE1MmQ5NjQ1OTA3MTY4ZTdkODQ1MGE0OWIwMmYzYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXCZq6yMbRrQ6/XTZ+Y+vzFaA1vR 6/gjyIr5JnQl81rvSmRyYZgbfZ8t5zoRccERTdCFusXejCl0ndzWRSAjM+IT/krx Cp6LTTHM1cr2FxqCG60ofmo7MtXEH4rDRlGSHjfcy8robtJTjl3OHcfU7ql0gFPT V3/jzDvIW6nlu2/1MC22UhxUwBLNfgb//lqyd7dM7+CupojgFNAepW+tWzyocsnT s/QqeOeYuvkLqHGxkVc6g+cvusSVw3OuqAWjZVzPmNXeps3h9YAr1a0yyLyDVkjl SotQWsm6JfkIbSC9ALEeCx8/A8WfJcWNDek3Z0bsEmaG3OWXOH8CA0boBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGUKWJqlLZZFkHFo59hFCkmwLzr6MB8GA1UdIwQY MBaAFEbvtT8mbhHm7VoT6z6X9LlgHdbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUt ZDdjNjcwODQxNGZhLzEvWlFwWW1xVXRsa1dRY1dqbjJFVUtTYkF2T3ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUtZDdjNjcwODQxNGZh LzEvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZy4MA0G CSqGSIb3DQEBCwUAA4IBAQBVukZ1wZy7y+YHXawFcgLQuxqGeDOz3Ik6Wu4Nx7JT 0HbRkgtUUanVNxFRmg6HvMlb5z5FvSlInZRnC9KZ/9JeuXufE4L+nOo5H6FHvtD6 ExcgZO515VUQ+FtU7NxJawkGKCwDeqUyq72nNiDvZ/wf7oq7d83HISkwEAcO38G/ 7mJqe8pRBzxPrDQkFVe06TDNOi7787sSn64m5KgQR8+Bp25dSw3Ib0VsL+wrsJlC 4enAlY1cp8PL6P5DY7fFzQJWtyFPsh6KQEQ6vRs7Ri0M6o010YUD5pXV/rx+ml6+ 6+8iptic83wCDzMrctzKQcrkH4JQOFJ8+JhhXJRX4v19 -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:50 2026 by rpki-client