This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/z536l42qQAP8Gdjmep11Hv-GUjU.roa File: z536l42qQAP8Gdjmep11Hv-GUjU.roa (raw, json) Hash identifier: R2VT7lhCGbQQkLXEapYE183QDXSvteX0dsvTVGhyRNc= Subject key identifier: CF:9D:FA:97:8D:AA:40:03:FC:19:D8:E6:7A:9D:75:1E:FF:86:52:35 Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d Certificate serial: 019B7AC94002DA7AC8B7F3AD8EC65BD97D12 Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/z536l42qQAP8Gdjmep11Hv-GUjU.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393894 IP address blocks: 45.145.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:40:02:da:7a:c8:b7:f3:ad:8e:c6:5b:d9:7d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf9dfa978daa4003fc19d8e67a9d751eff865235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:05:68:ca:b6:52:75:b9:48:9d:24:1d:91: aa:54:d4:93:b2:c5:da:0f:3f:69:cd:cf:2a:2d:7a: a4:f3:72:27:0a:ce:78:39:d0:72:b9:08:ce:94:c0: ba:1a:44:6b:c2:20:cd:46:46:18:36:b9:b3:fd:5c: 86:d7:e2:eb:f0:bb:9b:91:fd:6f:59:40:96:a0:63: 40:82:e8:70:a3:bf:7a:64:4c:0d:2b:b7:42:99:46: 10:8e:31:dd:53:cf:a7:96:23:3e:2a:ad:d9:73:74: 1f:57:22:45:c7:1a:d4:8d:c0:2e:e9:d9:51:6e:ff: 2a:72:15:90:9f:07:7b:af:78:12:33:e4:1c:98:17: 87:2b:57:df:1a:b7:5d:8d:74:98:ea:cc:ba:5a:23: f2:0d:6b:5d:52:f6:87:39:0a:df:a2:eb:c8:1c:53: 69:f9:61:68:a6:b9:11:53:7c:70:c1:ad:93:d7:53: 50:b1:0d:66:4d:f4:2e:ef:26:8d:2a:be:3f:5c:31: 02:32:9c:e2:06:95:77:50:05:7b:a6:73:6b:11:51: 41:f5:ba:e9:8f:86:35:42:69:a3:1b:98:fd:cb:ca: fb:2d:97:8b:4e:de:7c:1f:5a:c0:2f:c4:9f:bc:49: 05:e4:93:1a:0f:b6:9c:49:45:32:c2:ef:4d:b9:97: 51:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9D:FA:97:8D:AA:40:03:FC:19:D8:E6:7A:9D:75:1E:FF:86:52:35 X509v3 Authority Key Identifier: keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/z536l42qQAP8Gdjmep11Hv-GUjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.144.0/22 Signature Algorithm: sha256WithRSAEncryption bc:c9:da:52:ce:bf:03:7a:d6:51:c4:e4:f2:d3:d5:35:9a:53: 27:e4:3d:f0:73:f8:e0:83:61:6a:46:8e:3f:39:a2:00:dd:f0: ca:58:97:9d:f8:88:86:17:95:6e:09:59:4d:38:78:57:98:0c: d0:56:91:3d:d0:a4:f0:5b:28:7e:83:64:6d:1a:f7:5c:e0:5e: 7c:01:6a:3c:0d:c2:66:fc:33:4f:49:30:8e:8d:ba:e4:30:29: c1:7d:34:d0:69:74:33:eb:4e:76:72:e1:77:28:89:bd:07:26: 66:ae:a4:cf:f2:7c:20:f8:d2:c6:9e:ab:d9:d8:e6:62:fc:b6: f1:43:50:66:e7:9c:e5:73:a5:01:42:cb:25:bf:96:c6:be:22: c0:90:9b:9c:5a:67:ac:9f:46:fe:f6:19:8d:71:c0:e8:46:a9: 90:cc:38:7f:6f:f0:6d:ba:4d:56:3b:49:6f:d8:58:fb:ab:e6: b8:b9:e0:f2:f8:28:48:3a:4c:eb:bd:ab:ef:48:e8:fb:17:3c: 57:d2:6d:76:76:c1:1e:e4:3e:dc:9e:5b:87:8b:ee:73:6a:c7: 69:99:43:72:65:b4:06:9d:b4:88:35:4d:54:20:ec:63:7a:62: 55:db:bc:9b:ca:ec:88:f1:42:95:c7:ca:f2:f9:60:e7:82:a2: 56:74:29:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUAC2nrIt/OtjsZb2X0SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZmUwZDAyNGNkZGJhZjg2ODIyOTEyMjE1ODk3MTQ3MmIy NGNiNGQwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjlkZmE5NzhkYWE0MDAzZmMxOWQ4ZTY3YTlkNzUxZWZmODY1MjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmQFaMq2UnW5SJ0kHZGqVNSTssXa Dz9pzc8qLXqk83InCs54OdByuQjOlMC6GkRrwiDNRkYYNrmz/VyG1+Lr8Lubkf1v WUCWoGNAguhwo796ZEwNK7dCmUYQjjHdU8+nliM+Kq3Zc3QfVyJFxxrUjcAu6dlR bv8qchWQnwd7r3gSM+QcmBeHK1ffGrddjXSY6sy6WiPyDWtdUvaHOQrfouvIHFNp +WFoprkRU3xwwa2T11NQsQ1mTfQu7yaNKr4/XDECMpziBpV3UAV7pnNrEVFB9brp j4Y1QmmjG5j9y8r7LZeLTt58H1rAL8SfvEkF5JMaD7acSUUywu9NuZdR8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM+d+peNqkAD/BnY5nqddR7/hlI1MB8GA1UdIwQY MBaAFBb+DQJM3br4aCKRIhWJcUcrJMtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80NjE2ZDctZTgwOC00ZTQ3LWE2NDYt NWIyZjkwZGY3OTZkLzEvejUzNmw0MnFRQVA4R2RqbWVwMTFIdi1HVWpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80NjE2ZDctZTgwOC00ZTQ3LWE2NDYtNWIyZjkwZGY3OTZk LzEvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZGQMA0G CSqGSIb3DQEBCwUAA4IBAQC8ydpSzr8DetZRxOTy09U1mlMn5D3wc/jgg2FqRo4/ OaIA3fDKWJed+IiGF5VuCVlNOHhXmAzQVpE90KTwWyh+g2RtGvdc4F58AWo8DcJm /DNPSTCOjbrkMCnBfTTQaXQz6052cuF3KIm9ByZmrqTP8nwg+NLGnqvZ2OZi/Lbx Q1Bm55zlc6UBQsslv5bGviLAkJucWmesn0b+9hmNccDoRqmQzDh/b/Btuk1WO0lv 2Fj7q+a4ueDy+ChIOkzrvavvSOj7FzxX0m12dsEe5D7cnluHi+5zasdpmUNyZbQG nbSINU1UIOxjemJV27ybyuyI8UKVx8ry+WDngqJWdCla -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:01 2026 by rpki-client