This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ZtIRwvAj0rnmqMRL_2CXjWBzVeU.roa File: ZtIRwvAj0rnmqMRL_2CXjWBzVeU.roa (raw, json) Hash identifier: tylOOdmmekqJfI8xHB0gIcxVTWtO2dEEQJ2y2+W1Srs= Subject key identifier: 66:D2:11:C2:F0:23:D2:B9:E6:A8:C4:4B:FF:60:97:8D:60:73:55:E5 Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B8A56B90AD80CD8AB616800FD45CECA2B Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ZtIRwvAj0rnmqMRL_2CXjWBzVeU.roa Signing time: Sun 04 Jan 2026 18:48:17 +0000 ROA not before: Sun 04 Jan 2026 18:48:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213644 IP address blocks: 178.239.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:56:b9:0a:d8:0c:d8:ab:61:68:00:fd:45:ce:ca:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 4 18:48:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66d211c2f023d2b9e6a8c44bff60978d607355e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:4a:53:25:60:f7:ac:96:19:9c:e0:6f:92: 87:2c:3c:48:be:5a:d5:92:da:54:77:6f:03:a1:27: 80:95:6a:44:22:39:54:75:ad:fa:68:dd:1a:91:a9: 66:f3:65:b3:fa:b8:97:96:1a:b0:04:da:05:48:f1: 5d:f3:9a:42:7e:1a:9d:15:0c:83:89:63:f3:e9:84: bf:de:bf:c3:9d:81:52:90:d0:e6:e5:67:71:4d:33: 40:32:99:21:65:cd:57:ff:98:40:a9:4e:6e:4c:d2: 24:c8:69:0f:03:1f:0f:9b:75:b4:0d:2b:2a:06:bd: 25:52:3b:0a:89:ee:79:cf:03:e9:4c:34:02:e8:19: 89:c8:3c:b9:94:1c:c6:af:57:7f:84:e6:17:f5:7c: 79:02:10:1a:08:7d:ec:31:1d:7b:1b:83:71:ec:b9: c2:57:d5:0a:be:1b:22:bd:57:16:8d:2e:c8:8c:39: db:3a:47:2f:b6:46:29:5d:14:dd:c1:39:aa:b4:95: ff:be:e5:9c:9f:05:39:ec:03:06:33:88:33:df:75: dd:ee:55:60:7b:11:6c:a2:aa:f1:e2:c1:1a:99:14: b4:af:bc:61:f3:67:78:ed:4d:54:9d:82:49:a5:a2: 39:c2:09:5c:e1:d1:20:d8:87:9a:94:31:93:67:9e: 11:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D2:11:C2:F0:23:D2:B9:E6:A8:C4:4B:FF:60:97:8D:60:73:55:E5 X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ZtIRwvAj0rnmqMRL_2CXjWBzVeU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.150.0/24 Signature Algorithm: sha256WithRSAEncryption 87:bc:a3:95:dd:43:d3:5b:ce:c0:13:bd:ce:aa:b8:03:58:27: aa:8e:fe:9e:44:36:67:1e:a6:7d:fd:4e:64:74:7c:f7:85:e8: a0:b4:a0:a6:1d:d2:f9:08:f2:3e:7e:ed:05:3e:f6:c6:a4:7c: d5:36:bc:8d:55:9e:9a:47:18:18:33:1c:3a:4e:d4:33:69:bb: da:d9:bf:3d:2a:94:b6:f1:c9:b2:32:69:52:71:a4:12:83:5e: 72:a1:fc:cf:1f:f2:16:0b:bc:6e:de:4b:de:4a:40:11:e4:ec: c2:b7:3a:28:6d:4c:51:a8:bd:77:9b:3a:d7:6b:e7:57:0a:f0: f9:d2:f9:bb:e7:37:46:ce:36:4d:78:01:b8:94:d3:51:dc:b0: c2:60:a6:7c:e2:6f:f8:8f:ca:dc:0a:78:cf:74:c4:9f:7b:f0: 1d:fe:1c:6d:b9:d1:e9:e5:50:80:2b:46:7b:46:3f:39:a4:f6: 88:5d:2f:b1:25:27:0f:da:d3:8c:4f:86:4a:78:21:d6:4b:3c: a3:bf:59:28:ef:51:c1:aa:a9:44:80:bd:ec:e0:73:06:92:4f: 69:86:7e:47:13:87:8e:99:5d:ac:b5:79:17:f8:6a:e8:20:f9: 66:db:d7:82:91:86:80:f7:9d:22:e6:e0:bc:3c:3c:20:6a:6a: a4:2a:b5:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuKVrkK2AzYq2FoAP1FzsorMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTA0MTg0ODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmQyMTFjMmYwMjNkMmI5ZTZhOGM0NGJmZjYwOTc4ZDYwNzM1NWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucdKUyVg96yWGZzgb5KHLDxIvlrV ktpUd28DoSeAlWpEIjlUda36aN0akalm82Wz+riXlhqwBNoFSPFd85pCfhqdFQyD iWPz6YS/3r/DnYFSkNDm5WdxTTNAMpkhZc1X/5hAqU5uTNIkyGkPAx8Pm3W0DSsq Br0lUjsKie55zwPpTDQC6BmJyDy5lBzGr1d/hOYX9Xx5AhAaCH3sMR17G4Nx7LnC V9UKvhsivVcWjS7IjDnbOkcvtkYpXRTdwTmqtJX/vuWcnwU57AMGM4gz33Xd7lVg exFsoqrx4sEamRS0r7xh82d47U1UnYJJpaI5wglc4dEg2IealDGTZ54RJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbSEcLwI9K55qjES/9gl41gc1XlMB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvWnRJUnd2QWowcm5tcU1STF8yQ1hqV0J6VmVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+WMA0G CSqGSIb3DQEBCwUAA4IBAQCHvKOV3UPTW87AE73OqrgDWCeqjv6eRDZnHqZ9/U5k dHz3heigtKCmHdL5CPI+fu0FPvbGpHzVNryNVZ6aRxgYMxw6TtQzabva2b89KpS2 8cmyMmlScaQSg15yofzPH/IWC7xu3kveSkAR5OzCtzoobUxRqL13mzrXa+dXCvD5 0vm75zdGzjZNeAG4lNNR3LDCYKZ84m/4j8rcCnjPdMSfe/Ad/hxtudHp5VCAK0Z7 Rj85pPaIXS+xJScP2tOMT4ZKeCHWSzyjv1ko71HBqqlEgL3s4HMGkk9phn5HE4eO mV2stXkX+GroIPlm29eCkYaA950i5uC8PDwgamqkKrVN -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:59 2026 by rpki-client