This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/Zm4QLnym_-DDhDcH4DpZJBRqzmI.roa File: Zm4QLnym_-DDhDcH4DpZJBRqzmI.roa (raw, json) Hash identifier: RKjtOv2bBTwSnsUEn1Xp1qY9ajkemmIgj+R25smjK1A= Subject key identifier: 66:6E:10:2E:7C:A6:FF:E0:C3:84:37:07:E0:3A:59:24:14:6A:CE:62 Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba Certificate serial: 019B7EA5695848346329809672FA767F5F10 Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/Zm4QLnym_-DDhDcH4DpZJBRqzmI.roa Signing time: Fri 02 Jan 2026 12:18:48 +0000 ROA not before: Fri 02 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201281 IP address blocks: 45.154.62.0/24 maxlen: 24 2a0f:b100:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:69:58:48:34:63:29:80:96:72:fa:76:7f:5f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba Validity Not Before: Jan 2 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=666e102e7ca6ffe0c3843707e03a5924146ace62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:e9:49:89:33:7e:36:4b:60:c3:52:5a:96: f5:64:10:37:fa:10:45:f5:b8:19:cb:eb:d6:80:c6: e4:ed:c8:ff:13:dc:06:cc:46:91:ba:71:79:07:2f: 64:67:21:38:04:fa:3e:79:d7:dd:9c:df:a9:25:99: c5:82:c4:ec:4d:25:52:3e:48:d4:b9:9f:aa:05:14: d8:64:ca:62:f7:63:bf:79:62:82:86:15:92:db:a0: 6b:1a:6e:7d:33:63:98:04:06:1f:aa:34:3a:31:62: 3b:ca:4e:3c:23:68:80:80:9d:0f:fb:e6:1c:2e:22: fc:48:14:6d:7c:bf:ff:9f:37:a0:4e:17:c1:2b:f0: c2:8b:ce:f9:e8:cb:ec:fa:8c:ca:f9:a0:3a:7e:a5: cb:ba:fd:13:8f:05:2c:0d:65:64:8a:c1:1d:fc:28: 84:c3:1f:17:99:37:6e:2f:65:ed:4b:cc:94:97:24: 8a:a4:94:4d:f4:5d:19:db:4f:04:0d:8d:56:b6:09: 49:36:f1:05:ff:8d:23:83:c1:e1:37:bb:b1:94:37: 46:f2:48:4f:e6:2e:d8:24:eb:39:4b:ba:ab:f4:75: b1:cc:71:5c:40:f3:d1:23:64:4c:b5:ad:12:32:a0: 00:fc:13:07:97:b3:33:7d:a4:f7:db:bc:26:5b:e2: 38:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6E:10:2E:7C:A6:FF:E0:C3:84:37:07:E0:3A:59:24:14:6A:CE:62 X509v3 Authority Key Identifier: keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/Zm4QLnym_-DDhDcH4DpZJBRqzmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.62.0/24 IPv6: 2a0f:b100:200::/40 Signature Algorithm: sha256WithRSAEncryption 37:56:f8:d6:c8:9f:5f:94:71:26:c6:0c:bb:01:05:40:17:e6: 53:48:84:2c:16:f6:cf:bd:55:1e:c2:6d:c2:b8:ef:dc:00:da: 90:46:88:6b:08:b9:d3:ba:07:39:aa:e0:e9:c2:d3:0e:34:38: ff:c5:81:10:5f:e7:0e:14:31:69:8f:f5:88:44:65:e0:dc:5b: 21:8c:f7:63:24:51:1f:25:e4:c2:be:55:94:54:d1:47:d9:cb: d1:34:41:94:97:d5:28:43:d1:96:42:8d:08:78:11:ec:cd:72: cb:de:92:c5:6f:0a:52:05:38:a5:3e:c1:55:8f:c0:9b:bc:3e: 5f:82:ca:95:86:99:a2:7d:4b:b4:f5:b1:eb:e0:95:0a:67:01: 9a:b8:6b:67:a3:d4:4e:4a:ff:06:0b:63:4f:f0:2d:6b:af:e7: b4:91:55:b0:e0:dc:b7:72:ca:e5:a0:62:e2:28:12:0c:99:f2: 9a:16:87:04:f2:31:ca:91:8b:36:e3:af:a8:d2:3c:5e:f1:91: 14:8a:01:62:10:cb:38:3b:1e:c6:c5:17:40:d0:3f:bd:f0:86: 7c:e5:90:1a:19:34:f5:88:e8:0b:6e:d3:eb:82:51:e1:05:2e: b6:09:fc:07:ae:0f:85:01:7c:ee:59:dd:cc:ce:c0:10:03:3c: fd:cb:60:79 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+pWlYSDRjKYCWcvp2f18QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NTYyZDA4Njk0ODBkYzExYjc0YTU1MmNkMTY3YjZmNjMz OWM4YmEwHhcNMjYwMTAyMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjZlMTAyZTdjYTZmZmUwYzM4NDM3MDdlMDNhNTkyNDE0NmFjZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmHpSYkzfjZLYMNSWpb1ZBA3+hBF 9bgZy+vWgMbk7cj/E9wGzEaRunF5By9kZyE4BPo+edfdnN+pJZnFgsTsTSVSPkjU uZ+qBRTYZMpi92O/eWKChhWS26BrGm59M2OYBAYfqjQ6MWI7yk48I2iAgJ0P++Yc LiL8SBRtfL//nzegThfBK/DCi8756Mvs+ozK+aA6fqXLuv0TjwUsDWVkisEd/CiE wx8XmTduL2XtS8yUlySKpJRN9F0Z208EDY1WtglJNvEF/40jg8HhN7uxlDdG8khP 5i7YJOs5S7qr9HWxzHFcQPPRI2RMta0SMqAA/BMHl7MzfaT327wmW+I4FwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFGZuEC58pv/gw4Q3B+A6WSQUas5iMB8GA1UdIwQY MBaAFKZWLQhpSA3BG3SlUs0We29jOci6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMTJkZDItZGE4ZC00MDQ4LTkxNmEt NDVhOGZlZDNhMmE1LzEvWm00UUxueW1fLUREaERjSDREcFpKQlJxem1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yMTJkZDItZGE4ZC00MDQ4LTkxNmEtNDVhOGZlZDNhMmE1 LzEvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALZo+MA4E AgACMAgDBgAqD7EAAjANBgkqhkiG9w0BAQsFAAOCAQEAN1b41sifX5RxJsYMuwEF QBfmU0iELBb2z71VHsJtwrjv3ADakEaIawi507oHOarg6cLTDjQ4/8WBEF/nDhQx aY/1iERl4NxbIYz3YyRRHyXkwr5VlFTRR9nL0TRBlJfVKEPRlkKNCHgR7M1yy96S xW8KUgU4pT7BVY/Am7w+X4LKlYaZon1LtPWx6+CVCmcBmrhrZ6PUTkr/BgtjT/At a6/ntJFVsODct3LK5aBi4igSDJnymhaHBPIxypGLNuOvqNI8XvGRFIoBYhDLODse xsUXQNA/vfCGfOWQGhk09YjoC27T64JR4QUutgn8B64PhQF87lndzM7AEAM8/ctg eQ== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:16 2026 by rpki-client