This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/ZkpkKq6oEr-_I6JVpG2CjygiNpU.roa File: ZkpkKq6oEr-_I6JVpG2CjygiNpU.roa (raw, json) Hash identifier: iZ1/Xaqf4kk2t//5gAR8BRoA23b+RGLpyfieDXD6saI= Subject key identifier: 66:4A:64:2A:AE:A8:12:BF:BF:23:A2:55:A4:6D:82:8F:28:22:36:95 Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec Certificate serial: 019B7DCB1F178FC426CEF7596FC13AECA263 Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/ZkpkKq6oEr-_I6JVpG2CjygiNpU.roa Signing time: Fri 02 Jan 2026 08:20:22 +0000 ROA not before: Fri 02 Jan 2026 08:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200818 IP address blocks: 5.183.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1f:17:8f:c4:26:ce:f7:59:6f:c1:3a:ec:a2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=664a642aaea812bfbf23a255a46d828f28223695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:ac:57:e4:56:e7:3f:22:52:0d:8a:e5:f1: 26:bc:34:06:26:66:2b:5c:f9:1f:b4:69:c7:36:33: 02:62:6b:36:91:4e:0a:3b:ae:fc:9e:d0:d6:69:df: 16:61:b1:58:a3:48:b6:61:2f:d8:9a:5c:35:ca:6f: ba:b1:b4:d6:02:77:03:ed:9d:31:4e:d4:6d:80:c8: f4:a5:a9:1a:9f:ae:23:2f:d0:e1:4e:54:10:97:47: c7:93:2e:ff:33:4a:ac:ae:0a:b0:99:f2:79:20:61: 0c:fc:27:90:5e:a4:2b:56:60:79:41:a1:e8:b8:ad: 55:19:1a:52:e9:7b:b6:51:cd:10:ed:b0:10:9c:a4: a3:8f:dd:c6:f0:b8:5b:e5:b1:50:7c:5e:51:b7:b3: 44:a2:74:7b:12:65:1d:41:fd:4d:11:49:0a:47:09: 03:24:07:b5:46:53:13:75:b3:8a:9d:4a:57:5d:21: 28:19:4f:11:f9:18:28:30:05:fb:db:87:30:5e:e5: 37:db:fc:5b:ba:44:06:52:ce:92:02:da:cb:3a:14: af:c6:db:3b:94:04:24:26:fe:99:8b:9f:0d:03:28: ad:10:64:d7:8a:c9:59:25:18:10:70:dd:07:1b:ce: 02:3f:af:ce:92:84:a6:8e:d0:5f:af:d3:5c:af:68: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4A:64:2A:AE:A8:12:BF:BF:23:A2:55:A4:6D:82:8F:28:22:36:95 X509v3 Authority Key Identifier: keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/ZkpkKq6oEr-_I6JVpG2CjygiNpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.108.0/24 Signature Algorithm: sha256WithRSAEncryption 76:c3:4a:58:7b:62:0b:91:8f:de:64:66:41:0c:4c:44:1d:60: 4a:90:63:be:b8:e0:e8:3e:fb:c3:f3:1c:7e:73:2e:63:a6:01: 8b:87:d5:bf:ba:a7:ca:20:ca:3c:fa:90:38:ba:d1:7f:3a:2d: d7:b3:cd:01:cb:ff:5a:17:6d:92:00:91:d1:c7:e5:1a:52:15: d1:26:66:0a:40:58:fc:15:28:45:bb:fc:e3:5a:6f:fd:20:65: 40:b7:bb:2a:e0:b4:63:e6:26:9f:38:fd:37:9a:db:ac:e9:a8: 17:9e:44:29:45:5a:d3:18:30:81:db:e8:53:e1:25:b9:0a:ac: fc:5e:85:d9:93:ed:fd:7b:b8:5c:3d:5d:ee:ac:6e:45:4f:28: 90:ea:7b:fe:f9:f3:dc:5a:7f:cb:be:58:b2:aa:d4:c6:2f:76: 39:90:2d:4c:3e:8e:e1:9c:a4:23:1e:3c:cb:ea:64:53:ff:07: fb:d2:9e:61:db:09:32:7e:57:20:ee:cf:f4:8f:0e:4e:f4:a6: c3:3f:35:b3:fe:a6:f9:99:fc:60:25:4b:c0:49:fd:e9:b1:86: eb:4d:cc:68:64:99:b0:39:f4:2a:63:80:09:e5:be:f7:24:da: 41:50:78:ce:71:17:0b:ff:dd:5c:4f:60:2d:be:7c:72:11:72: f1:dc:f1:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yx8Xj8QmzvdZb8E67KJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzODRmNmZhNmRlY2NlZDU1NzhhODVhNTFlMGJkNjU3MDFl YTM0ZWMwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjRhNjQyYWFlYTgxMmJmYmYyM2EyNTVhNDZkODI4ZjI4MjIzNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskasV+RW5z8iUg2K5fEmvDQGJmYr XPkftGnHNjMCYms2kU4KO678ntDWad8WYbFYo0i2YS/Ymlw1ym+6sbTWAncD7Z0x TtRtgMj0pakan64jL9DhTlQQl0fHky7/M0qsrgqwmfJ5IGEM/CeQXqQrVmB5QaHo uK1VGRpS6Xu2Uc0Q7bAQnKSjj93G8Lhb5bFQfF5Rt7NEonR7EmUdQf1NEUkKRwkD JAe1RlMTdbOKnUpXXSEoGU8R+RgoMAX724cwXuU32/xbukQGUs6SAtrLOhSvxts7 lAQkJv6Zi58NAyitEGTXislZJRgQcN0HG84CP6/OkoSmjtBfr9Ncr2gJiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGZKZCquqBK/vyOiVaRtgo8oIjaVMB8GA1UdIwQY MBaAFEOE9vpt7M7VV4qFpR4L1lcB6jTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMt MWIxM2JkNDU2NmE1LzEvWmtwa0txNm9Fci1fSTZKVnBHMkNqeWdpTnBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMtMWIxM2JkNDU2NmE1 LzEvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbdsMA0G CSqGSIb3DQEBCwUAA4IBAQB2w0pYe2ILkY/eZGZBDExEHWBKkGO+uODoPvvD8xx+ cy5jpgGLh9W/uqfKIMo8+pA4utF/Oi3Xs80By/9aF22SAJHRx+UaUhXRJmYKQFj8 FShFu/zjWm/9IGVAt7sq4LRj5iafOP03mtus6agXnkQpRVrTGDCB2+hT4SW5Cqz8 XoXZk+39e7hcPV3urG5FTyiQ6nv++fPcWn/LvliyqtTGL3Y5kC1MPo7hnKQjHjzL 6mRT/wf70p5h2wkyflcg7s/0jw5O9KbDPzWz/qb5mfxgJUvASf3psYbrTcxoZJmw OfQqY4AJ5b73JNpBUHjOcRcL/91cT2AtvnxyEXLx3PGE -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:29 2026 by rpki-client