This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/ZIFHSotu32VSRWz3yy7p-c2LO-A.roa File: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (raw, json) Hash identifier: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0= Subject key identifier: 64:81:47:4A:8B:6E:DF:65:52:45:6C:F7:CB:2E:E9:F9:CD:8B:3B:E0 Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019B797F05F2F4D81052A4FDB5FC05BF60EA Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/ZIFHSotu32VSRWz3yy7p-c2LO-A.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12306 IP address blocks: 82.98.64.0/18 maxlen: 32 82.98.93.0/24 maxlen: 24 82.98.127.0/24 maxlen: 24 212.19.32.0/19 maxlen: 32 213.83.0.0/18 maxlen: 32 2a02:2e0::/29 maxlen: 128 2a02:2e0:1::/48 maxlen: 48 2a02:2e0:a::/48 maxlen: 48 2a02:2e0:431::/48 maxlen: 48 2a02:2e0:cd4e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:05:f2:f4:d8:10:52:a4:fd:b5:fc:05:bf:60:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6481474a8b6edf6552456cf7cb2ee9f9cd8b3be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:43:f4:38:1d:ac:a6:a1:37:fd:76:49:3e: 37:f6:11:d7:34:4c:d1:62:d9:f5:c9:d3:75:96:b6: c6:b3:d7:d4:bb:d0:cc:8e:ba:49:54:91:dc:e7:e3: ac:e5:0a:bb:8c:b5:ef:a9:0f:26:23:48:2c:6b:94: 37:e7:46:21:27:97:03:a8:bb:5c:c3:0a:d4:26:84: 5b:1c:99:58:e1:9f:65:e4:f5:27:65:ea:0a:63:fd: 94:94:7d:7c:66:c2:8f:ed:22:52:16:eb:38:31:5f: a0:72:b7:0c:e9:d1:a5:0b:54:ab:2b:e6:c4:35:30: 95:55:b7:d7:c4:7a:77:c0:1c:c5:42:d2:33:56:6d: 95:6e:2c:62:a0:ec:22:d9:88:be:11:21:04:d3:e9: f7:b9:52:d2:01:ec:37:1d:55:30:7b:99:82:57:b4: fb:10:4f:98:dc:31:e6:b6:73:0e:46:8f:51:80:00: ad:47:36:e3:6c:f8:c2:85:38:32:16:a3:c1:35:3b: 2e:31:36:11:8a:0b:88:bf:28:c8:aa:10:6f:42:98: 9b:1d:ba:2b:06:61:b0:07:0f:f1:b1:86:10:b3:ce: 6e:d7:b0:ab:5a:ba:1a:48:18:81:cd:92:02:14:ef: 01:1f:a1:de:e4:cb:71:9c:32:d3:d5:98:4b:81:dc: 58:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:81:47:4A:8B:6E:DF:65:52:45:6C:F7:CB:2E:E9:F9:CD:8B:3B:E0 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/ZIFHSotu32VSRWz3yy7p-c2LO-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.98.64.0/18 212.19.32.0/19 213.83.0.0/18 IPv6: 2a02:2e0::/29 Signature Algorithm: sha256WithRSAEncryption 51:68:22:71:cc:3a:c3:29:3f:65:da:dc:97:a9:c5:fd:7c:c6: 5e:4c:58:2f:39:4e:f6:fe:11:4b:45:ab:25:70:cb:eb:9c:4e: b3:d1:bc:41:6e:51:30:31:4d:28:d9:f9:70:00:9f:7b:0f:a6: 1d:d4:3a:0e:f3:e3:90:db:97:67:f1:ae:fd:1f:9b:18:dd:b7: 27:71:95:62:f9:f9:32:04:1c:89:3c:73:3d:27:18:1f:1d:f0: c0:f2:c4:ac:31:5b:3a:a7:af:b7:9e:0b:bb:7f:3b:ba:e9:e3: e3:03:12:86:1a:bb:cb:e3:b6:e2:27:54:9b:ed:9b:29:a7:72: de:02:de:67:e8:46:aa:07:c1:f3:32:4f:44:61:81:5d:85:09: 48:81:bc:f8:a7:37:73:d2:a4:c9:1f:67:95:f2:d0:d2:24:95: ca:dd:e8:b3:a0:52:cd:0c:0c:1a:e5:81:98:70:1e:ac:a6:4f: 98:10:3d:f2:14:c6:7c:e5:28:5f:c7:fb:ec:59:84:0f:73:b0: 38:0b:9d:c5:40:c0:d8:d3:a2:ff:38:a5:7c:12:7b:fd:22:66: eb:90:0c:21:63:c2:b9:8b:6e:69:19:dc:69:27:f4:fe:16:97: df:e6:4b:a5:51:a0:f2:09:87:d2:10:4e:09:f7:16:71:54:78: 25:b5:c8:84 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fwXy9NgQUqT9tfwFv2DqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDgxNDc0YThiNmVkZjY1NTI0NTZjZjdjYjJlZTlmOWNkOGIzYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTdD9DgdrKahN/12ST439hHXNEzR Ytn1ydN1lrbGs9fUu9DMjrpJVJHc5+Os5Qq7jLXvqQ8mI0gsa5Q350YhJ5cDqLtc wwrUJoRbHJlY4Z9l5PUnZeoKY/2UlH18ZsKP7SJSFus4MV+gcrcM6dGlC1SrK+bE NTCVVbfXxHp3wBzFQtIzVm2VbixioOwi2Yi+ESEE0+n3uVLSAew3HVUwe5mCV7T7 EE+Y3DHmtnMORo9RgACtRzbjbPjChTgyFqPBNTsuMTYRiguIvyjIqhBvQpibHbor BmGwBw/xsYYQs85u17CrWroaSBiBzZICFO8BH6He5MtxnDLT1ZhLgdxYNQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGSBR0qLbt9lUkVs98su6fnNizvgMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvWklGSFNvdHUzMlZTUld6M3l5N3AtYzJMTy1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGUmJAAwQF 1BMgAwQG1VMAMA0EAgACMAcDBQMqAgLgMA0GCSqGSIb3DQEBCwUAA4IBAQBRaCJx zDrDKT9l2tyXqcX9fMZeTFgvOU72/hFLRaslcMvrnE6z0bxBblEwMU0o2flwAJ97 D6Yd1DoO8+OQ25dn8a79H5sY3bcncZVi+fkyBByJPHM9JxgfHfDA8sSsMVs6p6+3 ngu7fzu66ePjAxKGGrvL47biJ1Sb7Zspp3LeAt5n6EaqB8HzMk9EYYFdhQlIgbz4 pzdz0qTJH2eV8tDSJJXK3eizoFLNDAwa5YGYcB6spk+YED3yFMZ85Shfx/vsWYQP c7A4C53FQMDY06L/OKV8Env9ImbrkAwhY8K5i25pGdxpJ/T+Fpff5kulUaDyCYfS EE4J9xZxVHgltciE -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:32 2026 by rpki-client