This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa File: ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa (raw, json) Hash identifier: NyeDj2CCt8I3KwuYf4K9J8j74vTWf4ATwXYKw7Y/SY8= Subject key identifier: 64:62:EA:60:D3:2D:A2:59:B9:78:BD:70:51:70:1D:21:E1:57:ED:2F Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c Certificate serial: 019B7F83113C706134EA5F0518375B595E47 Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa Signing time: Fri 02 Jan 2026 16:20:54 +0000 ROA not before: Fri 02 Jan 2026 16:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51685 IP address blocks: 45.86.38.0/24 maxlen: 32 91.219.164.0/22 maxlen: 32 91.237.179.0/24 maxlen: 32 2a07:6940::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:11:3c:70:61:34:ea:5f:05:18:37:5b:59:5e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c Validity Not Before: Jan 2 16:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6462ea60d32da259b978bd7051701d21e157ed2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5f:24:1d:83:97:39:68:c3:13:3b:a7:ba:69: 46:a6:5f:f7:a0:a0:9d:e2:bf:31:f8:6d:4e:50:8c: b7:12:a7:36:bf:d0:26:19:aa:8e:3a:6a:d3:d7:95: 4c:cb:8e:83:fd:3e:3b:ee:2d:dc:4e:75:63:12:28: 2c:0c:e9:2e:15:17:2e:f0:90:3c:f8:2a:f3:36:ae: 7f:be:48:24:13:a6:02:75:22:a9:cf:95:2d:f0:b4: fe:3b:7d:ac:01:57:5f:fe:eb:1b:1d:72:fe:55:d3: d3:de:9d:6a:13:58:0d:92:48:55:d6:00:12:3f:1d: ca:e1:10:dc:25:73:cf:11:3a:69:f1:48:81:f0:cc: 03:12:71:fd:0e:be:81:c1:0c:d4:50:b0:40:0e:21: 3b:1f:3d:73:77:7b:d5:f5:e2:16:2c:11:ef:5e:63: b7:02:9b:db:0f:c7:26:ff:57:2b:6e:1d:3b:7a:eb: ea:74:93:f4:bd:ed:f8:9d:80:25:46:33:b1:84:f5: 64:00:ed:3b:dc:b5:e4:83:f7:40:7b:8e:a4:41:67: e7:51:95:2c:4e:bc:58:51:8a:3c:82:53:f4:9a:bd: 7f:9c:4f:13:3b:19:18:fb:49:d8:80:66:9a:5e:88: 3c:e3:43:f0:2e:be:a8:49:27:90:f1:c2:a6:45:ca: 01:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:62:EA:60:D3:2D:A2:59:B9:78:BD:70:51:70:1D:21:E1:57:ED:2F X509v3 Authority Key Identifier: keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.38.0/24 91.219.164.0/22 91.237.179.0/24 IPv6: 2a07:6940::/29 Signature Algorithm: sha256WithRSAEncryption d7:98:0b:df:9c:f7:ac:5b:a3:91:1f:09:17:96:4f:f2:66:9a: 36:a5:73:cc:ea:77:3c:ea:e7:c6:ef:bf:00:71:12:63:d9:0c: 78:46:b2:f7:10:e3:1d:22:38:e9:dd:e1:0b:30:ee:c2:d6:7b: cf:a6:13:40:20:51:bd:32:18:d3:e9:49:f4:1f:4e:2f:3a:ff: 47:bd:24:e8:d8:f8:f8:bf:0f:df:85:6b:9a:0b:ba:83:24:11: 7c:3f:fd:8a:18:0b:13:1b:69:fb:c5:8a:ba:8e:46:d4:5c:e7: c6:c9:b5:25:cb:f3:33:88:54:ac:52:f1:15:30:7b:8f:82:9b: 09:4c:82:18:7a:9f:48:20:68:07:0f:8d:3c:07:4d:9d:f5:d1: 3e:6e:4f:6b:e7:94:dc:d5:fa:22:71:1b:14:f3:d6:39:c9:80: 66:e4:95:6c:20:6a:37:81:6b:02:7b:c7:dd:d8:69:6f:2f:0e: 38:59:15:fd:40:69:dc:27:ab:68:67:ee:57:0d:40:5b:5c:27: 2c:7f:bc:d8:04:14:8a:1e:a4:e5:c4:5a:7d:3a:51:c4:9d:d8: 00:23:03:7b:5c:64:ca:ca:c4:1f:ce:4f:75:1d:2d:67:a9:3c: 4c:55:cd:5c:59:88:28:6c:72:ec:5f:e5:82:8c:f3:ea:a6:89: 7b:71:a8:d8 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/gxE8cGE06l8FGDdbWV5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmM2UzYmY1NjBkYTBiMTI2MThiMDI3YWFjYTYxZmFjNzhk NWZmNWMwHhcNMjYwMTAyMTYyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDYyZWE2MGQzMmRhMjU5Yjk3OGJkNzA1MTcwMWQyMWUxNTdlZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo18kHYOXOWjDEzunumlGpl/3oKCd 4r8x+G1OUIy3Eqc2v9AmGaqOOmrT15VMy46D/T477i3cTnVjEigsDOkuFRcu8JA8 +CrzNq5/vkgkE6YCdSKpz5Ut8LT+O32sAVdf/usbHXL+VdPT3p1qE1gNkkhV1gAS Px3K4RDcJXPPETpp8UiB8MwDEnH9Dr6BwQzUULBADiE7Hz1zd3vV9eIWLBHvXmO3 ApvbD8cm/1crbh07euvqdJP0ve34nYAlRjOxhPVkAO073LXkg/dAe46kQWfnUZUs TrxYUYo8glP0mr1/nE8TOxkY+0nYgGaaXog840PwLr6oSSeQ8cKmRcoBAwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGRi6mDTLaJZuXi9cFFwHSHhV+0vMB8GA1UdIwQY MBaAFB8+O/Vg2gsSYYsCeqymH6x41f9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2Et ZWE1NzMxNjg0OTE3LzEvWkdMcVlOTXRvbG01ZUwxd1VYQWRJZUZYN1M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2EtZWE1NzMxNjg0OTE3 LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALVYmAwQC W9ukAwQAW+2zMA0EAgACMAcDBQMqB2lAMA0GCSqGSIb3DQEBCwUAA4IBAQDXmAvf nPesW6ORHwkXlk/yZpo2pXPM6nc86ufG778AcRJj2Qx4RrL3EOMdIjjp3eELMO7C 1nvPphNAIFG9MhjT6Un0H04vOv9HvSTo2Pj4vw/fhWuaC7qDJBF8P/2KGAsTG2n7 xYq6jkbUXOfGybUly/MziFSsUvEVMHuPgpsJTIIYep9IIGgHD408B02d9dE+bk9r 55Tc1foicRsU89Y5yYBm5JVsIGo3gWsCe8fd2GlvLw44WRX9QGncJ6toZ+5XDUBb XCcsf7zYBBSKHqTlxFp9OlHEndgAIwN7XGTKysQfzk91HS1nqTxMVc1cWYgobHLs X+WCjPPqpol7cajY -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:41 2026 by rpki-client