This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa File: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (raw, json) Hash identifier: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI= Subject key identifier: CD:51:A8:0F:FD:18:D0:31:C3:2D:C2:9F:98:62:61:02:76:25:82:41 Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338 Certificate serial: 019B797EEC91C9285EB92757FA579379487E Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa Signing time: Thu 01 Jan 2026 12:18:39 +0000 ROA not before: Thu 01 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49425 IP address blocks: 45.75.128.0/17 maxlen: 24 185.169.144.0/23 maxlen: 24 2a0a:4900::/29 maxlen: 29 2a0a:4900::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ec:91:c9:28:5e:b9:27:57:fa:57:93:79:48:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338 Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd51a80ffd18d031c32dc29f9862610276258241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c7:e4:95:08:8c:d6:e1:2b:45:a5:9e:25:80: d4:87:b6:5a:02:2a:ba:db:13:84:b2:f1:42:cb:fe: 66:ef:4e:07:87:a9:e3:91:24:3f:61:56:3a:75:b6: 61:a0:5f:98:aa:64:c5:00:66:92:88:bf:c1:4d:00: 03:00:23:a5:fd:3e:12:8a:63:45:f4:4f:96:b4:63: eb:4a:17:28:33:57:4c:9a:dd:4a:84:33:85:6c:bb: 6b:d3:24:31:97:09:f8:58:70:3b:04:56:af:9f:d6: c3:f1:22:4c:77:2f:34:12:eb:67:ac:d6:1b:b8:0a: ec:39:18:a4:cd:a8:b7:5f:23:df:5c:0a:1a:f3:50: 84:f8:7a:d8:7a:5a:6b:40:e4:24:1c:c8:ee:4c:fe: cf:f4:3f:27:f9:a5:86:4a:83:54:f7:8f:e6:c1:56: 1d:2a:ee:73:39:10:f5:8c:91:0c:c8:30:10:44:7a: fb:e0:59:f9:63:e8:2f:69:20:34:15:4d:7b:d1:0c: 9e:be:e9:6f:c1:34:95:2e:55:15:34:b4:6c:74:cc: 7b:1e:14:32:f0:83:77:42:01:64:77:25:be:c5:d9: ae:e5:db:69:7f:52:02:9c:44:33:b2:54:96:0d:63: 8c:d2:09:f1:c4:b5:c9:42:49:b2:8c:e5:88:ce:ac: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:51:A8:0F:FD:18:D0:31:C3:2D:C2:9F:98:62:61:02:76:25:82:41 X509v3 Authority Key Identifier: keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.75.128.0/17 185.169.144.0/23 IPv6: 2a0a:4900::/29 Signature Algorithm: sha256WithRSAEncryption 69:cf:0c:f0:33:ac:8c:7e:31:d3:ba:16:0f:ad:7e:15:2d:19: d3:f8:ed:83:c2:f2:55:94:9c:35:26:2f:70:b2:3b:35:4c:ac: 9e:fe:6b:fd:da:ce:03:a9:1c:7b:b9:30:8d:2c:b3:11:26:1a: a5:e7:b0:12:ec:c1:d8:26:77:d2:c5:1f:f5:92:37:60:17:a0: eb:95:cc:a4:5f:53:52:2e:97:0c:ee:64:63:4b:a7:db:19:af: cc:a7:a7:7d:57:9f:37:56:6f:6c:7f:53:e5:08:16:d0:46:5c: 68:98:23:1b:00:bd:fd:bb:af:34:96:3c:c3:89:fa:eb:95:a7: 95:09:e0:42:3b:e3:e9:00:53:89:84:91:19:5e:6c:e6:09:f1: 7b:7c:63:f2:3e:8e:1b:e3:e3:cd:e4:e8:c7:87:91:04:f0:89: b6:1c:1c:56:f9:24:41:00:0d:1b:9e:f1:e9:35:d4:48:0e:b9: 11:ce:45:cd:66:b0:ee:be:f9:46:7c:05:9a:5e:fe:18:0f:ac: a6:a7:48:13:29:38:d6:dc:2d:b4:62:1c:c9:9d:f4:19:d2:be: c8:65:b2:fc:22:b4:c7:66:45:16:5a:af:08:f0:b8:4a:5c:5e: dc:95:a1:75:c5:2f:2b:2e:49:3c:b7:6c:82:ea:84:ff:a8:e6: 1f:2d:79:5a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fuyRySheuSdX+leTeUh+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjYwMzJlMDg4OTQxMThkNzk5OGM1YzA2MGNhNDZlYjM4 NzEzMzgwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDUxYTgwZmZkMThkMDMxYzMyZGMyOWY5ODYyNjEwMjc2MjU4MjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsfklQiM1uErRaWeJYDUh7ZaAiq6 2xOEsvFCy/5m704Hh6njkSQ/YVY6dbZhoF+YqmTFAGaSiL/BTQADACOl/T4SimNF 9E+WtGPrShcoM1dMmt1KhDOFbLtr0yQxlwn4WHA7BFavn9bD8SJMdy80EutnrNYb uArsORikzai3XyPfXAoa81CE+HrYelprQOQkHMjuTP7P9D8n+aWGSoNU94/mwVYd Ku5zORD1jJEMyDAQRHr74Fn5Y+gvaSA0FU170QyevulvwTSVLlUVNLRsdMx7HhQy 8IN3QgFkdyW+xdmu5dtpf1ICnEQzslSWDWOM0gnxxLXJQkmyjOWIzqwJFwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFM1RqA/9GNAxwy3Cn5hiYQJ2JYJBMB8GA1UdIwQY MBaAFI1mAy4IiUEY15mMXAYMpG6zhxM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUt NTk5ZDFjYTZhNWZkLzEvelZHb0RfMFkwREhETGNLZm1HSmhBbllsZ2tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUtNTk5ZDFjYTZhNWZk LzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHLUuAAwQB uamQMA0EAgACMAcDBQMqCkkAMA0GCSqGSIb3DQEBCwUAA4IBAQBpzwzwM6yMfjHT uhYPrX4VLRnT+O2DwvJVlJw1Ji9wsjs1TKye/mv92s4DqRx7uTCNLLMRJhql57AS 7MHYJnfSxR/1kjdgF6DrlcykX1NSLpcM7mRjS6fbGa/Mp6d9V583Vm9sf1PlCBbQ RlxomCMbAL39u680ljzDifrrlaeVCeBCO+PpAFOJhJEZXmzmCfF7fGPyPo4b4+PN 5OjHh5EE8Im2HBxW+SRBAA0bnvHpNdRIDrkRzkXNZrDuvvlGfAWaXv4YD6ymp0gT KTjW3C20YhzJnfQZ0r7IZbL8IrTHZkUWWq8I8LhKXF7claF1xS8rLkk8t2yC6oT/ qOYfLXla -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:33 2026 by rpki-client