This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/RZmHPxWG1eG5OdGo7lu-NRY4OOo.roa File: RZmHPxWG1eG5OdGo7lu-NRY4OOo.roa (raw, json) Hash identifier: fJe3A82QUUbsCDZaJ18DGBV5KL4R4D79bKgtsdebCe4= Subject key identifier: 45:99:87:3F:15:86:D5:E1:B9:39:D1:A8:EE:5B:BE:35:16:38:38:EA Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0 Certificate serial: 019B7D5CEC3C17774835F0CFAE3D7DCF8B2E Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/RZmHPxWG1eG5OdGo7lu-NRY4OOo.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2830 IP address blocks: 145.46.128.0/20 maxlen: 20 145.46.144.0/20 maxlen: 20 145.46.192.0/19 maxlen: 19 145.46.224.0/20 maxlen: 20 2a10:3000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ec:3c:17:77:48:35:f0:cf:ae:3d:7d:cf:8b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4599873f1586d5e1b939d1a8ee5bbe35163838ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1c:4d:ea:23:bd:83:c1:ea:3b:13:55:66:bf: c2:f9:ff:2b:d5:f4:23:01:ab:14:e8:1e:37:3b:86: ae:10:b3:48:a8:00:03:06:d0:70:6b:dd:3e:59:14: 60:79:5d:c5:f6:93:9d:8e:f4:74:01:32:a4:86:d8: 3f:ce:be:b3:57:5d:cc:42:d2:f8:b0:27:ec:f4:74: c2:de:c2:ee:80:05:59:e0:9e:75:60:f1:6f:b6:74: c9:4f:17:df:15:70:55:9e:52:10:b6:c0:2d:da:f8: 65:c0:fa:0e:f6:35:72:6e:a5:7b:38:a3:bc:7a:0d: c2:c6:87:64:2e:7c:58:53:bb:23:c2:59:79:30:62: 0d:2a:2e:33:22:7a:c4:56:7c:b2:10:ea:6b:35:70: 22:0c:32:f9:45:63:d3:9e:cd:0d:9a:73:c3:9d:63: a8:88:a6:d0:79:e0:3a:fa:1c:dc:55:48:a0:de:a6: c1:09:cd:84:29:f6:1f:bc:4d:ee:9c:af:59:90:5f: 09:19:f0:71:f6:91:91:8e:2d:38:cb:9a:83:e0:ee: 88:78:0b:49:14:f4:a2:92:4c:fc:40:2b:86:53:62: 79:00:de:ea:af:6e:16:41:8d:2e:54:8b:8b:b6:56: d2:c4:cc:bc:37:41:de:08:aa:3a:3d:06:13:6f:11: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:99:87:3F:15:86:D5:E1:B9:39:D1:A8:EE:5B:BE:35:16:38:38:EA X509v3 Authority Key Identifier: keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/RZmHPxWG1eG5OdGo7lu-NRY4OOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.46.128.0/19 145.46.192.0-145.46.239.255 IPv6: 2a10:3000::/29 Signature Algorithm: sha256WithRSAEncryption 1b:67:d4:e9:a6:db:93:25:b0:bb:66:1a:c4:a2:83:20:44:6b: 35:5c:0d:fb:9f:cd:9b:92:9b:9f:c2:a5:67:12:a7:06:9c:18: 21:57:8a:55:18:c1:6a:68:19:8b:bb:ba:23:1f:e2:64:9e:f0: 10:0a:a6:f7:9e:e6:93:2b:30:69:00:e8:60:33:db:95:07:11: 6f:7e:86:0b:6e:68:56:6b:ec:ae:66:87:6f:5a:4f:3b:27:69: d4:8d:8d:d0:7c:59:de:4b:06:2c:71:fe:aa:98:6b:2c:cd:ec: ad:b1:b4:07:06:e9:75:a0:dd:be:50:57:ea:34:95:21:1a:e5: b8:9f:5b:3f:12:3b:c9:8d:c7:7b:7d:a0:2f:b2:04:87:70:f9: f1:7d:92:f0:a4:e5:89:07:6e:6c:9f:93:62:85:0e:69:a6:1f: 25:e2:31:91:82:c1:98:a7:71:6a:63:15:9e:06:19:12:bf:ff: 8b:63:53:01:06:9e:a1:24:26:a0:97:08:7a:15:ae:e4:6e:16: 4e:a4:9c:50:d0:16:57:d9:df:42:95:1f:93:d0:25:52:26:b2: f9:23:ae:f9:de:fe:55:4b:56:47:a5:40:49:f0:09:08:ab:6c: a1:92:dc:73:8d:94:c1:80:9e:1f:29:1b:4c:86:bb:db:5f:eb: 57:f1:cb:37 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9XOw8F3dINfDPrj19z4suMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh ZWZjZDAwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTk5ODczZjE1ODZkNWUxYjkzOWQxYThlZTViYmUzNTE2MzgzOGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhxN6iO9g8HqOxNVZr/C+f8r1fQj AasU6B43O4auELNIqAADBtBwa90+WRRgeV3F9pOdjvR0ATKkhtg/zr6zV13MQtL4 sCfs9HTC3sLugAVZ4J51YPFvtnTJTxffFXBVnlIQtsAt2vhlwPoO9jVybqV7OKO8 eg3CxodkLnxYU7sjwll5MGINKi4zInrEVnyyEOprNXAiDDL5RWPTns0NmnPDnWOo iKbQeeA6+hzcVUig3qbBCc2EKfYfvE3unK9ZkF8JGfBx9pGRji04y5qD4O6IeAtJ FPSikkz8QCuGU2J5AN7qr24WQY0uVIuLtlbSxMy8N0HeCKo6PQYTbxGfzQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFEWZhz8VhtXhuTnRqO5bvjUWODjqMB8GA1UdIwQY MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt NzcwZjhlYWIyYWU3LzEvUlptSFB4V0cxZUc1T2RHbzdsdS1OUlk0T09vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3 LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQFkS6AMAwD BAaRLsADBASRLuAwDQQCAAIwBwMFAyoQMAAwDQYJKoZIhvcNAQELBQADggEBABtn 1Omm25MlsLtmGsSigyBEazVcDfufzZuSm5/CpWcSpwacGCFXilUYwWpoGYu7uiMf 4mSe8BAKpvee5pMrMGkA6GAz25UHEW9+hgtuaFZr7K5mh29aTzsnadSNjdB8Wd5L Bixx/qqYayzN7K2xtAcG6XWg3b5QV+o0lSEa5bifWz8SO8mNx3t9oC+yBIdw+fF9 kvCk5YkHbmyfk2KFDmmmHyXiMZGCwZincWpjFZ4GGRK//4tjUwEGnqEkJqCXCHoV ruRuFk6knFDQFlfZ30KVH5PQJVImsvkjrvne/lVLVkelQEnwCQirbKGS3HONlMGA nh8pG0yGu9tf61fxyzc= -----END CERTIFICATE-----Generated at Sun Jan 25 10:29:12 2026 by rpki-client