This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa File: zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa (raw, json) Hash identifier: R3vvsBnC8yjc/6l+ae3jOrD+eH9Ah/ka0B3qOkEBjzc= Subject key identifier: CE:3B:D9:AB:4A:83:A3:D0:AA:CB:69:49:7A:4B:17:9D:8E:70:95:68 Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06 Certificate serial: 019B7758E4F2458D8B26D8AEEBAD55CCC640 Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2611 IP address blocks: 185.182.132.0/22 maxlen: 24 2a10:8280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e4:f2:45:8d:8b:26:d8:ae:eb:ad:55:cc:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce3bd9ab4a83a3d0aacb69497a4b179d8e709568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6d:ee:c5:aa:38:a0:46:57:6a:c5:61:47:4e: c0:7b:39:96:84:d1:bf:f2:73:cc:62:28:41:15:f5: e4:ec:46:fd:30:a4:62:f8:d8:79:ca:81:28:1c:80: 9b:29:d2:59:81:f5:ac:84:12:ed:37:fb:88:1e:95: a5:de:b5:0d:af:20:f7:41:34:1e:56:80:a4:1f:d1: e0:a8:b5:c2:c4:54:0b:eb:48:f8:28:6f:5d:62:29: b4:d7:c4:de:1d:3d:5f:61:67:d6:5a:71:6f:8c:c4: 3b:6c:61:2d:bc:46:2b:b0:83:12:88:7c:b0:3d:99: 04:60:9a:0a:b9:be:df:b0:8a:fe:98:0b:f8:53:d0: f9:41:e6:4e:0d:13:88:00:4d:a7:40:2b:e9:6d:3c: 03:5f:1c:1a:14:09:f8:4c:33:d9:30:2f:56:a8:7b: b7:36:74:de:69:0a:6e:1d:0b:a1:97:0e:60:7e:80: d8:2f:3b:d7:4a:5e:cc:68:7f:49:f2:16:56:5e:40: c8:ea:e8:a8:17:6a:94:62:e0:e6:f7:f9:ae:c1:da: b1:d2:35:1b:f3:73:c9:d5:79:e6:7e:dc:d5:41:6f: 4d:0c:14:ab:fc:4c:33:b8:86:6f:9e:43:1c:da:fc: c5:97:0c:d0:81:02:a9:c1:7f:cd:61:3e:25:e8:8d: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3B:D9:AB:4A:83:A3:D0:AA:CB:69:49:7A:4B:17:9D:8E:70:95:68 X509v3 Authority Key Identifier: keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/zjvZq0qDo9Cqy2lJeksXnY5wlWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.132.0/22 IPv6: 2a10:8280::/32 Signature Algorithm: sha256WithRSAEncryption 7d:3a:6b:79:13:60:c5:4d:70:9a:39:8b:dc:af:32:af:53:2f: c5:e8:0c:d6:cb:b7:49:0a:ee:ec:2c:6b:a2:8c:1e:92:53:a7: 13:d9:ea:ab:62:1d:9a:22:c6:71:a4:d9:5d:99:40:64:68:80: 15:1e:14:29:f5:5e:f1:db:1c:04:92:72:60:9c:77:31:74:89: ce:63:9b:60:d7:e2:66:ea:5c:15:46:d0:d1:bd:8b:f0:97:da: 9c:01:e5:ab:0b:ee:74:f0:94:0c:40:1c:e6:7b:ef:0b:f3:9e: 86:7b:e2:09:49:5e:32:a9:e6:34:76:ba:04:d4:b4:cc:76:96: 76:23:5b:01:c3:9c:3b:36:41:a3:70:a9:77:6c:b7:f6:be:67: 53:10:34:0b:2c:b8:18:d7:f5:38:00:05:5e:c9:33:9a:88:38: 25:03:4c:3d:60:cf:d3:72:7f:f7:f1:de:69:ed:55:95:19:41: aa:fc:a8:8e:d6:8e:6b:43:41:32:56:3e:7d:ef:6a:a9:a1:62: 52:c0:cc:30:58:e0:38:50:54:6a:1e:21:e7:63:c9:ba:48:df: 49:1b:87:8c:5a:6f:43:89:51:96:48:de:34:5f:24:72:6f:f4: 72:89:34:b6:2d:88:63:fa:45:0c:7d:c8:9c:dd:65:13:fa:0b: 0e:f9:57:38 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WOTyRY2LJtiu661VzMZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NDRhYWFjN2YyZWJiMjk4MWMyNDc2M2ViM2Q2MDQ1ZWZi ZDZmMDYwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTNiZDlhYjRhODNhM2QwYWFjYjY5NDk3YTRiMTc5ZDhlNzA5NTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn23uxao4oEZXasVhR07AezmWhNG/ 8nPMYihBFfXk7Eb9MKRi+Nh5yoEoHICbKdJZgfWshBLtN/uIHpWl3rUNryD3QTQe VoCkH9HgqLXCxFQL60j4KG9dYim018TeHT1fYWfWWnFvjMQ7bGEtvEYrsIMSiHyw PZkEYJoKub7fsIr+mAv4U9D5QeZODROIAE2nQCvpbTwDXxwaFAn4TDPZMC9WqHu3 NnTeaQpuHQuhlw5gfoDYLzvXSl7MaH9J8hZWXkDI6uioF2qUYuDm9/muwdqx0jUb 83PJ1XnmftzVQW9NDBSr/EwzuIZvnkMc2vzFlwzQgQKpwX/NYT4l6I0WgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM472atKg6PQqstpSXpLF52OcJVoMB8GA1UdIwQY MBaAFAlEqqx/LrspgcJHY+s9YEXvvW8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUt NjZjZDAxOTYxZTQ2LzEvemp2WnEwcURvOUNxeTJsSmVrc1huWTV3bFdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUtNjZjZDAxOTYxZTQ2 LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubaEMA0E AgACMAcDBQAqEIKAMA0GCSqGSIb3DQEBCwUAA4IBAQB9Omt5E2DFTXCaOYvcrzKv Uy/F6AzWy7dJCu7sLGuijB6SU6cT2eqrYh2aIsZxpNldmUBkaIAVHhQp9V7x2xwE knJgnHcxdInOY5tg1+Jm6lwVRtDRvYvwl9qcAeWrC+508JQMQBzme+8L856Ge+IJ SV4yqeY0droE1LTMdpZ2I1sBw5w7NkGjcKl3bLf2vmdTEDQLLLgY1/U4AAVeyTOa iDglA0w9YM/Tcn/38d5p7VWVGUGq/KiO1o5rQ0EyVj5972qpoWJSwMwwWOA4UFRq HiHnY8m6SN9JG4eMWm9DiVGWSN40XyRyb/RyiTS2LYhj+kUMfcic3WUT+gsO+Vc4 -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:32 2026 by rpki-client