This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa File: aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa (raw, json) Hash identifier: C3FEhE9zrGO1uX5TJRCXxFkvyY4vNtfAgcn0ttqcftY= Subject key identifier: 69:99:D1:1F:15:B9:3D:58:5C:4D:64:1F:02:2C:23:F0:11:26:A0:3E Certificate issuer: /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da Certificate serial: 019B7AC818CB8A15509F30A3582A88C4312E Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa Signing time: Thu 01 Jan 2026 18:18:12 +0000 ROA not before: Thu 01 Jan 2026 18:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 185.249.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:18:cb:8a:15:50:9f:30:a3:58:2a:88:c4:31:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da Validity Not Before: Jan 1 18:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6999d11f15b93d585c4d641f022c23f01126a03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:b0:74:57:72:5f:23:14:9c:4d:b0:a9:55: f2:a0:66:57:95:20:e0:94:1c:c5:74:18:f5:1c:b9: 95:fa:30:83:02:ed:a8:98:7e:83:a3:67:9e:78:1b: c7:9a:03:97:65:99:01:61:75:82:1a:9f:71:63:23: 63:ae:0c:57:c5:8e:2b:e7:fa:2b:6b:60:be:4b:b1: f7:69:d6:a5:48:2d:cc:8f:43:4a:2a:66:2a:88:56: 25:69:24:f7:8f:4a:78:ea:58:29:f4:8a:c9:3d:27: ca:60:d5:3c:16:8d:6b:68:1e:6b:d4:f8:24:ed:fe: 9f:89:f3:ff:d7:bc:cf:1b:1a:9d:f6:4b:78:00:34: ba:bc:94:b2:61:c4:57:32:36:93:7f:6a:6a:82:81: d1:12:86:dc:30:cf:68:30:92:59:f4:12:67:48:d4: 65:f4:1b:32:0f:06:45:3d:0d:df:e2:02:78:9a:b0: 9d:26:a7:fe:d6:14:ff:ca:23:87:b8:5d:f7:44:33: 0c:b5:91:0b:b7:6b:25:21:20:5f:66:d5:5d:33:cc: b0:61:4e:cd:9a:a3:db:b8:0e:7b:40:a5:95:32:11: 4a:4d:f9:fb:21:00:2c:fd:80:cb:3e:e0:54:d4:1c: b3:9a:76:f2:ba:f6:a6:51:61:25:00:2f:08:24:57: a7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:99:D1:1F:15:B9:3D:58:5C:4D:64:1F:02:2C:23:F0:11:26:A0:3E X509v3 Authority Key Identifier: keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.10.0/24 Signature Algorithm: sha256WithRSAEncryption 62:3b:e6:6e:8b:99:fd:b9:e6:ca:c5:da:26:60:d5:92:d6:43: ad:93:af:7a:b6:12:d8:27:98:98:10:c0:cc:e1:32:56:fc:45: 90:7d:2a:84:10:61:21:8e:5c:0b:85:1e:26:96:64:41:1b:ec: 6e:3b:86:66:78:ec:e0:4d:44:80:78:88:ff:47:95:5a:69:c4: 6c:a3:4f:74:4a:2a:35:61:ef:b9:1d:f2:d9:ab:36:aa:fe:71: 6f:59:2e:f4:d5:01:87:ce:64:b5:3f:55:16:f3:d2:2b:47:df: 1f:1a:10:25:07:6a:3c:f9:fa:f8:bb:4c:37:e9:e7:2f:65:6a: 87:36:8d:59:7d:c7:e4:e6:5e:82:9e:77:a0:0d:18:38:6b:ab: de:27:a3:af:9f:df:6d:8b:aa:1f:4a:bc:2f:2b:64:e2:39:b9: 2c:bd:b0:e2:02:c2:f0:7d:e6:37:e4:7f:2a:61:ed:4c:76:68: 96:bb:fe:39:a2:13:7a:89:99:e2:95:6b:4b:2d:67:95:f9:2c: d9:ab:0f:c5:05:04:73:da:ea:81:fa:b6:63:3e:0a:de:07:52: 59:66:bd:2c:d5:b3:b3:8c:54:e3:97:18:86:27:0a:9c:ae:e5: cf:3b:cb:7e:26:41:39:de:f3:cc:79:c0:0b:26:73:82:b3:ed: 0f:26:d4:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBjLihVQnzCjWCqIxDEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5M2VlOWE2ZDE0MDRjNjFlYjE5YjAyYjAyZDc0ZGE4M2E2 NjMzZGEwHhcNMjYwMTAxMTgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTk5ZDExZjE1YjkzZDU4NWM0ZDY0MWYwMjJjMjNmMDExMjZhMDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3uwdFdyXyMUnE2wqVXyoGZXlSDg lBzFdBj1HLmV+jCDAu2omH6Do2eeeBvHmgOXZZkBYXWCGp9xYyNjrgxXxY4r5/or a2C+S7H3adalSC3Mj0NKKmYqiFYlaST3j0p46lgp9IrJPSfKYNU8Fo1raB5r1Pgk 7f6fifP/17zPGxqd9kt4ADS6vJSyYcRXMjaTf2pqgoHREobcMM9oMJJZ9BJnSNRl 9BsyDwZFPQ3f4gJ4mrCdJqf+1hT/yiOHuF33RDMMtZELt2slISBfZtVdM8ywYU7N mqPbuA57QKWVMhFKTfn7IQAs/YDLPuBU1ByzmnbyuvamUWElAC8IJFenFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGmZ0R8VuT1YXE1kHwIsI/ARJqA+MB8GA1UdIwQY MBaAFOk+6abRQExh6xmwKwLXTag6ZjPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYt ZGI5MDU5MTNjYjg3LzEvYVpuUkh4VzVQVmhjVFdRZkFpd2o4QkVtb0Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYtZGI5MDU5MTNjYjg3 LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufkKMA0G CSqGSIb3DQEBCwUAA4IBAQBiO+Zui5n9uebKxdomYNWS1kOtk696thLYJ5iYEMDM 4TJW/EWQfSqEEGEhjlwLhR4mlmRBG+xuO4ZmeOzgTUSAeIj/R5VaacRso090Sio1 Ye+5HfLZqzaq/nFvWS701QGHzmS1P1UW89IrR98fGhAlB2o8+fr4u0w36ecvZWqH No1Zfcfk5l6CnnegDRg4a6veJ6Ovn99ti6ofSrwvK2TiObksvbDiAsLwfeY35H8q Ye1MdmiWu/45ohN6iZnilWtLLWeV+SzZqw/FBQRz2uqB+rZjPgreB1JZZr0s1bOz jFTjlxiGJwqcruXPO8t+JkE53vPMecALJnOCs+0PJtTl -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:55 2026 by rpki-client