This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ZPA0yTEgbeGTPx3uVMlT6oTLbXM.roa File: ZPA0yTEgbeGTPx3uVMlT6oTLbXM.roa (raw, json) Hash identifier: 1cNaYSmAVMmYxCmd/+BHA+BklNBA0EPt0mpd9OexoGk= Subject key identifier: 64:F0:34:C9:31:20:6D:E1:93:3F:1D:EE:54:C9:53:EA:84:CB:6D:73 Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8 Certificate serial: 019B7D5C4C9AE59AB5D725FE7396643B215B Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ZPA0yTEgbeGTPx3uVMlT6oTLbXM.roa Signing time: Fri 02 Jan 2026 06:19:19 +0000 ROA not before: Fri 02 Jan 2026 06:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43648 IP address blocks: 45.132.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:4c:9a:e5:9a:b5:d7:25:fe:73:96:64:3b:21:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8 Validity Not Before: Jan 2 06:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64f034c931206de1933f1dee54c953ea84cb6d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:8f:b3:e5:47:7f:20:80:1e:80:ae:26:73: 18:ff:2a:d8:20:22:6a:a4:d0:cb:f4:35:62:9b:06: cb:f7:67:cb:4d:12:ae:e5:28:f6:25:b1:5f:c6:75: c6:44:17:0e:45:db:44:bb:60:34:08:5f:4b:0e:35: b5:57:b0:c0:34:d7:a4:0c:0e:90:b7:f6:37:80:02: ed:4c:b6:a6:a0:f5:58:db:f0:35:51:f4:3c:76:42: 83:33:d4:5c:48:cd:4e:f0:cb:dc:be:36:d4:8a:02: 27:56:5e:9a:f6:68:76:a2:78:57:8c:97:e7:b5:76: 93:a5:65:84:98:ff:e9:96:23:0a:e0:3f:45:40:e5: 47:61:2c:16:a9:48:91:cf:44:87:80:84:ac:a9:63: 84:aa:20:7f:52:55:3d:0e:a4:dd:d4:5f:15:6d:21: 65:e0:32:e7:07:13:69:4e:b2:6b:25:82:c8:39:14: 0e:69:ec:2c:7e:35:93:e4:ad:74:c1:13:49:c7:93: 03:15:80:56:8b:58:60:9f:f4:5b:27:4f:97:b8:fc: 54:f9:90:af:86:ee:a1:09:f9:bb:1a:97:54:dc:23: 34:97:5e:5e:a4:e4:7a:91:30:13:94:58:6e:6b:4d: b0:a8:20:1d:98:1b:fb:83:d1:b2:d7:ec:82:7a:72: 52:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F0:34:C9:31:20:6D:E1:93:3F:1D:EE:54:C9:53:EA:84:CB:6D:73 X509v3 Authority Key Identifier: keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ZPA0yTEgbeGTPx3uVMlT6oTLbXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.220.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:23:8f:4b:9a:d5:ff:bc:03:c9:c5:9a:74:05:08:1d:8b:54: a6:4b:a7:74:2f:a6:3a:9c:bc:37:ef:11:02:53:5c:bf:a9:f2: 59:c8:46:62:5c:af:c7:03:a7:00:a2:12:19:d9:b6:12:37:87: c6:26:67:8f:01:89:a1:a5:10:fd:f1:9f:42:04:29:b0:35:e3: f1:28:96:8f:c0:33:6d:12:aa:dc:f1:84:c5:2b:54:3e:f9:6c: 0c:6e:4d:0c:4f:af:92:35:b3:8d:cf:54:08:37:fa:ae:b3:71: ee:2d:bc:83:31:a4:76:46:cc:62:b8:2d:d2:40:2e:ad:3d:b9: 85:ec:49:f7:7f:5a:c6:b1:1f:17:ea:8d:49:75:49:47:71:96: 59:ba:4e:2b:b3:48:cd:f1:59:84:19:0c:b4:26:7d:6b:91:eb: 29:73:b1:8b:9d:5f:62:e4:79:fb:b1:95:ca:ae:9c:15:56:e5: e2:31:1a:57:4a:cc:09:1e:9e:b8:73:cc:79:ba:40:03:a9:53: c5:74:58:7a:c8:14:78:dc:c9:a2:9c:0a:16:60:e4:c1:85:f7: 71:e1:87:a4:46:ce:49:a4:e9:bb:4c:5c:d4:34:16:36:22:1d: 9e:d0:4a:57:b5:3a:09:fd:32:70:d7:24:a7:ac:c8:0a:a0:17: 28:e2:10:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XEya5Zq11yX+c5ZkOyFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTAxNGNlOGFkMzhkMTUzNTAwOTZkNTQ5ZWUxYzU4MDVk MDlkYzgwHhcNMjYwMTAyMDYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGYwMzRjOTMxMjA2ZGUxOTMzZjFkZWU1NGM5NTNlYTg0Y2I2ZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApROPs+VHfyCAHoCuJnMY/yrYICJq pNDL9DVimwbL92fLTRKu5Sj2JbFfxnXGRBcORdtEu2A0CF9LDjW1V7DANNekDA6Q t/Y3gALtTLamoPVY2/A1UfQ8dkKDM9RcSM1O8MvcvjbUigInVl6a9mh2onhXjJfn tXaTpWWEmP/pliMK4D9FQOVHYSwWqUiRz0SHgISsqWOEqiB/UlU9DqTd1F8VbSFl 4DLnBxNpTrJrJYLIORQOaewsfjWT5K10wRNJx5MDFYBWi1hgn/RbJ0+XuPxU+ZCv hu6hCfm7GpdU3CM0l15epOR6kTATlFhua02wqCAdmBv7g9Gy1+yCenJSQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGTwNMkxIG3hkz8d7lTJU+qEy21zMB8GA1UdIwQY MBaAFBEQFM6K040VNQCW1UnuHFgF0J3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYt OTFhMzk0Njg0NjQ0LzEvWlBBMHlURWdiZUdUUHgzdVZNbFQ2b1RMYlhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYtOTFhMzk0Njg0NjQ0 LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYTcMA0G CSqGSIb3DQEBCwUAA4IBAQBcI49LmtX/vAPJxZp0BQgdi1SmS6d0L6Y6nLw37xEC U1y/qfJZyEZiXK/HA6cAohIZ2bYSN4fGJmePAYmhpRD98Z9CBCmwNePxKJaPwDNt Eqrc8YTFK1Q++WwMbk0MT6+SNbONz1QIN/qus3HuLbyDMaR2RsxiuC3SQC6tPbmF 7En3f1rGsR8X6o1JdUlHcZZZuk4rs0jN8VmEGQy0Jn1rkespc7GLnV9i5Hn7sZXK rpwVVuXiMRpXSswJHp64c8x5ukADqVPFdFh6yBR43MminAoWYOTBhfdx4YekRs5J pOm7TFzUNBY2Ih2e0EpXtToJ/TJw1ySnrMgKoBco4hBe -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:52 2026 by rpki-client