This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ZDjXb-6sXlkqWM2dj0s_r6ok4IU.roa File: ZDjXb-6sXlkqWM2dj0s_r6ok4IU.roa (raw, json) Hash identifier: 43aIR8uvVvqvIYOmN9YnPWlwLHPz7ywPbdcbAEwBcvs= Subject key identifier: 64:38:D7:6F:EE:AC:5E:59:2A:58:CD:9D:8F:4B:3F:AF:AA:24:E0:85 Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Certificate serial: 019B7758D4A2981BB3500975AA6CE4609520 Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ZDjXb-6sXlkqWM2dj0s_r6ok4IU.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43519 IP address blocks: 51.149.0.0/24 maxlen: 24 51.149.1.0/24 maxlen: 24 51.149.254.0/24 maxlen: 24 51.149.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d4:a2:98:1b:b3:50:09:75:aa:6c:e4:60:95:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6438d76feeac5e592a58cd9d8f4b3fafaa24e085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:7f:f4:54:3d:17:9e:1e:a4:35:84:20:80: d7:2c:a9:e2:de:b6:ba:92:d3:09:f6:a2:07:84:bb: ed:c8:a3:d4:c0:9a:9e:1e:6d:89:6e:fb:0c:d1:bb: 47:ee:96:e8:be:0e:ec:92:9f:da:4c:10:20:fb:33: b8:c5:1c:b0:68:c2:28:df:9f:59:95:f5:56:5e:7f: 5a:b3:59:9d:a4:b2:2a:eb:37:72:1a:b6:3d:80:2a: e5:13:a6:47:87:0f:a3:71:a7:f4:83:98:a3:b1:e2: 11:3d:b0:bf:08:d2:7a:94:69:f6:16:bf:df:31:84: a0:8a:f7:99:f8:c2:31:ef:5d:3e:5c:c3:c9:c3:da: 06:48:bf:e2:97:2b:4d:f3:ea:d5:23:89:df:fd:ad: 12:e2:5e:79:87:aa:37:5b:92:b3:48:f6:b8:71:c4: 1b:7d:93:2e:46:b6:54:7b:37:04:d1:e0:d6:f9:d1: 1c:46:a6:9b:23:da:c9:2b:25:2e:f8:15:aa:59:43: de:f0:b6:3b:3f:8e:08:43:7d:8b:f4:07:e5:28:88: d3:97:93:2b:11:c2:4e:d5:53:7c:5d:7b:de:66:7e: 31:ed:aa:5a:45:0c:9d:1e:d1:a5:3e:d9:f1:a7:c1: 98:88:75:83:1d:3d:a5:7b:6a:42:5d:3f:da:3f:53: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:38:D7:6F:EE:AC:5E:59:2A:58:CD:9D:8F:4B:3F:AF:AA:24:E0:85 X509v3 Authority Key Identifier: keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ZDjXb-6sXlkqWM2dj0s_r6ok4IU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.149.0.0/23 51.149.254.0/23 Signature Algorithm: sha256WithRSAEncryption 88:a1:0c:48:ac:d1:e7:69:22:21:8d:9d:4f:9a:f8:7b:e9:3a: 9a:5b:ce:f1:b1:4b:d1:54:92:8b:1e:da:0d:19:ed:a7:e0:2d: 4d:98:01:76:01:84:5d:5e:1d:64:fb:2d:e2:65:0f:5f:6f:33: 94:e4:b3:6b:c7:74:e1:6b:4d:9b:fc:f1:b7:a6:fd:12:78:e1: e7:55:80:89:1a:00:0b:a7:18:a9:5e:7e:37:f6:23:d6:ce:31: cf:2c:b5:16:0f:a3:89:99:1b:74:96:5b:a1:9e:8d:0e:31:ba: a7:e4:8c:76:d4:39:52:4d:95:69:21:00:a1:39:dc:68:9e:02: 27:e9:16:5e:16:81:74:16:c0:af:47:a7:74:21:70:4f:23:f5: f3:dd:11:61:d5:14:56:f3:47:96:f0:83:e9:96:ad:ef:9d:29: 62:99:50:c0:33:06:bf:5b:a5:18:58:10:1a:b5:12:0f:b9:34: 45:17:aa:30:7e:82:20:2f:f5:7e:fc:f7:9b:c5:af:0a:38:21: d6:1e:d3:07:01:ab:f5:4a:ca:32:64:e4:54:10:00:5e:ff:85: f5:e9:e1:9f:20:88:e6:cc:07:0a:a8:7c:ec:20:77:fa:4d:62: 98:72:4e:aa:4d:e2:0c:f1:fe:ec:b5:7a:ae:af:cf:35:41:5c: 0c:4d:53:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WNSimBuzUAl1qmzkYJUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDJkODAwZGM2YzMzYjY5ZmE0NzI5MWUyZjE1YjMzNWVh MzYwMGYwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDM4ZDc2ZmVlYWM1ZTU5MmE1OGNkOWQ4ZjRiM2ZhZmFhMjRlMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSF/9FQ9F54epDWEIIDXLKni3ra6 ktMJ9qIHhLvtyKPUwJqeHm2JbvsM0btH7pbovg7skp/aTBAg+zO4xRywaMIo359Z lfVWXn9as1mdpLIq6zdyGrY9gCrlE6ZHhw+jcaf0g5ijseIRPbC/CNJ6lGn2Fr/f MYSgiveZ+MIx710+XMPJw9oGSL/ilytN8+rVI4nf/a0S4l55h6o3W5KzSPa4ccQb fZMuRrZUezcE0eDW+dEcRqabI9rJKyUu+BWqWUPe8LY7P44IQ32L9AflKIjTl5Mr EcJO1VN8XXveZn4x7apaRQydHtGlPtnxp8GYiHWDHT2le2pCXT/aP1PttQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGQ412/urF5ZKljNnY9LP6+qJOCFMB8GA1UdIwQY MBaAFM7S2ADcbDO2n6RykeLxWzNeo2APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt ZWQ0ZjA2NDNiZjI1LzEvWkRqWGItNnNYbGtxV00yZGowc19yNm9rNElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1 LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBM5UAAwQB M5X+MA0GCSqGSIb3DQEBCwUAA4IBAQCIoQxIrNHnaSIhjZ1Pmvh76TqaW87xsUvR VJKLHtoNGe2n4C1NmAF2AYRdXh1k+y3iZQ9fbzOU5LNrx3Tha02b/PG3pv0SeOHn VYCJGgALpxipXn439iPWzjHPLLUWD6OJmRt0lluhno0OMbqn5Ix21DlSTZVpIQCh OdxongIn6RZeFoF0FsCvR6d0IXBPI/Xz3RFh1RRW80eW8IPplq3vnSlimVDAMwa/ W6UYWBAatRIPuTRFF6owfoIgL/V+/Pebxa8KOCHWHtMHAav1SsoyZORUEABe/4X1 6eGfIIjmzAcKqHzsIHf6TWKYck6qTeIM8f7stXqur881QVwMTVOb -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:12 2026 by rpki-client