This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/lZazDcaeNemu0jUsxUC7xaA7JYg.roa File: lZazDcaeNemu0jUsxUC7xaA7JYg.roa (raw, json) Hash identifier: ndRIc74Qu6CdcimOantM3SiE2yi6QmM2hZX+wUk2CIM= Subject key identifier: 95:96:B3:0D:C6:9E:35:E9:AE:D2:35:2C:C5:40:BB:C5:A0:3B:25:88 Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Certificate serial: 019B5A454CA65B1989D6B8BAA1972970A52B Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/lZazDcaeNemu0jUsxUC7xaA7JYg.roa Signing time: Fri 26 Dec 2025 10:47:29 +0000 ROA not before: Fri 26 Dec 2025 10:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213753 IP address blocks: 185.28.38.0/24 maxlen: 24 2a00:9c20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:45:4c:a6:5b:19:89:d6:b8:ba:a1:97:29:70:a5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Validity Not Before: Dec 26 10:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9596b30dc69e35e9aed2352cc540bbc5a03b2588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:21:7d:64:8d:42:0c:51:53:ad:fd:ce:26: 36:51:12:63:b3:38:63:f6:98:48:b2:7e:53:3a:85: 77:84:67:16:e1:33:90:ec:90:fa:35:c7:b8:79:1d: fb:49:1f:1f:d2:7f:90:19:da:66:3c:99:75:f7:74: 6a:17:34:48:a4:86:29:8a:d6:94:9d:99:77:a4:1d: 80:29:df:e7:a4:3b:7e:ac:53:1f:14:3c:24:be:02: f2:b5:52:f3:91:b0:69:32:c5:9f:31:7a:8c:4e:4f: bb:a6:5a:82:80:88:2f:cd:46:20:57:72:b8:b3:25: 8e:eb:7a:10:b6:58:a8:5f:7b:b8:4f:ad:7c:7c:b0: 07:d0:c4:e2:1f:7d:0c:85:b3:6e:93:de:2d:98:66: ff:e8:25:67:68:99:90:ae:fc:81:d0:bd:e4:7b:52: 41:55:fa:dc:6b:44:69:b8:d2:33:de:1a:c8:e5:02: a9:57:5b:79:a5:46:a6:69:3a:13:84:aa:f5:d8:ec: 34:23:48:fa:c8:b8:1f:c1:3f:c7:24:05:6c:83:06: 2d:27:35:24:1d:0b:b7:b2:e2:37:23:11:b6:bd:80: ab:4d:98:2b:0f:f7:fb:bf:57:28:ea:ba:5e:11:1b: d1:b5:ea:31:fe:4e:02:c0:f5:ed:7b:fc:75:a6:09: 92:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:96:B3:0D:C6:9E:35:E9:AE:D2:35:2C:C5:40:BB:C5:A0:3B:25:88 X509v3 Authority Key Identifier: keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/lZazDcaeNemu0jUsxUC7xaA7JYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.38.0/24 IPv6: 2a00:9c20::/32 Signature Algorithm: sha256WithRSAEncryption 56:b4:b1:01:e8:53:3e:e0:4d:bc:de:c8:01:44:f8:30:2a:30: 54:34:77:f5:c3:f8:39:6b:e6:e0:d2:c9:ef:13:9e:1b:de:51: b2:34:58:d8:d8:4b:d2:c0:2b:5d:b2:89:d1:5e:36:c4:53:42: 9e:cc:bb:8f:20:26:45:29:62:39:fb:1e:be:78:19:bc:91:cf: 74:14:d1:bd:6b:d5:21:ac:ed:50:22:df:b3:11:cb:8d:8a:f5: 23:7a:45:8c:ab:48:6a:e4:8a:0d:d8:35:c4:cc:a5:d3:f9:65: 78:19:bd:c9:2b:65:5c:f7:a4:d9:a9:b9:dc:14:8a:86:66:ad: 43:40:e5:47:63:0a:92:11:43:79:d7:7b:f0:1a:14:f0:c7:ce: 96:55:03:47:3d:5d:02:fb:11:f6:83:74:0d:ee:8e:8f:7b:43: e8:69:52:5f:0e:94:d9:43:18:67:bd:95:b9:a2:56:df:31:3a: 44:9d:d8:bf:5c:b4:7a:b2:5e:0e:99:fb:40:57:a1:22:b3:95: 2d:e5:d6:4a:4b:8e:52:9b:a5:f3:40:9d:8a:89:25:c3:08:9f: 91:80:9b:94:9e:d0:83:9a:cd:74:7b:ea:b9:39:e4:3b:5b:11: 35:8e:e3:76:22:1b:2a:05:32:3c:2a:d8:df:d0:58:ec:98:17: a5:70:a4:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZtaRUymWxmJ1ri6oZcpcKUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliOTdjMjJkMGIzMzhhOGE0NWFhMTM0NWIwOTE3YmEwZGM5 NzMzOTAwHhcNMjUxMjI2MTA0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTk2YjMwZGM2OWUzNWU5YWVkMjM1MmNjNTQwYmJjNWEwM2IyNTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V0hfWSNQgxRU639ziY2URJjszhj 9phIsn5TOoV3hGcW4TOQ7JD6Nce4eR37SR8f0n+QGdpmPJl193RqFzRIpIYpitaU nZl3pB2AKd/npDt+rFMfFDwkvgLytVLzkbBpMsWfMXqMTk+7plqCgIgvzUYgV3K4 syWO63oQtlioX3u4T618fLAH0MTiH30MhbNuk94tmGb/6CVnaJmQrvyB0L3ke1JB Vfrca0RpuNIz3hrI5QKpV1t5pUamaToThKr12Ow0I0j6yLgfwT/HJAVsgwYtJzUk HQu3suI3IxG2vYCrTZgrD/f7v1co6rpeERvRteox/k4CwPXte/x1pgmSmQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJWWsw3GnjXprtI1LMVAu8WgOyWIMB8GA1UdIwQY MBaAFJuXwi0LM4qKRaoTRbCRe6DclzOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMt YWU5OTllZDdjNWQ0LzEvbFphekRjYWVOZW11MGpVc3hVQzd4YUE3SllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMtYWU5OTllZDdjNWQ0 LzEvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRwmMA0E AgACMAcDBQAqAJwgMA0GCSqGSIb3DQEBCwUAA4IBAQBWtLEB6FM+4E283sgBRPgw KjBUNHf1w/g5a+bg0snvE54b3lGyNFjY2EvSwCtdsonRXjbEU0KezLuPICZFKWI5 +x6+eBm8kc90FNG9a9UhrO1QIt+zEcuNivUjekWMq0hq5IoN2DXEzKXT+WV4Gb3J K2Vc96TZqbncFIqGZq1DQOVHYwqSEUN513vwGhTwx86WVQNHPV0C+xH2g3QN7o6P e0PoaVJfDpTZQxhnvZW5olbfMTpEndi/XLR6sl4OmftAV6Eis5Ut5dZKS45Sm6Xz QJ2KiSXDCJ+RgJuUntCDms10e+q5OeQ7WxE1juN2IhsqBTI8Ktjf0FjsmBelcKQ+ -----END CERTIFICATE-----Generated at Wed Dec 31 21:04:33 2025 by rpki-client