This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/zqNXKkeUMuTQJw20ff-7r2jRyGk.roa File: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (raw, json) Hash identifier: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4= Subject key identifier: CE:A3:57:2A:47:94:32:E4:D0:27:0D:B4:7D:FF:BB:AF:68:D1:C8:69 Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019B7B35B83F567EBCC8B14AD193F9AC5368 Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/zqNXKkeUMuTQJw20ff-7r2jRyGk.roa Signing time: Thu 01 Jan 2026 20:17:56 +0000 ROA not before: Thu 01 Jan 2026 20:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203855 IP address blocks: 195.141.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b8:3f:56:7e:bc:c8:b1:4a:d1:93:f9:ac:53:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Jan 1 20:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cea3572a479432e4d0270db47dffbbaf68d1c869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:e4:05:90:4b:49:ab:1d:e1:c9:05:f5:04: e6:d6:99:82:57:53:69:5f:f5:66:48:06:82:bf:f5: bf:f6:7f:4e:86:68:04:a7:cc:d8:12:40:ad:ea:e7: d7:c6:2e:de:6f:92:40:1d:1d:74:68:30:5c:15:8c: 9c:ee:50:10:82:6d:50:06:99:f6:9e:a0:05:23:87: ea:95:85:54:de:ec:d3:b2:c3:a3:67:11:b2:86:07: 3f:52:42:00:f5:1a:5c:b1:70:14:a4:2d:e1:97:d9: 54:6f:34:66:5a:61:bd:fa:78:c5:e0:01:8f:70:c5: fd:06:8c:a8:46:9e:45:f8:a1:f3:2d:e4:32:b0:c4: 5e:81:70:46:d6:6f:aa:29:9b:c8:b7:69:f8:30:5f: 64:28:d4:4f:65:58:58:e5:7f:c7:7d:aa:f7:63:d3: d1:77:db:c2:00:1e:83:69:e9:de:0d:52:8b:aa:46: 87:b0:42:57:c7:03:16:a5:9f:38:0b:4b:65:02:de: d8:92:14:0e:9b:b4:47:4a:c6:c1:18:f7:22:41:89: f5:e2:de:bd:04:6a:97:2b:2c:38:99:bc:04:7d:2f: 5e:8a:e0:73:fd:5f:26:4f:af:f7:b6:ea:91:7c:f3: cf:13:6d:4e:b1:3f:56:ff:e6:06:8a:66:a4:96:45: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A3:57:2A:47:94:32:E4:D0:27:0D:B4:7D:FF:BB:AF:68:D1:C8:69 X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/zqNXKkeUMuTQJw20ff-7r2jRyGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.141.135.0/24 Signature Algorithm: sha256WithRSAEncryption 43:a2:b7:ce:35:a4:53:bb:75:9a:54:66:69:06:d3:32:89:db: 05:4f:ee:9b:3b:7d:7d:42:15:52:0a:05:51:9c:8c:47:cb:3b: 23:60:b2:d3:bf:a3:74:3a:8f:6c:25:32:f9:a0:c5:7d:bc:45: ef:bf:d9:e3:2f:46:c0:10:15:e2:7d:fd:1a:b3:b7:5f:68:19: 2d:87:3e:a1:dd:13:83:0c:27:b8:26:82:3d:8d:c9:1b:2f:f1: 6d:59:7c:bd:b3:bb:d2:28:33:64:03:b6:8f:82:84:55:5e:18: f2:b8:f4:af:39:4d:3f:90:a4:b0:0e:84:a7:2e:27:7d:8a:05: b5:97:bc:c7:66:ce:53:57:a6:bc:a0:2b:7f:ad:f7:d2:48:f3: 1b:1b:16:a4:a4:56:e0:0b:cf:eb:23:c6:f4:c7:dc:ce:b0:21: 1d:bf:63:2b:8d:3f:3e:a9:2d:1a:01:2b:0c:4b:14:3b:76:68: 83:40:42:50:68:c6:49:70:a8:76:c2:fc:bb:30:ca:36:bb:20: 49:ab:b3:92:c9:f6:dd:9a:df:22:c4:2f:6e:3a:d4:c3:9b:46: 9f:f5:1c:36:a2:cf:97:4f:50:58:3c:25:a8:43:1e:f2:6a:44: 54:b3:51:e4:3c:55:40:d0:5c:b0:ee:09:a1:df:5b:05:f8:c1: 71:36:ce:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nbg/Vn68yLFK0ZP5rFNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwMTAxMjAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWEzNTcyYTQ3OTQzMmU0ZDAyNzBkYjQ3ZGZmYmJhZjY4ZDFjODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7XkBZBLSasd4ckF9QTm1pmCV1Np X/VmSAaCv/W/9n9OhmgEp8zYEkCt6ufXxi7eb5JAHR10aDBcFYyc7lAQgm1QBpn2 nqAFI4fqlYVU3uzTssOjZxGyhgc/UkIA9RpcsXAUpC3hl9lUbzRmWmG9+njF4AGP cMX9BoyoRp5F+KHzLeQysMRegXBG1m+qKZvIt2n4MF9kKNRPZVhY5X/Hfar3Y9PR d9vCAB6DaeneDVKLqkaHsEJXxwMWpZ84C0tlAt7YkhQOm7RHSsbBGPciQYn14t69 BGqXKyw4mbwEfS9eiuBz/V8mT6/3tuqRfPPPE21OsT9W/+YGimaklkXfAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM6jVypHlDLk0CcNtH3/u69o0chpMB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvenFOWEtrZVVNdVRRSncyMGZmLTdyMmpSeUdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw42HMA0G CSqGSIb3DQEBCwUAA4IBAQBDorfONaRTu3WaVGZpBtMyidsFT+6bO319QhVSCgVR nIxHyzsjYLLTv6N0Oo9sJTL5oMV9vEXvv9njL0bAEBXiff0as7dfaBkthz6h3ROD DCe4JoI9jckbL/FtWXy9s7vSKDNkA7aPgoRVXhjyuPSvOU0/kKSwDoSnLid9igW1 l7zHZs5TV6a8oCt/rffSSPMbGxakpFbgC8/rI8b0x9zOsCEdv2MrjT8+qS0aASsM SxQ7dmiDQEJQaMZJcKh2wvy7MMo2uyBJq7OSyfbdmt8ixC9uOtTDm0af9Rw2os+X T1BYPCWoQx7yakRUs1HkPFVA0Fyw7gmh31sF+MFxNs7S -----END CERTIFICATE-----Generated at Sat Jan 3 02:31:06 2026 by rpki-client