This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/ZdluKAeiGgNMdIKSFBpouvQoMFU.roa File: ZdluKAeiGgNMdIKSFBpouvQoMFU.roa (raw, json) Hash identifier: c9wab7GyUrk1eImAM4TBW2aXlrKgz7syJ0UrZ/J8cJ4= Subject key identifier: 65:D9:6E:28:07:A2:1A:03:4C:74:82:92:14:1A:68:BA:F4:28:30:55 Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49 Certificate serial: 019B7DCA92B39D689FC022F2A3543CBF3C8A Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/ZdluKAeiGgNMdIKSFBpouvQoMFU.roa Signing time: Fri 02 Jan 2026 08:19:46 +0000 ROA not before: Fri 02 Jan 2026 08:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215773 IP address blocks: 194.56.182.0/24 maxlen: 24 212.32.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:92:b3:9d:68:9f:c0:22:f2:a3:54:3c:bf:3c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49 Validity Not Before: Jan 2 08:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65d96e2807a21a034c748292141a68baf4283055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:a6:66:ec:c4:8b:a6:b0:59:92:44:73:d1: 4c:f8:d8:36:7f:5e:0a:06:1e:d4:fc:21:c4:7e:44: ef:f2:3c:93:1e:7c:50:f9:fe:c6:51:eb:c8:c4:c9: e8:0c:8e:c5:62:ff:5b:a5:3c:62:a4:30:44:c3:b6: 44:0b:78:d5:5c:60:55:0f:3b:f4:0d:17:47:a8:1b: b5:8a:90:bf:e7:4b:5d:d3:22:0b:17:c1:e1:c1:5c: 84:d6:76:69:4d:97:4b:c7:b3:b4:c7:e4:b2:8a:e8: 01:c6:24:ca:94:60:4f:ac:5e:61:8f:05:e1:af:0a: 75:81:a8:3d:59:5d:05:14:33:59:7f:b5:d0:b2:d9: d0:98:32:00:fb:f2:c2:cc:0e:88:cd:4e:e8:87:9e: b8:32:2e:13:d1:b5:39:f0:f0:58:20:80:d0:b2:17: e3:d2:fa:4f:f9:22:5e:6f:61:63:6d:e9:da:16:3e: ef:20:a4:04:57:8e:e5:3a:13:79:ba:10:4c:f7:5a: eb:1c:ee:1e:58:0d:36:6b:44:76:21:9e:3e:32:35: 23:03:26:e7:96:2f:ba:f1:09:07:1f:f4:6c:e5:8a: 95:e8:9a:56:47:dc:f3:d1:15:48:61:10:01:cd:3d: 36:3b:26:27:0c:27:ba:bb:7a:18:43:7a:fa:14:fd: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D9:6E:28:07:A2:1A:03:4C:74:82:92:14:1A:68:BA:F4:28:30:55 X509v3 Authority Key Identifier: keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/ZdluKAeiGgNMdIKSFBpouvQoMFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.182.0/24 212.32.43.0/24 Signature Algorithm: sha256WithRSAEncryption 15:ec:e1:62:dc:3f:0c:ab:20:60:59:a4:2c:cb:51:be:ab:ff: 99:2d:47:7b:45:b8:b8:23:88:f9:58:9b:08:be:5a:a1:bf:d9: c0:04:a1:e3:2b:42:c1:85:28:0d:ad:0d:27:1f:fc:36:fc:5c: cb:7e:ce:73:66:fa:9b:c4:d4:0c:00:db:cd:d5:03:a5:9c:5d: 60:31:f3:a5:d4:74:63:7d:87:aa:23:11:95:f1:f0:aa:f3:ed: bc:d0:a1:6c:71:30:f6:eb:40:b5:09:9a:77:7a:3b:7a:04:72: 05:49:e7:91:cd:b0:85:a9:d5:10:a6:5c:f1:2b:11:63:69:07: 74:fb:6c:99:14:16:5a:a0:66:46:95:79:59:28:87:f3:c6:b5: ad:8c:31:ac:fa:c0:81:c3:8c:64:4b:cd:fd:49:1e:61:58:55: 02:ae:f2:11:70:65:6b:88:ef:6d:74:93:8f:04:04:f1:de:a9: 0e:c2:61:d2:1c:8f:c0:0e:92:36:99:51:c1:81:cc:d5:92:12: c1:db:c8:e1:91:68:99:82:0d:ae:8a:93:7e:b7:71:03:5e:86: ca:90:37:2e:1d:d8:0a:fb:7a:79:0c:34:28:80:de:54:9f:17: 2d:f7:c5:58:23:e1:31:48:57:a9:3f:fa:20:54:85:82:03:0c: ed:a8:02:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ypKznWifwCLyo1Q8vzyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTI4MmE1NzZmZDYyYTBhMjQxNjZiNWVjMWYxMjRlNDI1 OGRiNDkwHhcNMjYwMTAyMDgxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWQ5NmUyODA3YTIxYTAzNGM3NDgyOTIxNDFhNjhiYWY0MjgzMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDOmZuzEi6awWZJEc9FM+Ng2f14K Bh7U/CHEfkTv8jyTHnxQ+f7GUevIxMnoDI7FYv9bpTxipDBEw7ZEC3jVXGBVDzv0 DRdHqBu1ipC/50td0yILF8HhwVyE1nZpTZdLx7O0x+SyiugBxiTKlGBPrF5hjwXh rwp1gag9WV0FFDNZf7XQstnQmDIA+/LCzA6IzU7oh564Mi4T0bU58PBYIIDQshfj 0vpP+SJeb2FjbenaFj7vIKQEV47lOhN5uhBM91rrHO4eWA02a0R2IZ4+MjUjAybn li+68QkHH/Rs5YqV6JpWR9zz0RVIYRABzT02OyYnDCe6u3oYQ3r6FP0MzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGXZbigHohoDTHSCkhQaaLr0KDBVMB8GA1UdIwQY MBaAFPySgqV2/WKgokFmtewfEk5CWNtJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pLQ3BYYjlZcUNpUVdhMTdCOFNUa0pZMjBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNjk5NzUtYWZmZC00ZjhlLWE5ZjIt NWNlOTgzMmU3NDk1LzEvWmRsdUtBZWlHZ05NZElLU0ZCcG91dlFvTUZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9mNjk5NzUtYWZmZC00ZjhlLWE5ZjItNWNlOTgzMmU3NDk1 LzEvX0pLQ3BYYjlZcUNpUVdhMTdCOFNUa0pZMjBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwji2AwQA 1CArMA0GCSqGSIb3DQEBCwUAA4IBAQAV7OFi3D8MqyBgWaQsy1G+q/+ZLUd7Rbi4 I4j5WJsIvlqhv9nABKHjK0LBhSgNrQ0nH/w2/FzLfs5zZvqbxNQMANvN1QOlnF1g MfOl1HRjfYeqIxGV8fCq8+280KFscTD260C1CZp3ejt6BHIFSeeRzbCFqdUQplzx KxFjaQd0+2yZFBZaoGZGlXlZKIfzxrWtjDGs+sCBw4xkS839SR5hWFUCrvIRcGVr iO9tdJOPBATx3qkOwmHSHI/ADpI2mVHBgczVkhLB28jhkWiZgg2uipN+t3EDXobK kDcuHdgK+3p5DDQogN5Unxct98VYI+ExSFepP/ogVIWCAwztqAKq -----END CERTIFICATE-----Generated at Thu Jan 8 13:45:32 2026 by rpki-client