This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/zV6gwKizHJtPCmj9FYOUA9jeUek.roa File: zV6gwKizHJtPCmj9FYOUA9jeUek.roa (raw, json) Hash identifier: EcadcbZq+piW+970GC+VLWi9HJJfXxoGsLY8i+apRPs= Subject key identifier: CD:5E:A0:C0:A8:B3:1C:9B:4F:0A:68:FD:15:83:94:03:D8:DE:51:E9 Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019B791061FED1D94501A42C46A2D83E7374 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/zV6gwKizHJtPCmj9FYOUA9jeUek.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22427 IP address blocks: 45.136.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:61:fe:d1:d9:45:01:a4:2c:46:a2:d8:3e:73:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd5ea0c0a8b31c9b4f0a68fd15839403d8de51e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:09:26:12:a8:a7:dd:46:31:1e:61:89:cf: 11:04:69:f7:66:b5:64:7b:3f:16:55:6e:fd:75:a1: 44:d2:35:05:e0:8e:3b:0e:63:03:a9:96:7d:05:b9: 83:5c:bb:fb:66:c3:20:a1:3b:cd:52:32:90:c0:9f: 6d:23:9d:12:f9:e2:02:a5:61:41:59:12:9e:c2:6b: a5:8c:7d:3f:13:05:46:a1:bf:b4:38:e1:c2:ef:f7: f9:df:95:82:b7:68:15:8b:48:ca:11:99:ed:80:d6: 0a:a0:b0:a9:65:ef:18:0b:ca:83:de:e2:5f:c1:db: 59:1f:3c:f9:48:7e:91:a4:57:7f:06:4b:a4:05:8a: 76:b9:c0:b5:bf:1b:c1:ad:e0:85:ca:6f:f2:d6:31: 6a:3f:c5:43:34:92:c6:24:3c:94:f0:38:5c:8f:e1: 96:27:79:f9:02:af:6b:29:9d:c6:28:b5:d8:a9:bb: e8:1b:0b:2c:72:83:b3:dc:3b:fc:a1:4e:ca:01:4f: 07:37:f2:9a:be:c8:5b:9f:dc:ca:70:e6:63:c2:92: 8d:5b:fb:93:ff:13:e0:bb:fb:22:21:4c:1c:89:21: fb:df:a7:cb:ed:f4:37:9b:82:a5:4a:47:1e:2a:7a: 07:d9:83:28:e1:71:90:f8:2b:91:2c:54:20:87:7e: 31:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:A0:C0:A8:B3:1C:9B:4F:0A:68:FD:15:83:94:03:D8:DE:51:E9 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/zV6gwKizHJtPCmj9FYOUA9jeUek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.38.0/24 Signature Algorithm: sha256WithRSAEncryption 92:e8:ca:a6:f3:f8:49:eb:ff:39:03:8b:3a:f1:65:a8:87:05: ed:9a:65:fa:10:ea:42:c1:44:37:ba:21:06:f9:51:49:98:6d: e9:4c:ac:c2:23:f1:1e:ee:69:b5:d9:95:ef:61:76:e9:5b:4c: 22:16:df:a6:ba:a0:6b:e9:3c:71:49:cd:b0:f7:51:a2:7a:98: 27:bb:bc:ca:00:34:44:e0:96:ee:f9:0e:5f:82:11:8e:f8:54: d3:6d:98:a1:a7:a2:4a:4b:dc:8a:1b:78:92:09:12:af:2e:5a: fe:4b:fb:75:db:d5:1f:c1:6a:c8:12:ee:1e:03:a1:bd:33:12: 4a:12:16:3f:5d:05:da:1d:2c:98:37:8e:f3:3d:3c:b1:b2:0d: 22:53:a1:70:cf:13:25:a4:33:b3:b4:5f:96:5d:13:41:28:69: 18:03:26:b4:54:c5:6c:03:e7:99:a3:75:21:0c:97:59:85:ce: ae:3e:42:f5:d8:d9:b5:0c:5e:7b:bb:4a:73:86:e0:d9:62:d0: 22:49:8f:59:43:d7:d3:6d:40:05:8a:de:32:56:9d:84:a8:27: 04:ad:3f:dc:cc:08:7f:42:3a:19:43:47:4e:1b:ab:b6:1d:d5: 41:30:64:7f:e0:85:1c:ae:02:86:81:e4:1c:c7:c0:99:d8:46: e1:be:4e:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGH+0dlFAaQsRqLYPnN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDVlYTBjMGE4YjMxYzliNGYwYTY4ZmQxNTgzOTQwM2Q4ZGU1MWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolgJJhKop91GMR5hic8RBGn3ZrVk ez8WVW79daFE0jUF4I47DmMDqZZ9BbmDXLv7ZsMgoTvNUjKQwJ9tI50S+eICpWFB WRKewmuljH0/EwVGob+0OOHC7/f535WCt2gVi0jKEZntgNYKoLCpZe8YC8qD3uJf wdtZHzz5SH6RpFd/BkukBYp2ucC1vxvBreCFym/y1jFqP8VDNJLGJDyU8Dhcj+GW J3n5Aq9rKZ3GKLXYqbvoGwsscoOz3Dv8oU7KAU8HN/Kavshbn9zKcOZjwpKNW/uT /xPgu/siIUwciSH736fL7fQ3m4KlSkceKnoH2YMo4XGQ+CuRLFQgh34xhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM1eoMCosxybTwpo/RWDlAPY3lHpMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvelY2Z3dLaXpISnRQQ21qOUZZT1VBOWplVWVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYgmMA0G CSqGSIb3DQEBCwUAA4IBAQCS6Mqm8/hJ6/85A4s68WWohwXtmmX6EOpCwUQ3uiEG +VFJmG3pTKzCI/Ee7mm12ZXvYXbpW0wiFt+muqBr6TxxSc2w91Giepgnu7zKADRE 4Jbu+Q5fghGO+FTTbZihp6JKS9yKG3iSCRKvLlr+S/t129UfwWrIEu4eA6G9MxJK EhY/XQXaHSyYN47zPTyxsg0iU6FwzxMlpDOztF+WXRNBKGkYAya0VMVsA+eZo3Uh DJdZhc6uPkL12Nm1DF57u0pzhuDZYtAiSY9ZQ9fTbUAFit4yVp2EqCcErT/czAh/ QjoZQ0dOG6u2HdVBMGR/4IUcrgKGgeQcx8CZ2Ebhvk7/ -----END CERTIFICATE-----Generated at Sun Jan 11 23:38:19 2026 by rpki-client