This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa File: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (raw, json) Hash identifier: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0= Subject key identifier: 64:C4:D6:85:C2:75:7B:BB:6F:5C:75:14:97:80:0D:A0:63:2B:21:69 Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Certificate serial: 019B78A216FE71FF4925CC588815854ECFFE Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa Signing time: Thu 01 Jan 2026 08:17:27 +0000 ROA not before: Thu 01 Jan 2026 08:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24806 IP address blocks: 185.33.144.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:16:fe:71:ff:49:25:cc:58:88:15:85:4e:cf:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Validity Not Before: Jan 1 08:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64c4d685c2757bbb6f5c751497800da0632b2169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:a6:2d:42:70:9b:3f:bf:3d:6f:96:cd:0d: 8b:bc:d7:6d:23:ac:a7:50:ab:c9:17:68:41:d5:8b: da:ea:03:76:a0:17:0b:d1:d1:3f:0c:3b:90:c7:d5: f2:9c:d2:18:cd:14:10:40:90:81:eb:36:26:1a:30: 7d:f9:1a:92:bd:9e:9a:f0:3a:8d:54:6f:a5:47:9d: c3:e7:82:cc:1a:19:30:f4:86:c3:d5:12:c0:30:05: f4:53:37:8f:42:e1:05:7e:d9:b6:12:b1:69:84:96: ad:5d:a6:de:d4:95:52:ab:73:01:4f:f9:e4:03:18: c6:5c:76:9c:2c:0a:18:9b:63:ba:ab:a6:2e:5f:d9: 5e:be:a6:f0:ef:81:a5:1b:e6:1f:5a:24:f6:40:46: 13:ba:40:78:da:ec:45:3c:d8:da:af:5c:18:fa:a0: ba:93:e9:c4:f2:af:5b:27:c8:ee:b2:c0:68:fa:8f: ba:9f:9f:42:88:a4:cd:1a:2d:15:ab:6a:34:d8:c6: c3:5f:db:3b:20:fc:41:59:74:aa:a6:45:50:fc:f5: 07:e1:c5:cd:33:14:06:1c:df:af:ab:27:59:ce:cf: 37:6b:e2:24:0a:af:bf:e1:3f:fa:e0:80:7b:bd:96: dc:0e:0b:3b:cc:db:39:fd:d1:e3:6d:59:2d:60:c3: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C4:D6:85:C2:75:7B:BB:6F:5C:75:14:97:80:0D:A0:63:2B:21:69 X509v3 Authority Key Identifier: keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.33.144.0/22 Signature Algorithm: sha256WithRSAEncryption 63:cd:4b:3b:c0:ba:1a:04:0d:94:e2:6b:b9:2d:52:70:c3:07: 4c:9e:e4:21:ac:79:09:b5:ce:24:67:8c:a8:27:4b:58:c2:c3: f4:be:d9:bd:f1:08:dc:df:63:b0:53:d5:c8:6e:5c:f4:58:c3: 18:d3:f0:17:20:4a:be:48:d1:76:e3:f1:55:a8:d0:20:3f:bc: fa:11:c1:97:aa:59:34:bf:72:6f:32:cb:98:04:21:b5:d2:f4: 04:ca:4e:1d:6b:41:6b:33:05:f3:f5:9e:7d:d8:df:26:df:0b: 94:10:7d:6f:21:a5:2b:9e:4b:61:ab:f0:22:7a:39:6c:13:1a: b4:2e:98:2b:32:76:6d:32:05:f8:9f:20:db:31:1f:68:a5:e1: ad:6d:2a:5c:81:06:93:1f:53:2d:9e:84:20:69:90:a9:78:77: 91:f9:ea:15:e7:50:39:3e:c0:76:cc:75:de:3d:84:b3:3c:8e: f5:1a:f5:f5:85:19:f1:5f:60:03:2b:a3:2d:c6:4a:75:8d:26: a1:2e:6f:cf:7f:50:03:3b:b6:1f:d8:f6:3c:bd:61:3a:e4:e0: 75:8a:60:69:b6:1f:53:f1:39:35:44:d0:bf:8d:67:75:c1:f7: f7:df:f7:82:8e:b1:b5:fa:bf:ce:c2:be:9c:c7:4f:1d:a8:74: 58:02:6d:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ohb+cf9JJcxYiBWFTs/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjUyM2Q5NDgzODdkOGM1ZmNkZjc1MmUwYTFjYzQwOGNm ZTgzOTUwHhcNMjYwMTAxMDgxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGM0ZDY4NWMyNzU3YmJiNmY1Yzc1MTQ5NzgwMGRhMDYzMmIyMTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4amLUJwmz+/PW+WzQ2LvNdtI6yn UKvJF2hB1Yva6gN2oBcL0dE/DDuQx9XynNIYzRQQQJCB6zYmGjB9+RqSvZ6a8DqN VG+lR53D54LMGhkw9IbD1RLAMAX0UzePQuEFftm2ErFphJatXabe1JVSq3MBT/nk AxjGXHacLAoYm2O6q6YuX9levqbw74GlG+YfWiT2QEYTukB42uxFPNjar1wY+qC6 k+nE8q9bJ8jussBo+o+6n59CiKTNGi0Vq2o02MbDX9s7IPxBWXSqpkVQ/PUH4cXN MxQGHN+vqydZzs83a+IkCq+/4T/64IB7vZbcDgs7zNs5/dHjbVktYMPMMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGTE1oXCdXu7b1x1FJeADaBjKyFpMB8GA1UdIwQY MBaAFKT1I9lIOH2MX833UuChzECM/oOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEt MjBhOTAwYmM3NzZhLzEvWk1UV2hjSjFlN3R2WEhVVWw0QU5vR01ySVdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEtMjBhOTAwYmM3NzZh LzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSGQMA0G CSqGSIb3DQEBCwUAA4IBAQBjzUs7wLoaBA2U4mu5LVJwwwdMnuQhrHkJtc4kZ4yo J0tYwsP0vtm98Qjc32OwU9XIblz0WMMY0/AXIEq+SNF24/FVqNAgP7z6EcGXqlk0 v3JvMsuYBCG10vQEyk4da0FrMwXz9Z592N8m3wuUEH1vIaUrnkthq/AiejlsExq0 LpgrMnZtMgX4nyDbMR9opeGtbSpcgQaTH1MtnoQgaZCpeHeR+eoV51A5PsB2zHXe PYSzPI71GvX1hRnxX2ADK6Mtxkp1jSahLm/Pf1ADO7Yf2PY8vWE65OB1imBpth9T 8Tk1RNC/jWd1wff33/eCjrG1+r/Owr6cx08dqHRYAm3l -----END CERTIFICATE-----Generated at Mon Jan 12 01:44:09 2026 by rpki-client