This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-ZVHJSxLmJrSSiQ7CBopRY4AK6I.roa File: 1-ZVHJSxLmJrSSiQ7CBopRY4AK6I.roa (raw, json) Hash identifier: 4vzZlgBGDzxmVzP0vRnZzF5oLDRhdAemf8eqBtAUMzs= Subject key identifier: F9:95:47:25:2C:4B:98:9A:D2:4A:24:3B:08:1A:29:45:8E:00:2B:A2 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA78671720361DF7FE88D03D6DC1BC7 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-ZVHJSxLmJrSSiQ7CBopRY4AK6I.roa Signing time: Fri 02 Jan 2026 12:21:06 +0000 ROA not before: Fri 02 Jan 2026 12:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204354 IP address blocks: 185.251.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 21:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:86:71:72:03:61:df:7f:e8:8d:03:d6:dc:1b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f99547252c4b989ad24a243b081a29458e002ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:23:0e:e4:f0:60:d4:84:68:3b:10:32:d8: e1:e6:95:2f:b0:10:d7:83:8e:23:85:65:e8:cf:cd: fe:e2:93:b5:cb:fd:69:65:77:3e:0c:32:0a:bd:71: 95:23:73:1c:7a:9b:40:31:6e:68:30:41:c2:48:01: b2:5b:f9:fa:5f:7c:a0:3e:b7:39:8b:8d:82:7e:3a: c2:c7:1b:68:e7:6e:90:24:bb:60:55:77:39:cc:78: dd:14:77:63:ac:9a:90:f4:ce:91:53:c8:1c:26:07: 01:69:57:10:d1:aa:04:ca:50:06:7a:bd:5d:e3:da: 61:be:69:c7:03:65:64:a2:f6:b4:27:3f:5b:16:cd: 91:6c:67:87:03:4b:73:28:cc:72:19:5f:b5:eb:df: 87:47:ec:90:89:d8:70:c3:da:6a:72:80:42:2b:52: 0b:00:b9:12:dc:69:30:5a:3a:b7:37:84:72:81:3e: bc:3c:81:01:14:fa:45:8a:93:d7:41:c7:ca:52:83: df:f4:fb:fc:b6:7e:aa:d1:c3:1e:c8:40:aa:b3:8e: 59:3d:53:5f:f7:da:35:63:19:70:42:e4:2a:cb:bf: 2b:88:0f:77:89:07:7d:0e:ad:24:6e:4d:00:a3:89: 0e:94:b1:73:8e:d3:c4:d5:ab:11:e3:f0:b2:24:63: 90:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:95:47:25:2C:4B:98:9A:D2:4A:24:3B:08:1A:29:45:8E:00:2B:A2 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-ZVHJSxLmJrSSiQ7CBopRY4AK6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.240.0/22 Signature Algorithm: sha256WithRSAEncryption 01:cc:1f:6d:2c:86:33:e3:59:39:26:06:40:cf:97:e8:24:d7: 9f:43:1b:c1:5c:ad:c2:9f:ba:7e:19:2c:fd:57:b1:bc:bd:98: b8:c3:92:be:59:c2:54:25:09:45:31:76:48:c2:55:f7:48:87: 62:3a:8d:ce:9d:07:df:68:4f:53:5f:97:af:fe:8e:c4:e4:48: 05:39:b6:7f:74:37:b4:3b:f8:c7:76:ee:ab:7a:44:fe:53:dc: 34:0a:28:36:5f:f3:a5:9f:3f:ca:48:85:f8:93:2e:02:53:20: 09:d1:18:5e:52:aa:9a:c0:2f:f3:50:2a:62:6e:bd:b4:ff:a3: 9f:ab:da:9d:06:a5:bd:9d:3e:0e:2b:84:58:d7:a8:97:1d:4a: fe:cd:66:6d:d2:ee:7e:6e:c7:a0:4e:cc:1d:b8:9e:4d:c1:97: 6f:9a:59:33:79:07:67:4f:d3:85:97:6d:ec:54:00:6b:da:ae: 12:36:ba:c5:1b:d7:3b:d1:6a:3f:5e:67:c3:18:96:4c:f2:d4: ba:b7:db:43:fc:bf:80:34:f9:b0:b9:dc:60:41:e0:59:a2:56: ba:cb:4e:47:0c:db:fa:92:14:32:08:de:ec:45:96:d3:2b:c0: fe:b0:a7:da:e3:73:9e:68:6d:a6:47:c7:09:1e:93:5c:22:cb: 45:63:99:74 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+p4ZxcgNh33/ojQPW3BvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTk1NDcyNTJjNGI5ODlhZDI0YTI0M2IwODFhMjk0NThlMDAyYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXAjDuTwYNSEaDsQMtjh5pUvsBDX g44jhWXoz83+4pO1y/1pZXc+DDIKvXGVI3MceptAMW5oMEHCSAGyW/n6X3ygPrc5 i42CfjrCxxto526QJLtgVXc5zHjdFHdjrJqQ9M6RU8gcJgcBaVcQ0aoEylAGer1d 49phvmnHA2Vkova0Jz9bFs2RbGeHA0tzKMxyGV+169+HR+yQidhww9pqcoBCK1IL ALkS3GkwWjq3N4RygT68PIEBFPpFipPXQcfKUoPf9Pv8tn6q0cMeyECqs45ZPVNf 99o1YxlwQuQqy78riA93iQd9Dq0kbk0Ao4kOlLFzjtPE1asR4/CyJGOQVwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmVRyUsS5ia0kokOwgaKUWOACuiMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvMS1aVkhKU3hMbUpyU1NpUTdDQm9wUlk0QUs2SS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmQvOWExZDQ0LTg2MDktNGU1ZS1iYTk0LTVhODZjMjc1N2Mx ZS8xL1h1VXh1YXdwa05hYWlsd3dJLWN1YllRZWJBay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArn78DAN BgkqhkiG9w0BAQsFAAOCAQEAAcwfbSyGM+NZOSYGQM+X6CTXn0MbwVytwp+6fhks /VexvL2YuMOSvlnCVCUJRTF2SMJV90iHYjqNzp0H32hPU1+Xr/6OxORIBTm2f3Q3 tDv4x3buq3pE/lPcNAooNl/zpZ8/ykiF+JMuAlMgCdEYXlKqmsAv81AqYm69tP+j n6vanQalvZ0+DiuEWNeolx1K/s1mbdLufm7HoE7MHbieTcGXb5pZM3kHZ0/ThZdt 7FQAa9quEja6xRvXO9FqP15nwxiWTPLUurfbQ/y/gDT5sLncYEHgWaJWustORwzb +pIUMgje7EWW0yvA/rCn2uNznmhtpkfHCR6TXCLLRWOZdA== -----END CERTIFICATE-----Generated at Mon Jan 12 07:35:48 2026 by rpki-client