This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa File: ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa (raw, json) Hash identifier: zQGnplX7yO09B76cl8nxoAd4eyO3QNuF+QxWLfNBq+U= Subject key identifier: 66:EB:C7:9D:76:13:DC:88:8F:BF:C0:87:3F:73:8B:60:73:E5:0F:23 Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Certificate serial: 019B7C8043415C33E26E9D99CE356206170D Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa Signing time: Fri 02 Jan 2026 02:18:59 +0000 ROA not before: Fri 02 Jan 2026 02:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206762 IP address blocks: 188.241.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:43:41:5c:33:e2:6e:9d:99:ce:35:62:06:17:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4 Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66ebc79d7613dc888fbfc0873f738b6073e50f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:40:bf:cd:f5:8c:c1:2c:a2:f1:d5:b9:47:fb: aa:c8:4c:72:e2:d5:5c:45:ce:fb:13:98:02:40:48: 2e:e4:ae:f0:56:a9:71:cb:5e:0c:7c:75:1e:aa:57: be:d7:53:3e:60:27:81:3e:70:c4:52:4f:d5:b4:8c: 3e:67:fd:f5:f0:4f:bf:6a:0e:34:77:93:28:37:81: 53:71:e0:1e:c1:70:98:20:bc:65:ce:dc:21:ae:84: 40:7e:3d:ce:c7:99:84:70:52:e3:43:42:62:bd:bd: 0e:c8:a6:24:13:a7:2e:d5:c8:a4:d4:4a:03:d5:fc: b4:b1:40:aa:81:41:27:6d:ad:ad:cc:19:87:2d:4c: 8a:be:a8:0e:99:43:13:8e:fd:a4:a6:e9:80:e4:6c: 4c:8e:ac:db:e6:2c:c3:d6:fe:d7:79:1c:6e:e3:61: 52:6f:03:50:4b:e2:3d:40:5d:6f:a9:d1:4f:32:af: 98:68:e7:d1:ac:3f:8d:19:47:8d:e7:86:b6:90:26: 19:84:a1:fb:c8:cf:f6:0b:46:41:7c:d4:51:fc:93: 68:31:b6:c0:35:60:5f:cb:ed:a7:d6:77:5e:8e:6a: 6f:f2:73:3e:fe:e6:73:1b:9f:24:08:30:cb:df:6c: 20:ed:9e:d6:93:01:ef:08:ee:6e:84:09:c5:f6:97: e0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EB:C7:9D:76:13:DC:88:8F:BF:C0:87:3F:73:8B:60:73:E5:0F:23 X509v3 Authority Key Identifier: keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/ZuvHnXYT3IiPv8CHP3OLYHPlDyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.241.29.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:9f:cb:ac:ea:12:98:34:7a:e5:6f:92:db:05:d1:3b:43:fb: 8e:b9:12:1d:d5:86:86:6f:85:11:3b:f0:dc:82:47:ee:fa:00: 88:55:69:9c:66:37:79:1d:23:20:14:f2:23:e4:8c:94:56:3c: c9:b7:59:fa:c6:11:52:97:72:c7:98:1d:65:85:43:45:3c:2d: 96:f3:cb:ac:6f:55:29:c8:fa:27:28:00:a5:a9:f3:ca:a7:68: 99:d0:21:21:77:bd:1f:c3:73:6a:40:20:82:f9:9a:fd:3a:31: 12:79:1d:d3:fd:7e:9d:ff:dc:e2:3a:e2:da:5b:f9:38:bf:ac: 87:e4:28:63:0a:60:b4:f7:53:ec:d0:c9:ea:3f:41:34:34:64: 9b:a9:16:7a:c0:b9:13:44:e1:40:18:84:4b:a9:c0:37:33:c5: 41:65:8a:4a:96:5b:c0:5d:09:a2:ab:aa:e2:8e:b3:2f:73:0f: 17:ee:c7:fd:be:0c:91:c4:83:86:15:ac:ef:63:b8:f6:b6:26: 10:c4:4c:f9:8e:b8:f8:dc:bf:5e:67:58:6e:1b:07:10:ef:0a: a2:5a:3a:8f:2d:f8:1b:20:dd:fe:6b:5a:51:98:3b:5b:c6:e3: b4:8e:52:c3:f7:df:83:c1:da:68:f9:66:05:c2:10:ae:d2:d2: 78:1b:9b:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gENBXDPibp2ZzjViBhcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjQyZTgwNjAyYWVkZjU4YTNjN2E4MTg4M2MxYTM0ZjY5 ZDJmYjQwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmViYzc5ZDc2MTNkYzg4OGZiZmMwODczZjczOGI2MDczZTUwZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUC/zfWMwSyi8dW5R/uqyExy4tVc Rc77E5gCQEgu5K7wVqlxy14MfHUeqle+11M+YCeBPnDEUk/VtIw+Z/318E+/ag40 d5MoN4FTceAewXCYILxlztwhroRAfj3Ox5mEcFLjQ0Jivb0OyKYkE6cu1cik1EoD 1fy0sUCqgUEnba2tzBmHLUyKvqgOmUMTjv2kpumA5GxMjqzb5izD1v7XeRxu42FS bwNQS+I9QF1vqdFPMq+YaOfRrD+NGUeN54a2kCYZhKH7yM/2C0ZBfNRR/JNoMbbA NWBfy+2n1ndejmpv8nM+/uZzG58kCDDL32wg7Z7WkwHvCO5uhAnF9pfgwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbrx512E9yIj7/Ahz9zi2Bz5Q8jMB8GA1UdIwQY MBaAFOv0LoBgKu31ijx6gYg8GjT2nS+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2Mt MTkwM2VkYWZhOGJmLzEvWnV2SG5YWVQzSWlQdjhDSFAzT0xZSFBsRHlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2MtMTkwM2VkYWZhOGJm LzEvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPEdMA0G CSqGSIb3DQEBCwUAA4IBAQBan8us6hKYNHrlb5LbBdE7Q/uOuRId1YaGb4URO/Dc gkfu+gCIVWmcZjd5HSMgFPIj5IyUVjzJt1n6xhFSl3LHmB1lhUNFPC2W88usb1Up yPonKAClqfPKp2iZ0CEhd70fw3NqQCCC+Zr9OjESeR3T/X6d/9ziOuLaW/k4v6yH 5ChjCmC091Ps0MnqP0E0NGSbqRZ6wLkTROFAGIRLqcA3M8VBZYpKllvAXQmiq6ri jrMvcw8X7sf9vgyRxIOGFazvY7j2tiYQxEz5jrj43L9eZ1huGwcQ7wqiWjqPLfgb IN3+a1pRmDtbxuO0jlLD99+Dwdpo+WYFwhCu0tJ4G5sw -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:05 2026 by rpki-client