This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa File: zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa (raw, json) Hash identifier: q3HTdT+bmIS7eJfWEweBp4+RgfhLQ35j5qT2Y42OjrI= Subject key identifier: CC:6B:97:C2:ED:EF:F8:CF:5B:5D:98:A9:02:54:42:2E:15:A0:63:D6 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019B7A5AAB33318BE574F15253F2849FC200 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 82.115.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ab:33:31:8b:e5:74:f1:52:53:f2:84:9f:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc6b97c2edeff8cf5b5d98a90254422e15a063d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:74:62:4a:c7:39:b5:dc:93:43:d3:8f:b3: 9b:f1:ee:bd:ee:53:60:d7:33:11:bf:c5:39:a6:1e: 2a:ed:bf:59:01:c2:8c:29:75:59:71:c4:7c:5b:e4: 34:7b:ba:67:ad:c1:b2:a2:29:e9:97:36:0f:2f:e4: e3:81:0b:55:7f:e7:25:91:99:1a:55:a8:1c:61:2c: 10:77:fa:a4:82:bb:3f:20:36:45:8a:21:e2:64:a5: aa:41:08:80:34:dc:76:58:42:3b:6d:69:f0:1f:5f: 6d:df:b1:c3:bb:09:12:3d:25:31:c2:70:1e:b7:79: bd:fc:41:38:33:c4:1d:40:39:96:28:83:56:c5:a9: 34:0d:9d:8e:60:d2:9b:f2:d2:fb:37:3c:fd:43:30: 3f:40:6e:4a:7c:f9:28:dd:ef:04:69:bf:c6:a4:67: 97:34:79:d5:2a:88:86:6f:84:30:88:5b:f1:ac:35: bf:c7:5a:8a:bb:08:01:7e:7f:b8:b5:78:aa:03:95: b0:dc:a9:d3:9a:4b:2e:82:cb:bc:1a:53:09:0e:32: 2a:aa:9d:6e:f0:c9:17:e7:dd:71:4b:d4:79:1e:15: d6:1f:ea:3d:31:5f:53:25:40:92:8e:b5:a5:3d:3b: 44:d9:dc:99:94:00:7a:d9:f1:ff:d9:92:6c:c5:cf: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6B:97:C2:ED:EF:F8:CF:5B:5D:98:A9:02:54:42:2E:15:A0:63:D6 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.217.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:76:98:47:f5:d9:6f:55:82:c0:1a:be:3f:54:8c:38:c2:f8: e8:fb:33:18:1e:0c:8a:a5:4e:96:72:6b:09:93:c5:f6:1a:58: 11:19:54:cb:fc:b1:ed:9d:d4:8f:97:b1:10:e2:db:2b:58:a2: 1c:7b:f1:74:db:0f:5a:01:58:a0:36:29:89:43:db:f6:ca:99: 0b:06:e7:7a:3b:2a:d4:24:b6:6e:3c:6d:16:08:6e:0b:1a:41: c7:a2:c2:54:16:df:55:f6:c1:23:df:e1:c7:f7:a4:91:b0:9f: d7:86:4a:61:53:9c:09:69:09:d0:a3:4d:c7:da:88:35:c3:86: 6b:a1:cc:01:e6:59:6e:af:41:96:28:32:e6:37:4e:29:c9:61: 90:2e:3c:2d:b4:79:0c:24:20:0e:a1:9d:35:5e:37:44:73:ea: 62:59:bd:0e:85:1e:65:1b:e8:97:25:62:10:4c:f1:db:9b:2b: 3c:8d:8e:2b:88:eb:da:b6:a9:19:6f:b7:58:53:95:1b:e3:91: 2a:82:63:cb:a7:f2:c1:97:b5:03:78:ad:4d:42:90:01:24:88: 14:84:c3:a0:1a:c9:9c:10:6f:3d:d6:f7:b0:d2:4f:e1:6a:97: bb:c6:fd:7e:50:c8:88:ba:e0:f2:57:9a:77:4c:64:35:25:f7: d2:bc:25:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqszMYvldPFSU/KEn8IAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzZiOTdjMmVkZWZmOGNmNWI1ZDk4YTkwMjU0NDIyZTE1YTA2M2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGd0YkrHObXck0PTj7Ob8e697lNg 1zMRv8U5ph4q7b9ZAcKMKXVZccR8W+Q0e7pnrcGyoinplzYPL+TjgQtVf+clkZka VagcYSwQd/qkgrs/IDZFiiHiZKWqQQiANNx2WEI7bWnwH19t37HDuwkSPSUxwnAe t3m9/EE4M8QdQDmWKINWxak0DZ2OYNKb8tL7Nzz9QzA/QG5KfPko3e8Eab/GpGeX NHnVKoiGb4QwiFvxrDW/x1qKuwgBfn+4tXiqA5Ww3KnTmksugsu8GlMJDjIqqp1u 8MkX591xS9R5HhXWH+o9MV9TJUCSjrWlPTtE2dyZlAB62fH/2ZJsxc+/ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxrl8Lt7/jPW12YqQJUQi4VoGPWMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEvekd1WHd1M3YtTTliWFppcEFsUkNMaFdnWTlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnPZMA0G CSqGSIb3DQEBCwUAA4IBAQB/dphH9dlvVYLAGr4/VIw4wvjo+zMYHgyKpU6WcmsJ k8X2GlgRGVTL/LHtndSPl7EQ4tsrWKIce/F02w9aAVigNimJQ9v2ypkLBud6OyrU JLZuPG0WCG4LGkHHosJUFt9V9sEj3+HH96SRsJ/XhkphU5wJaQnQo03H2og1w4Zr ocwB5llur0GWKDLmN04pyWGQLjwttHkMJCAOoZ01XjdEc+piWb0OhR5lG+iXJWIQ TPHbmys8jY4riOvatqkZb7dYU5Ub45EqgmPLp/LBl7UDeK1NQpABJIgUhMOgGsmc EG891vew0k/hape7xv1+UMiIuuDyV5p3TGQ1JffSvCUT -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:02 2026 by rpki-client