This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/zqP1vyWLDjvVNdqwed1bkObGG6A.roa File: zqP1vyWLDjvVNdqwed1bkObGG6A.roa (raw, json) Hash identifier: j6evToeWCAWj3WCNLWp+qsnH494XqRvy37QXgbtw5Fs= Subject key identifier: CE:A3:F5:BF:25:8B:0E:3B:D5:35:DA:B0:79:DD:5B:90:E6:C6:1B:A0 Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b Certificate serial: 019B7F1455D0DB9BE35178B3AB08270C29EE Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/zqP1vyWLDjvVNdqwed1bkObGG6A.roa Signing time: Fri 02 Jan 2026 14:19:57 +0000 ROA not before: Fri 02 Jan 2026 14:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34309 IP address blocks: 193.56.217.0/24 maxlen: 24 2a05:a880:dc20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:55:d0:db:9b:e3:51:78:b3:ab:08:27:0c:29:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b Validity Not Before: Jan 2 14:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cea3f5bf258b0e3bd535dab079dd5b90e6c61ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:53:95:89:7e:d7:1c:86:fb:fb:d0:00:ee: 6d:cb:ce:3e:7e:5a:9e:05:9a:f7:6e:0c:91:8d:6d: ed:6d:a9:15:91:59:aa:a7:d0:10:be:d0:1e:c1:3e: 45:2e:05:a7:ca:15:ff:92:7f:e5:19:4d:a4:ef:75: 73:5b:5e:1a:32:dd:14:d2:99:97:35:0c:2c:7f:6d: 6e:d7:b0:49:fd:a9:00:62:f1:f3:26:5f:cb:c5:e9: 4e:47:2d:50:0b:95:ae:e9:87:dc:45:7c:c4:27:05: 03:bb:87:bb:32:69:56:ce:f9:cd:50:d6:29:91:fa: 79:06:88:8c:50:ce:7a:67:bb:9c:cc:bc:2b:aa:f1: 18:ca:54:20:5e:7d:70:41:b2:f5:56:76:f3:f5:08: e8:22:54:a2:34:43:f7:90:08:8f:2f:7f:56:c6:52: b4:21:91:c1:4e:05:46:6a:a1:a4:47:14:37:0d:7a: cb:e2:17:d2:54:8f:8f:0d:63:15:78:0b:98:82:74: 33:68:93:3e:ca:43:a3:b1:40:f1:be:5e:ab:65:d8: fc:2b:08:03:6a:5c:23:7f:fc:b8:c0:5f:1a:5e:05: 75:b2:6b:24:9a:13:5b:86:70:e6:01:bc:64:98:9d: 4c:1f:3d:f7:8a:78:1d:d2:52:00:2b:63:19:50:d8: 98:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A3:F5:BF:25:8B:0E:3B:D5:35:DA:B0:79:DD:5B:90:E6:C6:1B:A0 X509v3 Authority Key Identifier: keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/zqP1vyWLDjvVNdqwed1bkObGG6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.217.0/24 IPv6: 2a05:a880:dc20::/48 Signature Algorithm: sha256WithRSAEncryption 46:d0:77:c6:ae:d5:68:3c:19:85:3e:6f:ff:aa:16:48:80:53: d9:f0:f4:6c:05:ed:68:12:61:28:16:3d:75:3d:61:74:91:75: 12:a7:ce:f8:0e:42:2a:92:7e:00:5d:c0:0f:d8:4c:3a:c5:02: fb:99:08:76:34:c5:46:31:6f:f2:01:ea:51:5a:c7:6f:1d:b1: 21:bf:fa:43:25:e2:b1:6b:da:97:24:e6:b9:5d:29:da:b6:e5: ae:fa:f3:2c:12:46:90:25:21:5c:b0:cd:4c:b2:f5:54:00:c9: 68:a6:1f:de:26:ea:cf:0a:ff:77:1f:36:fa:f7:bc:f1:b3:35: 7c:65:40:de:23:ba:c5:41:1c:db:f0:56:e8:3a:02:19:5e:ec: 8b:e7:b4:1a:71:52:7c:34:4d:8b:ad:f2:78:73:ac:57:e9:91: 07:83:3b:e2:e9:31:2a:43:49:0b:19:3a:1c:36:6a:82:df:bd: 55:72:d8:a7:0c:c0:1f:57:ed:7f:2b:0b:20:87:38:aa:1d:f6: c4:7d:03:0d:77:2c:2f:b0:4e:8f:d6:77:42:e7:6c:90:6c:e8: 74:14:30:46:08:a8:fd:4e:18:c6:ce:77:7a:6f:c7:7a:79:b4: 8b:f5:1b:1d:6f:89:0f:48:fc:85:00:9f:9d:c0:74:58:a5:3c: 75:0b:a8:79 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FFXQ25vjUXizqwgnDCnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj MmE5NmIwHhcNMjYwMTAyMTQxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWEzZjViZjI1OGIwZTNiZDUzNWRhYjA3OWRkNWI5MGU2YzYxYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsldTlYl+1xyG+/vQAO5ty84+flqe BZr3bgyRjW3tbakVkVmqp9AQvtAewT5FLgWnyhX/kn/lGU2k73VzW14aMt0U0pmX NQwsf21u17BJ/akAYvHzJl/LxelORy1QC5Wu6YfcRXzEJwUDu4e7MmlWzvnNUNYp kfp5BoiMUM56Z7uczLwrqvEYylQgXn1wQbL1Vnbz9QjoIlSiNEP3kAiPL39WxlK0 IZHBTgVGaqGkRxQ3DXrL4hfSVI+PDWMVeAuYgnQzaJM+ykOjsUDxvl6rZdj8KwgD alwjf/y4wF8aXgV1smskmhNbhnDmAbxkmJ1MHz33ingd0lIAK2MZUNiYcQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFM6j9b8liw471TXasHndW5DmxhugMB8GA1UdIwQY MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt NjA4NGNmYzZlNGM0LzEvenFQMXZ5V0xEanZWTmRxd2VkMWJrT2JHRzZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0 LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwTjZMA8E AgACMAkDBwAqBaiA3CAwDQYJKoZIhvcNAQELBQADggEBAEbQd8au1Wg8GYU+b/+q FkiAU9nw9GwF7WgSYSgWPXU9YXSRdRKnzvgOQiqSfgBdwA/YTDrFAvuZCHY0xUYx b/IB6lFax28dsSG/+kMl4rFr2pck5rldKdq25a768ywSRpAlIVywzUyy9VQAyWim H94m6s8K/3cfNvr3vPGzNXxlQN4jusVBHNvwVug6Ahle7IvntBpxUnw0TYut8nhz rFfpkQeDO+LpMSpDSQsZOhw2aoLfvVVy2KcMwB9X7X8rCyCHOKod9sR9Aw13LC+w To/Wd0LnbJBs6HQUMEYIqP1OGMbOd3pvx3p5tIv1Gx1viQ9I/IUAn53AdFilPHUL qHk= -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:30 2026 by rpki-client