This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/RZj6Q6dbNwuwz_b4LiYbYjt7s0Q.roa File: RZj6Q6dbNwuwz_b4LiYbYjt7s0Q.roa (raw, json) Hash identifier: rZ5431yDGBLhE9MGa187xIN7yECgb8/EV3ZIyUsR8Xg= Subject key identifier: 45:98:FA:43:A7:5B:37:0B:B0:CF:F6:F8:2E:26:1B:62:3B:7B:B3:44 Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Certificate serial: 019B7758DEC28B47E35D3A54A036CCA104AB Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/RZj6Q6dbNwuwz_b4LiYbYjt7s0Q.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29551 IP address blocks: 88.214.25.0/24 maxlen: 24 91.228.101.0/24 maxlen: 24 193.24.208.0/22 maxlen: 22 193.24.208.0/23 maxlen: 23 193.24.210.0/24 maxlen: 24 194.24.160.0/23 maxlen: 23 194.24.160.0/24 maxlen: 24 2001:67c:2c58::/48 maxlen: 48 2a00:1910::/32 maxlen: 32 2a00:1911::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:de:c2:8b:47:e3:5d:3a:54:a0:36:cc:a1:04:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4598fa43a75b370bb0cff6f82e261b623b7bb344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:61:21:77:60:f7:d7:f1:21:97:f0:8a:cf:4f: b7:ce:40:36:b6:ba:14:5f:d5:7d:b5:ec:6c:3c:a4: 32:cb:be:9a:ac:fd:0f:a9:dd:36:a7:4a:4a:71:e0: 7e:22:6d:92:6a:38:2a:ba:27:7d:eb:c6:ff:c8:63: 28:49:af:ff:0d:c7:a6:71:df:b5:36:8b:ee:77:04: bd:2d:72:10:d0:07:32:a5:77:19:01:98:5a:41:8e: e8:f8:de:dd:f8:d3:a6:09:70:fb:05:b0:bd:37:fe: bf:bf:10:d0:db:1a:f0:18:a5:8a:b0:c0:3d:6f:7e: 10:04:a9:8c:9c:23:ec:d1:b1:66:b6:1c:59:ab:c7: d8:02:12:b0:8b:f3:71:b8:ce:c7:21:de:70:fe:49: b9:08:5a:f2:03:bf:27:7f:21:50:82:67:98:03:2f: 85:a0:29:78:16:9b:7f:da:ed:cc:be:58:fb:86:b9: de:ee:a6:81:05:f1:63:e2:59:02:cc:9f:17:34:78: ae:61:d9:3b:84:d4:3f:43:d5:e0:15:69:3c:3e:a1: 42:83:54:96:e4:14:48:ce:04:7a:01:6e:f1:7b:6d: dd:31:03:72:73:54:5f:89:57:b4:33:85:91:9b:02: f2:ae:49:1d:9c:53:59:af:29:a3:78:ca:9c:ea:68: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:98:FA:43:A7:5B:37:0B:B0:CF:F6:F8:2E:26:1B:62:3B:7B:B3:44 X509v3 Authority Key Identifier: keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/RZj6Q6dbNwuwz_b4LiYbYjt7s0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.25.0/24 91.228.101.0/24 193.24.208.0/22 194.24.160.0/23 IPv6: 2001:67c:2c58::/48 2a00:1910::/31 Signature Algorithm: sha256WithRSAEncryption ad:97:38:21:a1:6e:21:3d:91:e2:1d:8e:8e:c0:41:8d:10:22: 92:00:4e:11:cf:7e:f8:13:a6:82:a4:db:ad:ec:7e:ae:3a:53: e5:2b:b1:c5:5d:58:f3:27:a2:3b:2d:38:9b:e4:bd:8d:74:60: 12:b7:cf:73:5b:d8:c3:91:8a:84:2e:b4:b4:48:d8:b3:ab:e3: c5:a1:ae:c0:59:bc:7b:ac:ab:c1:66:e9:d0:c4:f6:35:20:24: 5c:f5:d6:e8:c0:c0:92:19:39:36:33:71:e1:2e:e5:b9:26:84: 8d:67:9e:ae:ab:31:e6:77:ac:3e:e1:f9:d1:e4:06:18:e0:c3: b5:c5:17:d3:26:7a:1d:1e:ba:61:40:6c:13:11:e9:38:75:ba: f1:17:21:25:de:7e:d1:a6:52:e3:1e:28:3b:31:dc:9c:0c:dc: f7:54:5a:38:94:66:f2:83:8e:cc:82:34:5b:f0:c1:95:53:74: c7:8a:02:89:f8:c7:a0:27:4d:c7:ca:b0:68:42:09:9a:d1:89: c7:01:c7:2e:35:c8:18:3d:10:dd:7d:e8:0c:75:a4:52:07:b6: f0:3d:c2:43:01:9b:73:80:c4:1e:59:31:58:8d:f4:bb:0b:35: 96:2c:c0:25:6d:90:21:c3:9d:5e:fa:12:00:07:0e:db:4d:9f: 97:df:4d:6e -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt3WN7Ci0fjXTpUoDbMoQSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1 ODg4MjcwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTk4ZmE0M2E3NWIzNzBiYjBjZmY2ZjgyZTI2MWI2MjNiN2JiMzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGEhd2D31/Ehl/CKz0+3zkA2troU X9V9texsPKQyy76arP0Pqd02p0pKceB+Im2Sajgquid968b/yGMoSa//Dcemcd+1 NovudwS9LXIQ0AcypXcZAZhaQY7o+N7d+NOmCXD7BbC9N/6/vxDQ2xrwGKWKsMA9 b34QBKmMnCPs0bFmthxZq8fYAhKwi/NxuM7HId5w/km5CFryA78nfyFQgmeYAy+F oCl4Fpt/2u3Mvlj7hrne7qaBBfFj4lkCzJ8XNHiuYdk7hNQ/Q9XgFWk8PqFCg1SW 5BRIzgR6AW7xe23dMQNyc1RfiVe0M4WRmwLyrkkdnFNZrymjeMqc6mjoiQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFEWY+kOnWzcLsM/2+C4mG2I7e7NEMB8GA1UdIwQY MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct OGNmNDFjYWZkY2UyLzEvUlpqNlE2ZGJOd3V3el9iNExpWWJZanQ3czBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQAWNYZAwQA W+RlAwQCwRjQAwQBwhigMBYEAgACMBADBwAgAQZ8LFgDBQEqABkQMA0GCSqGSIb3 DQEBCwUAA4IBAQCtlzghoW4hPZHiHY6OwEGNECKSAE4Rz374E6aCpNut7H6uOlPl K7HFXVjzJ6I7LTib5L2NdGASt89zW9jDkYqELrS0SNizq+PFoa7AWbx7rKvBZunQ xPY1ICRc9dbowMCSGTk2M3HhLuW5JoSNZ56uqzHmd6w+4fnR5AYY4MO1xRfTJnod HrphQGwTEek4dbrxFyEl3n7RplLjHig7MdycDNz3VFo4lGbyg47MgjRb8MGVU3TH igKJ+MegJ03HyrBoQgma0YnHAccuNcgYPRDdfegMdaRSB7bwPcJDAZtzgMQeWTFY jfS7CzWWLMAlbZAhw51e+hIABw7bTZ+X301u -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:46 2026 by rpki-client