This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/zKoO5N0Xde31g6einHu-u8mKxP0.roa File: zKoO5N0Xde31g6einHu-u8mKxP0.roa (raw, json) Hash identifier: ZHyWCaL+XhAGx1oXwiaExRlIOLzsM3fXIwqOP0WA1vE= Subject key identifier: CC:AA:0E:E4:DD:17:75:ED:F5:83:A7:A2:9C:7B:BE:BB:C9:8A:C4:FD Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758F117DDD64BA17C3B1E2FE66F49B1 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/zKoO5N0Xde31g6einHu-u8mKxP0.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31608 IP address blocks: 188.114.70.0/23 maxlen: 24 188.114.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f1:17:dd:d6:4b:a1:7c:3b:1e:2f:e6:6f:49:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccaa0ee4dd1775edf583a7a29c7bbebbc98ac4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fa:0e:40:df:46:de:40:bf:d0:13:01:1b:b8: f3:c8:06:ad:6c:fa:26:53:49:a2:77:1d:70:d7:71: d2:58:c1:d8:28:39:12:47:50:99:d9:45:e9:08:76: 23:4f:6e:11:e3:36:fe:e9:d5:26:e5:28:ca:74:7a: 59:d5:cf:4a:ec:b3:53:1b:90:ac:91:d9:74:08:c2: 64:f2:2b:dc:60:2f:ab:d9:7c:fb:03:90:6e:12:d3: 6a:95:34:3c:6a:49:55:ee:96:6e:96:9a:2b:47:be: e5:a4:aa:bc:41:d3:97:ee:82:6f:af:ed:85:bd:b2: 70:ed:45:2f:00:43:a6:dc:96:5a:66:60:31:74:fe: 7d:f0:a8:d5:14:f7:c9:6c:89:c8:31:ed:b0:2d:aa: c3:01:86:84:f2:cd:98:db:0c:2c:fc:23:52:6e:63: 25:f1:40:f9:7a:c7:6f:11:f7:7f:c7:32:34:af:2e: 05:ed:27:f4:70:e6:30:7f:05:02:35:67:45:f4:35: 56:d6:53:5f:49:9a:d0:02:a3:d3:d4:ae:af:c9:a4: 14:e1:d6:fd:a5:64:fa:f1:be:2c:a2:1f:17:53:d6: 41:fe:2d:d3:45:3a:37:c5:0c:c8:3d:30:82:7e:34: b1:5a:24:55:a7:15:ee:80:60:1e:7b:8d:00:bb:bd: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AA:0E:E4:DD:17:75:ED:F5:83:A7:A2:9C:7B:BE:BB:C9:8A:C4:FD X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/zKoO5N0Xde31g6einHu-u8mKxP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.114.70.0-188.114.75.255 Signature Algorithm: sha256WithRSAEncryption 0b:5f:87:7b:a8:8f:36:4a:3b:ff:49:12:42:09:12:03:ed:1e: f3:cc:91:a1:de:36:0d:a5:e4:26:28:7f:e5:c5:f0:6f:40:e0: 5b:76:fd:e9:65:3b:8a:af:2b:fc:11:23:52:75:5a:f8:ec:00: 9a:e1:6d:02:0a:55:40:10:04:8c:9f:ff:ca:ac:72:16:4b:12: cc:6a:75:59:38:01:c1:5f:79:d9:6c:82:16:3b:34:4e:5a:f9: e0:2e:7c:bb:9e:8f:32:2d:9b:26:cb:85:cd:1e:48:04:f0:3d: a4:0f:8b:5d:03:42:75:85:32:49:12:14:0d:e4:dc:69:51:20: b1:a9:40:fe:b1:e2:b0:87:20:57:c1:25:ef:c7:b6:77:85:75: 1a:e4:63:6d:0a:68:63:8d:f9:37:b8:4b:96:48:bc:20:44:dd: 39:03:cb:ca:f6:a6:7c:12:d1:2e:d2:14:55:e0:10:e6:91:8a: 9c:5b:90:83:93:17:f5:f0:51:e5:03:2f:dc:ca:31:3d:e6:12: 7c:9e:21:4b:0a:25:2a:99:bc:a4:0e:6a:fa:2e:3c:a4:8b:0a: ce:aa:b4:ff:b7:dd:21:d7:84:88:2e:e3:0c:8f:18:15:99:e5: 8b:43:c8:fb:ae:b5:ae:22:fc:aa:11:df:16:ea:a7:15:b5:7a: 38:ec:61:29 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WPEX3dZLoXw7Hi/mb0mxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2FhMGVlNGRkMTc3NWVkZjU4M2E3YTI5YzdiYmViYmM5OGFjNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6foOQN9G3kC/0BMBG7jzyAatbPom U0midx1w13HSWMHYKDkSR1CZ2UXpCHYjT24R4zb+6dUm5SjKdHpZ1c9K7LNTG5Cs kdl0CMJk8ivcYC+r2Xz7A5BuEtNqlTQ8aklV7pZulporR77lpKq8QdOX7oJvr+2F vbJw7UUvAEOm3JZaZmAxdP598KjVFPfJbInIMe2wLarDAYaE8s2Y2wws/CNSbmMl 8UD5esdvEfd/xzI0ry4F7Sf0cOYwfwUCNWdF9DVW1lNfSZrQAqPT1K6vyaQU4db9 pWT68b4soh8XU9ZB/i3TRTo3xQzIPTCCfjSxWiRVpxXugGAee40Au702IQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMyqDuTdF3Xt9YOnopx7vrvJisT9MB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvektvTzVOMFhkZTMxZzZlaW5IdS11OG1LeFAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAG8ckYD BAK8ckgwDQYJKoZIhvcNAQELBQADggEBAAtfh3uojzZKO/9JEkIJEgPtHvPMkaHe Ng2l5CYof+XF8G9A4Ft2/ellO4qvK/wRI1J1WvjsAJrhbQIKVUAQBIyf/8qschZL EsxqdVk4AcFfedlsghY7NE5a+eAufLuejzItmybLhc0eSATwPaQPi10DQnWFMkkS FA3k3GlRILGpQP6x4rCHIFfBJe/HtneFdRrkY20KaGON+Te4S5ZIvCBE3TkDy8r2 pnwS0S7SFFXgEOaRipxbkIOTF/XwUeUDL9zKMT3mEnyeIUsKJSqZvKQOavouPKSL Cs6qtP+33SHXhIgu4wyPGBWZ5YtDyPuuta4i/KoR3xbqpxW1ejjsYSk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:43 2026 by rpki-client