This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/zTtjoNNmqNJk4uedDe7ahXQuOF8.roa File: zTtjoNNmqNJk4uedDe7ahXQuOF8.roa (raw, json) Hash identifier: dHODXqFZoANMRWjrQgYBV+M06zr2Vxc9B/4+ABxunPA= Subject key identifier: CD:3B:63:A0:D3:66:A8:D2:64:E2:E7:9D:0D:EE:DA:85:74:2E:38:5F Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9 Certificate serial: 019B7A5A8FFAA76229BFA2847152C5B6278E Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/zTtjoNNmqNJk4uedDe7ahXQuOF8.roa Signing time: Thu 01 Jan 2026 16:18:33 +0000 ROA not before: Thu 01 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212582 IP address blocks: 31.14.183.0/24 maxlen: 24 195.138.55.0/24 maxlen: 24 2a14:9680::/29 maxlen: 48 2a14:9680:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8f:fa:a7:62:29:bf:a2:84:71:52:c5:b6:27:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd3b63a0d366a8d264e2e79d0deeda85742e385f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:53:28:c7:a2:43:b4:b6:83:67:fc:33:3f: 75:01:6d:fd:27:4a:f0:1d:2e:2c:cc:91:92:0c:96: 4d:af:8c:43:78:da:1a:f8:1c:b2:3b:14:8c:0c:45: 45:7c:18:ed:be:0b:f3:8b:2b:56:ca:b9:85:a3:88: 74:c2:fd:df:30:16:24:42:17:a0:19:83:b4:37:b4: c7:3f:87:1c:5e:b9:b1:ad:5d:23:42:50:59:5b:39: 4d:c1:74:5c:e5:f5:c5:4f:ca:a0:87:86:70:89:ca: 44:a9:98:ff:95:66:8f:b4:55:a4:62:0f:af:6b:e3: a1:fa:0b:dc:2b:89:d6:21:96:08:99:87:6a:61:b8: 64:6d:a4:77:65:ce:b9:ef:f0:55:c1:fa:20:9b:44: 8d:e7:6f:10:b6:9f:1e:24:25:77:9f:ac:89:38:b1: 47:73:ff:1d:cd:05:8d:95:bc:70:5e:98:67:f3:32: 88:4d:ed:73:69:eb:e3:49:ec:f0:eb:95:db:4e:f1: a6:9c:98:16:67:05:91:11:d0:49:6b:ee:d8:96:5b: 58:6f:fa:22:3a:ba:e7:7c:da:77:94:2b:75:b5:aa: 16:6e:49:37:3e:fc:ff:fd:9e:b8:9b:65:1f:da:d3: 20:84:4b:ed:18:98:6d:0e:f4:86:07:29:18:fe:5e: d6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3B:63:A0:D3:66:A8:D2:64:E2:E7:9D:0D:EE:DA:85:74:2E:38:5F X509v3 Authority Key Identifier: keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/zTtjoNNmqNJk4uedDe7ahXQuOF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.183.0/24 195.138.55.0/24 IPv6: 2a14:9680::/29 Signature Algorithm: sha256WithRSAEncryption 11:51:dd:ef:0f:02:e8:79:53:38:d6:bf:48:de:b1:a2:43:4a: 93:6e:6a:b5:f7:6b:48:46:98:ae:5c:39:9a:c5:94:02:5c:83: 62:7b:e4:f5:a2:d2:a9:2a:15:33:67:cc:ed:de:4d:32:46:31: 44:13:80:63:7e:57:0a:4d:83:0c:8f:be:d2:97:be:ad:80:a9: b2:75:01:b4:d2:3c:46:65:91:7c:d8:48:68:8f:33:dc:50:85: 52:3b:99:1e:18:31:da:dd:ed:7f:56:f2:5a:f9:69:05:fb:32: 8a:62:02:2a:b7:f8:fa:1b:97:2d:27:62:f9:25:7d:eb:36:36: 66:f0:00:ca:67:73:5e:31:e2:06:b3:37:ff:1f:d1:0b:e2:8d: d2:54:c7:20:64:f5:fe:ff:3a:a7:f5:b1:87:8c:fe:2c:75:c6: 4e:03:47:a3:09:34:65:74:04:b6:92:61:3b:84:eb:6c:74:54: 49:da:a8:29:2f:39:9a:68:72:50:49:ba:7c:d9:75:53:ee:4b: 0a:93:89:51:d4:24:85:db:6a:77:52:6f:a0:22:15:1f:3d:99: 38:28:14:b4:d8:46:2e:0a:d4:86:a3:83:93:a9:2c:a9:db:1a: a3:13:41:e7:a8:8a:97:c3:81:a4:a8:bc:66:54:cb:59:6c:31: c7:3a:96:35 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6Wo/6p2Ipv6KEcVLFtieOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNWUyZWVhZTgyZWVmOWI2NTdmZTI3OTUyNjcyNjEwMjBm OTQ0YzkwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDNiNjNhMGQzNjZhOGQyNjRlMmU3OWQwZGVlZGE4NTc0MmUzODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHFTKMeiQ7S2g2f8Mz91AW39J0rw HS4szJGSDJZNr4xDeNoa+ByyOxSMDEVFfBjtvgvziytWyrmFo4h0wv3fMBYkQheg GYO0N7THP4ccXrmxrV0jQlBZWzlNwXRc5fXFT8qgh4ZwicpEqZj/lWaPtFWkYg+v a+Oh+gvcK4nWIZYImYdqYbhkbaR3Zc657/BVwfogm0SN528Qtp8eJCV3n6yJOLFH c/8dzQWNlbxwXphn8zKITe1zaevjSezw65XbTvGmnJgWZwWREdBJa+7YlltYb/oi OrrnfNp3lCt1taoWbkk3Pvz//Z64m2Uf2tMghEvtGJhtDvSGBykY/l7WswIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFM07Y6DTZqjSZOLnnQ3u2oV0LjhfMB8GA1UdIwQY MBaAFPteLuroLu+bZX/ieVJnJhAg+UTJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0xNHU2dWd1NzV0bGYtSjVVbWNtRUNENVJNay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvY2MwNjkyLWNjOTktNDU0NS1iYzUw LWVhZjNkZGIwYTFiYi8xL3pUdGpvTk5tcU5KazR1ZWREZTdhaFhRdU9GOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTEvY2MwNjkyLWNjOTktNDU0NS1iYzUwLWVhZjNkZGIwYTFi Yi8xLzEtMTR1NnVndTc1dGxmLUo1VW1jbUVDRDVSTWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAAfDrcD BADDijcwDQQCAAIwBwMFAyoUloAwDQYJKoZIhvcNAQELBQADggEBABFR3e8PAuh5 UzjWv0jesaJDSpNuarX3a0hGmK5cOZrFlAJcg2J75PWi0qkqFTNnzO3eTTJGMUQT gGN+VwpNgwyPvtKXvq2AqbJ1AbTSPEZlkXzYSGiPM9xQhVI7mR4YMdrd7X9W8lr5 aQX7MopiAiq3+Pobly0nYvklfes2NmbwAMpnc14x4gazN/8f0QvijdJUxyBk9f7/ Oqf1sYeM/ix1xk4DR6MJNGV0BLaSYTuE62x0VEnaqCkvOZpoclBJunzZdVPuSwqT iVHUJIXbandSb6AiFR89mTgoFLTYRi4K1Iajg5OpLKnbGqMTQeeoipfDgaSovGZU y1lsMcc6ljU= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:55 2026 by rpki-client