This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/z7k8kovlPmv-zBHmb4FIXdtjtc4.roa File: z7k8kovlPmv-zBHmb4FIXdtjtc4.roa (raw, json) Hash identifier: 34UjHgoDLPq5cVz9xOQp030/8J4AwYYZjM3LuMub1Pg= Subject key identifier: CF:B9:3C:92:8B:E5:3E:6B:FE:CC:11:E6:6F:81:48:5D:DB:63:B5:CE Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019B77C773008EDE33EEF54266622032E1A9 Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/z7k8kovlPmv-zBHmb4FIXdtjtc4.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209077 IP address blocks: 194.92.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:73:00:8e:de:33:ee:f5:42:66:62:20:32:e1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfb93c928be53e6bfecc11e66f81485ddb63b5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:f3:63:55:67:88:18:01:22:eb:84:a2:1e: 2d:75:dc:42:d0:fc:e0:77:be:80:df:bc:5b:e0:eb: fe:3b:c1:49:29:cd:25:43:18:e5:5b:bf:b8:39:78: 80:57:fc:c9:50:e0:9f:b6:fd:63:a6:f6:03:18:96: 96:fe:2c:af:f5:6f:b7:67:a4:b0:f0:10:dc:f4:2c: 50:9f:df:1f:54:46:b2:31:b5:60:3b:e5:51:1f:aa: 3d:bf:df:49:62:23:ec:8e:16:5a:3f:47:32:3d:b2: 66:de:51:07:f8:c8:fe:05:35:e0:a0:25:a6:d4:5b: a3:6e:85:c8:17:f4:9e:6c:f0:ed:f2:87:30:f1:3b: b8:09:75:9c:19:b9:c1:7c:7e:63:47:3f:d3:73:9e: b1:b6:96:c5:0c:ad:8d:42:e3:8a:7e:df:3f:59:8e: 7c:d3:1e:c2:5d:40:49:6b:3d:d1:9c:2f:79:25:0d: 9b:78:32:61:f1:ec:d2:32:e5:ad:30:9a:e3:0a:8d: 25:64:b4:c5:2b:ad:3c:00:f1:ab:b0:cf:70:08:7d: 66:c2:2a:27:3d:98:82:a1:ee:f4:29:0d:c9:03:16: b5:ec:9d:d2:98:d4:a4:6d:15:42:45:e5:f7:ee:f2: f2:ce:02:25:06:53:8f:f5:28:88:f5:4f:36:01:35: e5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B9:3C:92:8B:E5:3E:6B:FE:CC:11:E6:6F:81:48:5D:DB:63:B5:CE X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/z7k8kovlPmv-zBHmb4FIXdtjtc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.92.78.0/24 Signature Algorithm: sha256WithRSAEncryption 83:ab:4b:cc:ff:d5:18:fc:e7:bc:5a:76:da:61:f7:8e:fc:8f: 7f:56:f9:3b:cb:ac:84:48:d8:e7:86:28:8a:85:92:62:12:b4: bc:7f:57:ab:28:fd:b3:cc:04:3f:02:1a:7e:43:af:f8:ec:10: b0:4b:0c:7f:34:aa:6f:a9:f2:0d:35:ff:0d:07:c5:70:48:e8: f4:6c:96:52:c1:c6:80:03:19:2f:d6:ba:6d:99:5e:88:4c:b7: 7d:f3:29:17:f0:7d:be:c0:af:8a:a6:10:7e:82:a2:ab:7b:05: 9e:c8:39:bc:de:3f:d5:05:5d:b5:d1:42:6f:20:e7:2b:9f:8f: fa:31:67:0e:c5:c6:0f:3f:ac:9f:4a:d2:c6:e4:e1:ce:61:4a: a7:ca:66:02:06:2b:f1:73:e3:83:b8:16:45:7c:2b:26:a6:7e: 88:2b:70:30:c0:4e:17:89:8c:c4:82:b0:77:2b:ec:db:83:f0: d7:b9:5c:14:e0:1a:32:01:5e:e0:47:77:79:cf:70:70:37:d3: e0:93:bf:a7:7c:d2:97:c2:fc:c5:70:fc:fd:6f:2d:0f:99:55: ec:c0:62:82:58:5f:61:9b:ff:e2:ba:b9:77:dc:c9:30:e6:eb: 0f:c9:19:1d:82:75:ef:5b:a0:6b:70:e4:cd:03:f2:65:2f:ad: ea:e7:0f:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3MAjt4z7vVCZmIgMuGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmI5M2M5MjhiZTUzZTZiZmVjYzExZTY2ZjgxNDg1ZGRiNjNiNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvErzY1VniBgBIuuEoh4tddxC0Pzg d76A37xb4Ov+O8FJKc0lQxjlW7+4OXiAV/zJUOCftv1jpvYDGJaW/iyv9W+3Z6Sw 8BDc9CxQn98fVEayMbVgO+VRH6o9v99JYiPsjhZaP0cyPbJm3lEH+Mj+BTXgoCWm 1FujboXIF/SebPDt8ocw8Tu4CXWcGbnBfH5jRz/Tc56xtpbFDK2NQuOKft8/WY58 0x7CXUBJaz3RnC95JQ2beDJh8ezSMuWtMJrjCo0lZLTFK608APGrsM9wCH1mwion PZiCoe70KQ3JAxa17J3SmNSkbRVCReX37vLyzgIlBlOP9SiI9U82ATXlbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM+5PJKL5T5r/swR5m+BSF3bY7XOMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvejdrOGtvdmxQbXYtekJIbWI0RklYZHRqdGM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlxOMA0G CSqGSIb3DQEBCwUAA4IBAQCDq0vM/9UY/Oe8WnbaYfeO/I9/Vvk7y6yESNjnhiiK hZJiErS8f1erKP2zzAQ/Ahp+Q6/47BCwSwx/NKpvqfINNf8NB8VwSOj0bJZSwcaA Axkv1rptmV6ITLd98ykX8H2+wK+KphB+gqKrewWeyDm83j/VBV210UJvIOcrn4/6 MWcOxcYPP6yfStLG5OHOYUqnymYCBivxc+ODuBZFfCsmpn6IK3AwwE4XiYzEgrB3 K+zbg/DXuVwU4BoyAV7gR3d5z3BwN9Pgk7+nfNKXwvzFcPz9by0PmVXswGKCWF9h m//iurl33Mkw5usPyRkdgnXvW6BrcOTNA/JlL63q5w/M -----END CERTIFICATE-----Generated at Mon Jan 26 14:07:57 2026 by rpki-client