This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/zFi2gp3SKU3c0S_naj_PpCRo6aU.roa File: zFi2gp3SKU3c0S_naj_PpCRo6aU.roa (raw, json) Hash identifier: /L5t/XoZ8kDLzebR3QIc1BMtvCbpTdiF6nGgxkPEo1Q= Subject key identifier: CC:58:B6:82:9D:D2:29:4D:DC:D1:2F:E7:6A:3F:CF:A4:24:68:E9:A5 Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019B77C7724AECCAA1B61D09565EC6630A53 Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/zFi2gp3SKU3c0S_naj_PpCRo6aU.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207105 IP address blocks: 194.92.53.0/24 maxlen: 24 2a0a:3a40:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:72:4a:ec:ca:a1:b6:1d:09:56:5e:c6:63:0a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc58b6829dd2294ddcd12fe76a3fcfa42468e9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:b7:7b:67:6a:88:8b:40:61:7d:1a:ce:0a: a4:1b:b2:53:36:6d:6b:18:3c:24:44:85:c5:67:10: c5:89:26:04:16:0b:21:d1:c3:32:32:ad:f8:52:6b: 59:7f:99:91:ba:28:67:93:68:07:3a:cb:aa:b7:d1: 95:c0:47:45:a2:46:2a:af:de:89:dc:75:2d:79:1b: a6:74:b2:68:c0:6d:5e:7d:30:7e:22:a0:a5:36:5e: 35:66:8b:a8:d0:e2:22:0b:38:27:2a:95:fc:cc:e9: e3:15:30:7e:f4:1d:3f:d0:b4:24:90:8b:3a:3d:a5: 12:62:12:5a:92:4a:60:7f:a4:ca:54:e9:0a:17:f0: b8:30:fc:71:50:8e:de:48:52:df:87:94:d5:b2:ad: 59:28:7c:a0:2f:e6:e1:b0:73:48:e1:19:28:93:22: df:2d:04:15:fd:c9:41:9e:e1:80:bc:c5:56:35:f4: a3:86:54:71:9a:8f:d9:9e:90:49:70:2b:c8:a7:20: 74:8a:57:c1:f7:fc:cf:71:92:d1:85:1c:df:ba:06: 96:6e:9a:11:88:de:c5:cf:19:75:b9:bf:09:a3:80: 42:88:b9:83:99:5a:14:66:a2:24:c0:6d:ae:0c:e4: 73:27:0b:d5:c0:ff:c3:f3:37:28:67:da:e9:ec:72: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:58:B6:82:9D:D2:29:4D:DC:D1:2F:E7:6A:3F:CF:A4:24:68:E9:A5 X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/zFi2gp3SKU3c0S_naj_PpCRo6aU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.92.53.0/24 IPv6: 2a0a:3a40:1005::/48 Signature Algorithm: sha256WithRSAEncryption 50:53:ad:fd:b5:a2:c7:00:c8:b5:4e:c9:61:6d:75:9c:bb:ff: 45:26:7e:0a:67:7f:7b:45:59:89:6e:74:38:9a:61:d4:5d:3b: 5e:49:b8:97:69:d1:79:99:2c:05:48:03:5f:c2:9f:36:11:2f: 70:33:db:d6:9e:c3:22:26:62:44:f8:f0:23:47:cb:e2:d4:2d: 91:c2:a7:09:f3:ad:a4:16:09:4c:b0:c4:37:a1:3f:02:9e:31: d1:33:e3:61:1f:6b:3e:4a:72:2f:06:39:60:99:23:cb:b9:b2: 28:7f:91:89:1d:10:7c:bb:2c:b6:27:fe:75:c0:fc:c7:6f:0a: 6a:c1:89:2f:b2:38:8c:17:3c:b5:94:b1:c1:a3:30:fb:1b:9a: ca:24:86:33:35:82:ef:8b:22:af:a8:da:5b:c4:61:5a:16:be: 4e:2d:d2:3a:5a:ed:73:22:d5:7c:f9:0f:cd:7d:4e:2e:c9:d7: 02:a3:b1:17:56:af:01:38:54:52:2c:ad:95:80:35:47:d0:5d: 58:83:1f:f3:ae:08:51:63:37:13:2b:cb:a1:cc:c8:2a:d5:66: 1a:d9:48:24:06:50:b7:f0:87:c6:58:82:10:65:a3:fd:2e:19: f1:5e:41:e2:8e:09:b6:48:02:13:be:a0:e7:74:8b:35:3d:46: da:3b:78:b4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3x3JK7Mqhth0JVl7GYwpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzU4YjY4MjlkZDIyOTRkZGNkMTJmZTc2YTNmY2ZhNDI0NjhlOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5W3e2dqiItAYX0azgqkG7JTNm1r GDwkRIXFZxDFiSYEFgsh0cMyMq34UmtZf5mRuihnk2gHOsuqt9GVwEdFokYqr96J 3HUteRumdLJowG1efTB+IqClNl41Zouo0OIiCzgnKpX8zOnjFTB+9B0/0LQkkIs6 PaUSYhJakkpgf6TKVOkKF/C4MPxxUI7eSFLfh5TVsq1ZKHygL+bhsHNI4RkokyLf LQQV/clBnuGAvMVWNfSjhlRxmo/ZnpBJcCvIpyB0ilfB9/zPcZLRhRzfugaWbpoR iN7Fzxl1ub8Jo4BCiLmDmVoUZqIkwG2uDORzJwvVwP/D8zcoZ9rp7HKbnwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMxYtoKd0ilN3NEv52o/z6QkaOmlMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvekZpMmdwM1NLVTNjMFNfbmFqX1BwQ1JvNmFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwlw1MA8E AgACMAkDBwAqCjpAEAUwDQYJKoZIhvcNAQELBQADggEBAFBTrf21oscAyLVOyWFt dZy7/0Umfgpnf3tFWYludDiaYdRdO15JuJdp0XmZLAVIA1/CnzYRL3Az29aewyIm YkT48CNHy+LULZHCpwnzraQWCUywxDehPwKeMdEz42Efaz5Kci8GOWCZI8u5sih/ kYkdEHy7LLYn/nXA/MdvCmrBiS+yOIwXPLWUscGjMPsbmsokhjM1gu+LIq+o2lvE YVoWvk4t0jpa7XMi1Xz5D819Ti7J1wKjsRdWrwE4VFIsrZWANUfQXViDH/OuCFFj NxMry6HMyCrVZhrZSCQGULfwh8ZYghBlo/0uGfFeQeKOCbZIAhO+oOd0izU9Rto7 eLQ= -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:04 2026 by rpki-client