This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa File: ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa (raw, json) Hash identifier: 6GJHppVcWVXgDv6JkXYDCys38/Oyzd7ZRUn3j/wIDXU= Subject key identifier: 64:14:62:26:3E:32:2A:3A:7A:C4:4E:E1:82:43:6A:E1:C4:1D:3C:B4 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019B7C8064956F0D1835BB8952E31D00689B Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212258 IP address blocks: 188.247.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:64:95:6f:0d:18:35:bb:89:52:e3:1d:00:68:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=641462263e322a3a7ac44ee182436ae1c41d3cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3e:fc:a6:96:34:71:3e:27:5e:82:91:32:c2: 2f:10:ff:e9:7c:8b:cb:22:a0:5d:ab:b1:e2:20:d7: 1b:f6:22:23:31:11:79:c7:cc:06:ca:df:8d:8e:17: e2:55:51:28:5f:81:db:f1:ec:79:7d:e8:60:c7:02: 5a:c9:3f:45:61:c3:49:70:d9:e0:eb:03:7f:32:d4: 7c:d2:19:8b:7e:e1:b4:22:1c:75:5c:bd:89:14:4f: 53:50:62:1b:ce:6c:74:bf:92:30:c1:c5:2c:ff:d6: 4c:3f:e8:00:1b:91:ce:ed:f0:87:96:cd:79:be:19: 05:74:b1:17:3c:13:a8:02:9e:35:61:e3:27:95:7d: 27:12:5d:c2:54:29:cd:0c:b3:65:d6:01:ac:87:65: 5a:53:b7:4b:e1:65:28:bc:dd:c7:ea:4a:de:e6:c0: ad:da:00:d9:9c:5d:0b:af:80:ac:12:d5:49:fc:67: 21:d9:92:40:2c:d3:53:4b:8b:af:ae:9f:ab:00:bd: fd:f8:cf:c1:24:0f:fa:bc:4c:34:f4:49:0f:cd:7e: fe:85:25:bb:84:e8:de:98:40:e8:d3:3d:ee:23:21: d0:f9:32:da:27:3f:b1:1e:8b:5a:df:17:1a:d8:87: 7f:e7:27:b4:b7:3f:25:a5:46:0a:3d:b4:02:4c:97: c8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:14:62:26:3E:32:2A:3A:7A:C4:4E:E1:82:43:6A:E1:C4:1D:3C:B4 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.247.236.0/24 Signature Algorithm: sha256WithRSAEncryption a9:2a:59:84:c4:12:29:37:e0:fe:85:01:c6:db:2b:7a:24:8d: 30:af:05:bc:3b:6d:54:b0:4e:92:e7:9d:30:c2:96:74:36:82: a0:21:11:55:ee:6c:7d:02:31:a5:bc:da:85:8d:38:37:ef:8c: 6d:f7:bf:2b:3f:bd:40:58:60:b2:d2:4c:63:e1:60:51:3f:19: 3d:e2:6b:71:89:6a:00:55:93:c1:b2:2d:1a:0e:1c:00:ad:05: 50:19:28:0e:1e:56:c8:e0:b5:ba:5d:4b:b5:b6:a6:8b:87:04: 7e:35:7c:67:ae:52:5a:75:96:fb:13:4c:00:b2:0f:17:51:0d: 51:d9:bf:ba:2c:cc:20:69:c9:0c:21:da:40:b4:69:a1:da:eb: fa:c5:35:94:d2:29:26:b3:d6:93:d5:0a:a0:47:55:42:e1:f3: 9f:a2:d0:96:3e:8e:95:a3:c5:ea:69:db:89:7f:9b:01:d5:3a: 4a:08:d7:19:c2:16:d0:e9:62:65:4d:30:bc:88:02:2f:77:03: 62:6d:ab:01:27:40:cd:ad:fc:4b:22:7e:c5:85:78:ae:5b:e8: a2:ce:ce:28:d7:02:e6:19:a6:8f:50:f6:fa:f9:a4:6d:37:8d: 8c:f5:f0:c7:e5:22:35:41:23:43:06:b3:1d:21:5d:e0:28:25: ae:33:86:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGSVbw0YNbuJUuMdAGibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDE0NjIyNjNlMzIyYTNhN2FjNDRlZTE4MjQzNmFlMWM0MWQzY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij78ppY0cT4nXoKRMsIvEP/pfIvL IqBdq7HiINcb9iIjMRF5x8wGyt+NjhfiVVEoX4Hb8ex5fehgxwJayT9FYcNJcNng 6wN/MtR80hmLfuG0Ihx1XL2JFE9TUGIbzmx0v5IwwcUs/9ZMP+gAG5HO7fCHls15 vhkFdLEXPBOoAp41YeMnlX0nEl3CVCnNDLNl1gGsh2VaU7dL4WUovN3H6kre5sCt 2gDZnF0Lr4CsEtVJ/Gch2ZJALNNTS4uvrp+rAL39+M/BJA/6vEw09EkPzX7+hSW7 hOjemEDo0z3uIyHQ+TLaJz+xHota3xca2Id/5ye0tz8lpUYKPbQCTJfI3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQUYiY+Mio6esRO4YJDauHEHTy0MB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvWkJSaUpqNHlLanA2eEU3aGdrTnE0Y1FkUExRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPfsMA0G CSqGSIb3DQEBCwUAA4IBAQCpKlmExBIpN+D+hQHG2yt6JI0wrwW8O21UsE6S550w wpZ0NoKgIRFV7mx9AjGlvNqFjTg374xt978rP71AWGCy0kxj4WBRPxk94mtxiWoA VZPBsi0aDhwArQVQGSgOHlbI4LW6XUu1tqaLhwR+NXxnrlJadZb7E0wAsg8XUQ1R 2b+6LMwgackMIdpAtGmh2uv6xTWU0ikms9aT1QqgR1VC4fOfotCWPo6Vo8XqaduJ f5sB1TpKCNcZwhbQ6WJlTTC8iAIvdwNibasBJ0DNrfxLIn7FhXiuW+iizs4o1wLm GaaPUPb6+aRtN42M9fDH5SI1QSNDBrMdIV3gKCWuM4Zj -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:21 2026 by rpki-client