This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZpCDv-IPaw69m4sk0TK2KPm-ndM.roa File: ZpCDv-IPaw69m4sk0TK2KPm-ndM.roa (raw, json) Hash identifier: etHaUkMU+XjMtfrqPFkiht6ZgWmyGWQ4RwgzJrY7abA= Subject key identifier: 66:90:83:BF:E2:0F:6B:0E:BD:9B:8B:24:D1:32:B6:28:F9:BE:9D:D3 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE6E212DD6029DC1E2E033A9A019BA Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZpCDv-IPaw69m4sk0TK2KPm-ndM.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214083 IP address blocks: 87.229.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6e:21:2d:d6:02:9d:c1:e2:e0:33:a9:a0:19:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=669083bfe20f6b0ebd9b8b24d132b628f9be9dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:2c:ed:ef:5c:c3:f0:3b:ae:11:a6:d4:7c: 26:b8:76:12:7b:c9:a5:5a:aa:da:ab:dc:db:46:7a: 8f:83:76:c6:58:99:b7:3c:4d:40:66:da:95:fb:4f: 3d:d3:d0:2d:f0:61:ac:36:a9:8d:53:6d:cf:d5:34: ff:9e:af:5a:14:a8:b0:45:54:01:d2:11:40:ab:ce: ec:5a:7f:18:5e:99:ae:63:51:12:ea:dc:c0:03:a4: 9b:e5:e3:f3:2a:a9:ec:b3:2c:3a:01:3f:83:e2:8b: e2:6d:c8:dc:d8:72:10:6d:9a:7b:ed:77:67:95:6f: b6:b7:b7:ef:eb:32:ff:2b:a5:74:62:02:8b:b6:a7: 44:94:c3:f6:88:5e:0c:e6:51:83:04:81:4e:8f:d8: 7f:8b:ec:68:dd:21:12:8c:f1:2d:8b:cf:26:d7:a9: 10:0d:d7:e1:c1:58:89:b6:aa:3a:91:c4:45:90:1e: ad:f1:a7:c6:f2:33:f7:3e:8f:3b:f1:d5:27:92:11: 6c:e6:ee:47:c1:41:65:98:72:31:4a:16:1f:ed:6e: be:f7:02:d0:ac:54:43:3e:67:24:18:1b:f5:5a:38: 2e:59:e2:10:e1:b4:79:9d:f3:90:11:10:1d:65:aa: 80:12:0e:53:f4:bd:66:82:de:ed:f2:8c:7f:5a:48: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:90:83:BF:E2:0F:6B:0E:BD:9B:8B:24:D1:32:B6:28:F9:BE:9D:D3 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ZpCDv-IPaw69m4sk0TK2KPm-ndM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.22.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:3d:fd:2b:06:5c:55:35:1d:68:94:7f:84:76:56:cb:05:7e: ec:fe:b5:14:3c:2c:9e:71:bb:1e:ac:bd:3f:e2:22:11:e4:d2: 05:b9:f8:c0:87:e0:c3:54:21:b8:d2:86:97:a9:a0:00:a4:be: 09:de:f1:cc:63:0b:b4:17:03:cf:13:6f:64:20:01:6d:a9:16: df:12:93:8d:0f:ab:73:bc:35:52:4d:a0:90:98:86:03:87:37: 36:fc:a8:fd:b9:1d:62:e6:22:a1:a7:78:a6:0d:4d:b4:bb:84: 76:95:34:89:97:e3:f4:56:78:0f:ce:d5:55:e5:19:27:48:6a: 2c:63:4f:d2:96:ed:b2:3d:8f:6e:f0:1f:d4:71:3f:16:95:ce: 90:d3:56:f9:80:2a:16:97:0e:24:68:ac:91:c1:c2:74:18:95: 01:de:e3:ca:06:43:c4:56:be:b8:63:82:50:9f:98:e4:78:1d: fe:33:8f:06:d7:b5:47:e1:59:22:40:b5:cd:fb:fb:3f:98:10: 8c:bf:5c:db:e1:e5:f2:5d:bc:32:71:2d:72:69:07:64:7f:db: e1:d8:e9:83:82:7a:69:b2:d8:a9:98:e3:51:e1:91:d9:8d:38: b4:63:77:d1:ff:af:e4:dc:f9:f0:d7:50:7a:0e:f1:45:25:57: 03:a1:a1:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87m4hLdYCncHi4DOpoBm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjkwODNiZmUyMGY2YjBlYmQ5YjhiMjRkMTMyYjYyOGY5YmU5ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFEs7e9cw/A7rhGm1HwmuHYSe8ml Wqraq9zbRnqPg3bGWJm3PE1AZtqV+08909At8GGsNqmNU23P1TT/nq9aFKiwRVQB 0hFAq87sWn8YXpmuY1ES6tzAA6Sb5ePzKqnssyw6AT+D4ovibcjc2HIQbZp77Xdn lW+2t7fv6zL/K6V0YgKLtqdElMP2iF4M5lGDBIFOj9h/i+xo3SESjPEti88m16kQ DdfhwViJtqo6kcRFkB6t8afG8jP3Po878dUnkhFs5u5HwUFlmHIxShYf7W6+9wLQ rFRDPmckGBv1WjguWeIQ4bR5nfOQERAdZaqAEg5T9L1mgt7t8ox/WkhDywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGaQg7/iD2sOvZuLJNEytij5vp3TMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvWnBDRHYtSVBhdzY5bTRzazBUSzJLUG0tbmRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UWMA0G CSqGSIb3DQEBCwUAA4IBAQA/Pf0rBlxVNR1olH+EdlbLBX7s/rUUPCyecbserL0/ 4iIR5NIFufjAh+DDVCG40oaXqaAApL4J3vHMYwu0FwPPE29kIAFtqRbfEpOND6tz vDVSTaCQmIYDhzc2/Kj9uR1i5iKhp3imDU20u4R2lTSJl+P0VngPztVV5RknSGos Y0/Slu2yPY9u8B/UcT8Wlc6Q01b5gCoWlw4kaKyRwcJ0GJUB3uPKBkPEVr64Y4JQ n5jkeB3+M48G17VH4VkiQLXN+/s/mBCMv1zb4eXyXbwycS1yaQdkf9vh2OmDgnpp stipmONR4ZHZjTi0Y3fR/6/k3Pnw11B6DvFFJVcDoaHC -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:34 2026 by rpki-client