This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/Z_dqpDR46U8a06PlLNjM5vLBW6g.roa File: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (raw, json) Hash identifier: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E= Subject key identifier: 67:F7:6A:A4:34:78:E9:4F:1A:D3:A3:E5:2C:D8:CC:E6:F2:C1:5B:A8 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED25328B1868141DB0688F9616202C Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/Z_dqpDR46U8a06PlLNjM5vLBW6g.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213055 IP address blocks: 94.188.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:25:32:8b:18:68:14:1d:b0:68:8f:96:16:20:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67f76aa43478e94f1ad3a3e52cd8cce6f2c15ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a1:e2:5c:85:a9:9d:bd:85:8e:2c:9e:d7:0a: 9b:a5:9d:5e:39:b5:a6:e9:52:56:20:b3:d9:72:b3: f2:92:2d:0e:51:0a:87:3b:1f:9e:33:2a:ca:86:fc: 10:9b:b7:d8:e4:d9:33:2d:73:66:e7:70:9a:c2:b7: 5a:e6:9d:27:e6:c3:af:b5:5a:92:cb:1f:2c:b2:38: 28:54:9b:e9:04:a9:10:a9:2b:19:5e:0d:ef:90:90: ca:9b:12:5c:83:ed:38:7f:22:58:71:37:09:8e:cc: f0:84:f7:89:fd:e5:a2:b6:03:f6:0f:de:89:15:77: 3b:1a:a1:10:3f:36:bb:d4:a8:89:f3:ab:6a:2c:b0: 87:a5:90:aa:41:5a:89:11:16:b4:cb:59:5f:ee:a1: 56:67:eb:2f:3f:3f:8f:ce:74:06:29:40:d3:d1:36: 3b:9d:1e:9b:6e:26:e7:cb:e7:4e:80:bc:b1:d8:76: bd:c1:56:89:da:1f:71:0a:62:1a:98:b9:6a:f3:15: 71:b8:42:c6:c2:2d:32:3c:22:e2:3e:de:cb:70:ea: 8f:6b:71:a1:00:37:98:50:ba:9a:4d:f2:5a:f9:7f: 38:39:30:42:e6:3e:71:38:94:df:5a:fd:d1:3f:07: 01:c1:90:32:79:36:9a:b1:8e:15:f6:0f:89:bb:43: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F7:6A:A4:34:78:E9:4F:1A:D3:A3:E5:2C:D8:CC:E6:F2:C1:5B:A8 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/Z_dqpDR46U8a06PlLNjM5vLBW6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.188.238.0/24 Signature Algorithm: sha256WithRSAEncryption 95:67:53:f3:f6:df:67:1c:0d:e4:ed:e5:5a:ba:8b:51:0d:fc: 2d:a1:74:f0:8c:f6:cb:a5:d5:a5:17:18:8b:6c:a5:f1:c4:f1: 37:67:c3:2d:c9:12:15:3a:df:b7:c2:b6:6c:72:f6:57:28:fb: 97:37:f3:c4:93:d6:d0:0d:cd:9d:f8:7e:6c:de:d4:10:9f:a5: c7:de:32:78:59:19:b0:b1:4e:18:34:a2:9b:de:d5:df:62:a9: 12:10:95:4a:db:52:9e:89:36:e7:73:ed:d2:21:df:cd:13:27: 26:cf:72:a0:1a:65:52:44:2b:cf:ec:59:c9:f4:66:75:f8:23: 5f:0d:34:9a:fe:65:53:fe:9e:84:5f:54:a8:ea:a9:3c:35:80: 8d:c4:fd:1d:6f:5c:8c:d2:c1:8b:8b:6f:26:5d:0c:7d:3e:82: 68:5f:e9:c4:5d:f7:c4:b0:5c:bf:a1:86:47:70:5b:8b:9e:ce: 4d:ec:c3:79:76:27:c1:0a:75:6d:9f:0b:fe:54:99:46:9c:a5: 6f:51:06:7d:e7:3a:da:9e:88:22:40:68:67:73:ba:9c:0b:2b: 9c:8d:77:89:b7:37:02:ca:1f:60:1a:7a:ce:75:cd:03:09:79: ee:56:6f:70:a3:a6:e8:2a:9d:e8:bd:d1:cd:3d:7f:d0:21:0f: 54:25:e5:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SUyixhoFB2waI+WFiAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2Y3NmFhNDM0NzhlOTRmMWFkM2EzZTUyY2Q4Y2NlNmYyYzE1YmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56HiXIWpnb2Fjiye1wqbpZ1eObWm 6VJWILPZcrPyki0OUQqHOx+eMyrKhvwQm7fY5NkzLXNm53Cawrda5p0n5sOvtVqS yx8ssjgoVJvpBKkQqSsZXg3vkJDKmxJcg+04fyJYcTcJjszwhPeJ/eWitgP2D96J FXc7GqEQPza71KiJ86tqLLCHpZCqQVqJERa0y1lf7qFWZ+svPz+PznQGKUDT0TY7 nR6bbibny+dOgLyx2Ha9wVaJ2h9xCmIamLlq8xVxuELGwi0yPCLiPt7LcOqPa3Gh ADeYULqaTfJa+X84OTBC5j5xOJTfWv3RPwcBwZAyeTaasY4V9g+Ju0NaXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGf3aqQ0eOlPGtOj5SzYzObywVuoMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvWl9kcXBEUjQ2VThhMDZQbExOak01dkxCVzZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrzuMA0G CSqGSIb3DQEBCwUAA4IBAQCVZ1Pz9t9nHA3k7eVauotRDfwtoXTwjPbLpdWlFxiL bKXxxPE3Z8MtyRIVOt+3wrZscvZXKPuXN/PEk9bQDc2d+H5s3tQQn6XH3jJ4WRmw sU4YNKKb3tXfYqkSEJVK21KeiTbnc+3SId/NEycmz3KgGmVSRCvP7FnJ9GZ1+CNf DTSa/mVT/p6EX1So6qk8NYCNxP0db1yM0sGLi28mXQx9PoJoX+nEXffEsFy/oYZH cFuLns5N7MN5difBCnVtnwv+VJlGnKVvUQZ95zranogiQGhnc7qcCyucjXeJtzcC yh9gGnrOdc0DCXnuVm9wo6boKp3ovdHNPX/QIQ9UJeXI -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:22 2026 by rpki-client