This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/zZWMiOPu0l0-QTvM4wjEdvA-aoo.roa File: zZWMiOPu0l0-QTvM4wjEdvA-aoo.roa (raw, json) Hash identifier: Q6wVapDbvRerj+SvzLlvvzSsU2lv+SpfGrd8Ly/8NlA= Subject key identifier: CD:95:8C:88:E3:EE:D2:5D:3E:41:3B:CC:E3:08:C4:76:F0:3E:6A:8A Certificate issuer: /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b Certificate serial: 019B79ED57B0A10FE4E111A224AD6719640C Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/zZWMiOPu0l0-QTvM4wjEdvA-aoo.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62537 IP address blocks: 185.94.24.0/22 maxlen: 22 185.94.24.0/23 maxlen: 23 185.94.24.0/24 maxlen: 24 185.94.26.0/23 maxlen: 23 185.94.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:57:b0:a1:0f:e4:e1:11:a2:24:ad:67:19:64:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd958c88e3eed25d3e413bcce308c476f03e6a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:5a:34:55:ec:0d:50:cb:a1:c9:fe:cf:ab: 4d:4b:c8:ab:f2:2c:df:56:51:04:88:5b:21:ea:73: 11:d2:41:41:40:49:f9:c3:69:c6:bf:dc:bf:97:e3: fa:f6:51:f0:77:78:b4:32:e4:2f:55:60:f6:2b:53: 94:60:45:8d:e3:d9:fa:19:1d:9a:73:3f:68:ef:b4: 1c:34:62:63:40:13:ea:dd:39:9e:6a:f0:ae:ab:e0: 67:60:74:35:4d:83:88:42:c3:43:44:a3:e0:7d:25: be:fa:e3:52:66:b3:9c:5d:61:24:c3:7c:ee:6b:3a: 2e:a1:15:ba:ca:e3:c3:6c:2d:5d:d1:7c:ab:ce:07: dd:7b:35:23:b0:fe:22:9f:99:f2:c8:9f:12:79:d6: 72:d2:6d:c5:12:26:3d:fc:cd:33:5a:9a:ed:6a:d9: 75:34:b7:38:a1:ff:f4:29:c5:7a:aa:00:57:11:bf: 80:87:5d:57:5c:09:b0:d5:c2:26:32:eb:c7:d8:c6: 23:80:c6:d9:c7:ca:9f:56:19:e3:d0:3e:89:b8:9b: 04:eb:97:2d:33:13:de:12:70:a5:0c:4e:5a:1d:21: 98:25:a5:c6:f7:68:62:42:d7:f6:65:c1:2c:c6:3c: d6:8c:82:73:63:19:69:57:d5:9c:3a:c9:f7:ae:ce: ca:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:95:8C:88:E3:EE:D2:5D:3E:41:3B:CC:E3:08:C4:76:F0:3E:6A:8A X509v3 Authority Key Identifier: keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/zZWMiOPu0l0-QTvM4wjEdvA-aoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.24.0/22 Signature Algorithm: sha256WithRSAEncryption 21:c9:65:62:35:74:b4:de:81:ac:40:a2:bc:cb:4d:a8:87:ce: fd:ea:e5:0b:0d:4d:b0:e0:0f:01:ff:71:a6:ec:77:13:1d:5f: b0:3f:dc:68:ac:04:ef:54:63:8e:ff:81:32:6e:33:1d:88:12: 34:f1:7a:cf:b3:c7:eb:01:bf:2c:4b:d6:05:95:97:d4:6f:45: f7:52:5e:4a:45:fe:78:d0:ee:87:68:5e:f3:91:6b:51:a6:a9: f8:09:31:2d:f8:c8:8a:1f:62:fa:ca:fb:ad:53:e4:ec:b9:7a: 2a:59:55:d5:80:3d:c6:07:5c:c7:1b:ae:15:60:4e:01:ab:c3: 36:d0:0b:29:a1:b8:12:20:e0:e4:1c:71:b3:cc:da:20:fc:d4: 23:12:c9:15:b8:32:72:f6:6e:08:3b:e6:ae:29:cc:4f:1b:59: c1:3b:84:82:00:e0:38:f9:6f:86:2d:38:80:c1:72:1c:f7:7c: f8:5c:38:2b:05:f7:d3:3c:4a:34:2d:81:2e:c4:4b:d2:78:02: 82:3f:16:20:1e:1e:08:5e:16:c5:43:fb:94:d6:28:22:8e:b0: 74:e3:33:7b:be:ed:b0:8e:47:53:c6:fc:4f:6e:eb:3f:49:fe: b8:32:e0:eb:2c:57:56:1f:4a:9e:0a:54:ab:b6:2c:db:f3:d9: 6c:47:90:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VewoQ/k4RGiJK1nGWQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMDZlMzBhY2NkYjE3YTI1NTQ3M2JiNmMyMjRmMWZjMTU0 NThlOGIwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDk1OGM4OGUzZWVkMjVkM2U0MTNiY2NlMzA4YzQ3NmYwM2U2YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx61aNFXsDVDLocn+z6tNS8ir8izf VlEEiFsh6nMR0kFBQEn5w2nGv9y/l+P69lHwd3i0MuQvVWD2K1OUYEWN49n6GR2a cz9o77QcNGJjQBPq3TmeavCuq+BnYHQ1TYOIQsNDRKPgfSW++uNSZrOcXWEkw3zu azouoRW6yuPDbC1d0XyrzgfdezUjsP4in5nyyJ8SedZy0m3FEiY9/M0zWprtatl1 NLc4of/0KcV6qgBXEb+Ah11XXAmw1cImMuvH2MYjgMbZx8qfVhnj0D6JuJsE65ct MxPeEnClDE5aHSGYJaXG92hiQtf2ZcEsxjzWjIJzYxlpV9WcOsn3rs7K8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2VjIjj7tJdPkE7zOMIxHbwPmqKMB8GA1UdIwQY MBaAFHoG4wrM2xeiVUc7tsIk8fwVRY6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wNDJhNWQtYWUwZC00MWMwLWEyZTgt ZjdjMGMyZjhhM2MxLzEvelpXTWlPUHUwbDAtUVR2TTR3akVkdkEtYW9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wNDJhNWQtYWUwZC00MWMwLWEyZTgtZjdjMGMyZjhhM2Mx LzEvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV4YMA0G CSqGSIb3DQEBCwUAA4IBAQAhyWViNXS03oGsQKK8y02oh8796uULDU2w4A8B/3Gm 7HcTHV+wP9xorATvVGOO/4EybjMdiBI08XrPs8frAb8sS9YFlZfUb0X3Ul5KRf54 0O6HaF7zkWtRpqn4CTEt+MiKH2L6yvutU+TsuXoqWVXVgD3GB1zHG64VYE4Bq8M2 0AspobgSIODkHHGzzNog/NQjEskVuDJy9m4IO+auKcxPG1nBO4SCAOA4+W+GLTiA wXIc93z4XDgrBffTPEo0LYEuxEvSeAKCPxYgHh4IXhbFQ/uU1igijrB04zN7vu2w jkdTxvxPbus/Sf64MuDrLFdWH0qeClSrtizb89lsR5CD -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:43 2026 by rpki-client