This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/zzK4qCAtynNjDjZWUiRCQn5dpDk.roa File: zzK4qCAtynNjDjZWUiRCQn5dpDk.roa (raw, json) Hash identifier: E6+IdS0ezqI3UKO4kCUBOk2GF16tHu1sV21TlzMQxMc= Subject key identifier: CF:32:B8:A8:20:2D:CA:73:63:0E:36:56:52:24:42:42:7E:5D:A4:39 Certificate issuer: /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce Certificate serial: 019B7EA51D275E59C048AFFD01C90F5B0318 Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/zzK4qCAtynNjDjZWUiRCQn5dpDk.roa Signing time: Fri 02 Jan 2026 12:18:28 +0000 ROA not before: Fri 02 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39145 IP address blocks: 88.82.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:1d:27:5e:59:c0:48:af:fd:01:c9:0f:5b:03:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce Validity Not Before: Jan 2 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf32b8a8202dca73630e3656522442427e5da439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:d0:a4:1f:5f:a0:26:b0:b1:98:f7:91:63: c0:0e:5f:3c:ef:7a:f0:be:8e:42:bf:e9:c1:29:16: ee:d3:f4:e4:f1:c5:c4:3d:4d:1d:50:28:54:58:81: 10:68:91:ee:df:14:d4:98:28:9b:0a:73:6c:4a:7a: eb:ac:17:b7:e8:d9:ec:e2:0d:c1:4b:13:44:c2:28: 99:ec:10:86:5a:7d:3c:87:bd:9f:0e:00:72:1e:8e: f7:ce:bc:51:fb:3f:40:02:4b:49:80:95:33:73:90: cb:b7:9b:33:e4:98:44:8f:24:68:be:71:21:e4:38: af:87:03:66:82:c6:5d:b1:fb:dc:22:f2:3d:0f:cf: 0b:24:b7:fa:ee:44:e4:02:25:e8:d3:74:5b:7e:a4: 99:74:05:a7:99:1e:b7:79:1d:b1:16:5f:72:17:1f: 25:6f:1a:7c:1d:4a:68:bb:62:d3:e2:74:1f:5b:01: c1:5b:d4:11:66:84:e3:07:11:92:a3:0f:16:82:e6: 5b:7d:e6:c1:30:42:75:09:63:92:12:ec:04:6c:f9: 2a:9b:c4:24:f1:52:c8:c9:29:47:ec:1d:b2:8c:83: be:1d:26:17:2b:e0:d2:5f:f2:5b:5e:bb:38:21:54: 83:70:ce:74:65:78:06:60:bd:02:73:03:3e:3a:87: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:32:B8:A8:20:2D:CA:73:63:0E:36:56:52:24:42:42:7E:5D:A4:39 X509v3 Authority Key Identifier: keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/zzK4qCAtynNjDjZWUiRCQn5dpDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.82.96.0/19 Signature Algorithm: sha256WithRSAEncryption 33:f7:43:f2:e0:7c:ed:5f:e9:e3:a2:50:3f:ea:c2:b9:e8:bf: 25:31:5b:a0:6f:2f:23:01:43:2d:96:46:d0:9f:04:f1:44:11: 2f:af:dd:09:a9:af:fb:01:6d:32:b8:59:c0:d1:1c:93:91:bc: 3b:2f:c9:f9:65:64:3c:c1:9c:a1:67:c9:78:fd:de:d3:f8:62: 23:7c:34:53:82:51:e5:24:43:f8:f9:8d:e1:a1:eb:6d:e1:cd: 95:c6:52:be:02:72:00:7f:a6:15:f1:78:d2:db:18:bb:c1:5e: ce:c1:e2:3d:f8:dd:21:e0:36:e3:98:72:1a:6e:22:ca:7d:8c: c2:46:c6:c5:13:09:45:29:24:6b:b4:74:d5:ea:97:93:58:96: a2:67:d1:e4:d9:c0:40:ee:36:32:aa:23:fd:fa:77:4e:c7:73: c2:b1:68:91:f2:63:05:c3:4c:c9:dd:07:da:c7:77:04:ab:eb: 84:27:09:ff:7f:09:72:05:b9:e8:69:64:4c:be:2d:71:56:11: fb:04:c7:46:b1:81:92:ca:5c:e5:90:db:33:cb:5d:87:c9:a7: 7b:c0:82:fe:61:33:c4:a8:e8:ce:bd:27:2d:1d:7e:da:86:8a: 0b:70:39:d3:b6:d9:72:dd:8f:68:34:45:7e:cb:61:a9:cc:95: e9:f4:c1:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pR0nXlnASK/9AckPWwMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NWIwMmEyOWM3NjZlNWIxM2IzZWIxNzZhOTcxYzEyZGRl MWQ0Y2UwHhcNMjYwMTAyMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjMyYjhhODIwMmRjYTczNjMwZTM2NTY1MjI0NDI0MjdlNWRhNDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2PQpB9foCawsZj3kWPADl8873rw vo5Cv+nBKRbu0/Tk8cXEPU0dUChUWIEQaJHu3xTUmCibCnNsSnrrrBe36Nns4g3B SxNEwiiZ7BCGWn08h72fDgByHo73zrxR+z9AAktJgJUzc5DLt5sz5JhEjyRovnEh 5DivhwNmgsZdsfvcIvI9D88LJLf67kTkAiXo03RbfqSZdAWnmR63eR2xFl9yFx8l bxp8HUpou2LT4nQfWwHBW9QRZoTjBxGSow8WguZbfebBMEJ1CWOSEuwEbPkqm8Qk 8VLIySlH7B2yjIO+HSYXK+DSX/JbXrs4IVSDcM50ZXgGYL0CcwM+OoeUewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8yuKggLcpzYw42VlIkQkJ+XaQ5MB8GA1UdIwQY MBaAFPdbAqKcdm5bE7PrF2qXHBLd4dTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYt YmNkYmI1NDJjYjVhLzEvenpLNHFDQXR5bk5qRGpaV1VpUkNRbjVkcERrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYtYmNkYmI1NDJjYjVh LzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFWFJgMA0G CSqGSIb3DQEBCwUAA4IBAQAz90Py4HztX+njolA/6sK56L8lMVugby8jAUMtlkbQ nwTxRBEvr90Jqa/7AW0yuFnA0RyTkbw7L8n5ZWQ8wZyhZ8l4/d7T+GIjfDRTglHl JEP4+Y3hoett4c2VxlK+AnIAf6YV8XjS2xi7wV7OweI9+N0h4DbjmHIabiLKfYzC RsbFEwlFKSRrtHTV6peTWJaiZ9Hk2cBA7jYyqiP9+ndOx3PCsWiR8mMFw0zJ3Qfa x3cEq+uEJwn/fwlyBbnoaWRMvi1xVhH7BMdGsYGSylzlkNszy12Hyad7wIL+YTPE qOjOvSctHX7ahooLcDnTttly3Y9oNEV+y2GpzJXp9MEE -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:02 2026 by rpki-client