This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa File: ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa (raw, json) Hash identifier: lLIc6IlVo/BfK1oQIkM/V9OuWrsKXh4yLdug5PFaT64= Subject key identifier: 64:EC:60:5A:F0:92:7B:87:E1:DC:6F:A1:4B:C5:00:BD:5C:C2:C4:F4 Certificate issuer: /CN=266547208206ad54474c69fccbedc24aa56a62c2 Certificate serial: 019B7EA6DE6C7327CE8F16F22E0F689442DF Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa Signing time: Fri 02 Jan 2026 12:20:23 +0000 ROA not before: Fri 02 Jan 2026 12:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 91.196.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:de:6c:73:27:ce:8f:16:f2:2e:0f:68:94:42:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2 Validity Not Before: Jan 2 12:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64ec605af0927b87e1dc6fa14bc500bd5cc2c4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:db:4f:cd:15:f4:11:6b:3a:04:9a:9f:24: 6c:d7:28:06:3c:5f:b6:1a:95:da:a6:80:7d:a9:7f: 95:29:0c:a4:4b:14:09:68:67:14:d9:b2:99:60:dc: 2f:13:51:15:7d:5c:93:be:6b:ee:52:7e:93:92:dd: dd:30:0e:2a:5d:80:94:89:22:c8:13:6e:d1:81:38: fc:83:f0:86:3c:5d:95:cb:6b:35:ba:b5:66:07:67: 6d:59:14:25:94:28:75:b8:ab:7b:45:f9:28:48:32: e1:a0:ca:63:cd:30:7e:56:59:40:67:66:ef:b4:64: 1f:6a:0d:bc:4b:e4:fd:4b:14:4a:25:b4:6f:00:41: 9f:6c:6c:4c:63:16:fc:07:69:09:f7:8f:b2:71:d5: 85:69:30:6b:ca:5d:49:4e:8c:4c:66:33:af:18:ee: 35:28:69:e6:64:f2:a4:2b:fd:84:43:e3:81:00:07: 51:a0:24:34:04:79:a3:33:33:95:d6:5f:00:d4:99: 9c:84:aa:51:19:2b:29:2a:d5:26:d7:f7:33:38:c2: 43:9b:6a:9e:e1:11:9c:6e:10:a1:24:08:cf:d4:3f: 32:68:0a:e8:82:db:d3:25:33:eb:ba:5a:62:58:f2: 92:67:2a:4e:98:aa:96:f1:c6:f1:89:e1:09:d4:03: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EC:60:5A:F0:92:7B:87:E1:DC:6F:A1:4B:C5:00:BD:5C:C2:C4:F4 X509v3 Authority Key Identifier: keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.112.0/22 Signature Algorithm: sha256WithRSAEncryption 47:d0:8f:43:fc:84:26:6f:c0:88:8c:dc:1b:82:b4:a3:35:4d: fd:04:24:09:aa:1c:0d:78:a5:57:15:44:ac:38:ba:9c:d8:0d: 81:f2:98:b2:56:92:26:1c:12:75:58:ee:1e:e1:bb:a7:9a:22: 05:e2:9a:55:f5:37:8a:4a:06:9a:2f:59:cc:e4:da:29:3d:0f: fc:8a:40:e2:dc:86:2d:02:34:23:a7:1a:c1:9c:84:f0:67:ef: 55:1e:fd:ad:bd:c4:10:f1:cb:e0:14:5b:66:b5:06:31:51:8c: 2a:f8:16:fb:43:35:23:8a:2b:e3:89:f1:1b:4a:e0:5b:73:98: 79:c9:67:21:ae:e1:8f:68:b3:d2:fe:cb:14:e9:4c:d7:ae:88: 52:df:9d:29:93:41:01:3a:57:0a:24:19:17:23:14:51:78:e8: 1f:58:b9:6d:ec:e1:aa:3f:7c:7e:2e:4e:e0:85:6a:7a:2d:60: 03:4c:6c:a1:52:72:27:b0:aa:d4:0d:b5:ee:85:a8:c5:a7:d6: d2:14:03:50:30:32:94:9a:3c:2c:6f:33:90:b7:f8:32:75:72: 1d:95:16:38:41:7c:09:c9:24:b9:71:14:b2:ee:d2:c8:d8:d7: 77:75:6d:dd:68:8a:a9:2e:3e:c1:2b:53:a0:d0:ae:fd:cb:7c: 00:0d:15:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pt5scyfOjxbyLg9olELfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjU0NzIwODIwNmFkNTQ0NzRjNjlmY2NiZWRjMjRhYTU2 YTYyYzIwHhcNMjYwMTAyMTIyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGVjNjA1YWYwOTI3Yjg3ZTFkYzZmYTE0YmM1MDBiZDVjYzJjNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwInbT80V9BFrOgSanyRs1ygGPF+2 GpXapoB9qX+VKQykSxQJaGcU2bKZYNwvE1EVfVyTvmvuUn6Tkt3dMA4qXYCUiSLI E27RgTj8g/CGPF2Vy2s1urVmB2dtWRQllCh1uKt7RfkoSDLhoMpjzTB+VllAZ2bv tGQfag28S+T9SxRKJbRvAEGfbGxMYxb8B2kJ94+ycdWFaTBryl1JToxMZjOvGO41 KGnmZPKkK/2EQ+OBAAdRoCQ0BHmjMzOV1l8A1JmchKpRGSspKtUm1/czOMJDm2qe 4RGcbhChJAjP1D8yaArogtvTJTPrulpiWPKSZypOmKqW8cbxieEJ1AOZOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGTsYFrwknuH4dxvoUvFAL1cwsT0MB8GA1UdIwQY MBaAFCZlRyCCBq1UR0xp/MvtwkqlamLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTIt ODIyZDE1OWE5N2FmLzEvWk94Z1d2Q1NlNGZoM0ctaFM4VUF2VnpDeFBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTItODIyZDE1OWE5N2Fm LzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8RwMA0G CSqGSIb3DQEBCwUAA4IBAQBH0I9D/IQmb8CIjNwbgrSjNU39BCQJqhwNeKVXFUSs OLqc2A2B8piyVpImHBJ1WO4e4bunmiIF4ppV9TeKSgaaL1nM5NopPQ/8ikDi3IYt AjQjpxrBnITwZ+9VHv2tvcQQ8cvgFFtmtQYxUYwq+Bb7QzUjiivjifEbSuBbc5h5 yWchruGPaLPS/ssU6UzXrohS350pk0EBOlcKJBkXIxRReOgfWLlt7OGqP3x+Lk7g hWp6LWADTGyhUnInsKrUDbXuhajFp9bSFANQMDKUmjwsbzOQt/gydXIdlRY4QXwJ ySS5cRSy7tLI2Nd3dW3daIqpLj7BK1Og0K79y3wADRUu -----END CERTIFICATE-----Generated at Mon Jan 26 05:33:48 2026 by rpki-client