This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/zajVd5Ts_bTh8-XMc1sBRZbd3Xg.roa File: zajVd5Ts_bTh8-XMc1sBRZbd3Xg.roa (raw, json) Hash identifier: QnbiOgy/Y+Wr7LieVKnfsD3uCN5eC35E6EWP56OL3+Q= Subject key identifier: CD:A8:D5:77:94:EC:FD:B4:E1:F3:E5:CC:73:5B:01:45:96:DD:DD:78 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807FE57867ABA593D7D5871FF8D4C7 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/zajVd5Ts_bTh8-XMc1sBRZbd3Xg.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202384 IP address blocks: 195.5.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7f:e5:78:67:ab:a5:93:d7:d5:87:1f:f8:d4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cda8d57794ecfdb4e1f3e5cc735b014596dddd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:cc:6a:7e:d7:6b:59:c4:1b:3e:f9:1f:97: 6f:e5:0f:64:b4:4e:de:48:9d:31:cf:a7:0a:ec:ca: aa:46:52:10:38:3c:8a:69:19:e8:45:48:57:b5:69: 50:d1:74:6e:3e:81:19:5e:2f:a7:a9:f1:ad:7b:09: 36:28:51:8c:c8:e2:2b:fe:4b:0e:8f:84:2d:72:cb: 2b:e4:a9:b1:4c:1c:12:81:44:0f:b1:7e:73:02:31: b1:6c:23:da:20:c8:b8:dd:74:c9:dd:9c:ca:09:b6: 75:6d:95:f8:de:f4:85:a3:67:88:7f:4c:2c:52:8e: 1e:5b:30:b0:f4:05:8c:f1:41:a4:59:7f:5b:01:72: 1c:88:4c:29:38:69:1d:3e:6e:ad:e9:fd:c5:07:12: 3f:de:4e:b2:1e:27:1c:94:6a:2a:74:ee:9c:82:28: ab:c8:b6:21:e1:30:1f:bb:36:ff:72:db:61:41:34: cf:b2:8b:06:da:c6:6a:37:4b:11:fb:01:a1:ee:5e: 5e:83:cd:2f:e7:82:03:ec:d1:3f:7c:51:9b:37:9b: 62:be:4d:c3:70:6e:3b:93:4b:99:22:d0:ff:09:aa: 78:9f:79:a9:99:f2:db:a5:da:5d:97:0a:c3:09:ee: 8c:83:49:3a:9d:dd:39:b3:6b:9b:64:dc:69:24:f0: 39:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A8:D5:77:94:EC:FD:B4:E1:F3:E5:CC:73:5B:01:45:96:DD:DD:78 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/zajVd5Ts_bTh8-XMc1sBRZbd3Xg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.5.84.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:97:40:a5:00:a9:98:b0:e3:52:58:44:f9:a5:71:db:52:75: 36:e2:c7:4c:de:5a:3f:fe:7e:5d:e2:92:f8:73:4a:a3:da:9a: 29:c5:5a:5d:81:5d:3d:ec:37:df:72:e1:55:28:27:b8:fa:ff: 5f:06:a2:c2:47:6d:61:59:92:c7:d2:62:87:45:53:8d:f7:ec: 5a:a1:21:a6:e9:bd:8b:49:9f:97:4f:be:8c:ba:07:5b:fd:52: 9b:86:b7:f7:6b:0a:07:26:0f:3f:eb:28:62:de:8d:f9:cc:ee: fc:86:84:e1:18:1f:ed:b2:70:e4:63:c0:07:66:e1:9a:85:bf: 54:32:46:67:1f:9c:f2:d4:c8:14:78:a0:97:86:a4:b7:18:c9: 64:24:2d:7d:f1:62:3d:58:a3:4a:03:87:3f:fe:52:34:04:50: de:d7:58:af:6d:90:c6:ec:f6:c4:a9:dd:41:06:1f:30:d4:51: 10:ef:38:07:c8:4d:98:ff:0f:d9:12:8d:db:11:50:a6:30:b7: 96:78:b4:87:74:1c:b9:ce:de:af:3a:69:bd:da:f9:e1:c6:7d: be:b5:a3:e3:c7:f3:14:ac:c0:35:88:0e:c5:9d:56:69:d8:32: 9d:ac:48:e4:2a:ea:37:ff:0a:49:b1:0b:52:13:2f:af:31:d8: 0b:7b:b7:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gH/leGerpZPX1Ycf+NTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGE4ZDU3Nzk0ZWNmZGI0ZTFmM2U1Y2M3MzViMDE0NTk2ZGRkZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxzMan7Xa1nEGz75H5dv5Q9ktE7e SJ0xz6cK7MqqRlIQODyKaRnoRUhXtWlQ0XRuPoEZXi+nqfGtewk2KFGMyOIr/ksO j4Qtcssr5KmxTBwSgUQPsX5zAjGxbCPaIMi43XTJ3ZzKCbZ1bZX43vSFo2eIf0ws Uo4eWzCw9AWM8UGkWX9bAXIciEwpOGkdPm6t6f3FBxI/3k6yHicclGoqdO6cgiir yLYh4TAfuzb/ctthQTTPsosG2sZqN0sR+wGh7l5eg80v54ID7NE/fFGbN5tivk3D cG47k0uZItD/Cap4n3mpmfLbpdpdlwrDCe6Mg0k6nd05s2ubZNxpJPA5twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2o1XeU7P204fPlzHNbAUWW3d14MB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvemFqVmQ1VHNfYlRoOC1YTWMxc0JSWmJkM1hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwwVUMA0G CSqGSIb3DQEBCwUAA4IBAQBNl0ClAKmYsONSWET5pXHbUnU24sdM3lo//n5d4pL4 c0qj2popxVpdgV097DffcuFVKCe4+v9fBqLCR21hWZLH0mKHRVON9+xaoSGm6b2L SZ+XT76Mugdb/VKbhrf3awoHJg8/6yhi3o35zO78hoThGB/tsnDkY8AHZuGahb9U MkZnH5zy1MgUeKCXhqS3GMlkJC198WI9WKNKA4c//lI0BFDe11ivbZDG7PbEqd1B Bh8w1FEQ7zgHyE2Y/w/ZEo3bEVCmMLeWeLSHdBy5zt6vOmm92vnhxn2+taPjx/MU rMA1iA7FnVZp2DKdrEjkKuo3/wpJsQtSEy+vMdgLe7eP -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:32 2026 by rpki-client