This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Zbv52u8GwNr5AH4loqMhVDlQMh4.roa File: Zbv52u8GwNr5AH4loqMhVDlQMh4.roa (raw, json) Hash identifier: hHOEA632ytT+BV7ySAPJvDi7FWr4sFU6WnZFkeoM6oo= Subject key identifier: 65:BB:F9:DA:EF:06:C0:DA:F9:00:7E:25:A2:A3:21:54:39:50:32:1E Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77596400401F59E6E2955C6DD3D5552E Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Zbv52u8GwNr5AH4loqMhVDlQMh4.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60761 IP address blocks: 188.215.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:64:00:40:1f:59:e6:e2:95:5c:6d:d3:d5:55:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65bbf9daef06c0daf9007e25a2a321543950321e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:d1:66:6d:55:52:26:0b:b3:7e:38:78:ac: f3:dc:dc:fc:7f:f2:02:d3:03:12:43:d0:26:9f:68: 6f:6f:22:8e:f5:0b:e7:b3:35:be:09:02:f6:ec:8d: d8:62:fb:ff:45:16:47:39:bb:9e:61:db:5f:e1:89: 40:40:a6:4c:60:52:70:a5:2b:44:6c:e8:43:56:3a: 12:16:52:fc:28:2d:40:8d:00:a7:28:b7:da:53:3d: d4:38:ee:2f:17:f6:83:43:e5:fd:77:a3:f1:e9:99: 16:10:e4:74:d8:53:8c:bb:4a:43:3a:ea:62:47:80: 55:f6:f1:3d:40:63:a1:8a:64:9a:8e:05:ce:91:c3: a9:6a:a4:14:93:96:d1:d3:10:de:77:d9:99:3f:45: c2:55:5a:d5:7a:52:a0:84:9e:ac:08:c7:86:50:f4: af:44:7d:3d:49:94:96:51:51:dd:9a:ad:00:fb:e1: 2e:77:84:27:b4:38:78:47:e2:71:b5:60:a8:71:54: af:6d:95:35:b2:42:0b:86:a1:a8:22:98:c1:b5:45: b6:43:0f:58:a3:b6:6f:59:0c:de:9d:ce:90:50:9b: 44:6b:97:19:95:26:99:64:e8:6a:4a:4b:c4:8b:ec: f1:5b:5f:83:13:1c:30:dc:28:5d:49:de:f4:1d:b1: 2c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BB:F9:DA:EF:06:C0:DA:F9:00:7E:25:A2:A3:21:54:39:50:32:1E X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Zbv52u8GwNr5AH4loqMhVDlQMh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.215.37.0/24 Signature Algorithm: sha256WithRSAEncryption 90:6f:35:54:c8:39:a4:b3:a9:89:cf:ab:48:23:db:cd:74:d0: 82:53:ad:10:77:aa:b1:4a:34:c9:eb:fd:eb:ed:f3:0f:92:cd: c2:66:7c:b2:58:e2:d8:fb:ab:18:f6:15:95:bf:c6:98:1e:4b: 48:8a:4a:74:9d:88:65:b8:f9:50:45:93:86:65:6f:8e:f6:ec: 2d:ea:53:1d:54:78:68:e5:ef:67:bb:f8:2f:a7:0b:dd:7a:fa: d8:09:8a:f5:37:6e:05:9d:43:76:8e:0e:80:43:8a:4f:2d:47: 19:6c:2e:e0:18:bd:32:0e:77:8b:42:e5:98:30:a7:b3:a6:d4: 1d:39:cd:ed:1a:37:15:c8:7a:70:fd:e1:54:6a:b3:dd:2a:2a: 37:97:75:50:b5:0c:70:d8:bc:c4:d9:6e:99:cd:bb:c6:1a:60: dd:50:61:86:c3:c8:6a:b9:29:32:58:a1:74:60:b3:b6:1f:6d: 0c:f5:7f:00:cd:1b:5c:ec:bb:8e:6a:5a:62:ae:66:1c:b0:8f: 56:f4:56:76:14:99:f2:13:11:ac:96:d3:cd:2d:5d:d6:84:2f: 14:24:5d:b3:79:b8:ea:d2:95:9f:5c:73:f3:99:eb:44:2b:6e: 42:c9:1d:b4:f3:0e:eb:6e:94:e7:5e:25:64:15:14:8b:87:90: 63:58:10:7a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WWQAQB9Z5uKVXG3T1VUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWJiZjlkYWVmMDZjMGRhZjkwMDdlMjVhMmEzMjE1NDM5NTAzMjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9XRZm1VUiYLs344eKzz3Nz8f/IC 0wMSQ9Amn2hvbyKO9QvnszW+CQL27I3YYvv/RRZHObueYdtf4YlAQKZMYFJwpStE bOhDVjoSFlL8KC1AjQCnKLfaUz3UOO4vF/aDQ+X9d6Px6ZkWEOR02FOMu0pDOupi R4BV9vE9QGOhimSajgXOkcOpaqQUk5bR0xDed9mZP0XCVVrVelKghJ6sCMeGUPSv RH09SZSWUVHdmq0A++Eud4QntDh4R+JxtWCocVSvbZU1skILhqGoIpjBtUW2Qw9Y o7ZvWQzenc6QUJtEa5cZlSaZZOhqSkvEi+zxW1+DExww3ChdSd70HbEsiwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGW7+drvBsDa+QB+JaKjIVQ5UDIeMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1pidjUydThHd05yNUFINGxvcU1oVkRsUU1oNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC81yUw DQYJKoZIhvcNAQELBQADggEBAJBvNVTIOaSzqYnPq0gj28100IJTrRB3qrFKNMnr /evt8w+SzcJmfLJY4tj7qxj2FZW/xpgeS0iKSnSdiGW4+VBFk4Zlb4727C3qUx1U eGjl72e7+C+nC916+tgJivU3bgWdQ3aODoBDik8tRxlsLuAYvTIOd4tC5Zgwp7Om 1B05ze0aNxXIenD94VRqs90qKjeXdVC1DHDYvMTZbpnNu8YaYN1QYYbDyGq5KTJY oXRgs7YfbQz1fwDNG1zsu45qWmKuZhywj1b0VnYUmfITEayW080tXdaELxQkXbN5 uOrSlZ9cc/OZ60QrbkLJHbTzDutulOdeJWQVFIuHkGNYEHo= -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:49 2026 by rpki-client