This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/z2b5HqrBbNton83_qG8fiGl3ipE.roa File: z2b5HqrBbNton83_qG8fiGl3ipE.roa (raw, json) Hash identifier: /MzZQY5wAz0d5qSw7Z9ljmH3Z0SZhJHz2o3BPZIFhmM= Subject key identifier: CF:66:F9:1E:AA:C1:6C:DB:68:9F:CD:FF:A8:6F:1F:88:69:77:8A:91 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019B7CEDB92C8A994AD57DC7E25F81C2513E Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/z2b5HqrBbNton83_qG8fiGl3ipE.roa Signing time: Fri 02 Jan 2026 04:18:32 +0000 ROA not before: Fri 02 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8207 IP address blocks: 195.114.128.0/24 maxlen: 24 195.114.129.0/24 maxlen: 24 195.114.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b9:2c:8a:99:4a:d5:7d:c7:e2:5f:81:c2:51:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jan 2 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf66f91eaac16cdb689fcdffa86f1f8869778a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:4a:23:16:c0:72:1b:65:fc:e5:8a:0e:9c: bf:41:bd:a8:7c:5b:b8:b2:df:27:d0:fe:94:a0:43: 13:c8:4c:ec:3c:06:df:fe:10:3e:96:3f:87:0a:ab: 95:e2:9f:29:15:55:41:10:a2:58:44:07:42:85:6f: f0:05:28:19:90:c0:ff:00:5d:ba:d7:14:6e:78:ba: 56:f0:e4:9f:2d:54:40:6b:87:97:c6:86:c7:15:17: 73:9f:18:0d:51:b3:d0:13:34:bf:9c:04:26:68:98: d0:35:a2:e7:88:a0:05:94:ff:1e:e4:b7:9c:95:32: 25:c6:91:a1:02:aa:af:14:0e:8b:ae:ee:66:6a:a9: 70:22:ce:bb:19:8c:53:64:ae:c5:5f:8e:54:79:df: 97:ef:a0:ea:79:fa:28:72:1c:bc:83:98:36:1b:93: 95:89:4f:8b:18:1a:08:fa:da:69:97:33:18:8f:7c: 45:77:d4:b8:a8:8f:0e:bc:e6:09:34:43:04:74:53: 04:17:62:f2:e4:10:c8:39:a1:d1:82:ab:8d:3e:c9: 21:cf:8d:3e:41:9e:a7:90:d9:2d:46:7c:ae:c3:14: 3e:2d:c4:cf:e4:55:16:5a:d0:ef:94:10:81:c3:5b: c6:e8:43:51:76:07:84:17:83:0c:0a:bd:54:d1:61: 2b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:66:F9:1E:AA:C1:6C:DB:68:9F:CD:FF:A8:6F:1F:88:69:77:8A:91 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/z2b5HqrBbNton83_qG8fiGl3ipE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.128.0/23 195.114.135.0/24 Signature Algorithm: sha256WithRSAEncryption 18:7d:c2:04:43:dc:4a:04:fa:d1:a9:7d:6f:02:1b:31:47:f6: 00:49:a9:7e:28:36:03:a3:59:bc:f6:76:e9:7b:a7:0f:e1:bd: d6:4b:eb:d8:63:c9:4b:b3:0e:3f:e4:1b:25:0e:16:37:e5:88: 76:23:a3:46:24:9a:87:8d:39:d9:ec:45:f9:50:e6:73:0f:c6: 5f:a4:e0:ec:90:a3:bf:00:ff:68:d5:19:87:fb:b3:e8:b6:5b: 76:b9:12:d2:a1:fa:a3:2a:ce:90:66:e1:bd:fd:e8:8c:5b:9a: 91:10:9a:e7:eb:35:a3:71:8a:3a:03:81:14:48:09:ae:d1:60: 15:4b:b5:b4:37:55:5e:b4:82:9b:cc:3e:77:61:64:f9:e3:41: 1d:cd:e2:02:f1:dd:7c:6f:68:35:00:00:f5:b5:e2:1e:04:76: 24:c4:6d:c6:c5:bc:d3:fd:77:34:94:ab:ff:06:09:9b:c2:c2: c3:7a:22:19:8e:06:8d:47:75:cd:9b:35:d3:0a:a0:fd:85:56: 5b:c6:97:28:6f:ed:59:d1:6b:6a:39:b8:5c:e1:de:d8:94:53: 9d:54:27:c4:44:8b:18:55:d1:69:9d:ec:05:a2:c2:77:87:f6: a2:3f:34:c6:09:85:9a:16:d6:a4:9a:59:91:2a:a4:14:a5:fb: b3:c1:1c:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87bksiplK1X3H4l+BwlE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwMTAyMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjY2ZjkxZWFhYzE2Y2RiNjg5ZmNkZmZhODZmMWY4ODY5Nzc4YTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xNKIxbAchtl/OWKDpy/Qb2ofFu4 st8n0P6UoEMTyEzsPAbf/hA+lj+HCquV4p8pFVVBEKJYRAdChW/wBSgZkMD/AF26 1xRueLpW8OSfLVRAa4eXxobHFRdznxgNUbPQEzS/nAQmaJjQNaLniKAFlP8e5Lec lTIlxpGhAqqvFA6Lru5maqlwIs67GYxTZK7FX45Ued+X76Dqefoochy8g5g2G5OV iU+LGBoI+tpplzMYj3xFd9S4qI8OvOYJNEMEdFMEF2Ly5BDIOaHRgquNPskhz40+ QZ6nkNktRnyuwxQ+LcTP5FUWWtDvlBCBw1vG6ENRdgeEF4MMCr1U0WEr6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM9m+R6qwWzbaJ/N/6hvH4hpd4qRMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvejJiNUhxckJiTnRvbjgzX3FHOGZpR2wzaXBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw3KAAwQA w3KHMA0GCSqGSIb3DQEBCwUAA4IBAQAYfcIEQ9xKBPrRqX1vAhsxR/YASal+KDYD o1m89nbpe6cP4b3WS+vYY8lLsw4/5BslDhY35Yh2I6NGJJqHjTnZ7EX5UOZzD8Zf pODskKO/AP9o1RmH+7Potlt2uRLSofqjKs6QZuG9/eiMW5qREJrn6zWjcYo6A4EU SAmu0WAVS7W0N1VetIKbzD53YWT540EdzeIC8d18b2g1AAD1teIeBHYkxG3GxbzT /Xc0lKv/BgmbwsLDeiIZjgaNR3XNmzXTCqD9hVZbxpcob+1Z0WtqObhc4d7YlFOd VCfERIsYVdFpnewFosJ3h/aiPzTGCYWaFtakmlmRKqQUpfuzwRys -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:44 2026 by rpki-client