This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ZJhnbc9_i0IcUq73bqq_pKLWSzI.roa File: ZJhnbc9_i0IcUq73bqq_pKLWSzI.roa (raw, json) Hash identifier: jui7J9U0980hhKyzOVguHDpFUw7/IwGIzfJO2qx4/dU= Subject key identifier: 64:98:67:6D:CF:7F:8B:42:1C:52:AE:F7:6E:AA:BF:A4:A2:D6:4B:32 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAC4E7FEEB81BDF43A7DD77DFC3FD1 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ZJhnbc9_i0IcUq73bqq_pKLWSzI.roa Signing time: Fri 02 Jan 2026 08:19:59 +0000 ROA not before: Fri 02 Jan 2026 08:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211421 IP address blocks: 94.184.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c4:e7:fe:eb:81:bd:f4:3a:7d:d7:7d:fc:3f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6498676dcf7f8b421c52aef76eaabfa4a2d64b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:49:3f:3c:b9:cb:96:36:7c:02:51:87:b9: f4:9b:7b:c6:f5:23:ea:15:48:56:d0:b3:48:e3:12: da:30:13:db:1f:db:0e:6b:d6:31:38:d9:b7:a5:72: 7c:3a:01:51:9f:cf:74:6b:30:cd:2a:6f:c6:c9:02: 12:8d:e3:5b:41:dc:a1:76:5c:40:4d:2b:12:43:9b: 50:62:22:c9:fe:27:c6:d5:6e:6f:84:ba:19:f3:38: ec:95:fd:7c:16:2c:ab:ba:41:34:82:96:20:c7:8e: 5a:5d:15:0f:67:5b:97:eb:2d:60:9a:99:df:a7:d4: 33:cb:f2:e5:3d:66:5f:1e:fd:05:98:89:b6:9c:a2: 42:16:fc:43:72:33:dc:7e:34:3a:a4:ce:96:61:e2: cc:d6:23:47:e4:16:7f:09:42:b9:85:ea:1f:3b:a7: 3f:28:40:15:bf:a1:a3:72:0e:5d:42:47:21:4f:fc: 88:94:bc:c8:25:49:da:90:d3:26:65:78:41:cc:d0: 7e:00:98:ae:5c:e6:4c:90:6f:61:08:7b:b6:17:36: eb:78:26:08:98:fc:4a:e2:7a:9b:ac:5a:85:6e:4e: ae:20:68:94:a0:ef:e4:82:56:51:0b:5e:2b:0c:06: 0f:07:f7:94:91:2f:37:94:79:81:bc:f6:e3:5e:63: 50:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:98:67:6D:CF:7F:8B:42:1C:52:AE:F7:6E:AA:BF:A4:A2:D6:4B:32 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ZJhnbc9_i0IcUq73bqq_pKLWSzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.16.0/24 Signature Algorithm: sha256WithRSAEncryption 54:ae:b4:7c:0d:a4:a1:50:0b:40:c7:83:b3:77:d1:62:8b:8b: ec:78:0f:18:59:44:85:21:65:37:f5:67:b8:52:6b:36:45:ab: 77:23:c0:43:26:ec:43:06:a8:06:d5:5d:c2:dd:26:5f:79:ef: e7:4d:11:2b:78:15:d9:58:44:e7:86:8c:47:96:ad:e6:ca:3b: 98:56:21:d0:4a:76:5a:cb:4c:a8:f6:15:ca:38:b9:ff:b0:8f: 74:d4:12:11:33:d1:8f:37:54:0d:ce:f3:f0:cf:2f:e7:98:6f: ac:67:88:dc:58:42:c9:da:a6:5b:53:f1:ac:48:8d:f7:04:83: 63:9e:7a:87:c7:bc:a8:ed:13:0d:2d:ce:5a:26:6b:cd:54:30: e1:0f:1b:cb:55:06:0c:b4:2c:e2:b4:54:28:45:3a:75:9e:0e: 7e:59:83:bb:6c:28:55:5a:a3:af:75:de:4a:01:fa:73:6b:73: ab:b0:f0:e7:a1:3d:5d:a2:26:22:84:51:cf:e3:47:14:d9:ae: 2a:97:81:82:48:42:15:2c:93:b0:25:23:1c:55:fd:dd:65:7c: f4:c4:9c:48:9b:73:db:9b:58:e7:6e:0d:77:30:c7:f7:b0:82: f6:cf:96:e3:e0:c6:8a:24:27:3b:e3:57:ed:5d:64:a1:ad:23: 23:c9:90:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ysTn/uuBvfQ6fdd9/D/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDk4Njc2ZGNmN2Y4YjQyMWM1MmFlZjc2ZWFhYmZhNGEyZDY0YjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzxJPzy5y5Y2fAJRh7n0m3vG9SPq FUhW0LNI4xLaMBPbH9sOa9YxONm3pXJ8OgFRn890azDNKm/GyQISjeNbQdyhdlxA TSsSQ5tQYiLJ/ifG1W5vhLoZ8zjslf18FiyrukE0gpYgx45aXRUPZ1uX6y1gmpnf p9Qzy/LlPWZfHv0FmIm2nKJCFvxDcjPcfjQ6pM6WYeLM1iNH5BZ/CUK5heofO6c/ KEAVv6Gjcg5dQkchT/yIlLzIJUnakNMmZXhBzNB+AJiuXOZMkG9hCHu2FzbreCYI mPxK4nqbrFqFbk6uIGiUoO/kglZRC14rDAYPB/eUkS83lHmBvPbjXmNQ+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGSYZ23Pf4tCHFKu926qv6Si1ksyMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvWkpobmJjOV9pMEljVXE3M2JxcV9wS0xXU3pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrgQMA0G CSqGSIb3DQEBCwUAA4IBAQBUrrR8DaShUAtAx4Ozd9Fii4vseA8YWUSFIWU39We4 Ums2Rat3I8BDJuxDBqgG1V3C3SZfee/nTREreBXZWETnhoxHlq3myjuYViHQSnZa y0yo9hXKOLn/sI901BIRM9GPN1QNzvPwzy/nmG+sZ4jcWELJ2qZbU/GsSI33BINj nnqHx7yo7RMNLc5aJmvNVDDhDxvLVQYMtCzitFQoRTp1ng5+WYO7bChVWqOvdd5K Afpza3OrsPDnoT1doiYihFHP40cU2a4ql4GCSEIVLJOwJSMcVf3dZXz0xJxIm3Pb m1jnbg13MMf3sIL2z5bj4MaKJCc741ftXWShrSMjyZDn -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:32 2026 by rpki-client