This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/2zzlpKPODdf8hF4555DoYKgQ_0Q.roa File: 2zzlpKPODdf8hF4555DoYKgQ_0Q.roa (raw, json) Hash identifier: sdARz4Jh+abp/1GTc1LjA7oFLnqDLJUlfwULONlwmOM= Subject key identifier: DB:3C:E5:A4:A3:CE:0D:D7:FC:84:5E:39:E7:90:E8:60:A8:10:FF:44 Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c Certificate serial: 019B7BA3DE3EA9489B946B06B0AFEBE33E85 Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/2zzlpKPODdf8hF4555DoYKgQ_0Q.roa Signing time: Thu 01 Jan 2026 22:18:15 +0000 ROA not before: Thu 01 Jan 2026 22:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20911 IP address blocks: 195.230.28.0/22 maxlen: 24 195.230.28.0/23 maxlen: 24 195.230.28.0/24 maxlen: 24 195.230.29.0/24 maxlen: 24 195.230.30.0/24 maxlen: 24 195.230.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:de:3e:a9:48:9b:94:6b:06:b0:af:eb:e3:3e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db3ce5a4a3ce0dd7fc845e39e790e860a810ff44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:75:90:6c:6b:85:77:52:97:43:e9:5b:40: 72:c5:5b:01:e0:1e:83:b4:54:70:c5:4a:a2:cb:86: 75:f6:e8:ca:62:ca:8f:1e:38:c3:15:46:13:e4:3d: d9:b7:66:73:9a:48:05:80:77:4c:54:c1:5b:3e:15: 60:b8:14:bc:35:1a:84:a2:d3:ce:3f:52:ce:e4:78: 93:c7:7e:b3:72:83:d3:5b:16:e9:5e:45:61:21:c1: 6d:a6:e4:08:26:c8:7f:f1:d4:8f:0b:08:02:cf:5a: b4:b2:b7:4a:6f:f6:d9:7a:8e:56:21:6d:b0:af:a3: 0c:03:b5:e6:9d:30:26:20:c9:62:38:a4:d8:74:72: 55:c1:92:43:93:7a:2a:92:47:c5:9c:54:42:c9:00: f5:8f:4d:a5:73:0b:ee:d1:bc:00:49:b3:5c:01:5b: 31:8b:6c:f7:12:ee:17:a5:da:80:bb:73:f3:dc:c5: d8:b9:cd:f9:f7:21:05:6e:2e:25:93:94:b3:29:2a: 41:af:0c:6e:16:13:50:25:05:e1:34:c6:e9:d9:11: 68:86:1b:c3:3d:47:22:39:03:80:54:e6:86:d3:d6: 93:52:7e:22:9d:c0:f0:28:f2:9a:46:1a:41:21:fa: 9c:7f:b5:91:72:83:b9:32:14:7f:c6:3d:34:4d:4c: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3C:E5:A4:A3:CE:0D:D7:FC:84:5E:39:E7:90:E8:60:A8:10:FF:44 X509v3 Authority Key Identifier: keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/2zzlpKPODdf8hF4555DoYKgQ_0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.28.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:c9:a3:70:29:69:b6:6c:c1:ef:50:c9:8e:e6:da:f8:43:7f: 20:2d:fa:28:8b:21:09:76:80:b1:4a:82:33:ce:a1:28:7c:fa: 18:d8:9e:77:ec:b3:0e:a6:05:dd:56:5c:b1:88:9d:76:6c:cd: 18:a2:85:37:7c:9d:26:b6:a2:f0:33:d7:f5:e3:b1:f4:2c:b2: 72:ce:a1:34:e9:7c:c9:26:d1:57:ea:3e:d6:89:eb:99:ab:eb: c6:41:56:74:9c:75:f1:6e:e4:3c:db:8d:80:45:40:17:27:87: 25:00:d3:65:92:82:b1:26:99:fd:d5:9d:c3:83:ed:22:11:d7: 1c:36:91:aa:bf:b1:6a:f4:1c:db:d5:cd:1e:d9:8f:b1:0b:9a: f8:49:04:27:51:cd:a0:34:b3:cf:5a:44:74:1c:50:ed:20:99: ea:7a:03:b6:c4:4d:91:b4:92:38:2a:a9:ec:17:f9:d5:0e:ff: 04:31:41:1e:fb:e2:90:45:4a:1a:73:fc:c2:de:0f:ba:65:c2: 79:91:09:56:69:1f:3a:1b:56:3f:19:01:aa:be:0e:26:03:9f: d1:a2:f6:9b:fd:72:ff:65:b3:10:8c:e5:a4:6e:4b:eb:fc:45: 45:4c:e9:35:90:4f:8a:87:70:cc:53:9f:37:2d:61:05:6c:91: 1d:89:75:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o94+qUiblGsGsK/r4z6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyM2ViODQ5ZTBiNjk0MGU0ZmY1NDdkZTBiNDFiMDAzZjll MTEwNWMwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjNjZTVhNGEzY2UwZGQ3ZmM4NDVlMzllNzkwZTg2MGE4MTBmZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslR1kGxrhXdSl0PpW0ByxVsB4B6D tFRwxUqiy4Z19ujKYsqPHjjDFUYT5D3Zt2ZzmkgFgHdMVMFbPhVguBS8NRqEotPO P1LO5HiTx36zcoPTWxbpXkVhIcFtpuQIJsh/8dSPCwgCz1q0srdKb/bZeo5WIW2w r6MMA7XmnTAmIMliOKTYdHJVwZJDk3oqkkfFnFRCyQD1j02lcwvu0bwASbNcAVsx i2z3Eu4XpdqAu3Pz3MXYuc359yEFbi4lk5SzKSpBrwxuFhNQJQXhNMbp2RFohhvD PUciOQOAVOaG09aTUn4incDwKPKaRhpBIfqcf7WRcoO5MhR/xj00TUzoxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNs85aSjzg3X/IReOeeQ6GCoEP9EMB8GA1UdIwQY MBaAFLI+uEngtpQOT/VH3gtBsAP54RBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAt MTU1ZjQyZGNhYTczLzEvMnp6bHBLUE9EZGY4aEY0NTU1RG9ZS2dRXzBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAtMTU1ZjQyZGNhYTcz LzEvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw+YcMA0G CSqGSIb3DQEBCwUAA4IBAQAqyaNwKWm2bMHvUMmO5tr4Q38gLfooiyEJdoCxSoIz zqEofPoY2J537LMOpgXdVlyxiJ12bM0YooU3fJ0mtqLwM9f147H0LLJyzqE06XzJ JtFX6j7WieuZq+vGQVZ0nHXxbuQ8242ARUAXJ4clANNlkoKxJpn91Z3Dg+0iEdcc NpGqv7Fq9Bzb1c0e2Y+xC5r4SQQnUc2gNLPPWkR0HFDtIJnqegO2xE2RtJI4Kqns F/nVDv8EMUEe++KQRUoac/zC3g+6ZcJ5kQlWaR86G1Y/GQGqvg4mA5/Rovab/XL/ ZbMQjOWkbkvr/EVFTOk1kE+Kh3DMU583LWEFbJEdiXWY -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:54 2026 by rpki-client