This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa File: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (raw, json) Hash identifier: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik= Subject key identifier: CC:8C:80:53:01:7E:2C:99:53:F5:23:94:3B:05:34:3D:DC:AD:E0:6E Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Certificate serial: 019B7A5A968127A5C5E86BFF5F8EB94C80FE Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 178.216.10.0/24 maxlen: 24 2001:67c:818::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:96:81:27:a5:c5:e8:6b:ff:5f:8e:b9:4c:80:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc8c8053017e2c9953f523943b05343ddcade06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:43:87:09:3d:de:fe:b3:f3:bb:a7:ee:e2: 54:68:8e:e8:27:6e:91:e1:57:0a:67:5e:69:04:db: 2c:0a:4c:21:64:82:de:e7:1b:6c:51:86:be:28:52: 2b:57:77:0d:d6:3a:6e:74:89:44:fe:a4:93:12:32: 4d:c2:ef:4a:95:c5:84:e7:b1:34:50:c3:95:52:1f: f1:2e:ef:25:1c:c7:18:52:d5:7b:d9:dc:8e:19:40: 93:e5:fd:0f:03:e6:6a:22:52:40:fb:ae:40:9b:7e: 34:01:8a:31:a0:6d:55:e6:9b:91:fb:f2:eb:67:43: af:49:8e:b9:09:f9:ce:1a:31:c1:c8:de:a0:7b:a8: 1c:8b:38:ac:71:ee:f4:d8:14:35:05:d3:7f:ec:ec: f0:a5:78:b7:cc:80:2b:94:ff:87:53:51:43:12:4a: 8b:69:b2:84:85:40:8f:1d:f9:24:c5:89:25:08:46: 24:cd:07:c7:ee:0d:1c:dd:93:1a:c9:37:b2:11:eb: ae:37:12:56:11:36:91:90:39:2d:d4:7e:87:ab:0b: 25:fd:1f:9b:ff:74:88:44:2e:c7:f3:60:07:97:dc: 1b:ed:83:b2:8e:34:a3:3c:d0:3b:eb:0f:b6:8b:69: 0d:ac:c2:28:18:41:30:0d:75:2b:41:6a:be:57:46: 7a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8C:80:53:01:7E:2C:99:53:F5:23:94:3B:05:34:3D:DC:AD:E0:6E X509v3 Authority Key Identifier: keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.216.10.0/24 IPv6: 2001:67c:818::/48 Signature Algorithm: sha256WithRSAEncryption 35:90:b3:77:9c:0d:61:0c:74:da:c1:2b:6a:e4:3a:08:1b:96: 1e:a9:af:9e:8f:6e:ce:f4:12:79:ad:55:0a:90:a4:f0:35:81: 8d:88:af:ec:8f:13:d0:9b:ea:bf:a7:a9:a8:21:2e:ca:38:23: 24:5c:65:32:fa:3d:59:76:c5:ba:dc:cf:2e:7f:d9:e6:c2:03: 1e:7f:58:f3:b6:61:aa:ae:f3:80:ff:e7:59:0b:ab:60:01:c3: a0:f3:8a:44:5d:6a:6f:60:07:99:12:01:1f:45:50:7d:13:3f: 47:dd:fc:d2:ed:76:c4:ac:95:63:a8:cf:24:ae:66:0b:c6:ea: 53:bd:ff:e2:70:ae:ac:c0:98:57:ef:1c:80:07:dc:59:53:40: 0b:0c:73:2f:e5:3e:39:a0:a2:40:f0:c2:c5:6d:95:50:3c:54: ff:18:cf:9a:63:6c:a0:22:1d:fd:71:5e:ad:99:20:90:0a:2a: a5:42:d8:36:80:eb:0b:43:4d:01:95:75:72:75:56:10:69:ac: af:e1:2d:1f:b8:c5:59:61:9b:35:76:a5:0b:de:7b:d8:06:1b: e2:30:2a:e9:a4:bd:9b:20:8f:7a:bb:e1:29:c7:87:ed:2f:3e: d4:19:10:58:bc:da:15:eb:78:13:73:20:07:59:6f:21:99:e3: f6:e4:a2:19 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WpaBJ6XF6Gv/X465TID+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWVlMDhmZjY3MTYwMGQ0MDM0YTNlMWQ5ZDVhOTAyNDVj YzljMTUwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzhjODA1MzAxN2UyYzk5NTNmNTIzOTQzYjA1MzQzZGRjYWRlMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzpDhwk93v6z87un7uJUaI7oJ26R 4VcKZ15pBNssCkwhZILe5xtsUYa+KFIrV3cN1jpudIlE/qSTEjJNwu9KlcWE57E0 UMOVUh/xLu8lHMcYUtV72dyOGUCT5f0PA+ZqIlJA+65Am340AYoxoG1V5puR+/Lr Z0OvSY65CfnOGjHByN6ge6gcizisce702BQ1BdN/7OzwpXi3zIArlP+HU1FDEkqL abKEhUCPHfkkxYklCEYkzQfH7g0c3ZMayTeyEeuuNxJWETaRkDkt1H6Hqwsl/R+b /3SIRC7H82AHl9wb7YOyjjSjPNA76w+2i2kNrMIoGEEwDXUrQWq+V0Z6EwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMyMgFMBfiyZU/UjlDsFND3creBuMB8GA1UdIwQY MBaAFGme4I/2cWANQDSj4dnVqQJFzJwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEt MWQwOGFkZGNhMjcxLzEvekl5QVV3Ri1MSmxUOVNPVU93VTBQZHl0NEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEtMWQwOGFkZGNhMjcx LzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAstgKMA8E AgACMAkDBwAgAQZ8CBgwDQYJKoZIhvcNAQELBQADggEBADWQs3ecDWEMdNrBK2rk Oggblh6pr56Pbs70EnmtVQqQpPA1gY2Ir+yPE9Cb6r+nqaghLso4IyRcZTL6PVl2 xbrczy5/2ebCAx5/WPO2Yaqu84D/51kLq2ABw6DzikRdam9gB5kSAR9FUH0TP0fd /NLtdsSslWOozySuZgvG6lO9/+JwrqzAmFfvHIAH3FlTQAsMcy/lPjmgokDwwsVt lVA8VP8Yz5pjbKAiHf1xXq2ZIJAKKqVC2DaA6wtDTQGVdXJ1VhBprK/hLR+4xVlh mzV2pQvee9gGG+IwKumkvZsgj3q74SnHh+0vPtQZEFi82hXreBNzIAdZbyGZ4/bk ohk= -----END CERTIFICATE-----Generated at Sun Jan 25 16:59:49 2026 by rpki-client