This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/ZiIT5OhZn0JiaasZbuP3uCS9AcE.roa File: ZiIT5OhZn0JiaasZbuP3uCS9AcE.roa (raw, json) Hash identifier: i/9UjekMAEXyuNGuXA/iLPrAIaabwapuTorDmhrfiqM= Subject key identifier: 66:22:13:E4:E8:59:9F:42:62:69:AB:19:6E:E3:F7:B8:24:BD:01:C1 Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e Certificate serial: 019B775956DB15BD8C895C8D98A4684E4FF6 Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/ZiIT5OhZn0JiaasZbuP3uCS9AcE.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207640 IP address blocks: 195.69.140.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:56:db:15:bd:8c:89:5c:8d:98:a4:68:4e:4f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=662213e4e8599f426269ab196ee3f7b824bd01c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:a8:26:0e:aa:63:7c:44:16:b1:25:2f:75: d9:4c:c1:03:ff:42:80:62:63:01:fb:d0:35:97:f2: ac:42:cc:b5:9a:22:cf:4a:ef:2e:af:c0:ec:d4:1a: 19:89:77:63:e4:73:86:bf:ed:91:d1:ee:8d:04:26: 77:0a:f5:27:d8:9b:31:d2:5d:b1:19:7e:1c:2c:6d: 50:9e:ed:e6:3c:f6:30:1e:b0:c0:35:94:ab:fa:c2: 1d:a0:44:9e:aa:84:c8:3c:9e:03:cd:d9:bc:a1:33: 25:4a:f9:10:55:02:13:83:4f:48:50:94:be:f5:a4: 21:2c:c8:e4:6d:27:56:a4:94:47:96:d5:d0:69:44: 27:cf:9c:da:b0:b3:61:4f:27:f4:ba:6d:ba:7c:17: 6e:dd:f2:3a:86:6a:69:b3:2c:c1:40:58:f0:ef:25: f8:60:e5:f0:d8:6a:e8:7d:ca:78:66:30:51:1d:40: b7:e2:26:5d:90:0d:c6:a2:9b:40:f0:32:d4:df:57: aa:fb:72:05:05:88:9f:64:e2:a4:d5:1e:5a:e7:f2: c3:86:5e:06:1e:ab:1d:0b:a6:39:72:bb:01:ff:2d: 73:b9:3b:b5:e2:15:ff:4d:38:86:2d:68:f0:18:11: d1:5a:bc:3d:99:0b:19:0a:95:8f:8c:f5:3f:22:57: ab:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:22:13:E4:E8:59:9F:42:62:69:AB:19:6E:E3:F7:B8:24:BD:01:C1 X509v3 Authority Key Identifier: keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/ZiIT5OhZn0JiaasZbuP3uCS9AcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.69.140.0/22 Signature Algorithm: sha256WithRSAEncryption a8:b9:81:d8:1c:e5:3f:90:b8:75:08:16:99:d4:53:ff:db:23: 64:59:f9:d1:8b:f1:e7:b3:d1:ce:19:6e:57:18:61:f5:e9:61: 31:b8:1a:a8:2a:c6:a6:35:d6:92:c8:c5:f3:92:ea:ec:81:a2: fc:c2:f1:e3:69:19:88:15:bd:8f:a9:f5:dd:7a:30:f7:d6:52: 50:bb:12:1e:2a:44:1d:ec:3a:13:59:26:82:cd:f8:10:f3:f0: 42:4f:52:3b:e7:7f:c0:89:80:16:a3:20:66:38:4a:3d:6c:ec: 26:dc:b7:e7:a4:43:9a:d7:36:c1:6d:27:db:09:dc:41:3b:c9: 5f:eb:e7:24:40:b2:e8:a9:7b:0b:7e:2f:3b:8d:26:7d:04:a8: 8b:01:3d:e9:d5:28:28:9a:69:26:c3:54:33:f7:22:cc:78:0c: 04:f6:80:e3:28:c8:25:a8:e0:95:99:08:64:a1:8e:89:b2:1d: 30:60:73:11:f6:c3:3d:87:a1:00:67:4f:93:e1:1c:60:82:69: af:8d:c3:15:f4:55:2e:b1:31:40:e6:c0:dc:08:8a:0c:df:44: 02:09:90:da:5a:c8:13:fa:25:e2:f4:93:19:5e:14:00:1b:eb: e9:81:63:f6:8d:5a:b9:66:41:7d:06:36:91:84:0e:34:82:ff: a6:fb:65:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WVbbFb2MiVyNmKRoTk/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NmYwYzkwMDczYWZiOGVjZGU3ZTgzNDA5Y2VhYmRiOTNi NDFhNGUwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjIyMTNlNGU4NTk5ZjQyNjI2OWFiMTk2ZWUzZjdiODI0YmQwMWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOmoJg6qY3xEFrElL3XZTMED/0KA YmMB+9A1l/KsQsy1miLPSu8ur8Ds1BoZiXdj5HOGv+2R0e6NBCZ3CvUn2Jsx0l2x GX4cLG1Qnu3mPPYwHrDANZSr+sIdoESeqoTIPJ4Dzdm8oTMlSvkQVQITg09IUJS+ 9aQhLMjkbSdWpJRHltXQaUQnz5zasLNhTyf0um26fBdu3fI6hmppsyzBQFjw7yX4 YOXw2Grofcp4ZjBRHUC34iZdkA3GoptA8DLU31eq+3IFBYifZOKk1R5a5/LDhl4G HqsdC6Y5crsB/y1zuTu14hX/TTiGLWjwGBHRWrw9mQsZCpWPjPU/Iler7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGYiE+ToWZ9CYmmrGW7j97gkvQHBMB8GA1UdIwQY MBaAFIVvDJAHOvuOzefoNAnOq9uTtBpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDIt NDRmZGU5NmI4YWVjLzEvWmlJVDVPaFpuMEppYWFzWmJ1UDN1Q1M5QWNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDItNDRmZGU5NmI4YWVj LzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw0WMMA0G CSqGSIb3DQEBCwUAA4IBAQCouYHYHOU/kLh1CBaZ1FP/2yNkWfnRi/Hns9HOGW5X GGH16WExuBqoKsamNdaSyMXzkursgaL8wvHjaRmIFb2PqfXdejD31lJQuxIeKkQd 7DoTWSaCzfgQ8/BCT1I753/AiYAWoyBmOEo9bOwm3LfnpEOa1zbBbSfbCdxBO8lf 6+ckQLLoqXsLfi87jSZ9BKiLAT3p1Sgommkmw1Qz9yLMeAwE9oDjKMglqOCVmQhk oY6Jsh0wYHMR9sM9h6EAZ0+T4RxggmmvjcMV9FUusTFA5sDcCIoM30QCCZDaWsgT +iXi9JMZXhQAG+vpgWP2jVq5ZkF9BjaRhA40gv+m+2X4 -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:23 2026 by rpki-client