This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/0uz5MbW1iQjUOVrXafnfS0Kr9aI.roa File: 0uz5MbW1iQjUOVrXafnfS0Kr9aI.roa (raw, json) Hash identifier: 2tTjB+QcoGOzx+5PBvD5G637D13fBCfUdr4GPNFvVKU= Subject key identifier: D2:EC:F9:31:B5:B5:89:08:D4:39:5A:D7:69:F9:DF:4B:42:AB:F5:A2 Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5 Certificate serial: 019B7AC955B0617EEF5740B3977DECBD6DE1 Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/0uz5MbW1iQjUOVrXafnfS0Kr9aI.roa Signing time: Thu 01 Jan 2026 18:19:33 +0000 ROA not before: Thu 01 Jan 2026 18:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200428 IP address blocks: 185.92.60.0/22 maxlen: 22 2a05:ef40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:55:b0:61:7e:ef:57:40:b3:97:7d:ec:bd:6d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5 Validity Not Before: Jan 1 18:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2ecf931b5b58908d4395ad769f9df4b42abf5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:9a:ee:f5:b3:93:ea:8b:cd:35:5a:83:01: 45:79:00:70:82:d0:71:50:6d:6c:c3:d7:36:d7:9a: 33:33:d4:7b:c2:c0:4b:55:41:f5:3d:74:98:a0:79: 8f:58:fb:e6:33:b0:af:24:25:f0:6e:8f:b9:57:23: e1:38:7a:67:e0:5d:31:f9:d2:cb:3c:f2:2f:d9:9d: 20:e0:f3:73:41:07:b6:7f:49:04:c6:fb:0a:f1:f1: 05:f2:ad:ba:b4:0e:4a:58:5f:7b:1a:37:07:12:f3: bd:7a:bf:5f:bd:c0:95:67:42:09:97:ca:6a:08:b5: 5d:c6:ba:d1:e7:d3:53:5b:e8:85:29:29:bb:4f:55: 6c:8b:28:0f:e4:0e:37:b4:2f:a2:51:24:7f:79:3c: 6b:22:5d:06:0e:98:f3:2d:ef:df:c4:55:5f:ef:73: 61:de:2a:de:7f:ef:3d:f8:32:3f:bf:f4:64:7e:62: f9:6b:83:fb:4c:bc:b8:d9:05:c2:ba:78:fe:92:4b: 9a:94:78:66:65:2d:4e:64:48:04:2d:68:58:2f:5d: bf:36:37:a3:4c:a0:cc:4f:ec:2b:32:ba:fc:8c:62: f4:e2:9a:50:1a:2b:a6:34:d6:1a:4f:13:66:9c:d4: db:57:3a:2e:ba:2a:b5:8d:c5:53:2f:96:78:2b:75: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EC:F9:31:B5:B5:89:08:D4:39:5A:D7:69:F9:DF:4B:42:AB:F5:A2 X509v3 Authority Key Identifier: keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/0uz5MbW1iQjUOVrXafnfS0Kr9aI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.60.0/22 IPv6: 2a05:ef40::/29 Signature Algorithm: sha256WithRSAEncryption 23:65:c5:a5:51:69:48:c8:41:79:22:9c:91:a5:64:96:fe:b6: b9:ca:4b:69:c3:ed:25:7e:de:05:da:3a:00:0b:45:54:91:c9: 84:43:c7:8c:7e:6f:76:e4:4e:f1:d1:0a:11:f2:df:bf:25:48: 05:22:0d:26:93:b0:2f:ae:b8:55:d5:67:77:8c:c8:5b:fb:4a: 87:cc:99:62:46:ac:8a:01:d0:8d:2a:ec:f6:ae:91:0c:90:d7: b8:66:41:fb:a3:0b:2e:45:dd:36:c7:36:90:25:e0:5d:50:a4: 19:b1:8b:7e:de:84:0f:84:6d:07:8d:6b:96:a5:b1:26:c7:e7: 60:e1:c8:ed:33:e3:dd:0c:60:6d:a3:58:24:fe:64:93:55:b7: aa:56:76:1b:87:a7:2a:b0:ca:c2:22:d4:6d:96:d6:94:fc:94: b5:43:2f:b3:7a:f6:d3:e9:ca:72:98:69:48:d2:30:3f:70:7c: b8:f9:1b:5a:cd:83:35:79:0c:41:e1:03:00:c5:7a:6e:4e:a2: 9a:91:d0:8d:71:4c:5d:eb:f8:10:c5:75:aa:f3:40:9f:98:34: ff:b6:c9:cb:c2:54:e9:d5:aa:91:17:49:8d:6c:51:91:11:25: f5:5a:eb:16:68:af:f8:e4:40:69:57:ac:c7:c6:bb:7e:7a:84: fa:55:47:1a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yVWwYX7vV0Czl33svW3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjM4ZjQ4NTY4ODMzYTVmNzE1N2VlZjU5Nzg3ODMzYTAx ZjUzZjUwHhcNMjYwMTAxMTgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmVjZjkzMWI1YjU4OTA4ZDQzOTVhZDc2OWY5ZGY0YjQyYWJmNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mya7vWzk+qLzTVagwFFeQBwgtBx UG1sw9c215ozM9R7wsBLVUH1PXSYoHmPWPvmM7CvJCXwbo+5VyPhOHpn4F0x+dLL PPIv2Z0g4PNzQQe2f0kExvsK8fEF8q26tA5KWF97GjcHEvO9er9fvcCVZ0IJl8pq CLVdxrrR59NTW+iFKSm7T1VsiygP5A43tC+iUSR/eTxrIl0GDpjzLe/fxFVf73Nh 3iref+89+DI/v/RkfmL5a4P7TLy42QXCunj+kkualHhmZS1OZEgELWhYL12/Njej TKDMT+wrMrr8jGL04ppQGiumNNYaTxNmnNTbVzouuiq1jcVTL5Z4K3XpgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNLs+TG1tYkI1Dla12n530tCq/WiMB8GA1UdIwQY MBaAFM7zj0hWiDOl9xV+71l4eDOgH1P1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUt Zjk1YzYwOTdhNTBkLzEvMHV6NU1iVzFpUWpVT1ZyWGFmbmZTMEtyOWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUtZjk1YzYwOTdhNTBk LzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVw8MA0E AgACMAcDBQMqBe9AMA0GCSqGSIb3DQEBCwUAA4IBAQAjZcWlUWlIyEF5IpyRpWSW /ra5yktpw+0lft4F2joAC0VUkcmEQ8eMfm925E7x0QoR8t+/JUgFIg0mk7AvrrhV 1Wd3jMhb+0qHzJliRqyKAdCNKuz2rpEMkNe4ZkH7owsuRd02xzaQJeBdUKQZsYt+ 3oQPhG0HjWuWpbEmx+dg4cjtM+PdDGBto1gk/mSTVbeqVnYbh6cqsMrCItRtltaU /JS1Qy+zevbT6cpymGlI0jA/cHy4+RtazYM1eQxB4QMAxXpuTqKakdCNcUxd6/gQ xXWq80CfmDT/tsnLwlTp1aqRF0mNbFGRESX1WusWaK/45EBpV6zHxrt+eoT6VUca -----END CERTIFICATE-----Generated at Sun Jan 25 18:21:51 2026 by rpki-client