This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/zOcZFMTpEF6OSN7SXU2fZYi_etY.roa File: zOcZFMTpEF6OSN7SXU2fZYi_etY.roa (raw, json) Hash identifier: 0WP3W1lU5Uh4EKzA0gaX4FMMtlKZAeyEsosx+rHft2M= Subject key identifier: CC:E7:19:14:C4:E9:10:5E:8E:48:DE:D2:5D:4D:9F:65:88:BF:7A:D6 Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f Certificate serial: 019B7910EE442387C3AA8B7039E14D07F8C3 Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/zOcZFMTpEF6OSN7SXU2fZYi_etY.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2418 IP address blocks: 192.54.174.0/24 maxlen: 24 192.54.175.0/24 maxlen: 24 192.54.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ee:44:23:87:c3:aa:8b:70:39:e1:4d:07:f8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cce71914c4e9105e8e48ded25d4d9f6588bf7ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:02:d6:4a:e1:42:82:58:0d:0a:87:8f:91:b6: 2a:92:ab:fb:c7:a4:34:2e:54:f8:f6:2c:b5:19:8a: 20:1a:b5:b1:08:e8:37:59:e4:ba:69:28:ce:9d:25: 9b:dc:83:ad:7b:b3:08:c9:2e:a3:b4:e7:09:94:d1: 4b:b4:e8:fc:e1:5b:e7:c9:7b:df:c6:93:40:3d:c5: 71:cc:d0:4c:96:2c:5d:e7:16:f2:d3:2c:31:70:9e: ab:f0:46:30:61:fa:39:47:1f:76:16:79:4c:b4:b0: 42:1f:11:04:9c:62:8a:16:3c:b2:7f:94:f3:cc:f6: 34:03:75:4e:85:56:62:49:2f:9b:9c:35:bf:b9:42: 7b:24:25:9e:0b:f9:c1:88:fd:58:27:b6:64:18:c5: 81:5a:a4:79:94:c1:f1:f1:18:4c:82:f5:50:95:37: e2:5f:9e:9a:73:ed:41:ad:9e:05:1e:38:ed:59:92: b0:4d:d8:4e:3e:32:66:ed:95:94:96:6e:c3:b3:15: 23:32:d5:4f:88:c7:f5:13:5f:6d:27:4f:66:11:0a: ed:98:2c:ce:fb:b4:7d:0a:4d:b8:7d:b6:fa:23:dc: e4:5f:63:dd:d7:20:c4:39:01:56:9a:eb:62:c8:7a: 4c:cd:b6:e9:22:f2:06:59:2e:5b:9f:ac:5f:53:ce: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E7:19:14:C4:E9:10:5E:8E:48:DE:D2:5D:4D:9F:65:88:BF:7A:D6 X509v3 Authority Key Identifier: keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/zOcZFMTpEF6OSN7SXU2fZYi_etY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.54.174.0-192.54.176.255 Signature Algorithm: sha256WithRSAEncryption 5a:d8:0c:2b:8c:d2:5f:0a:a0:ad:fc:61:63:e2:e7:d5:4c:df: e1:9e:ad:f8:dd:57:ee:8d:06:cd:6d:8a:fa:56:b5:d6:70:af: a2:6a:67:cd:ad:f4:c3:6c:b6:59:6f:6e:c2:cb:a4:4b:a6:ba: 1b:48:9d:b3:a7:dc:2c:5e:80:7c:75:8c:15:de:43:b7:1e:f5: c0:42:d7:aa:87:7e:e1:6b:39:8c:d8:ef:cb:57:3c:3f:7a:14: e9:a1:a7:b2:87:02:21:85:59:67:58:6a:b8:d8:ef:27:0c:7f: ec:fc:77:f5:b1:e2:a3:e2:83:e1:66:79:59:3e:48:da:c3:c1: 65:0f:8d:db:89:6f:ea:c3:54:91:67:ef:31:bc:65:73:a1:42: 08:40:c6:0d:85:40:86:98:8b:ff:f4:f5:02:73:75:f1:1b:d1: 46:c3:d6:4f:ff:85:ee:63:fb:5d:1a:c5:14:98:1f:c5:8a:ad: ab:5d:85:eb:19:09:32:65:a3:5e:bc:4d:2f:ca:34:c0:5d:eb: ab:b2:f0:06:9f:36:71:a0:8b:ff:0e:79:3d:75:d7:db:ec:7e: ba:7c:23:fc:bc:3b:e2:be:5f:be:93:de:5e:7a:a1:07:ee:d4: 80:04:f9:25:8a:63:90:9a:28:dd:6b:a8:b6:0d:ab:fd:6f:e2: a3:55:74:9f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EO5EI4fDqotwOeFNB/jDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMWQyMjhiNmFjYmQxODAzY2ZmNTYwZmE0YjQyZjgzMmQy ODMyNGYwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2U3MTkxNGM0ZTkxMDVlOGU0OGRlZDI1ZDRkOWY2NTg4YmY3YWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ALWSuFCglgNCoePkbYqkqv7x6Q0 LlT49iy1GYogGrWxCOg3WeS6aSjOnSWb3IOte7MIyS6jtOcJlNFLtOj84VvnyXvf xpNAPcVxzNBMlixd5xby0ywxcJ6r8EYwYfo5Rx92FnlMtLBCHxEEnGKKFjyyf5Tz zPY0A3VOhVZiSS+bnDW/uUJ7JCWeC/nBiP1YJ7ZkGMWBWqR5lMHx8RhMgvVQlTfi X56ac+1BrZ4FHjjtWZKwTdhOPjJm7ZWUlm7DsxUjMtVPiMf1E19tJ09mEQrtmCzO +7R9Ck24fbb6I9zkX2Pd1yDEOQFWmutiyHpMzbbpIvIGWS5bn6xfU87sYwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMznGRTE6RBejkje0l1Nn2WIv3rWMB8GA1UdIwQY MBaAFFsdIotqy9GAPP9WD6S0L4MtKDJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3gwaWkyckwwWUE4XzFZUHBMUXZneTBvTWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZWVkMDUtMTQ3Ny00ZjA1LThhZTMt NjE4ZTg5YjEyYzQxLzEvek9jWkZNVHBFRjZPU043U1hVMmZaWWlfZXRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85ZWVkMDUtMTQ3Ny00ZjA1LThhZTMtNjE4ZTg5YjEyYzQx LzEvV3gwaWkyckwwWUE4XzFZUHBMUXZneTBvTWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHANq4D BADANrAwDQYJKoZIhvcNAQELBQADggEBAFrYDCuM0l8KoK38YWPi59VM3+Gerfjd V+6NBs1tivpWtdZwr6JqZ82t9MNstllvbsLLpEumuhtInbOn3CxegHx1jBXeQ7ce 9cBC16qHfuFrOYzY78tXPD96FOmhp7KHAiGFWWdYarjY7ycMf+z8d/Wx4qPig+Fm eVk+SNrDwWUPjduJb+rDVJFn7zG8ZXOhQghAxg2FQIaYi//09QJzdfEb0UbD1k// he5j+10axRSYH8WKratdhesZCTJlo168TS/KNMBd66uy8AafNnGgi/8OeT1119vs frp8I/y8O+K+X76T3l56oQfu1IAE+SWKY5CaKN1rqLYNq/1v4qNVdJ8= -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:51 2026 by rpki-client