This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ZcYE9Z8XNL6uDMWvJ-FYS3N0Gq8.roa File: ZcYE9Z8XNL6uDMWvJ-FYS3N0Gq8.roa (raw, json) Hash identifier: 6BoEMgR0PCrMYtIyRtSeyIGPN0PoOmNZmzd0tHXo3EU= Subject key identifier: 65:C6:04:F5:9F:17:34:BE:AE:0C:C5:AF:27:E1:58:4B:73:74:1A:AF Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019B7E383B73CF9AE681E39D47A8964F3CAD Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ZcYE9Z8XNL6uDMWvJ-FYS3N0Gq8.roa Signing time: Fri 02 Jan 2026 10:19:33 +0000 ROA not before: Fri 02 Jan 2026 10:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20712 IP address blocks: 178.211.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3b:73:cf:9a:e6:81:e3:9d:47:a8:96:4f:3c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65c604f59f1734beae0cc5af27e1584b73741aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:7c:f9:b7:22:ba:fe:6a:6c:9f:be:c0:a1: 41:44:75:1a:9a:50:df:e3:d2:35:f0:b3:ec:94:1c: 03:65:30:02:41:74:b3:42:88:b8:5b:8e:57:c6:16: d4:72:6f:2a:c3:cc:0f:0e:04:c6:5a:af:52:d1:2c: e8:14:81:63:17:7c:20:1b:5f:24:ce:8d:b5:69:7b: 64:73:69:e9:36:5b:e1:43:9a:e4:a8:ad:10:1c:51: 0d:67:0d:87:98:b6:a8:ed:d8:b2:9d:0a:43:de:47: af:f1:59:d7:26:16:78:8e:36:77:a6:a7:ca:09:47: 88:af:03:4e:de:90:d9:23:66:1f:ec:67:49:a3:ed: 07:99:be:38:7a:af:9b:0b:58:41:75:4e:e4:39:ca: 44:16:bb:d5:d7:c4:c5:cd:f9:29:c8:64:99:89:e0: fc:04:e3:1a:cc:2b:82:44:0f:18:31:5d:13:02:77: 12:49:d5:25:b1:f6:75:cc:11:2e:7f:fe:4b:47:26: 7d:9a:be:dc:b7:36:9b:19:25:42:84:22:82:10:0f: b1:02:88:1d:ad:d8:b9:63:12:5b:1c:a2:d1:a5:45: 68:44:7f:97:41:54:3c:6a:a2:5a:10:dd:01:1a:20: 9e:3b:18:28:01:97:f1:e7:8a:0e:e2:74:dd:b6:02: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C6:04:F5:9F:17:34:BE:AE:0C:C5:AF:27:E1:58:4B:73:74:1A:AF X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ZcYE9Z8XNL6uDMWvJ-FYS3N0Gq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.211.150.0/24 Signature Algorithm: sha256WithRSAEncryption 00:f2:38:4b:cb:b6:63:28:cd:23:36:95:02:0c:12:12:f9:c4: 85:21:b6:18:bd:37:e2:11:30:08:01:53:0e:32:0b:8e:8f:2d: 1f:89:98:2b:11:31:48:6a:ef:9d:63:21:52:51:9f:2b:83:1f: 27:51:d8:c6:44:6e:ec:89:1f:b4:02:ee:c2:b7:6b:c6:7b:56: b6:0b:fa:e7:20:3b:17:e5:7f:40:18:bb:01:27:25:01:55:53: e1:ec:9e:1b:43:5a:e5:89:d7:86:73:2c:3d:51:25:60:e6:20: 45:60:44:a7:e0:f1:2e:cf:1e:5f:f3:48:fe:19:d8:cd:40:bf: fe:15:56:b2:06:f9:aa:18:4f:32:f5:c5:38:1c:9b:a0:fb:4b: ce:58:2d:06:17:3f:ac:80:3c:33:37:e3:35:b8:6a:2e:d2:8f: 4b:a2:e4:14:05:5a:33:22:72:71:78:bc:27:e8:23:1a:e3:27: 34:1a:23:11:84:f3:ed:51:c1:e6:49:cf:17:fc:31:03:86:22: d6:00:18:77:e0:0a:e0:86:c4:77:28:24:c2:f5:4e:5f:b1:1c: fa:3f:f6:a6:03:6b:3f:6c:53:20:ff:85:53:e6:aa:d7:19:ed: 1d:e0:c5:ae:ff:1d:31:99:9d:98:96:f7:36:e6:00:2a:ae:2a: 43:43:3f:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODtzz5rmgeOdR6iWTzytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWM2MDRmNTlmMTczNGJlYWUwY2M1YWYyN2UxNTg0YjczNzQxYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncd8+bciuv5qbJ++wKFBRHUamlDf 49I18LPslBwDZTACQXSzQoi4W45XxhbUcm8qw8wPDgTGWq9S0SzoFIFjF3wgG18k zo21aXtkc2npNlvhQ5rkqK0QHFENZw2HmLao7diynQpD3kev8VnXJhZ4jjZ3pqfK CUeIrwNO3pDZI2Yf7GdJo+0Hmb44eq+bC1hBdU7kOcpEFrvV18TFzfkpyGSZieD8 BOMazCuCRA8YMV0TAncSSdUlsfZ1zBEuf/5LRyZ9mr7ctzabGSVChCKCEA+xAogd rdi5YxJbHKLRpUVoRH+XQVQ8aqJaEN0BGiCeOxgoAZfx54oO4nTdtgJP7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGXGBPWfFzS+rgzFryfhWEtzdBqvMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvWmNZRTlaOFhOTDZ1RE1XdkotRllTM04wR3E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstOWMA0G CSqGSIb3DQEBCwUAA4IBAQAA8jhLy7ZjKM0jNpUCDBIS+cSFIbYYvTfiETAIAVMO MguOjy0fiZgrETFIau+dYyFSUZ8rgx8nUdjGRG7siR+0Au7Ct2vGe1a2C/rnIDsX 5X9AGLsBJyUBVVPh7J4bQ1rlideGcyw9USVg5iBFYESn4PEuzx5f80j+GdjNQL/+ FVayBvmqGE8y9cU4HJug+0vOWC0GFz+sgDwzN+M1uGou0o9LouQUBVozInJxeLwn 6CMa4yc0GiMRhPPtUcHmSc8X/DEDhiLWABh34ArghsR3KCTC9U5fsRz6P/amA2s/ bFMg/4VT5qrXGe0d4MWu/x0xmZ2Ylvc25gAqripDQz9h -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:17 2026 by rpki-client