This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Z9yStGyA0bQWhgd_2g1GL-zoJf8.roa File: Z9yStGyA0bQWhgd_2g1GL-zoJf8.roa (raw, json) Hash identifier: JKUkw9cfM03H2ybqZecgy2z3yXNDHXq/LnJixhB7la8= Subject key identifier: 67:DC:92:B4:6C:80:D1:B4:16:86:07:7F:DA:0D:46:2F:EC:E8:25:FF Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3911C8A8DEA1BC981E7745F3F91F8C Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Z9yStGyA0bQWhgd_2g1GL-zoJf8.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202689 IP address blocks: 82.179.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:11:c8:a8:de:a1:bc:98:1e:77:45:f3:f9:1f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67dc92b46c80d1b41686077fda0d462fece825ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8a:c0:a1:b3:da:93:40:9f:03:4f:e4:81:55: a4:b2:d0:82:c0:f0:fe:af:44:dc:87:ba:25:60:7e: fa:35:4c:30:6f:db:51:74:15:37:a2:93:8f:9b:da: 68:67:1c:1d:40:3c:6f:6c:44:1d:55:83:d2:90:c1: 5e:6d:35:77:4d:b7:e5:bd:f7:f4:5a:fb:c0:d2:59: 8e:ef:c1:0b:02:42:a8:e2:1b:be:31:e5:5e:1e:9d: 45:f4:24:c7:60:2e:65:1b:8e:13:79:3a:82:df:ad: 38:c4:d0:f4:96:2b:7d:c5:1d:1b:6a:13:a0:aa:04: 95:de:c7:33:60:93:f2:81:a2:4f:f3:5b:20:bf:e8: 28:cf:b8:34:fd:93:fa:af:cb:b8:f1:13:34:89:a1: c1:b4:79:76:c9:b0:c5:8a:f2:03:4b:34:6d:ab:53: 00:7b:ba:7a:e1:f8:0a:97:c1:47:ab:6c:9a:9d:51: a7:e2:68:64:93:8e:ff:e3:2f:6e:89:d8:e5:10:c7: 46:ff:4f:23:8c:dd:77:ff:2a:9d:1b:1f:6d:3d:46: 5c:95:9b:54:b4:ce:a8:de:7c:d0:67:6f:49:6b:e4: e9:0d:07:6d:80:a0:42:35:ce:10:65:b5:1d:22:fa: a3:e9:71:b1:7e:69:70:0c:e2:52:de:9b:1b:96:45: c7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DC:92:B4:6C:80:D1:B4:16:86:07:7F:DA:0D:46:2F:EC:E8:25:FF X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Z9yStGyA0bQWhgd_2g1GL-zoJf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.179.247.0/24 Signature Algorithm: sha256WithRSAEncryption 98:5a:b6:11:ec:b2:19:29:41:22:49:1f:1e:55:57:e4:52:8a: bd:c2:08:9a:53:7d:45:ae:93:d5:94:b7:58:2d:5d:0c:f3:eb: 6a:a4:7e:5b:7a:d6:03:ea:be:83:2d:a9:ab:ac:4b:cf:64:9f: 67:80:4a:26:da:9e:49:a0:2c:c3:6f:dd:ab:f8:0d:2e:a3:c5: 7c:dc:af:ad:bd:9b:4a:75:98:94:09:0c:87:3c:e7:74:ff:64: 46:58:76:a5:40:e3:d4:a9:11:19:8a:18:4c:2f:d2:46:f4:7a: e5:1a:e8:9c:e6:79:1e:cb:91:71:6d:c8:eb:14:aa:04:c0:1e: 64:83:0c:a0:b5:aa:de:9e:79:1f:21:1a:7d:42:af:a9:b0:b8: 97:84:72:95:d0:b3:5f:26:c5:19:5a:58:e0:dd:f9:a5:0e:7d: c3:e7:89:b7:e4:c8:43:f2:68:af:cd:11:50:ba:d3:46:8b:cb: 57:65:b5:7e:e9:c9:50:8d:c0:2f:9c:f5:9c:bf:00:1e:0f:a9: 8a:07:cc:b1:b7:16:ec:a1:ab:57:9e:9c:f7:55:bf:c9:fd:fc: c8:3b:a4:06:fd:3a:28:dd:10:c3:23:f5:22:63:82:d1:be:c2: dc:d0:0e:ac:0b:16:94:4a:7f:88:6d:3f:e6:ae:e6:6b:c1:89: a9:08:10:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORHIqN6hvJged0Xz+R+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2RjOTJiNDZjODBkMWI0MTY4NjA3N2ZkYTBkNDYyZmVjZTgyNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkorAobPak0CfA0/kgVWkstCCwPD+ r0Tch7olYH76NUwwb9tRdBU3opOPm9poZxwdQDxvbEQdVYPSkMFebTV3Tbflvff0 WvvA0lmO78ELAkKo4hu+MeVeHp1F9CTHYC5lG44TeTqC3604xND0lit9xR0bahOg qgSV3sczYJPygaJP81sgv+goz7g0/ZP6r8u48RM0iaHBtHl2ybDFivIDSzRtq1MA e7p64fgKl8FHq2yanVGn4mhkk47/4y9uidjlEMdG/08jjN13/yqdGx9tPUZclZtU tM6o3nzQZ29Ja+TpDQdtgKBCNc4QZbUdIvqj6XGxfmlwDOJS3psblkXHmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfckrRsgNG0FoYHf9oNRi/s6CX/MB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvWjl5U3RHeUEwYlFXaGdkXzJnMUdMLXpvSmY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUrP3MA0G CSqGSIb3DQEBCwUAA4IBAQCYWrYR7LIZKUEiSR8eVVfkUoq9wgiaU31FrpPVlLdY LV0M8+tqpH5betYD6r6DLamrrEvPZJ9ngEom2p5JoCzDb92r+A0uo8V83K+tvZtK dZiUCQyHPOd0/2RGWHalQOPUqREZihhML9JG9HrlGuic5nkey5FxbcjrFKoEwB5k gwygtarennkfIRp9Qq+psLiXhHKV0LNfJsUZWljg3fmlDn3D54m35MhD8mivzRFQ utNGi8tXZbV+6clQjcAvnPWcvwAeD6mKB8yxtxbsoatXnpz3Vb/J/fzIO6QG/Too 3RDDI/UiY4LRvsLc0A6sCxaUSn+IbT/mruZrwYmpCBAA -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:58 2026 by rpki-client