This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa File: zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa (raw, json) Hash identifier: eLkLQOUvRvhD6ZfGFzHN4nd/jJr/zq6oP4KeFHqbKSs= Subject key identifier: CC:C4:18:6B:FC:F4:11:3A:2E:BE:0A:0F:FA:14:45:6B:71:33:EC:CB Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f Certificate serial: 019B797EF2BFBB8F01D31B9C9D27B7EA050B Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199496 IP address blocks: 152.89.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f2:bf:bb:8f:01:d3:1b:9c:9d:27:b7:ea:05:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572b4ed92682d718a8fc4488140027406960795f Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccc4186bfcf4113a2ebe0a0ffa14456b7133eccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:a9:ca:b9:68:05:f0:29:69:b9:39:1f:fe: c6:1b:1e:90:16:1f:57:76:ee:3e:6d:62:f1:14:b7: 79:6e:f1:a5:9f:a5:34:14:4c:d7:c9:cb:09:ca:98: c6:69:74:39:31:b6:d6:39:3b:49:07:c2:6b:aa:98: 4e:7e:19:3e:fa:06:2a:9b:ce:d2:e5:b2:a6:27:b6: df:61:e9:32:ab:f4:65:04:70:89:08:f4:59:f4:5a: d9:7e:e5:2a:00:b8:bf:3b:7b:26:2f:f3:82:d8:d7: 6f:77:0c:9b:db:ed:8c:19:65:12:db:ea:2e:d3:c3: a4:04:23:2e:c2:da:5f:e6:00:69:0a:9a:2e:f0:31: c0:1d:b0:34:73:fa:37:72:73:59:28:fb:09:16:65: da:5f:cb:49:27:1e:13:28:6e:97:17:6b:c4:2e:54: 37:26:1a:5e:20:7c:95:41:66:cf:e8:e2:da:ba:96: a7:84:1a:14:66:71:c9:e1:09:fa:f0:c7:4d:91:3a: 5b:09:0c:7f:8f:6e:f3:81:f6:80:13:d4:1c:5d:95: 8e:70:12:53:ef:36:83:06:4e:6c:e3:fd:dd:c5:de: 9f:56:e8:e7:7d:12:4b:1a:57:f2:4e:b2:d5:70:19: 53:81:34:61:fa:50:6f:d4:04:3f:8c:19:5f:f5:10: 85:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C4:18:6B:FC:F4:11:3A:2E:BE:0A:0F:FA:14:45:6B:71:33:EC:CB X509v3 Authority Key Identifier: keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/zMQYa_z0ETouvgoP-hRFa3Ez7Ms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.34.0/23 Signature Algorithm: sha256WithRSAEncryption 90:54:51:9e:4b:7f:87:3b:38:c6:83:72:24:39:9e:e9:f2:8b: a4:22:31:26:59:99:7d:88:3a:7a:8e:2a:f6:61:ed:5f:c5:f1: 68:aa:8d:4a:09:fc:42:3e:08:4c:cf:df:d7:cc:21:9b:6b:e5: 7e:4d:98:5b:2a:53:f8:7e:48:bc:30:98:ad:ef:ca:3a:94:7e: 43:4f:ea:54:6a:47:26:bd:5c:a6:5e:bd:c8:e5:95:3a:1c:97: 79:a9:af:a0:37:6f:e8:cc:4f:fa:b2:e3:37:0b:c1:8e:b4:e3: 80:79:0e:06:19:21:ea:1c:82:54:1e:c1:66:36:67:54:f5:05: eb:49:c1:18:f7:36:d8:d9:be:9f:e4:ba:e3:0b:da:48:49:c0: 2a:71:89:d9:57:cf:9f:7a:88:aa:69:ff:ff:db:28:6d:95:78: cb:d0:f0:84:89:a4:f6:86:ea:3a:b1:29:95:a8:c4:3d:cd:71: e4:fc:52:5a:92:2c:ca:e0:f4:d5:1f:15:f8:72:99:1b:90:95: 62:08:b6:89:80:e7:b5:9b:83:2b:5b:0e:17:f1:10:d6:3a:be: c2:3d:ed:0d:83:99:e3:9d:7f:2e:30:04:56:b2:e6:11:fa:d8: 30:37:a8:a8:71:6b:f7:64:92:ee:22:70:7b:20:30:fd:36:2f: 67:7d:3b:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvK/u48B0xucnSe36gULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmI0ZWQ5MjY4MmQ3MThhOGZjNDQ4ODE0MDAyNzQwNjk2 MDc5NWYwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2M0MTg2YmZjZjQxMTNhMmViZTBhMGZmYTE0NDU2YjcxMzNlY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4apyrloBfApabk5H/7GGx6QFh9X du4+bWLxFLd5bvGln6U0FEzXycsJypjGaXQ5MbbWOTtJB8JrqphOfhk++gYqm87S 5bKmJ7bfYekyq/RlBHCJCPRZ9FrZfuUqALi/O3smL/OC2Ndvdwyb2+2MGWUS2+ou 08OkBCMuwtpf5gBpCpou8DHAHbA0c/o3cnNZKPsJFmXaX8tJJx4TKG6XF2vELlQ3 JhpeIHyVQWbP6OLaupanhBoUZnHJ4Qn68MdNkTpbCQx/j27zgfaAE9QcXZWOcBJT 7zaDBk5s4/3dxd6fVujnfRJLGlfyTrLVcBlTgTRh+lBv1AQ/jBlf9RCFDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMzEGGv89BE6Lr4KD/oURWtxM+zLMB8GA1UdIwQY MBaAFFcrTtkmgtcYqPxEiBQAJ0BpYHlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEt YWY5ZmMwMTJiZDU0LzEvek1RWWFfejBFVG91dmdvUC1oUkZhM0V6N01zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEtYWY5ZmMwMTJiZDU0 LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmFkiMA0G CSqGSIb3DQEBCwUAA4IBAQCQVFGeS3+HOzjGg3IkOZ7p8oukIjEmWZl9iDp6jir2 Ye1fxfFoqo1KCfxCPghMz9/XzCGba+V+TZhbKlP4fki8MJit78o6lH5DT+pUakcm vVymXr3I5ZU6HJd5qa+gN2/ozE/6suM3C8GOtOOAeQ4GGSHqHIJUHsFmNmdU9QXr ScEY9zbY2b6f5LrjC9pIScAqcYnZV8+feoiqaf//2yhtlXjL0PCEiaT2huo6sSmV qMQ9zXHk/FJakizK4PTVHxX4cpkbkJViCLaJgOe1m4MrWw4X8RDWOr7CPe0Ng5nj nX8uMARWsuYR+tgwN6iocWv3ZJLuInB7IDD9Ni9nfTs+ -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:50 2026 by rpki-client