This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/ZfXj0Cs-w3tqd3nR2H1CQe4DSjk.roa File: ZfXj0Cs-w3tqd3nR2H1CQe4DSjk.roa (raw, json) Hash identifier: R+MPHlzGGciK9ag+NGwWU+mFvTI8dUefoBQsCIk0KTk= Subject key identifier: 65:F5:E3:D0:2B:3E:C3:7B:6A:77:79:D1:D8:7D:42:41:EE:03:4A:39 Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Certificate serial: 019BDFDC39CC30D4F5BC18508F779B850520 Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/ZfXj0Cs-w3tqd3nR2H1CQe4DSjk.roa Signing time: Wed 21 Jan 2026 09:21:50 +0000 ROA not before: Wed 21 Jan 2026 09:21:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 89.126.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:dc:39:cc:30:d4:f5:bc:18:50:8f:77:9b:85:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Validity Not Before: Jan 21 09:21:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65f5e3d02b3ec37b6a7779d1d87d4241ee034a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:22:7b:0d:ad:07:5c:d0:11:f9:ee:54:92: 38:2b:21:54:6a:a2:ee:db:91:08:89:db:5b:ac:b1: b9:c1:df:31:06:c0:d3:a4:dd:64:fd:16:25:f1:e8: fa:35:ff:26:80:a0:87:b2:c4:52:8c:42:2b:f3:08: a8:bd:70:db:1f:4f:5d:54:bc:73:75:f8:72:f0:b8: b0:d3:92:b9:a9:2c:dd:f2:44:49:07:a3:ef:3c:6f: ac:d4:cd:2c:5f:26:a4:d4:ea:26:d8:95:17:e9:3b: 7d:5c:5e:ba:58:39:e4:93:eb:a3:0a:93:92:e9:a6: 6f:81:a8:f8:15:7d:c6:0a:88:22:a1:7a:56:93:4a: 04:b3:ce:7a:86:ea:9b:f1:2a:e2:75:f5:4b:8b:f4: b6:ca:99:4b:8d:8d:5f:3b:d5:f6:68:cc:3e:3b:82: 77:96:6a:af:dd:d5:ce:46:48:eb:3f:7e:1e:c1:13: 4f:67:0a:cd:c3:3a:62:67:0f:1d:22:d1:53:e0:70: b8:45:69:af:91:57:c8:f1:75:d1:f1:08:7a:6c:59: 20:4f:6f:e7:92:c0:fd:a0:c2:e9:cc:b2:cd:d2:35: fc:03:e2:2f:82:ed:db:4c:7d:ae:2d:b4:48:dc:63: b2:ee:7b:7a:dd:38:ac:eb:88:4d:76:5c:51:b4:d2: 6e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F5:E3:D0:2B:3E:C3:7B:6A:77:79:D1:D8:7D:42:41:EE:03:4A:39 X509v3 Authority Key Identifier: keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/ZfXj0Cs-w3tqd3nR2H1CQe4DSjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.126.228.0/24 Signature Algorithm: sha256WithRSAEncryption a9:30:68:d1:09:e6:9b:2e:be:be:d5:03:6c:98:86:60:fe:9f: c9:27:02:d9:d5:37:dc:80:d2:f1:04:e3:4a:38:50:54:67:c6: 84:72:01:6e:b1:7a:75:73:26:14:73:48:ae:34:05:aa:77:dc: e2:54:b0:ab:b1:a2:31:af:5b:22:15:f3:a4:01:f2:dc:b3:75: a4:a7:68:a4:72:55:e6:2c:38:bd:58:ae:9c:18:8a:b5:b2:f1: d1:4c:c4:d6:e5:2c:6c:35:f9:24:fe:5f:55:31:70:3a:5e:e9: a5:85:f8:49:58:a5:69:84:bf:81:d9:56:92:5b:30:c4:2f:9c: 66:11:3b:61:9e:19:53:4e:d9:96:a5:4d:5e:46:a3:53:98:46: 2c:3c:9a:b6:a5:7d:5b:07:f7:36:16:c9:09:d2:96:13:66:b2: ca:5e:71:30:cf:f8:c4:2e:25:c1:30:76:6f:1b:3c:c9:e3:9b: 96:13:2a:ac:dd:d3:1f:53:49:08:93:bf:8a:02:a1:d6:06:b4: bc:e7:ca:cf:90:ac:e7:db:48:d8:3d:64:cc:6d:a6:fa:3a:ba: 03:bb:01:17:b2:7b:d0:2b:ff:a6:de:a3:e7:43:5e:88:14:7f: 29:1d:70:72:86:9e:48:21:94:9a:fa:f8:b3:ac:03:a2:81:23: 56:70:7a:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvf3DnMMNT1vBhQj3ebhQUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl MjlkMjUwHhcNMjYwMTIxMDkyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWY1ZTNkMDJiM2VjMzdiNmE3Nzc5ZDFkODdkNDI0MWVlMDM0YTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+oiew2tB1zQEfnuVJI4KyFUaqLu 25EIidtbrLG5wd8xBsDTpN1k/RYl8ej6Nf8mgKCHssRSjEIr8wiovXDbH09dVLxz dfhy8Liw05K5qSzd8kRJB6PvPG+s1M0sXyak1Oom2JUX6Tt9XF66WDnkk+ujCpOS 6aZvgaj4FX3GCogioXpWk0oEs856huqb8SridfVLi/S2yplLjY1fO9X2aMw+O4J3 lmqv3dXORkjrP34ewRNPZwrNwzpiZw8dItFT4HC4RWmvkVfI8XXR8Qh6bFkgT2/n ksD9oMLpzLLN0jX8A+Ivgu3bTH2uLbRI3GOy7nt63Tis64hNdlxRtNJunQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGX149ArPsN7and50dh9QkHuA0o5MB8GA1UdIwQY MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct NWNmNTZlZTQzNWIzLzEvWmZYajBDcy13M3RxZDNuUjJIMUNRZTREU2prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX7kMA0G CSqGSIb3DQEBCwUAA4IBAQCpMGjRCeabLr6+1QNsmIZg/p/JJwLZ1TfcgNLxBONK OFBUZ8aEcgFusXp1cyYUc0iuNAWqd9ziVLCrsaIxr1siFfOkAfLcs3Wkp2ikclXm LDi9WK6cGIq1svHRTMTW5SxsNfkk/l9VMXA6XumlhfhJWKVphL+B2VaSWzDEL5xm ETthnhlTTtmWpU1eRqNTmEYsPJq2pX1bB/c2FskJ0pYTZrLKXnEwz/jELiXBMHZv GzzJ45uWEyqs3dMfU0kIk7+KAqHWBrS858rPkKzn20jYPWTMbab6OroDuwEXsnvQ K/+m3qPnQ16IFH8pHXByhp5IIZSa+vizrAOigSNWcHqh -----END CERTIFICATE-----Generated at Sun Jan 25 07:09:11 2026 by rpki-client