This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ZEDfVTNeg4Y0ef7ALZ2obXiMEOU.roa File: ZEDfVTNeg4Y0ef7ALZ2obXiMEOU.roa (raw, json) Hash identifier: 9LBmxkEFLS3B5qGhxSIOAUgF8/Bgd781ng14JgpxwnU= Subject key identifier: 64:40:DF:55:33:5E:83:86:34:79:FE:C0:2D:9D:A8:6D:78:8C:10:E5 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5CFB4E78CBFA9F121313FFAF1E9351 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ZEDfVTNeg4Y0ef7ALZ2obXiMEOU.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6873 IP address blocks: 89.174.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fb:4e:78:cb:fa:9f:12:13:13:ff:af:1e:93:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6440df55335e83863479fec02d9da86d788c10e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:27:ff:3c:80:50:70:24:4a:48:a9:b2:30:51: b8:df:fb:d5:c5:91:00:2e:a9:3f:30:28:c1:c7:dc: 83:75:6f:7d:cb:1c:c4:97:13:52:49:b8:ac:f8:fb: 23:1e:76:84:f2:48:8e:88:5a:30:8c:f2:cc:d3:a7: 42:b4:70:3a:72:49:27:28:09:9b:cd:00:1a:24:39: 5b:d1:84:99:72:7d:f0:ab:66:55:89:bf:ec:46:9d: 7b:6a:cc:b0:ba:2d:05:1c:1e:7a:f0:cc:d5:90:70: 0b:8d:d6:73:22:bc:8c:7e:d2:db:15:2f:e1:43:0a: e4:ab:a7:51:46:8c:7a:e6:d3:ed:16:0c:fb:81:e8: 3e:94:72:5d:87:13:86:e4:3d:69:01:09:e5:42:00: 30:d3:75:4d:e0:b5:55:3d:f6:11:a2:58:6c:f3:cc: 5e:b4:ca:87:c9:0f:f5:7d:84:9c:f7:72:1d:8c:c2: 09:f9:de:d3:f9:4c:a7:c8:ee:50:40:08:c6:13:75: ac:b8:76:81:26:cd:c8:12:20:0b:14:b9:3c:78:b6: 4e:5b:f4:3c:c1:9e:50:5c:75:06:71:3f:84:a6:3d: 79:37:c4:51:cb:a8:f3:52:f1:f5:01:e8:9f:23:ac: 78:fe:9a:fd:66:3e:59:14:51:9a:5b:0d:4a:5c:33: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:40:DF:55:33:5E:83:86:34:79:FE:C0:2D:9D:A8:6D:78:8C:10:E5 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ZEDfVTNeg4Y0ef7ALZ2obXiMEOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.174.75.0/24 Signature Algorithm: sha256WithRSAEncryption 59:7b:3d:80:f0:ab:f0:ed:19:32:82:ba:26:47:a4:f0:a2:b5: 21:23:5a:01:19:72:64:3c:5a:8b:4a:36:ed:a5:35:ba:d2:9b: 47:5f:b4:58:b6:c2:62:cd:d1:4b:ed:f1:61:cb:5f:60:f3:93: 06:03:31:35:d7:4c:46:11:fc:ea:81:18:e3:4d:60:36:6e:24: 3c:7f:d3:8b:c4:20:ca:65:36:0e:bf:9b:ad:c2:99:6e:b8:b4: 20:79:c5:b0:77:a8:7a:ed:be:5c:1d:b8:6e:51:fe:a8:da:0e: e0:a2:30:5a:c0:9d:70:b3:78:f1:bc:0e:a2:70:0b:0a:cc:6c: 6a:cc:c2:62:a0:25:d0:f4:72:61:c6:d2:67:5b:05:42:2c:fb: 06:df:8d:6a:2f:33:59:ce:5a:fd:a0:77:48:61:d0:40:15:b0: 2a:1f:6d:91:d5:cb:30:ac:46:c6:74:0a:19:fb:c1:45:21:93: 46:a4:a1:ba:ed:69:85:7f:19:e1:69:ec:7c:65:0c:ef:1c:87: f2:dc:2c:b5:05:fd:1c:bb:b7:e8:6f:f4:5a:0f:6a:8a:84:83: cc:6c:e4:b6:01:d4:72:4f:1d:b8:c5:7d:f7:30:f4:93:9a:e5: 61:e8:fd:3e:4b:ac:d3:c7:99:c5:51:75:3a:64:79:8b:eb:e4: 8f:fc:05:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPtOeMv6nxITE/+vHpNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDQwZGY1NTMzNWU4Mzg2MzQ3OWZlYzAyZDlkYTg2ZDc4OGMxMGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yf/PIBQcCRKSKmyMFG43/vVxZEA Lqk/MCjBx9yDdW99yxzElxNSSbis+PsjHnaE8kiOiFowjPLM06dCtHA6ckknKAmb zQAaJDlb0YSZcn3wq2ZVib/sRp17asywui0FHB568MzVkHALjdZzIryMftLbFS/h Qwrkq6dRRox65tPtFgz7geg+lHJdhxOG5D1pAQnlQgAw03VN4LVVPfYRolhs88xe tMqHyQ/1fYSc93IdjMIJ+d7T+UynyO5QQAjGE3WsuHaBJs3IEiALFLk8eLZOW/Q8 wZ5QXHUGcT+Epj15N8RRy6jzUvH1AeifI6x4/pr9Zj5ZFFGaWw1KXDMVGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGRA31UzXoOGNHn+wC2dqG14jBDlMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvWkVEZlZUTmVnNFkwZWY3QUxaMm9iWGlNRU9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWa5LMA0G CSqGSIb3DQEBCwUAA4IBAQBZez2A8Kvw7RkygromR6TworUhI1oBGXJkPFqLSjbt pTW60ptHX7RYtsJizdFL7fFhy19g85MGAzE110xGEfzqgRjjTWA2biQ8f9OLxCDK ZTYOv5utwpluuLQgecWwd6h67b5cHbhuUf6o2g7gojBawJ1ws3jxvA6icAsKzGxq zMJioCXQ9HJhxtJnWwVCLPsG341qLzNZzlr9oHdIYdBAFbAqH22R1cswrEbGdAoZ +8FFIZNGpKG67WmFfxnhaex8ZQzvHIfy3Cy1Bf0cu7fob/RaD2qKhIPMbOS2AdRy Tx24xX33MPSTmuVh6P0+S6zTx5nFUXU6ZHmL6+SP/AWL -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:10 2026 by rpki-client