This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa File: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (raw, json) Hash identifier: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg= Subject key identifier: F5:96:70:22:C1:27:E7:EF:71:0D:0C:1C:AA:C6:18:4E:3C:5B:8C:90 Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb Certificate serial: 019B7A59C2AD495A6D6866A501A3572957F8 Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa Signing time: Thu 01 Jan 2026 16:17:41 +0000 ROA not before: Thu 01 Jan 2026 16:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47849 IP address blocks: 83.222.162.0/24 maxlen: 24 185.165.223.0/24 maxlen: 24 212.5.55.0/24 maxlen: 24 212.70.134.0/23 maxlen: 23 212.70.134.0/24 maxlen: 24 212.70.135.0/24 maxlen: 24 212.70.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:c2:ad:49:5a:6d:68:66:a5:01:a3:57:29:57:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb Validity Not Before: Jan 1 16:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5967022c127e7ef710d0c1caac6184e3c5b8c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:03:80:a8:a1:12:cc:1a:63:92:21:a4:e9:97: 17:49:14:42:8d:e6:cd:3e:25:f1:1c:b4:6b:66:84: 42:01:3d:c4:9e:76:9d:19:cf:08:b1:d2:89:14:c0: 79:b9:df:cd:30:25:64:1d:f8:0c:b3:71:e9:65:ce: b9:dd:44:57:76:c4:ae:31:63:35:38:61:63:42:c0: 49:04:a2:37:bb:ff:7c:72:6e:0a:57:da:66:e6:f7: fd:9d:c2:47:0f:2a:42:fc:cb:41:b1:5e:ba:b5:b0: ff:ca:fa:43:aa:e9:99:0f:77:98:ee:02:d0:89:44: b9:60:82:b3:7d:10:a4:b0:42:4c:f4:3b:fd:bf:b7: 1a:82:00:ef:52:6b:1a:02:4a:77:91:fd:87:ec:dc: 5c:51:46:47:92:f3:ec:b0:ed:d0:53:88:50:27:8a: 81:94:66:3f:7d:69:08:cf:49:00:55:24:50:85:c2: 03:fe:65:e7:92:d2:d4:29:60:fa:d3:64:9c:32:3f: 21:42:b2:a3:7e:c1:09:1e:b1:29:6a:9a:41:4b:3d: 53:a8:13:9b:fc:c4:7b:6c:67:15:2d:33:2c:71:b7: 88:0d:9b:26:bd:04:78:68:1f:04:9c:8d:b3:b6:86: 1d:28:bc:f3:6d:70:c8:44:87:82:ce:91:b9:b4:99: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:96:70:22:C1:27:E7:EF:71:0D:0C:1C:AA:C6:18:4E:3C:5B:8C:90 X509v3 Authority Key Identifier: keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.222.162.0/24 185.165.223.0/24 212.5.55.0/24 212.70.134.0/23 212.70.138.0/24 Signature Algorithm: sha256WithRSAEncryption af:2b:c9:bf:ef:5f:41:65:e5:66:2a:2a:00:bf:2c:94:a6:95: 01:9e:66:68:7a:d7:b8:e0:98:24:98:da:49:e7:29:2a:ba:8e: b6:32:bc:33:c5:49:31:07:b9:a9:ca:9d:8f:13:2b:63:03:31: 9a:37:8e:93:5a:c2:fc:bc:05:53:1d:0b:27:04:5f:18:6a:68: 31:67:d6:a6:55:8b:db:07:51:4a:a5:bc:96:aa:2f:80:e7:38: 50:f6:41:31:e0:d7:89:86:40:fe:d1:a8:59:60:44:89:d7:e3: 2a:e5:a9:53:a2:1f:bd:3f:08:d7:f1:59:6d:50:b6:49:71:0a: c3:4d:49:3a:c8:36:6d:ed:57:93:6b:b5:aa:c4:8f:6b:ac:51: 5e:29:aa:9d:ad:e3:17:bd:37:d5:f3:f9:32:e5:ec:d2:88:9e: 8a:ff:a4:81:1b:b6:2e:82:b8:84:cd:5f:65:1f:63:20:2e:dc: 5d:02:3c:7c:25:9f:3f:1e:a7:e0:54:a2:a7:b0:84:d3:e2:3a: e2:ff:c7:20:51:ce:24:d2:fd:6f:42:7b:cf:5c:fb:d5:84:e1: 28:15:63:10:e1:73:7f:6f:1b:e7:d5:9c:89:8e:59:aa:00:96: 5f:11:96:50:98:cd:2e:16:44:88:1b:e7:43:3d:00:9e:06:f9: 0e:26:8e:cc -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6WcKtSVptaGalAaNXKVf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZWVkYzMzYWE0NDI5MDcxODlmMGIzYzU2MzgzNjk1MWZi MTg1YmIwHhcNMjYwMTAxMTYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTk2NzAyMmMxMjdlN2VmNzEwZDBjMWNhYWM2MTg0ZTNjNWI4YzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gOAqKESzBpjkiGk6ZcXSRRCjebN PiXxHLRrZoRCAT3EnnadGc8IsdKJFMB5ud/NMCVkHfgMs3HpZc653URXdsSuMWM1 OGFjQsBJBKI3u/98cm4KV9pm5vf9ncJHDypC/MtBsV66tbD/yvpDqumZD3eY7gLQ iUS5YIKzfRCksEJM9Dv9v7caggDvUmsaAkp3kf2H7NxcUUZHkvPssO3QU4hQJ4qB lGY/fWkIz0kAVSRQhcID/mXnktLUKWD602ScMj8hQrKjfsEJHrEpappBSz1TqBOb /MR7bGcVLTMscbeIDZsmvQR4aB8EnI2ztoYdKLzzbXDIRIeCzpG5tJnIuQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPWWcCLBJ+fvcQ0MHKrGGE48W4yQMB8GA1UdIwQY MBaAFBDu3DOqRCkHGJ8LPFY4NpUfsYW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMt NTM0ZWJlZWYzMzg5LzEvOVpad0lzRW41LTl4RFF3Y3FzWVlUanhiakpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMtNTM0ZWJlZWYzMzg5 LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAU96iAwQA uaXfAwQA1AU3AwQB1EaGAwQA1EaKMA0GCSqGSIb3DQEBCwUAA4IBAQCvK8m/719B ZeVmKioAvyyUppUBnmZoete44JgkmNpJ5ykquo62MrwzxUkxB7mpyp2PEytjAzGa N46TWsL8vAVTHQsnBF8YamgxZ9amVYvbB1FKpbyWqi+A5zhQ9kEx4NeJhkD+0ahZ YESJ1+Mq5alToh+9PwjX8VltULZJcQrDTUk6yDZt7VeTa7WqxI9rrFFeKaqdreMX vTfV8/ky5ezSiJ6K/6SBG7YugriEzV9lH2MgLtxdAjx8JZ8/HqfgVKKnsITT4jri /8cgUc4k0v1vQnvPXPvVhOEoFWMQ4XN/bxvn1ZyJjlmqAJZfEZZQmM0uFkSIG+dD PQCeBvkOJo7M -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:10 2026 by rpki-client