This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/zMHnxNkGZBmoNQowVHKQvmrR1So.roa File: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (raw, json) Hash identifier: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo= Subject key identifier: CC:C1:E7:C4:D9:06:64:19:A8:35:0A:30:54:72:90:BE:6A:D1:D5:2A Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B797ED20B1A30DEBF516B8B4F2F9D2E98 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/zMHnxNkGZBmoNQowVHKQvmrR1So.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208161 IP address blocks: 87.236.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d2:0b:1a:30:de:bf:51:6b:8b:4f:2f:9d:2e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccc1e7c4d9066419a8350a30547290be6ad1d52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:ea:12:26:e4:14:9b:a8:39:52:4e:49:29: dd:db:39:00:63:28:b1:8a:b9:e1:72:7d:44:c9:4a: dc:1a:c6:3e:ea:87:33:c9:ff:12:78:52:14:04:23: 7e:e2:31:4e:bd:96:0a:d3:9a:96:28:03:39:8b:dd: 92:18:74:9b:46:58:52:b0:04:c2:91:c9:f0:8b:6d: 55:4a:eb:8e:79:62:b1:59:12:9e:4c:be:08:8c:83: 99:1b:e5:9f:6d:12:53:c3:ca:1f:8c:42:3d:9a:80: 8c:ab:4a:8a:cd:fa:4b:79:f3:33:4a:f0:23:48:df: 16:49:62:58:d5:53:38:49:28:1e:e3:c0:c3:1d:e4: 2e:75:ec:ad:b2:ce:de:ce:24:f0:b1:b0:70:2d:f6: 24:5a:75:8b:9e:c0:3b:9f:af:2b:e3:fe:2c:b8:d3: e5:0c:4e:c7:3a:d2:4a:fa:b5:59:b1:ff:17:80:e7: 24:98:ff:65:a5:19:7a:51:9a:8e:23:29:0a:b9:4d: 3b:f7:53:7c:83:66:40:2f:e9:f5:8a:18:2b:71:f4: d9:4b:39:ac:b2:a2:31:c2:4f:a4:9d:db:5a:ff:e0: 29:6e:c6:29:e4:1d:46:17:ab:58:33:66:a7:92:ae: 15:71:0c:ac:21:9d:c2:80:42:3e:bb:d8:59:2c:56: 7e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C1:E7:C4:D9:06:64:19:A8:35:0A:30:54:72:90:BE:6A:D1:D5:2A X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/zMHnxNkGZBmoNQowVHKQvmrR1So.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.215.0/24 Signature Algorithm: sha256WithRSAEncryption b6:f7:56:3b:72:fc:3a:4c:fe:df:b5:d0:3a:5a:22:89:90:71: ce:bf:f1:f5:19:27:21:b3:3a:6e:ae:53:b1:82:43:d1:27:12: da:3b:9d:b3:ea:30:12:0a:03:12:a5:91:58:e7:04:2d:26:5d: 62:a6:66:3a:c1:a9:18:7c:3a:4b:d2:19:45:15:20:1d:86:30: 59:fe:17:96:5f:67:38:21:84:06:e1:12:04:00:c1:59:c5:b1: 5f:47:62:ac:67:2c:8f:48:70:df:a7:4d:13:b2:10:07:fb:8a: ce:77:ad:48:78:7a:74:a9:da:b0:27:d2:ad:41:b3:24:c6:64: a6:0a:57:0f:32:ac:4d:4c:5c:c6:d7:39:b8:21:9b:7f:24:45: 0a:43:55:09:55:be:cd:22:b6:08:4d:d7:5f:ab:85:52:5f:91: 79:cf:54:47:30:4e:b9:e0:50:c9:41:66:28:d0:0d:78:09:ed: 8e:18:95:49:3f:c7:86:30:94:35:1e:04:9a:58:21:91:37:3f: 16:68:43:0d:9a:08:c7:90:22:47:f1:e0:ea:b2:f1:a8:6a:5c: a6:4a:19:10:22:62:a4:5a:41:83:2d:de:76:95:c6:23:37:6f: 45:ac:60:60:07:a6:32:2f:0b:94:c2:72:0b:f7:4d:26:52:56: ac:e2:48:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftILGjDev1Fri08vnS6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2MxZTdjNGQ5MDY2NDE5YTgzNTBhMzA1NDcyOTBiZTZhZDFkNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5nqEibkFJuoOVJOSSnd2zkAYyix irnhcn1EyUrcGsY+6oczyf8SeFIUBCN+4jFOvZYK05qWKAM5i92SGHSbRlhSsATC kcnwi21VSuuOeWKxWRKeTL4IjIOZG+WfbRJTw8ofjEI9moCMq0qKzfpLefMzSvAj SN8WSWJY1VM4SSge48DDHeQudeytss7eziTwsbBwLfYkWnWLnsA7n68r4/4suNPl DE7HOtJK+rVZsf8XgOckmP9lpRl6UZqOIykKuU0791N8g2ZAL+n1ihgrcfTZSzms sqIxwk+kndta/+ApbsYp5B1GF6tYM2ankq4VcQysIZ3CgEI+u9hZLFZ+ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMzB58TZBmQZqDUKMFRykL5q0dUqMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvek1IbnhOa0daQm1vTlFvd1ZIS1F2bXJSMVNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+zXMA0G CSqGSIb3DQEBCwUAA4IBAQC291Y7cvw6TP7ftdA6WiKJkHHOv/H1GSchszpurlOx gkPRJxLaO52z6jASCgMSpZFY5wQtJl1ipmY6wakYfDpL0hlFFSAdhjBZ/heWX2c4 IYQG4RIEAMFZxbFfR2KsZyyPSHDfp00TshAH+4rOd61IeHp0qdqwJ9KtQbMkxmSm ClcPMqxNTFzG1zm4IZt/JEUKQ1UJVb7NIrYITddfq4VSX5F5z1RHME654FDJQWYo 0A14Ce2OGJVJP8eGMJQ1HgSaWCGRNz8WaEMNmgjHkCJH8eDqsvGoalymShkQImKk WkGDLd52lcYjN29FrGBgB6YyLwuUwnIL900mUlas4khY -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:19 2026 by rpki-client