This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/zKOI_3lej9icw_aTm3PEM1SApkE.roa File: zKOI_3lej9icw_aTm3PEM1SApkE.roa (raw, json) Hash identifier: J5AQoEFLTdlzSmKbeqXCxm1OdussHB+lHvKODys5oTg= Subject key identifier: CC:A3:88:FF:79:5E:8F:D8:9C:C3:F6:93:9B:73:C4:33:54:80:A6:41 Certificate issuer: /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c Certificate serial: 019B7D5C15288A076D998437D9E41AFAC83F Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/zKOI_3lej9icw_aTm3PEM1SApkE.roa Signing time: Fri 02 Jan 2026 06:19:05 +0000 ROA not before: Fri 02 Jan 2026 06:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205308 IP address blocks: 194.55.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:15:28:8a:07:6d:99:84:37:d9:e4:1a:fa:c8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c Validity Not Before: Jan 2 06:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cca388ff795e8fd89cc3f6939b73c4335480a641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:3e:54:cb:04:d4:53:e0:7f:0f:75:f1:e4: 82:b3:46:ce:9d:f0:57:b1:08:fb:7f:06:68:e1:0d: 5f:9c:65:fd:67:15:a6:ec:29:98:45:31:7c:38:b6: ef:b4:f0:61:2a:1d:3b:db:ef:44:49:17:ca:6b:4a: 81:98:38:44:32:aa:c4:47:eb:c2:36:d4:7e:ac:45: 5c:c6:02:d0:ba:51:ef:0e:81:ec:65:70:00:3a:05: 3f:f9:85:ed:08:53:f0:89:39:88:09:d4:8c:49:ec: fe:3c:37:73:fe:da:e4:a2:c8:02:05:eb:9e:a8:57: 12:c6:fd:af:ec:7e:ea:9c:30:a0:13:7b:bd:2f:d0: e5:a9:51:d1:92:8e:50:f6:0f:62:db:69:b7:5f:72: 13:5d:c1:17:61:a2:3b:15:f6:6f:22:2f:7c:c7:91: d6:1f:82:95:53:a4:53:09:e6:2b:57:09:f6:74:e2: 2b:74:d1:78:b9:09:2a:7a:3f:0a:d0:23:7d:28:90: 2a:cc:d5:4c:1b:5c:48:9d:3d:36:08:34:1d:fc:c7: 39:c7:8d:91:0b:25:75:9d:78:2a:30:1b:ea:48:93: 14:8c:ec:49:fc:5b:1b:76:d6:51:0d:2d:21:09:3f: f7:c2:f2:7d:e5:72:c9:ba:7f:c7:25:76:04:6a:01: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A3:88:FF:79:5E:8F:D8:9C:C3:F6:93:9B:73:C4:33:54:80:A6:41 X509v3 Authority Key Identifier: keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/zKOI_3lej9icw_aTm3PEM1SApkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.7.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:92:88:36:98:ef:44:f5:c1:1c:34:82:61:ad:0a:a9:84:77: 53:7a:49:87:df:71:a8:d6:10:a9:70:51:53:57:14:db:e3:e6: dc:bd:6a:4f:b2:00:eb:e5:7b:79:7b:2b:72:9a:52:c7:00:66: ce:3a:ef:37:ce:cd:97:96:3d:25:ce:5b:7b:cb:21:01:33:6a: a4:98:9f:88:9c:af:73:87:f2:18:ac:d1:94:e8:73:42:f8:96: 91:eb:10:5d:6f:11:c4:65:09:95:22:03:fc:d8:a0:2d:56:65: 66:e2:5a:ca:af:92:70:30:52:ac:4f:92:d0:cc:eb:99:3f:69: 5a:59:e0:96:ac:7b:4e:13:4c:5e:3a:2c:a1:97:21:58:f8:4a: 04:b2:77:bc:46:53:2e:bc:b8:1b:e5:df:f0:1a:e9:3a:dd:7f: 31:e5:c1:d4:0c:80:2a:8c:d4:79:00:17:40:7c:11:1d:4c:48: 4f:a8:e2:a3:26:56:02:65:59:f3:21:40:06:b8:0d:86:9a:af: 89:55:32:fa:fd:7c:c5:4f:c9:b0:eb:4c:3a:d0:9f:b1:d5:bb: 9a:a7:c4:23:6a:ce:b3:92:e2:a9:06:c9:11:22:aa:d1:d3:62: 97:29:35:8f:d2:a7:59:22:b5:f6:a8:f8:78:44:e3:e1:65:03: b5:d1:c1:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XBUoigdtmYQ32eQa+sg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViN2M4MjJkMWU5NDUxN2M4ODUxNWNjOWIzZmMyYmRlMTI5 YjQ1NGMwHhcNMjYwMTAyMDYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2EzODhmZjc5NWU4ZmQ4OWNjM2Y2OTM5YjczYzQzMzU0ODBhNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJk+VMsE1FPgfw918eSCs0bOnfBX sQj7fwZo4Q1fnGX9ZxWm7CmYRTF8OLbvtPBhKh072+9ESRfKa0qBmDhEMqrER+vC NtR+rEVcxgLQulHvDoHsZXAAOgU/+YXtCFPwiTmICdSMSez+PDdz/trkosgCBeue qFcSxv2v7H7qnDCgE3u9L9DlqVHRko5Q9g9i22m3X3ITXcEXYaI7FfZvIi98x5HW H4KVU6RTCeYrVwn2dOIrdNF4uQkqej8K0CN9KJAqzNVMG1xInT02CDQd/Mc5x42R CyV1nXgqMBvqSJMUjOxJ/FsbdtZRDS0hCT/3wvJ95XLJun/HJXYEagGQ6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMyjiP95Xo/YnMP2k5tzxDNUgKZBMB8GA1UdIwQY MBaAFOt8gi0elFF8iFFcybP8K94Sm0VMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjN5Q0xSNlVVWHlJVVZ6SnNfd3IzaEtiUlV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xMTkzM2ItZmMwYi00MTBmLTljMzQt MTA2NDUwNGUyYjk3LzEvektPSV8zbGVqOWljd19hVG0zUEVNMVNBcGtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xMTkzM2ItZmMwYi00MTBmLTljMzQtMTA2NDUwNGUyYjk3 LzEvNjN5Q0xSNlVVWHlJVVZ6SnNfd3IzaEtiUlV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjcHMA0G CSqGSIb3DQEBCwUAA4IBAQAPkog2mO9E9cEcNIJhrQqphHdTekmH33Go1hCpcFFT VxTb4+bcvWpPsgDr5Xt5eytymlLHAGbOOu83zs2Xlj0lzlt7yyEBM2qkmJ+InK9z h/IYrNGU6HNC+JaR6xBdbxHEZQmVIgP82KAtVmVm4lrKr5JwMFKsT5LQzOuZP2la WeCWrHtOE0xeOiyhlyFY+EoEsne8RlMuvLgb5d/wGuk63X8x5cHUDIAqjNR5ABdA fBEdTEhPqOKjJlYCZVnzIUAGuA2Gmq+JVTL6/XzFT8mw60w60J+x1buap8Qjas6z kuKpBskRIqrR02KXKTWP0qdZIrX2qPh4ROPhZQO10cEn -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:21 2026 by rpki-client