This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/z5dBX6odp12M_OB_gttLAeXRzfY.roa File: z5dBX6odp12M_OB_gttLAeXRzfY.roa (raw, json) Hash identifier: H0+1g03VSFVNjWI/Z7WGHpAKWuQ/lvaaEnN2kUyKA+Y= Subject key identifier: CF:97:41:5F:AA:1D:A7:5D:8C:FC:E0:7F:82:DB:4B:01:E5:D1:CD:F6 Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Certificate serial: 019B790FFD55A91837F17DEBD1AED1D94062 Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/z5dBX6odp12M_OB_gttLAeXRzfY.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 194.110.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fd:55:a9:18:37:f1:7d:eb:d1:ae:d1:d9:40:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf97415faa1da75d8cfce07f82db4b01e5d1cdf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:b0:c6:b9:01:5d:f5:b2:a3:1b:4d:ed:cf: 09:e5:9f:66:50:91:92:28:aa:92:4a:8f:61:0b:6e: 3d:29:e5:4d:49:80:af:80:c7:d9:6c:e0:e2:60:29: 9c:7b:75:6e:46:85:c2:98:1a:d1:b9:31:2b:04:98: fc:6f:de:00:e6:2b:2c:9e:4d:92:ed:ca:6a:55:d7: 12:e7:01:8d:8c:76:2e:61:28:10:94:0b:f3:4a:19: 63:1a:14:79:11:52:25:5d:b6:3d:14:17:a2:b5:bb: e6:a4:c6:f3:8e:b4:8b:86:9f:43:4d:cf:40:5f:ab: 18:5a:87:8f:df:7e:76:b1:5a:90:1f:9b:93:3e:59: 09:9b:8b:74:e1:48:b2:aa:49:d5:c4:6b:1e:5a:b1: 07:5d:4f:28:4e:65:36:af:9c:86:cb:3b:d7:97:65: 66:c2:62:7e:a6:a0:6d:9e:ea:08:73:7e:fe:8d:76: 23:d6:d3:40:cf:e1:fd:95:3b:8d:99:6c:7c:22:69: 2d:42:f2:62:68:7b:9f:ac:30:4b:64:fb:cf:08:7c: 7f:99:78:c6:f2:db:85:56:79:b7:c7:2c:bc:5a:36: 86:6d:4a:1b:8d:3d:35:ac:88:80:f6:23:48:f3:1d: 2c:0a:99:7c:c5:2a:c4:0d:ad:b4:7b:e9:d2:c1:d4: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:97:41:5F:AA:1D:A7:5D:8C:FC:E0:7F:82:DB:4B:01:E5:D1:CD:F6 X509v3 Authority Key Identifier: keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/z5dBX6odp12M_OB_gttLAeXRzfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.206.0/24 Signature Algorithm: sha256WithRSAEncryption 78:c8:f4:65:e2:b5:c5:1a:81:19:b1:f3:fb:81:e2:5c:37:c4: e9:b9:51:9b:a7:58:21:5f:0d:a6:56:f8:89:4d:34:6b:50:7e: a1:83:ef:f2:22:44:d2:76:ce:c4:86:b5:e4:50:b6:f8:d7:54: 02:78:df:53:1c:00:b7:ed:9c:14:57:61:23:2b:20:f6:38:95: 2e:00:44:85:05:fb:c1:55:f3:d5:6d:0a:03:db:4c:fb:11:78: f6:4f:d6:6f:f5:a5:f1:3c:3f:4f:82:42:be:01:56:cd:25:2a: 92:12:0a:a0:03:9d:ea:0e:ff:8e:70:d8:83:a6:84:49:16:49: 7c:0f:6d:12:8c:39:cf:9f:99:60:3c:e4:42:2d:38:ac:27:62: 3d:88:95:2d:32:cd:26:27:33:22:8c:a8:b4:df:b3:7a:1d:41: a2:b0:2a:ad:dc:42:ca:59:8d:c1:c9:dd:28:7e:b4:8e:d7:37: 62:a8:3e:d4:bf:32:b4:a0:96:25:88:71:64:7b:0a:c5:94:ee: be:b1:64:34:7f:02:38:92:7d:ec:b8:97:27:59:2b:10:e5:7f: 2a:20:9d:53:cf:4d:8d:47:e3:23:a8:15:c2:5c:4f:dd:da:a6: ca:eb:88:19:6e:e6:44:5d:b7:04:c0:60:46:8c:2d:8d:11:a7: 00:fc:5d:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/1VqRg38X3r0a7R2UBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGFlOGUwZjg4ZDBjOGMzOWRmNDRmZmE0MWUzMmMyNjI3 YzNhMTUwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjk3NDE1ZmFhMWRhNzVkOGNmY2UwN2Y4MmRiNGIwMWU1ZDFjZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUWwxrkBXfWyoxtN7c8J5Z9mUJGS KKqSSo9hC249KeVNSYCvgMfZbODiYCmce3VuRoXCmBrRuTErBJj8b94A5issnk2S 7cpqVdcS5wGNjHYuYSgQlAvzShljGhR5EVIlXbY9FBeitbvmpMbzjrSLhp9DTc9A X6sYWoeP3352sVqQH5uTPlkJm4t04UiyqknVxGseWrEHXU8oTmU2r5yGyzvXl2Vm wmJ+pqBtnuoIc37+jXYj1tNAz+H9lTuNmWx8ImktQvJiaHufrDBLZPvPCHx/mXjG 8tuFVnm3xyy8WjaGbUobjT01rIiA9iNI8x0sCpl8xSrEDa20e+nSwdQ4nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM+XQV+qHaddjPzgf4LbSwHl0c32MB8GA1UdIwQY MBaAFCtK6OD4jQyMOd9E/6QeMsJifDoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYt MTA2ODBkMjU2YWUwLzEvejVkQlg2b2RwMTJNX09CX2d0dExBZVhSemZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYtMTA2ODBkMjU2YWUw LzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm7OMA0G CSqGSIb3DQEBCwUAA4IBAQB4yPRl4rXFGoEZsfP7geJcN8TpuVGbp1ghXw2mVviJ TTRrUH6hg+/yIkTSds7EhrXkULb411QCeN9THAC37ZwUV2EjKyD2OJUuAESFBfvB VfPVbQoD20z7EXj2T9Zv9aXxPD9PgkK+AVbNJSqSEgqgA53qDv+OcNiDpoRJFkl8 D20SjDnPn5lgPORCLTisJ2I9iJUtMs0mJzMijKi037N6HUGisCqt3ELKWY3Byd0o frSO1zdiqD7UvzK0oJYliHFkewrFlO6+sWQ0fwI4kn3suJcnWSsQ5X8qIJ1Tz02N R+MjqBXCXE/d2qbK64gZbuZEXbcEwGBGjC2NEacA/F2n -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:28 2026 by rpki-client