This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/ZIiwmnN-5p2mE5NBVmG2qJmlQQQ.roa File: ZIiwmnN-5p2mE5NBVmG2qJmlQQQ.roa (raw, json) Hash identifier: cGAIHFGhCTH/2a6NEUVPcnAfowJ068z6RnfBywaGmsg= Subject key identifier: 64:88:B0:9A:73:7E:E6:9D:A6:13:93:41:56:61:B6:A8:99:A5:41:04 Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762 Certificate serial: 019B7EA6FD2C26DB5F1A5AB060AB302B2AD1 Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/ZIiwmnN-5p2mE5NBVmG2qJmlQQQ.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30722 IP address blocks: 212.78.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fd:2c:26:db:5f:1a:5a:b0:60:ab:30:2b:2a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6488b09a737ee69da61393415661b6a899a54104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:48:58:3e:7e:1a:fd:2a:44:31:56:5a:bb:97: 90:e7:fe:3c:e4:3a:43:d2:2e:2b:c3:52:d4:e4:99: c4:5d:68:a2:1c:cf:e1:7b:9a:95:61:e3:b4:9a:0b: d3:fc:54:86:b9:c0:47:17:bb:0b:da:31:b0:06:7c: 94:f3:40:59:dd:f1:79:95:3e:37:d1:ea:ac:5b:a1: 5c:6b:c3:40:2b:82:6f:b4:26:8f:77:97:03:48:54: 2d:b3:7e:5f:21:f6:ee:07:71:57:87:e0:94:2f:e6: 70:1d:2b:00:9e:ef:d0:45:a1:b0:d1:7a:6b:97:b0: 5b:2f:6e:b4:e1:45:8e:de:2c:24:5b:ca:35:fd:32: 69:16:90:9c:80:30:49:fa:bc:d3:81:55:4c:b7:56: e2:cb:fe:30:21:4a:c1:a0:62:47:8d:47:ef:7c:17: bf:c9:02:e2:bd:76:95:69:57:f6:99:b0:ac:7a:bd: a3:40:44:c8:b3:56:00:0c:c2:1f:67:18:3e:b3:c2: d0:f8:16:37:36:80:ff:74:19:10:fe:c5:aa:3c:56: d5:24:82:13:f3:f2:1a:a5:49:86:12:a5:ae:78:34: ca:00:79:a4:73:c9:ea:d3:64:a3:19:2a:d2:d8:2a: 36:c4:d9:eb:af:5c:6a:c2:d1:51:18:03:b0:ee:31: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:88:B0:9A:73:7E:E6:9D:A6:13:93:41:56:61:B6:A8:99:A5:41:04 X509v3 Authority Key Identifier: keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/ZIiwmnN-5p2mE5NBVmG2qJmlQQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.78.8.0/24 Signature Algorithm: sha256WithRSAEncryption 74:ef:99:c9:2a:dd:94:c4:49:fa:84:f8:e3:9b:4a:f8:12:6e: 6c:3f:6d:95:14:54:59:e0:bd:57:7f:0a:d7:8c:e3:f8:cf:c8: a8:6f:75:f9:c6:63:08:c8:28:ec:d3:5b:cf:0d:70:66:46:e4: d6:84:69:3d:c0:61:4b:d1:5a:75:d4:f4:6b:77:92:96:6f:c0: d7:6a:71:fd:e4:a9:be:58:db:5f:e9:20:a5:5b:43:a4:dd:79: 98:eb:bd:0f:0b:b2:95:a9:ab:87:61:87:39:f4:80:fa:70:b3: 25:7c:11:69:7f:1d:a8:26:ce:33:71:94:af:ff:57:91:d6:13: 5a:d7:2c:7e:86:fb:b9:4b:cb:f8:56:18:88:71:2f:03:37:7a: 03:14:99:21:24:5a:fe:36:66:c1:a6:4a:a7:e2:a8:f7:d8:2d: 61:41:a5:b2:1a:c3:72:88:82:b5:0f:2c:06:19:32:7c:e5:f7: e5:cc:85:22:f6:d8:72:3e:f0:2d:23:1f:b9:1c:1b:43:0b:3f: 09:f1:9b:e2:f1:7b:a0:75:25:76:ec:b0:bb:cf:23:bc:e0:8f: 0f:3c:f6:b5:f4:6e:a5:14:56:64:14:63:e7:60:66:4a:cb:fc: 21:37:5f:75:93:7e:0b:87:15:72:dd:6a:a4:6e:8b:35:50:c3: 9f:ef:d2:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pv0sJttfGlqwYKswKyrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDkwMTIwMWZmMGIxYjk3ZWYzZDFhNzJkYTQxZTE4ZjAx NDU3NjIwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDg4YjA5YTczN2VlNjlkYTYxMzkzNDE1NjYxYjZhODk5YTU0MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUhYPn4a/SpEMVZau5eQ5/485DpD 0i4rw1LU5JnEXWiiHM/he5qVYeO0mgvT/FSGucBHF7sL2jGwBnyU80BZ3fF5lT43 0eqsW6Fca8NAK4JvtCaPd5cDSFQts35fIfbuB3FXh+CUL+ZwHSsAnu/QRaGw0Xpr l7BbL2604UWO3iwkW8o1/TJpFpCcgDBJ+rzTgVVMt1biy/4wIUrBoGJHjUfvfBe/ yQLivXaVaVf2mbCser2jQETIs1YADMIfZxg+s8LQ+BY3NoD/dBkQ/sWqPFbVJIIT 8/IapUmGEqWueDTKAHmkc8nq02SjGSrS2Co2xNnrr1xqwtFRGAOw7jE7HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGSIsJpzfuadphOTQVZhtqiZpUEEMB8GA1UdIwQY MBaAFPXZASAf8LG5fvPRpy2kHhjwFFdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRrQklCX3dzYmwtODlHbkxhUWVHUEFVVjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hZDU1NDUtZjhhZi00Mjc4LTkwYTUt YTNiYmM4N2E3N2NjLzEvWklpd21uTi01cDJtRTVOQlZtRzJxSm1sUVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hZDU1NDUtZjhhZi00Mjc4LTkwYTUtYTNiYmM4N2E3N2Nj LzEvOWRrQklCX3dzYmwtODlHbkxhUWVHUEFVVjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1E4IMA0G CSqGSIb3DQEBCwUAA4IBAQB075nJKt2UxEn6hPjjm0r4Em5sP22VFFRZ4L1XfwrX jOP4z8iob3X5xmMIyCjs01vPDXBmRuTWhGk9wGFL0Vp11PRrd5KWb8DXanH95Km+ WNtf6SClW0Ok3XmY670PC7KVqauHYYc59ID6cLMlfBFpfx2oJs4zcZSv/1eR1hNa 1yx+hvu5S8v4VhiIcS8DN3oDFJkhJFr+NmbBpkqn4qj32C1hQaWyGsNyiIK1DywG GTJ85fflzIUi9thyPvAtIx+5HBtDCz8J8Zvi8XugdSV27LC7zyO84I8PPPa19G6l FFZkFGPnYGZKy/whN191k34LhxVy3Wqkbos1UMOf79IW -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:20 2026 by rpki-client