This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zPqDqDVtH5f6M8_2z5y72IP_cjY.roa File: zPqDqDVtH5f6M8_2z5y72IP_cjY.roa (raw, json) Hash identifier: xC5JpTYLZsOkmq2bo4UKiuseq+IQMyUYTWaRJTtvnZY= Subject key identifier: CC:FA:83:A8:35:6D:1F:97:FA:33:CF:F6:CF:9C:BB:D8:83:FF:72:36 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC85FA10553A5EF1FBBCB30BA29FC33 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zPqDqDVtH5f6M8_2z5y72IP_cjY.roa Signing time: Thu 01 Jan 2026 18:18:30 +0000 ROA not before: Thu 01 Jan 2026 18:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 194.36.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5f:a1:05:53:a5:ef:1f:bb:cb:30:ba:29:fc:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccfa83a8356d1f97fa33cff6cf9cbbd883ff7236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:ac:08:da:b8:90:e5:07:68:6d:03:44:e8: b4:1c:d7:ab:1d:93:33:b0:4a:c9:61:f0:6c:ea:18: 6f:25:5a:b0:a5:7b:80:81:d6:69:04:3e:64:bc:87: d7:ab:ae:96:ac:6e:45:5e:7f:20:f5:b4:25:c0:89: 77:12:63:0f:c4:1a:7b:e2:e4:66:0e:7c:da:ab:69: 9a:07:83:2e:87:66:cb:79:c8:75:32:c5:7c:07:19: 10:e1:68:0c:c6:d7:f5:d7:cb:d2:0f:e6:93:0b:44: 40:16:a1:0f:2e:99:f5:2d:33:f5:76:2c:8f:bd:f2: 9a:e3:fd:f8:b9:91:90:f0:61:a7:6f:a5:5b:be:5e: ba:d7:56:71:ec:0b:fa:2b:c0:8d:ed:62:d8:fc:04: dc:33:4f:41:10:a1:76:28:36:08:86:f1:34:e9:16: 16:62:c1:7a:7b:6a:b9:a8:4f:9d:1a:61:99:a3:b8: c5:bf:ae:50:e2:30:a9:ea:62:8e:0a:86:94:d8:8d: ca:57:dc:ac:b8:db:5c:a9:db:f6:2c:58:d7:a2:33: 9d:3c:fa:82:69:67:12:80:1b:c9:e5:e6:37:65:8d: f5:ac:b9:ff:a4:7b:da:86:e5:0c:48:af:72:e3:1f: 46:45:68:04:f8:8a:c4:d2:24:b9:e8:bc:0e:09:b8: 5e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FA:83:A8:35:6D:1F:97:FA:33:CF:F6:CF:9C:BB:D8:83:FF:72:36 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zPqDqDVtH5f6M8_2z5y72IP_cjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.34.0/24 Signature Algorithm: sha256WithRSAEncryption a4:15:6f:c1:47:da:20:8e:51:12:2b:2a:28:08:a5:7f:df:83: 76:8e:49:f1:ca:e5:6b:23:16:96:67:c2:e8:04:3b:73:57:e5: 6b:1a:d5:34:d6:72:35:51:75:79:9b:de:8d:02:f6:d6:f5:45: 63:46:6a:57:7f:26:e6:03:91:5b:f4:26:27:86:0b:64:27:52: 8b:ce:0d:c1:96:da:2c:46:94:b0:bb:7b:54:0e:af:97:2a:ee: e8:38:6e:58:b6:ca:c4:4a:99:c9:6a:8c:b8:b3:7d:7c:45:60: ae:5f:2f:9e:08:4c:64:f1:ed:9c:2b:39:fe:9b:35:8f:77:9f: ee:62:b4:50:95:4a:e3:c2:88:d2:ea:2c:b1:99:e0:ff:35:8c: eb:82:dd:f3:8b:68:3d:8b:f8:3f:3e:ce:6f:16:83:40:8a:32: 33:00:3a:76:24:fa:b0:89:8c:84:62:92:37:99:dc:65:65:1d: 2a:9d:0c:13:97:81:d1:82:1c:e9:42:f1:9b:71:98:f5:f1:0b: 4d:b1:bf:11:13:88:ac:45:7d:56:c2:8a:9d:50:a3:0f:62:61: b7:f3:96:a6:16:08:01:b4:2c:b8:5c:1b:48:24:5e:72:d3:3c: 9d:1a:5b:12:a8:fe:28:16:02:94:01:28:85:91:e3:d3:20:ea: e1:41:f5:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yF+hBVOl7x+7yzC6KfwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2ZhODNhODM1NmQxZjk3ZmEzM2NmZjZjZjljYmJkODgzZmY3MjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse6sCNq4kOUHaG0DROi0HNerHZMz sErJYfBs6hhvJVqwpXuAgdZpBD5kvIfXq66WrG5FXn8g9bQlwIl3EmMPxBp74uRm Dnzaq2maB4Muh2bLech1MsV8BxkQ4WgMxtf118vSD+aTC0RAFqEPLpn1LTP1diyP vfKa4/34uZGQ8GGnb6Vbvl6611Zx7Av6K8CN7WLY/ATcM09BEKF2KDYIhvE06RYW YsF6e2q5qE+dGmGZo7jFv65Q4jCp6mKOCoaU2I3KV9ysuNtcqdv2LFjXojOdPPqC aWcSgBvJ5eY3ZY31rLn/pHvahuUMSK9y4x9GRWgE+IrE0iS56LwOCbhe0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMz6g6g1bR+X+jPP9s+cu9iD/3I2MB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvelBxRHFEVnRINWY2TThfMno1eTcySVBfY2pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiQiMA0G CSqGSIb3DQEBCwUAA4IBAQCkFW/BR9ogjlESKyooCKV/34N2jknxyuVrIxaWZ8Lo BDtzV+VrGtU01nI1UXV5m96NAvbW9UVjRmpXfybmA5Fb9CYnhgtkJ1KLzg3Bltos RpSwu3tUDq+XKu7oOG5YtsrESpnJaoy4s318RWCuXy+eCExk8e2cKzn+mzWPd5/u YrRQlUrjwojS6iyxmeD/NYzrgt3zi2g9i/g/Ps5vFoNAijIzADp2JPqwiYyEYpI3 mdxlZR0qnQwTl4HRghzpQvGbcZj18QtNsb8RE4isRX1WwoqdUKMPYmG385amFggB tCy4XBtIJF5y0zydGlsSqP4oFgKUASiFkePTIOrhQfX6 -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:54 2026 by rpki-client