This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/_ZC_MGF9yyx42gGb0lgQ-sX228w.roa File: _ZC_MGF9yyx42gGb0lgQ-sX228w.roa (raw, json) Hash identifier: bGqRm0SkOPme7T2i93CGaIAZfH+uCY+YSZjEaMa7stY= Subject key identifier: FD:90:BF:30:61:7D:CB:2C:78:DA:01:9B:D2:58:10:FA:C5:F6:DB:CC Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1 Certificate serial: 019B77596CDA473E5A3DA9FD22CB5B06C28D Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/_ZC_MGF9yyx42gGb0lgQ-sX228w.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 188.215.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6c:da:47:3e:5a:3d:a9:fd:22:cb:5b:06:c2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd90bf30617dcb2c78da019bd25810fac5f6dbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c9:da:39:6c:c1:b0:c3:6d:dc:33:07:59:5c: e5:f6:29:56:05:89:cb:b4:b7:11:82:43:4a:9f:6d: 22:62:7e:98:c6:a3:53:dd:d0:5e:ee:eb:d3:03:59: 4b:9d:55:8f:91:7a:82:7e:86:d7:51:5e:82:f8:fa: 13:98:61:de:14:9f:7f:52:36:99:5c:5b:a2:30:99: 71:51:08:a6:da:b8:9c:9c:6b:81:47:10:f2:1b:75: 1c:33:bd:52:0e:51:7f:a8:36:a1:43:3d:29:09:47: de:80:f3:6d:3c:2b:67:a3:16:7d:35:ca:49:bd:45: f3:f5:01:9e:47:3a:93:29:03:ff:3d:2e:d5:55:d5: 07:0a:51:2b:76:e5:a2:90:92:b6:12:e7:cc:b2:66: c0:9d:d3:22:e5:69:c6:e0:0a:b2:80:cd:4a:4b:2a: ee:6c:02:f5:13:a9:d8:a8:cd:9f:86:75:19:da:9b: af:ce:f9:37:44:d4:c2:ad:63:2d:75:98:23:59:10: 3e:6e:f1:63:12:cb:b9:93:7a:f8:ca:b1:48:c8:98: 85:f1:65:5c:73:47:00:f4:94:ff:6c:e5:d0:c2:1c: 37:4d:d5:35:41:20:6b:eb:94:f3:b9:0b:69:bb:17: a1:78:6f:91:9d:66:58:74:d8:93:6b:54:64:ca:fa: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:90:BF:30:61:7D:CB:2C:78:DA:01:9B:D2:58:10:FA:C5:F6:DB:CC X509v3 Authority Key Identifier: keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/_ZC_MGF9yyx42gGb0lgQ-sX228w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.215.109.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:4d:87:ae:f9:6e:32:38:80:c7:c9:44:db:6e:68:05:3f:30: 8f:52:bb:bf:a9:cd:bf:26:b3:4e:14:c3:c5:8c:15:48:26:36: 5e:23:99:93:44:c1:5d:17:2a:68:2a:6a:25:bb:57:c3:6f:9d: 51:ff:83:82:ec:8d:dd:bd:b4:b6:e2:84:8b:8c:e8:e3:63:fa: fb:68:39:05:54:64:2c:12:95:76:e2:34:58:3b:3c:90:06:ee: 9f:b1:fb:b3:04:44:b9:ab:57:4c:d8:67:64:57:2e:51:ad:27: 69:03:ed:88:86:66:f6:ec:41:c5:68:6e:f7:c1:6b:77:88:23: c2:d1:20:44:f0:17:e4:e7:1c:63:6e:00:66:49:53:bc:bb:fa: 29:e5:75:4b:92:0e:7b:6b:c3:4e:69:7c:13:f3:bc:6e:4b:da: de:b3:47:08:c0:6f:d6:05:2c:76:34:8b:4b:89:6d:ae:a9:14: c1:42:31:e0:26:04:52:dd:dc:e1:ac:b5:f3:28:cb:29:09:75: 7e:13:e8:48:77:ac:3d:ac:1d:fb:7f:4a:5f:0d:3c:10:81:3b: 73:f5:dd:da:37:4d:e7:58:4c:58:d2:54:63:b0:37:c9:35:e0: c2:45:20:4d:7a:f7:43:42:0e:e2:f1:0b:63:ef:e1:10:23:cb: 95:de:be:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WWzaRz5aPan9IstbBsKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYTY5YzNkOTgzODVkNDE1NDA1ZmM2ZmQzMGE4MDAzNjNj MDE3YzEwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDkwYmYzMDYxN2RjYjJjNzhkYTAxOWJkMjU4MTBmYWM1ZjZkYmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MnaOWzBsMNt3DMHWVzl9ilWBYnL tLcRgkNKn20iYn6YxqNT3dBe7uvTA1lLnVWPkXqCfobXUV6C+PoTmGHeFJ9/UjaZ XFuiMJlxUQim2ricnGuBRxDyG3UcM71SDlF/qDahQz0pCUfegPNtPCtnoxZ9NcpJ vUXz9QGeRzqTKQP/PS7VVdUHClErduWikJK2EufMsmbAndMi5WnG4AqygM1KSyru bAL1E6nYqM2fhnUZ2puvzvk3RNTCrWMtdZgjWRA+bvFjEsu5k3r4yrFIyJiF8WVc c0cA9JT/bOXQwhw3TdU1QSBr65TzuQtpuxeheG+RnWZYdNiTa1RkyvqMKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP2QvzBhfcsseNoBm9JYEPrF9tvMMB8GA1UdIwQY MBaAFN+mnD2YOF1BVAX8b9MKgANjwBfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgt M2NlZjU2MjVhZWQ2LzEvX1pDX01HRjl5eXg0MmdHYjBsZ1Etc1gyMjh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgtM2NlZjU2MjVhZWQ2 LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNdtMA0G CSqGSIb3DQEBCwUAA4IBAQAqTYeu+W4yOIDHyUTbbmgFPzCPUru/qc2/JrNOFMPF jBVIJjZeI5mTRMFdFypoKmolu1fDb51R/4OC7I3dvbS24oSLjOjjY/r7aDkFVGQs EpV24jRYOzyQBu6fsfuzBES5q1dM2GdkVy5RrSdpA+2Ihmb27EHFaG73wWt3iCPC 0SBE8Bfk5xxjbgBmSVO8u/op5XVLkg57a8NOaXwT87xuS9res0cIwG/WBSx2NItL iW2uqRTBQjHgJgRS3dzhrLXzKMspCXV+E+hId6w9rB37f0pfDTwQgTtz9d3aN03n WExY0lRjsDfJNeDCRSBNevdDQg7i8Qtj7+EQI8uV3r5t -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:19 2026 by rpki-client