This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/ZcXPev5XSqeCfOjCRaC4jLAvk3w.roa File: ZcXPev5XSqeCfOjCRaC4jLAvk3w.roa (raw, json) Hash identifier: tC1vsSl2lFcihSUrAMnGtV0LC1FxIGsGqNLEW5eQ5Gk= Subject key identifier: 65:C5:CF:7A:FE:57:4A:A7:82:7C:E8:C2:45:A0:B8:8C:B0:2F:93:7C Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Certificate serial: 019B7F158197B8987DDAF8BD5E1DCBC9D5FD Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/ZcXPev5XSqeCfOjCRaC4jLAvk3w.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203584 IP address blocks: 91.206.86.0/24 maxlen: 24 91.206.87.0/24 maxlen: 24 193.58.216.0/24 maxlen: 24 193.58.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:81:97:b8:98:7d:da:f8:bd:5e:1d:cb:c9:d5:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65c5cf7afe574aa7827ce8c245a0b88cb02f937c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b4:f3:22:53:e2:f4:f6:2c:b7:97:3d:cb:68: ed:80:48:a0:22:b0:3f:e5:8f:26:9a:aa:a7:d7:a6: e8:7c:37:22:79:cc:42:c1:24:06:46:18:9f:f2:73: b1:39:c0:81:a1:34:a6:3a:b7:98:2e:bd:24:ba:a6: 30:53:b3:a2:80:3c:a4:f3:26:cf:b0:3d:f3:f8:09: 8c:7a:a1:bd:1d:a7:9f:df:df:34:dd:ce:5a:bc:e4: 46:b5:cc:4a:8c:1d:63:aa:94:71:27:18:6e:46:b3: 01:00:0e:e0:6c:de:6b:bb:50:17:2b:91:7a:e5:5d: ab:cc:ac:2b:ec:05:3c:a8:11:ed:0d:4d:15:94:fa: 08:78:c0:16:79:2b:d9:ac:fb:d4:97:a0:8c:8d:cf: 73:1f:b1:d8:bd:4a:c0:07:78:06:d9:f3:c3:57:98: 09:57:e0:29:97:04:ed:b1:1a:67:cb:f7:e6:11:e9: 24:c2:8b:b8:9f:44:92:d5:11:dc:f8:cf:d0:00:d3: f5:fb:ec:b4:ca:be:43:91:53:0a:1d:16:20:3b:2e: 0d:8c:69:66:b5:25:c1:4f:a8:9d:54:16:e7:8a:b0: 18:3b:ea:12:95:9e:3e:c8:94:4d:cb:75:bd:8b:16: eb:b3:43:8a:bb:8f:82:69:2f:2a:57:13:f7:7b:9f: 32:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C5:CF:7A:FE:57:4A:A7:82:7C:E8:C2:45:A0:B8:8C:B0:2F:93:7C X509v3 Authority Key Identifier: keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/ZcXPev5XSqeCfOjCRaC4jLAvk3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.86.0/23 193.58.216.0/23 Signature Algorithm: sha256WithRSAEncryption c4:86:51:d3:2d:64:bb:9a:3b:19:8e:40:08:8a:03:dc:31:1e: 44:8e:0a:6c:4d:d3:d2:74:cc:13:7b:75:87:7f:46:89:3a:f9: b2:3e:e3:d9:5b:3b:d4:98:74:05:ed:49:d4:9c:b7:bf:27:92: ed:e2:11:3d:23:b7:30:00:d1:b0:c3:3f:0b:04:32:9b:8d:1b: cf:3d:3b:65:49:bf:08:d3:b9:c8:a9:3f:83:61:0c:b3:e9:02: ce:9f:17:24:e0:fc:8d:ed:26:ae:5e:de:7a:6a:a0:47:21:6f: a0:c0:dc:14:28:32:da:06:1e:09:c5:9d:a0:e7:d7:78:88:2d: e8:a1:a1:39:7d:65:19:a9:aa:58:03:7b:a4:41:2b:d4:67:05: cf:17:43:8c:96:65:d0:cc:93:d7:f1:e4:b6:c1:f2:d6:a9:89: 82:af:92:b7:05:9d:70:25:a4:4f:fa:90:85:1e:a4:ef:63:55: ab:4b:c7:6c:83:04:46:3f:b8:f4:56:e2:06:f8:16:d0:7f:7c: 4f:5b:10:04:d6:f6:c0:a4:b6:f7:61:02:e0:dc:b7:97:6c:52: b7:a4:46:bd:44:6e:be:66:35:1a:ba:21:9f:c7:b6:93:97:86: b7:52:2b:ee:5a:5e:a3:f8:46:50:68:5f:fa:94:f5:40:be:6a: 43:6d:ec:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FYGXuJh92vi9Xh3LydX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4 ZDQ3OWYwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWM1Y2Y3YWZlNTc0YWE3ODI3Y2U4YzI0NWEwYjg4Y2IwMmY5MzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbTzIlPi9PYst5c9y2jtgEigIrA/ 5Y8mmqqn16bofDciecxCwSQGRhif8nOxOcCBoTSmOreYLr0kuqYwU7OigDyk8ybP sD3z+AmMeqG9Haef39803c5avORGtcxKjB1jqpRxJxhuRrMBAA7gbN5ru1AXK5F6 5V2rzKwr7AU8qBHtDU0VlPoIeMAWeSvZrPvUl6CMjc9zH7HYvUrAB3gG2fPDV5gJ V+AplwTtsRpny/fmEekkwou4n0SS1RHc+M/QANP1++y0yr5DkVMKHRYgOy4NjGlm tSXBT6idVBbnirAYO+oSlZ4+yJRNy3W9ixbrs0OKu4+CaS8qVxP3e58ypQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGXFz3r+V0qngnzowkWguIywL5N8MB8GA1UdIwQY MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt YjE2NmFlMmVmMjg3LzEvWmNYUGV2NVhTcWVDZk9qQ1JhQzRqTEF2azN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3 LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW85WAwQB wTrYMA0GCSqGSIb3DQEBCwUAA4IBAQDEhlHTLWS7mjsZjkAIigPcMR5EjgpsTdPS dMwTe3WHf0aJOvmyPuPZWzvUmHQF7UnUnLe/J5Lt4hE9I7cwANGwwz8LBDKbjRvP PTtlSb8I07nIqT+DYQyz6QLOnxck4PyN7SauXt56aqBHIW+gwNwUKDLaBh4JxZ2g 59d4iC3ooaE5fWUZqapYA3ukQSvUZwXPF0OMlmXQzJPX8eS2wfLWqYmCr5K3BZ1w JaRP+pCFHqTvY1WrS8dsgwRGP7j0VuIG+BbQf3xPWxAE1vbApLb3YQLg3LeXbFK3 pEa9RG6+ZjUauiGfx7aTl4a3UivuWl6j+EZQaF/6lPVAvmpDbeyR -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:11 2026 by rpki-client