This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/ZXNn8MrO_rQX57DpumWOChn5H3A.roa File: ZXNn8MrO_rQX57DpumWOChn5H3A.roa (raw, json) Hash identifier: Xd8nChck6B8oNiFlEz/MYSSqWtjWe/3Gl8NeSQXppY8= Subject key identifier: 65:73:67:F0:CA:CE:FE:B4:17:E7:B0:E9:BA:65:8E:0A:19:F9:1F:70 Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5 Certificate serial: 019B78A23D116473F485E5FE406A77943CE4 Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/ZXNn8MrO_rQX57DpumWOChn5H3A.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8426 IP address blocks: 77.91.200.0/21 maxlen: 21 80.172.0.0/16 maxlen: 18 80.172.250.0/24 maxlen: 24 80.172.251.0/24 maxlen: 24 188.93.224.0/21 maxlen: 21 194.62.240.0/22 maxlen: 22 195.22.0.0/19 maxlen: 19 195.35.66.0/24 maxlen: 24 195.72.136.0/22 maxlen: 22 2001:4cc0::/32 maxlen: 48 2a03:73c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3d:11:64:73:f4:85:e5:fe:40:6a:77:94:3c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=657367f0cacefeb417e7b0e9ba658e0a19f91f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a9:f8:ae:b3:3d:4c:51:78:28:b6:5e:36:64: 6b:61:64:0d:6b:17:4c:7c:ab:6f:9f:66:28:98:cf: fb:37:c2:88:f7:c2:57:0e:44:e6:24:c6:a9:23:64: 85:8b:34:bd:95:b1:95:c7:84:5e:eb:9b:3c:69:e1: 5b:7b:13:6a:b6:51:44:c1:8e:79:e7:45:8b:69:e5: f6:49:7a:8c:0c:73:bb:fb:d5:b2:f6:62:b2:75:12: f8:4d:92:80:a9:c7:61:03:a8:72:3d:2d:0f:fc:1a: 8b:97:d8:f8:0d:10:aa:fe:0f:2a:87:23:5f:28:6d: 51:58:79:61:f8:a3:6d:5b:d1:d4:b8:cf:20:04:98: f3:4b:8b:ed:4a:9e:a6:80:42:bf:10:02:f4:27:fe: fb:50:06:7e:49:87:5b:4b:1e:d5:78:d8:60:04:bb: e3:01:d7:b5:44:f7:c3:eb:d2:9e:86:a8:9c:92:c7: 9f:ec:44:8c:de:a9:95:e7:23:57:ea:d1:c1:70:ef: c0:1a:ec:fb:b0:cb:e4:fd:98:72:25:6c:26:5d:37: a4:e9:5a:f4:90:c6:75:fa:b0:b6:79:6b:2b:5c:97: 9c:01:7c:94:92:d4:1f:5d:d4:df:7f:25:92:83:e1: 04:53:8b:9f:b0:ad:e9:c0:2f:5e:2d:b6:e7:a9:f0: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:73:67:F0:CA:CE:FE:B4:17:E7:B0:E9:BA:65:8E:0A:19:F9:1F:70 X509v3 Authority Key Identifier: keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/ZXNn8MrO_rQX57DpumWOChn5H3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.200.0/21 80.172.0.0/16 188.93.224.0/21 194.62.240.0/22 195.22.0.0/19 195.35.66.0/24 195.72.136.0/22 IPv6: 2001:4cc0::/32 2a03:73c0::/48 Signature Algorithm: sha256WithRSAEncryption 28:26:51:83:14:92:bd:d9:53:53:ea:8d:21:11:a8:f2:0f:88: 04:50:46:2d:e2:e5:21:0a:36:8c:3f:a1:bd:6b:ae:c6:b0:cd: 48:8a:0f:48:b0:ef:a6:eb:d6:e4:7a:58:d0:3b:f5:fa:2e:84: 31:60:ee:56:dd:dc:fa:28:5e:4f:f3:72:28:43:c5:9c:38:18: 7c:27:12:a5:d8:5e:93:12:e2:07:78:39:1f:fd:b8:ac:e8:eb: 33:27:bd:ed:04:ae:e5:b3:12:86:4e:36:6e:3e:66:63:09:12: d5:1c:c0:4e:7b:94:14:c3:04:6d:80:bf:91:22:2b:0f:24:e7: ee:e2:92:96:0e:c7:0b:26:dc:bf:2e:e8:02:2d:92:df:55:19: 26:15:b9:70:75:3e:59:7a:a3:b8:a4:68:8f:b8:6f:6e:ff:d0: fc:f0:71:12:ee:0c:d5:ee:fd:52:f2:b6:fc:66:79:d0:6e:b4: 3b:ea:ad:db:34:14:02:7b:7f:79:6e:32:be:31:18:76:56:99: 0c:d2:96:ff:ad:86:dd:92:17:f9:ad:cc:b2:bd:ca:f9:ae:e7: 01:4e:f4:8d:d9:69:c7:1c:f4:29:6b:81:c3:5e:a4:39:b6:4c: e9:e1:c1:07:36:9f:82:e7:e6:73:93:b3:64:89:95:c1:90:a9: 41:a2:8e:e0 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt4oj0RZHP0heX+QGp3lDzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy NDIyYzUwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTczNjdmMGNhY2VmZWI0MTdlN2IwZTliYTY1OGUwYTE5ZjkxZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4an4rrM9TFF4KLZeNmRrYWQNaxdM fKtvn2YomM/7N8KI98JXDkTmJMapI2SFizS9lbGVx4Re65s8aeFbexNqtlFEwY55 50WLaeX2SXqMDHO7+9Wy9mKydRL4TZKAqcdhA6hyPS0P/BqLl9j4DRCq/g8qhyNf KG1RWHlh+KNtW9HUuM8gBJjzS4vtSp6mgEK/EAL0J/77UAZ+SYdbSx7VeNhgBLvj Ade1RPfD69Kehqicksef7ESM3qmV5yNX6tHBcO/AGuz7sMvk/ZhyJWwmXTek6Vr0 kMZ1+rC2eWsrXJecAXyUktQfXdTffyWSg+EEU4ufsK3pwC9eLbbnqfAH7QIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFGVzZ/DKzv60F+ew6bpljgoZ+R9wMB8GA1UdIwQY MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt N2ZlZTU5MWEyMDljLzEvWlhObjhNck9fclFYNTdEcHVtV09DaG41SDNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAvBAIAATApAwQDTVvIAwMA UKwDBAO8XeADBALCPvADBAXDFgADBADDI0IDBALDSIgwFgQCAAIwEAMFACABTMAD BwAqA3PAAAAwDQYJKoZIhvcNAQELBQADggEBACgmUYMUkr3ZU1PqjSERqPIPiARQ Ri3i5SEKNow/ob1rrsawzUiKD0iw76br1uR6WNA79fouhDFg7lbd3PooXk/zcihD xZw4GHwnEqXYXpMS4gd4OR/9uKzo6zMnve0EruWzEoZONm4+ZmMJEtUcwE57lBTD BG2Av5EiKw8k5+7ikpYOxwsm3L8u6AItkt9VGSYVuXB1Pll6o7ikaI+4b27/0Pzw cRLuDNXu/VLytvxmedButDvqrds0FAJ7f3luMr4xGHZWmQzSlv+tht2SF/mtzLK9 yvmu5wFO9I3Zaccc9ClrgcNepDm2TOnhwQc2n4Ln5nOTs2SJlcGQqUGijuA= -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:36 2026 by rpki-client