This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/zNxbfqUyce2NUzI4J0KCV3dfc3s.roa File: zNxbfqUyce2NUzI4J0KCV3dfc3s.roa (raw, json) Hash identifier: OqlczrImUawHBiZty6YNCZHWL4HLZKbCejzxHflY/aM= Subject key identifier: CC:DC:5B:7E:A5:32:71:ED:8D:53:32:38:27:42:82:57:77:5F:73:7B Certificate issuer: /CN=ca707e086640056bc271d5d2b3e24d01440baa04 Certificate serial: 019B7A5B95F2BD1A629D4F738933F077A945 Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/zNxbfqUyce2NUzI4J0KCV3dfc3s.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399641 IP address blocks: 89.106.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:95:f2:bd:1a:62:9d:4f:73:89:33:f0:77:a9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccdc5b7ea53271ed8d53323827428257775f737b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:95:ea:17:fe:85:7d:90:13:24:9d:bb:81: f5:e8:c5:b9:4b:7b:64:27:82:46:7f:fa:a4:dd:c0: ef:dc:e9:da:43:c4:b1:a3:c0:60:ea:a8:ef:29:08: 0a:e6:e6:54:22:7f:0b:aa:0f:3b:6f:97:2b:10:ec: ff:4e:12:01:54:23:93:83:59:2d:93:6c:a0:43:e2: 9b:1f:40:65:7e:85:de:a5:f1:23:fd:b2:df:c6:5a: 79:5d:7c:02:5a:cf:34:10:9e:01:f4:c7:9c:fb:71: 53:02:d9:09:b0:ef:c2:ba:de:e1:05:e0:dd:44:7d: f6:b5:bb:d8:b8:b8:a4:3f:2f:40:97:8e:3f:d2:9f: eb:9b:bb:7e:29:9d:6f:3e:ce:b1:94:45:81:e6:1e: 3e:a7:02:ce:43:86:f7:5d:3b:0f:9a:57:f3:eb:8e: 1c:7f:eb:d6:53:85:4e:87:13:8c:f9:08:ed:80:15: d2:79:ae:1a:f6:69:62:df:60:e4:1d:ee:22:4a:b3: 0e:b7:7a:d6:47:20:ff:a9:3b:16:ee:d1:2b:b5:ad: e3:fa:e7:dc:99:96:5d:88:b5:54:0a:a9:70:41:9c: 61:31:90:06:3b:76:1f:bb:db:e3:9d:b7:f4:4d:e7: 42:ec:86:8a:2f:8b:25:35:4a:be:97:a5:54:85:51: f4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DC:5B:7E:A5:32:71:ED:8D:53:32:38:27:42:82:57:77:5F:73:7B X509v3 Authority Key Identifier: keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/zNxbfqUyce2NUzI4J0KCV3dfc3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.205.0/24 Signature Algorithm: sha256WithRSAEncryption 06:32:82:c4:99:2a:17:3b:c8:64:d1:dd:eb:bb:1b:44:db:9a: fd:6f:7a:96:60:f9:01:03:b9:8d:2d:aa:73:0c:58:ac:c6:d0: c9:31:a6:a9:29:ea:3f:d4:13:1e:1e:b9:58:4c:43:7a:dd:06: ec:b9:ac:31:95:21:09:7a:e6:db:a6:5f:91:28:6c:f8:8c:a1: 23:d7:de:81:79:a8:5f:f3:2e:96:89:f0:a3:59:4c:50:0c:09: 46:c4:63:43:17:a1:a0:74:84:c3:fd:83:c1:66:c0:08:82:33: bc:6b:5b:e2:39:4d:e0:12:ac:12:98:50:d4:63:85:c4:44:06: 9e:60:01:5d:17:3d:d9:b5:a6:8c:31:2e:3e:11:14:ff:85:c0: 92:73:7a:08:03:07:c2:cf:c2:9d:ea:e5:dc:2e:5a:3c:7d:9c: c5:8f:99:96:b1:fc:a6:5a:96:b4:dd:71:ec:2b:00:53:f9:46: a2:ea:ee:c1:22:82:f0:96:5f:2a:64:9a:ec:e4:44:32:b6:6a: 31:01:64:2a:65:1e:6a:3d:2a:cf:1c:50:bd:a0:68:57:d6:71: 58:c8:50:40:e8:70:df:8b:08:ec:6f:53:f1:42:e6:61:40:17: 68:ee:df:c7:47:24:76:5d:1f:28:67:ec:a5:a5:80:03:c1:ef: 8a:b4:bb:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5XyvRpinU9ziTPwd6lFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzA3ZTA4NjY0MDA1NmJjMjcxZDVkMmIzZTI0ZDAxNDQw YmFhMDQwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2RjNWI3ZWE1MzI3MWVkOGQ1MzMyMzgyNzQyODI1Nzc3NWY3MzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLOV6hf+hX2QEySdu4H16MW5S3tk J4JGf/qk3cDv3OnaQ8Sxo8Bg6qjvKQgK5uZUIn8Lqg87b5crEOz/ThIBVCOTg1kt k2ygQ+KbH0BlfoXepfEj/bLfxlp5XXwCWs80EJ4B9Mec+3FTAtkJsO/Cut7hBeDd RH32tbvYuLikPy9Al44/0p/rm7t+KZ1vPs6xlEWB5h4+pwLOQ4b3XTsPmlfz644c f+vWU4VOhxOM+QjtgBXSea4a9mli32DkHe4iSrMOt3rWRyD/qTsW7tErta3j+ufc mZZdiLVUCqlwQZxhMZAGO3Yfu9vjnbf0TedC7IaKL4slNUq+l6VUhVH0RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMzcW36lMnHtjVMyOCdCgld3X3N7MB8GA1UdIwQY MBaAFMpwfghmQAVrwnHV0rPiTQFEC6oEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMt Yjk5Y2UzMGQ4MzlmLzEvek54YmZxVXljZTJOVXpJNEowS0NWM2RmYzNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMtYjk5Y2UzMGQ4Mzlm LzEveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWrNMA0G CSqGSIb3DQEBCwUAA4IBAQAGMoLEmSoXO8hk0d3ruxtE25r9b3qWYPkBA7mNLapz DFisxtDJMaapKeo/1BMeHrlYTEN63QbsuawxlSEJeubbpl+RKGz4jKEj196Beahf 8y6WifCjWUxQDAlGxGNDF6GgdITD/YPBZsAIgjO8a1viOU3gEqwSmFDUY4XERAae YAFdFz3ZtaaMMS4+ERT/hcCSc3oIAwfCz8Kd6uXcLlo8fZzFj5mWsfymWpa03XHs KwBT+Uai6u7BIoLwll8qZJrs5EQytmoxAWQqZR5qPSrPHFC9oGhX1nFYyFBA6HDf iwjsb1PxQuZhQBdo7t/HRyR2XR8oZ+ylpYADwe+KtLvW -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:22 2026 by rpki-client