This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/zeU1Vaq8dXip9dmrsScfYVM7AP0.roa File: zeU1Vaq8dXip9dmrsScfYVM7AP0.roa (raw, json) Hash identifier: BQS+K71JMdJLJ7pEgI44nP9dmqlZHXq/BC5e2KQgEmQ= Subject key identifier: CD:E5:35:55:AA:BC:75:78:A9:F5:D9:AB:B1:27:1F:61:53:3B:00:FD Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a Certificate serial: 019B78350F4AEB4AD08E87491E1C6942BDC3 Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/zeU1Vaq8dXip9dmrsScfYVM7AP0.roa Signing time: Thu 01 Jan 2026 06:18:21 +0000 ROA not before: Thu 01 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213811 IP address blocks: 193.143.16.0/23 maxlen: 24 2a14:b000::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0f:4a:eb:4a:d0:8e:87:49:1e:1c:69:42:bd:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a Validity Not Before: Jan 1 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cde53555aabc7578a9f5d9abb1271f61533b00fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:bf:57:99:16:f1:a4:fd:cb:bd:b3:e2:6e: 62:3c:87:8a:60:db:5d:11:df:25:19:0e:02:1c:89: 4c:e8:b0:16:a5:e7:a7:9d:ac:2f:2d:07:20:64:5b: 71:e4:a5:bf:b4:50:18:ac:e1:ad:04:db:01:cc:f5: 5d:1e:02:79:ff:70:18:04:07:bc:5b:d0:73:ce:15: c4:c7:41:48:29:4b:2c:22:08:ee:e9:a8:89:a2:13: ca:59:0f:81:fe:b9:27:aa:b5:f0:be:06:1a:97:e2: 41:b8:e3:33:03:46:b1:fa:08:03:2f:57:c3:59:bb: 3c:54:41:18:9f:28:2c:6b:5a:15:c2:f2:fe:b3:43: 8e:f2:d0:50:e8:cc:22:75:50:09:1b:2b:1f:ba:43: fd:81:51:51:1f:47:c6:67:e2:f3:6f:0f:01:ec:c6: 65:97:81:2b:f2:8b:42:03:6a:fa:e3:1e:8c:17:02: 9e:1e:ba:c1:0e:44:11:18:b6:54:bc:15:f6:df:8d: 25:59:9b:44:25:08:72:f1:ad:57:bf:84:6d:f6:57: 30:87:8f:8e:63:b7:3f:01:f2:c3:bf:04:31:aa:33: a0:c4:22:8b:53:2b:40:85:44:7a:d5:d4:d1:e2:db: 40:c8:b9:b0:95:d0:66:b1:05:a7:d3:e3:e1:84:ad: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E5:35:55:AA:BC:75:78:A9:F5:D9:AB:B1:27:1F:61:53:3B:00:FD X509v3 Authority Key Identifier: keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/zeU1Vaq8dXip9dmrsScfYVM7AP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.16.0/23 IPv6: 2a14:b000::/29 Signature Algorithm: sha256WithRSAEncryption d8:1e:0f:ef:10:3b:d9:9b:1d:22:6c:d7:3e:9b:4f:37:4b:6f: dd:6a:86:43:d0:4e:39:3a:d3:a8:5d:e3:df:e6:39:de:e0:01: 18:c1:43:d4:c3:31:7b:57:a5:5e:d6:bb:cc:f1:25:87:94:a2: bc:19:34:b2:b9:1b:83:72:89:d7:76:fc:d5:16:54:85:62:89: c7:86:89:6b:05:3f:f9:95:ad:c4:16:0a:16:09:f8:e0:75:7b: c8:45:ea:22:10:36:19:8d:ef:54:e0:db:ba:a5:0e:a4:43:2f: 8f:94:ac:dc:95:c1:e3:09:bc:39:a0:14:3f:c3:2f:f2:67:1a: 80:f6:2c:c3:e4:a6:9c:58:78:b1:d0:c1:e9:99:97:f2:91:e5: 34:2a:90:be:5e:f6:0e:5f:50:7c:68:03:9e:09:55:5b:27:00: 85:77:a5:a7:2f:39:84:d1:8f:16:bd:35:de:1e:16:90:32:ce: 15:2c:5c:00:15:e0:c5:29:b8:74:cf:eb:c9:87:0d:5b:83:5e: 88:43:47:74:51:32:8d:c5:9a:ce:91:5a:ba:3f:13:da:74:e7: d0:71:c8:15:77:0e:59:6e:5a:28:a5:58:55:18:78:71:f0:4b: 4f:fb:be:db:cf:75:e3:5b:0b:4d:24:d8:78:dc:8a:b3:6a:78: 02:db:5b:90 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NQ9K60rQjodJHhxpQr3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OGUwYzNiOTMzM2NiNmZkNDEzOWU0NTVhNWFiYmFmZDU2 OTUzMmEwHhcNMjYwMTAxMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGU1MzU1NWFhYmM3NTc4YTlmNWQ5YWJiMTI3MWY2MTUzM2IwMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDO/V5kW8aT9y72z4m5iPIeKYNtd Ed8lGQ4CHIlM6LAWpeennawvLQcgZFtx5KW/tFAYrOGtBNsBzPVdHgJ5/3AYBAe8 W9BzzhXEx0FIKUssIgju6aiJohPKWQ+B/rknqrXwvgYal+JBuOMzA0ax+ggDL1fD Wbs8VEEYnygsa1oVwvL+s0OO8tBQ6MwidVAJGysfukP9gVFRH0fGZ+Lzbw8B7MZl l4Er8otCA2r64x6MFwKeHrrBDkQRGLZUvBX2340lWZtEJQhy8a1Xv4Rt9lcwh4+O Y7c/AfLDvwQxqjOgxCKLUytAhUR61dTR4ttAyLmwldBmsQWn0+PhhK0N6wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM3lNVWqvHV4qfXZq7EnH2FTOwD9MB8GA1UdIwQY MBaAFPWODDuTM8tv1BOeRVpau6/VaVMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQt MmJjMWFlM2RiZGJlLzEvemVVMVZhcThkWGlwOWRtcnNTY2ZZVk03QVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQtMmJjMWFlM2RiZGJl LzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwY8QMA0E AgACMAcDBQMqFLAAMA0GCSqGSIb3DQEBCwUAA4IBAQDYHg/vEDvZmx0ibNc+m083 S2/daoZD0E45OtOoXePf5jne4AEYwUPUwzF7V6Ve1rvM8SWHlKK8GTSyuRuDconX dvzVFlSFYonHholrBT/5la3EFgoWCfjgdXvIReoiEDYZje9U4Nu6pQ6kQy+PlKzc lcHjCbw5oBQ/wy/yZxqA9izD5KacWHix0MHpmZfykeU0KpC+XvYOX1B8aAOeCVVb JwCFd6WnLzmE0Y8WvTXeHhaQMs4VLFwAFeDFKbh0z+vJhw1bg16IQ0d0UTKNxZrO kVq6PxPadOfQccgVdw5ZbloopVhVGHhx8EtP+77bz3XjWwtNJNh43IqzangC21uQ -----END CERTIFICATE-----Generated at Sun Jan 25 14:58:13 2026 by rpki-client