This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zCaKwRrScJ2SeuBpeY-GPMC8ugg.roa File: zCaKwRrScJ2SeuBpeY-GPMC8ugg.roa (raw, json) Hash identifier: PToXPAX9RaJmlIrKMdrQ+yVYq+ydgGG3RTnvQHz9BJ8= Subject key identifier: CC:26:8A:C1:1A:D2:70:9D:92:7A:E0:69:79:8F:86:3C:C0:BC:BA:08 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019BA7C6FF33349AA1D52D7FB930C71E2BB3 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zCaKwRrScJ2SeuBpeY-GPMC8ugg.roa Signing time: Sat 10 Jan 2026 11:59:55 +0000 ROA not before: Sat 10 Jan 2026 11:59:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 87.120.68.0/23 maxlen: 24 93.123.113.0/24 maxlen: 24 185.252.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:c6:ff:33:34:9a:a1:d5:2d:7f:b9:30:c7:1e:2b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 10 11:59:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc268ac11ad2709d927ae069798f863cc0bcba08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:db:a9:55:df:6b:15:00:9f:c7:13:d9:7b:f9: 89:0e:9d:4b:40:4e:61:0c:63:1a:9d:27:20:3f:c5: c3:43:fb:f2:87:c7:bb:07:9d:f7:4b:bd:17:ed:c0: 2a:df:25:bf:04:c2:d5:0c:79:be:7e:fd:95:e6:1e: 26:d8:4c:95:84:52:f1:25:06:da:f7:16:2c:61:a4: 22:56:51:e9:ee:5e:ad:91:9b:4e:cc:b7:5f:4a:c8: 40:22:b7:bb:32:2e:ec:a3:86:9f:56:39:5a:58:08: 44:a4:de:b6:e3:1d:1e:73:7d:09:ec:53:20:88:09: 0d:0f:cd:88:97:52:08:1a:f2:a6:66:71:86:08:aa: 3d:30:0f:ab:52:da:ea:05:8d:b8:f1:d4:3b:a4:e5: 0d:aa:7d:ca:ce:2f:ab:dc:73:61:dd:49:f4:f0:16: 4f:3a:cf:07:f2:39:c8:5b:24:ef:01:c6:88:32:a5: d8:1d:13:ec:0a:d2:bb:15:86:ba:6d:64:90:86:d8: 38:ae:ed:b5:e4:20:c0:7b:ef:7d:69:9c:b9:08:36: 7b:b1:88:03:c9:c4:ae:1c:1a:46:3b:28:66:3d:55: 94:4d:f6:11:b9:1d:d9:68:9f:46:62:40:04:a9:9f: 55:0a:6d:fc:74:55:90:18:94:66:34:04:20:e9:4f: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:26:8A:C1:1A:D2:70:9D:92:7A:E0:69:79:8F:86:3C:C0:BC:BA:08 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zCaKwRrScJ2SeuBpeY-GPMC8ugg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.68.0/23 93.123.113.0/24 185.252.160.0/23 Signature Algorithm: sha256WithRSAEncryption 39:9a:61:ab:ac:9b:1e:4b:2b:23:97:d8:63:15:28:03:61:b0: 97:22:29:ba:82:a4:27:fe:36:0f:00:b3:38:84:ca:ec:e8:67: ee:5e:a5:e7:51:6f:b8:25:b2:67:f5:fd:7b:ab:89:23:63:8f: 32:f5:dd:a1:f4:03:a1:21:f6:9d:20:55:03:72:5c:25:d9:07: b8:36:7d:5e:c2:18:1d:7f:85:77:99:4d:ee:04:4a:f0:59:b5: 28:04:41:1d:1f:da:fd:64:16:e5:2c:c3:d7:e6:26:1d:d9:64: 8f:6b:d6:aa:5e:36:ad:02:39:97:9c:11:73:bf:1a:ea:c0:b3: 83:b4:3d:7b:31:db:49:0e:4f:2b:89:0f:4a:4a:80:ae:56:00: 9a:d2:7d:13:44:7d:ed:ce:04:19:aa:9a:0f:be:b0:90:fc:90: 24:4f:a2:93:b3:49:f4:c0:40:b0:cf:d8:1e:2b:75:78:0b:a9: cd:b0:e5:6c:88:18:04:af:64:68:9d:0a:c6:2f:4b:c7:6f:2b: ae:63:cb:0e:30:aa:0f:25:fe:1b:e8:bf:19:93:52:40:ae:a7: 10:af:5b:7c:fa:ea:e5:c1:2b:cf:11:45:8c:2d:24:27:75:3f: b2:c7:52:d3:24:2e:c1:1d:c0:3b:b3:99:5b:f6:89:af:f3:d6: 1b:0c:ed:5c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZunxv8zNJqh1S1/uTDHHiuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTEwMTE1OTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzI2OGFjMTFhZDI3MDlkOTI3YWUwNjk3OThmODYzY2MwYmNiYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69upVd9rFQCfxxPZe/mJDp1LQE5h DGManScgP8XDQ/vyh8e7B533S70X7cAq3yW/BMLVDHm+fv2V5h4m2EyVhFLxJQba 9xYsYaQiVlHp7l6tkZtOzLdfSshAIre7Mi7so4afVjlaWAhEpN624x0ec30J7FMg iAkND82Il1IIGvKmZnGGCKo9MA+rUtrqBY248dQ7pOUNqn3Kzi+r3HNh3Un08BZP Os8H8jnIWyTvAcaIMqXYHRPsCtK7FYa6bWSQhtg4ru215CDAe+99aZy5CDZ7sYgD ycSuHBpGOyhmPVWUTfYRuR3ZaJ9GYkAEqZ9VCm38dFWQGJRmNAQg6U+aIwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMwmisEa0nCdknrgaXmPhjzAvLoIMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvekNhS3dSclNjSjJTZXVCcGVZLUdQTUM4dWdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBV3hEAwQA XXtxAwQBufygMA0GCSqGSIb3DQEBCwUAA4IBAQA5mmGrrJseSysjl9hjFSgDYbCX Iim6gqQn/jYPALM4hMrs6GfuXqXnUW+4JbJn9f17q4kjY48y9d2h9AOhIfadIFUD clwl2Qe4Nn1ewhgdf4V3mU3uBErwWbUoBEEdH9r9ZBblLMPX5iYd2WSPa9aqXjat AjmXnBFzvxrqwLODtD17MdtJDk8riQ9KSoCuVgCa0n0TRH3tzgQZqpoPvrCQ/JAk T6KTs0n0wECwz9geK3V4C6nNsOVsiBgEr2RonQrGL0vHbyuuY8sOMKoPJf4b6L8Z k1JArqcQr1t8+urlwSvPEUWMLSQndT+yx1LTJC7BHcA7s5lb9omv89YbDO1c -----END CERTIFICATE-----Generated at Sun Jan 11 21:29:31 2026 by rpki-client