This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/zZqdbpX91TjBbrVKBU--OsfsNgs.roa File: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (raw, json) Hash identifier: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ= Subject key identifier: CD:9A:9D:6E:95:FD:D5:38:C1:6E:B5:4A:05:4F:BE:3A:C7:EC:36:0B Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa Certificate serial: 019B7CEDD7A020284FF212DACF1147D54885 Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/zZqdbpX91TjBbrVKBU--OsfsNgs.roa Signing time: Fri 02 Jan 2026 04:18:40 +0000 ROA not before: Fri 02 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8559 IP address blocks: 141.98.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d7:a0:20:28:4f:f2:12:da:cf:11:47:d5:48:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa Validity Not Before: Jan 2 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd9a9d6e95fdd538c16eb54a054fbe3ac7ec360b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6b:0c:da:e3:4f:42:e1:8f:d0:5b:ba:cb:a3: 14:b7:05:f6:9e:8e:b1:ee:c7:39:e8:a8:f3:3f:ce: 69:3b:bc:b0:9f:46:9e:94:28:db:73:c0:09:11:41: 2a:90:be:11:fd:de:d7:ae:33:00:2b:cd:f6:1c:4a: 70:84:73:e0:0e:8e:cc:ec:3e:c7:82:a1:7d:53:68: 22:e7:35:95:d1:5a:8b:f9:b1:5e:6b:53:ab:43:63: f5:0a:4a:6b:7a:e7:a0:88:5a:97:46:7d:25:d4:fb: 60:a4:ba:ce:2f:03:1a:55:54:3b:7e:57:0d:bd:37: 46:59:b2:48:59:2a:db:ae:db:e0:fa:48:20:ab:a7: e2:80:77:51:3d:fa:fc:53:c4:23:7d:a3:2e:97:2a: 2e:e9:0f:70:55:0c:96:00:97:19:e1:b1:8a:c2:c6: 6b:bd:84:a5:4c:23:36:15:f4:c1:84:8b:f1:b2:ac: b2:b5:ee:a4:f5:4e:aa:47:7e:b6:7b:ad:f4:5e:d1: 4a:96:83:a2:cb:3e:8a:a2:a4:c9:9e:f4:41:cc:ba: 56:c8:19:c1:63:b7:24:db:f7:70:59:dd:4e:e6:ac: 49:c7:63:0b:8e:f4:38:a2:9f:38:36:b4:3f:93:3f: ad:6a:e8:e3:30:2e:8f:8e:78:9f:4c:91:7e:6a:1e: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9A:9D:6E:95:FD:D5:38:C1:6E:B5:4A:05:4F:BE:3A:C7:EC:36:0B X509v3 Authority Key Identifier: keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/zZqdbpX91TjBbrVKBU--OsfsNgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.176.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:4c:e7:1a:8c:21:8b:ca:ac:ab:0d:4a:fc:8f:ef:76:59:3b: 80:41:31:26:b9:48:32:e8:0e:80:aa:d6:55:2a:69:44:4b:f4: 5b:b4:1e:f5:a4:6c:02:24:d6:32:8d:d1:38:3c:e7:0d:6f:52: 90:a9:35:6b:e5:9f:c1:43:f4:13:d7:4f:41:88:e2:3e:85:09: ad:7a:f7:bb:9e:62:40:9d:a3:fb:f0:77:9c:07:fa:a5:e6:9c: c6:e4:3c:ad:a7:74:df:b6:40:98:db:59:83:44:6a:5e:ef:01: 0a:ed:07:d2:06:55:e0:f6:8c:84:26:43:ac:22:a8:7b:8d:db: 62:9f:a9:b7:9d:da:05:94:8b:d2:57:38:6b:fd:f7:3a:9d:03: 08:d7:b4:63:19:2b:fa:12:c6:8a:3b:d3:f1:95:73:9a:e8:61: 92:4a:79:1c:3e:08:35:dd:f0:04:58:60:94:94:e7:52:7c:78: de:f2:63:7f:50:7f:62:7c:0b:d7:10:ee:5a:bf:8c:dc:35:c9: f6:ad:46:9e:88:58:1a:b8:27:19:b8:54:c3:b8:45:70:95:5f: 9e:f5:f4:a4:59:48:b8:a2:c5:54:60:12:2d:9a:33:dd:f1:42: 66:00:59:06:a7:14:d9:90:53:a4:bf:d7:ce:85:c7:0e:ef:14: 56:5c:a4:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87degIChP8hLazxFH1UiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjFjODg0MmU3Y2Y4OTFiMjM0ZDNhMWUwZTJlMGVmNzNl ODQyYWEwHhcNMjYwMTAyMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDlhOWQ2ZTk1ZmRkNTM4YzE2ZWI1NGEwNTRmYmUzYWM3ZWMzNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6msM2uNPQuGP0Fu6y6MUtwX2no6x 7sc56KjzP85pO7ywn0aelCjbc8AJEUEqkL4R/d7XrjMAK832HEpwhHPgDo7M7D7H gqF9U2gi5zWV0VqL+bFea1OrQ2P1CkpreuegiFqXRn0l1PtgpLrOLwMaVVQ7flcN vTdGWbJIWSrbrtvg+kggq6figHdRPfr8U8QjfaMulyou6Q9wVQyWAJcZ4bGKwsZr vYSlTCM2FfTBhIvxsqyyte6k9U6qR362e630XtFKloOiyz6KoqTJnvRBzLpWyBnB Y7ck2/dwWd1O5qxJx2MLjvQ4op84NrQ/kz+taujjMC6PjnifTJF+ah54tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2anW6V/dU4wW61SgVPvjrH7DYLMB8GA1UdIwQY MBaAFNLxyIQufPiRsjTToeDi4O9z6EKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZISWhDNTgtSkd5Tk5PaDRPTGc3M1BvUXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOTlhZTctYjY3MS00MGI5LWJiMWUt YTE5NDQ0ZjdhMzM3LzEvelpxZGJwWDkxVGpCYnJWS0JVLS1Pc2ZzTmdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jOTlhZTctYjY3MS00MGI5LWJiMWUtYTE5NDQ0ZjdhMzM3 LzEvMHZISWhDNTgtSkd5Tk5PaDRPTGc3M1BvUXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjWKwMA0G CSqGSIb3DQEBCwUAA4IBAQAKTOcajCGLyqyrDUr8j+92WTuAQTEmuUgy6A6AqtZV KmlES/RbtB71pGwCJNYyjdE4POcNb1KQqTVr5Z/BQ/QT109BiOI+hQmteve7nmJA naP78HecB/ql5pzG5Dytp3TftkCY21mDRGpe7wEK7QfSBlXg9oyEJkOsIqh7jdti n6m3ndoFlIvSVzhr/fc6nQMI17RjGSv6EsaKO9PxlXOa6GGSSnkcPgg13fAEWGCU lOdSfHje8mN/UH9ifAvXEO5av4zcNcn2rUaeiFgauCcZuFTDuEVwlV+e9fSkWUi4 osVUYBItmjPd8UJmAFkGpxTZkFOkv9fOhccO7xRWXKSY -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:13 2026 by rpki-client