This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Z_IuqEKKfXuEOIP93u24e6BLk0E.roa File: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (raw, json) Hash identifier: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk= Subject key identifier: 67:F2:2E:A8:42:8A:7D:7B:84:38:83:FD:DE:ED:B8:7B:A0:4B:93:41 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019B7A59AC484E8E030FA23C402985542C5B Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Z_IuqEKKfXuEOIP93u24e6BLk0E.roa Signing time: Thu 01 Jan 2026 16:17:35 +0000 ROA not before: Thu 01 Jan 2026 16:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 195.206.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:ac:48:4e:8e:03:0f:a2:3c:40:29:85:54:2c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jan 1 16:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67f22ea8428a7d7b843883fddeedb87ba04b9341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b5:b8:b5:03:17:00:53:b9:ba:e3:13:dc:20: 89:7b:48:1c:59:31:7e:bc:eb:83:2f:79:1a:6b:3c: 3b:72:0c:cb:76:6c:56:05:79:10:62:48:1a:15:36: f3:a4:55:cc:93:bc:21:49:1d:73:cc:a0:ad:0b:26: b0:1d:24:b9:6c:5a:c1:10:90:5d:d8:9f:79:84:8e: 64:5c:73:26:1e:20:88:4f:e4:46:59:03:c8:87:80: 14:1d:13:9c:ef:01:3c:fa:75:48:59:42:28:60:16: 95:50:37:da:49:ea:15:10:b7:08:d1:b1:83:48:e5: 4c:d9:39:64:b7:37:f8:d5:2b:d2:86:0a:ab:12:71: 5e:7c:0f:e5:a7:4b:5e:dc:49:f5:03:90:06:98:ac: 43:bd:e2:8d:14:4b:60:21:0a:8e:61:dd:a8:41:8b: 81:fd:e5:1a:59:61:6b:6f:3c:95:98:ad:df:19:79: ca:a3:93:14:a8:fa:ee:02:bc:4c:05:10:9d:73:ec: 86:8b:cd:62:0a:93:0f:11:cf:1a:82:bc:ba:1c:dc: da:4a:c8:35:3c:d1:a6:ca:82:44:ae:6e:c8:7a:8a: 6a:9f:d3:f3:d0:35:0d:7b:99:b6:9d:cb:92:c8:cd: 21:07:72:0d:ed:aa:89:f4:96:df:d3:1c:a9:3a:b0: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F2:2E:A8:42:8A:7D:7B:84:38:83:FD:DE:ED:B8:7B:A0:4B:93:41 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Z_IuqEKKfXuEOIP93u24e6BLk0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.206.111.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:ae:7d:09:4b:25:6a:c7:ce:99:84:77:ba:2d:79:e9:a0:d7: f5:c7:1b:c0:7c:79:24:68:1a:8a:f8:21:f0:01:d7:c1:48:b2: df:df:c5:9f:b9:c8:1b:3b:93:02:a1:68:89:ae:00:03:9e:63: 0b:e7:1e:8d:6a:0d:ef:73:72:7d:af:c5:69:04:c1:ee:87:67: 31:82:ba:f4:0b:1b:81:e0:f7:7a:19:8e:e3:04:b4:1b:66:23: 3b:04:ee:be:eb:3e:ee:29:b4:50:59:7a:c4:25:9b:81:82:0b: e9:f9:4f:8a:bc:7d:0b:ba:4a:4b:2f:34:45:86:50:c7:a1:a6: 0d:1f:9f:5d:51:3a:98:36:9c:6d:4f:0c:ce:b8:9b:9c:25:ac: e0:8f:4f:c2:e8:3d:4e:d1:0f:75:99:dc:3b:24:27:1d:b0:7b: f0:0a:4d:cf:2d:82:90:81:73:f5:b9:e4:30:b2:9a:9d:8e:ca: 84:07:da:fa:c3:ab:e0:32:ab:5a:9f:b9:a8:eb:4f:99:c3:f5: c1:78:6f:c7:d0:1f:50:43:c7:5a:ca:f9:94:52:1e:b4:c7:6d: f6:08:ed:6f:d2:fd:8d:b1:48:e8:0f:1c:42:f3:19:ad:b0:44: 69:d0:93:9e:11:0c:09:c3:aa:22:d9:b7:59:04:57:76:3b:6f: b0:bf:9a:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WaxITo4DD6I8QCmFVCxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMTAxMTYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2YyMmVhODQyOGE3ZDdiODQzODgzZmRkZWVkYjg3YmEwNGI5MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrW4tQMXAFO5uuMT3CCJe0gcWTF+ vOuDL3kaazw7cgzLdmxWBXkQYkgaFTbzpFXMk7whSR1zzKCtCyawHSS5bFrBEJBd 2J95hI5kXHMmHiCIT+RGWQPIh4AUHROc7wE8+nVIWUIoYBaVUDfaSeoVELcI0bGD SOVM2Tlktzf41SvShgqrEnFefA/lp0te3En1A5AGmKxDveKNFEtgIQqOYd2oQYuB /eUaWWFrbzyVmK3fGXnKo5MUqPruArxMBRCdc+yGi81iCpMPEc8agry6HNzaSsg1 PNGmyoJErm7Ieopqn9Pz0DUNe5m2ncuSyM0hB3IN7aqJ9Jbf0xypOrCeHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfyLqhCin17hDiD/d7tuHugS5NBMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvWl9JdXFFS0tmWHVFT0lQOTN1MjRlNkJMazBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw85vMA0G CSqGSIb3DQEBCwUAA4IBAQBbrn0JSyVqx86ZhHe6LXnpoNf1xxvAfHkkaBqK+CHw AdfBSLLf38WfucgbO5MCoWiJrgADnmML5x6Nag3vc3J9r8VpBMHuh2cxgrr0CxuB 4Pd6GY7jBLQbZiM7BO6+6z7uKbRQWXrEJZuBggvp+U+KvH0LukpLLzRFhlDHoaYN H59dUTqYNpxtTwzOuJucJazgj0/C6D1O0Q91mdw7JCcdsHvwCk3PLYKQgXP1ueQw spqdjsqEB9r6w6vgMqtan7mo60+Zw/XBeG/H0B9QQ8dayvmUUh60x232CO1v0v2N sUjoDxxC8xmtsERp0JOeEQwJw6oi2bdZBFd2O2+wv5qS -----END CERTIFICATE-----Generated at Mon Jan 5 03:57:52 2026 by rpki-client