This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/ZzgxUr7465xAKyVi3HDIHGueP3k.roa File: ZzgxUr7465xAKyVi3HDIHGueP3k.roa (raw, json) Hash identifier: 2NJYjrGz8rRWAAvm63thzeaecXROIhhwMcqdePuSy00= Subject key identifier: 67:38:31:52:BE:F8:EB:9C:40:2B:25:62:DC:70:C8:1C:6B:9E:3F:79 Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b Certificate serial: 019B78A2986210FD7B412DF87A9AA30853C3 Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/ZzgxUr7465xAKyVi3HDIHGueP3k.roa Signing time: Thu 01 Jan 2026 08:18:00 +0000 ROA not before: Thu 01 Jan 2026 08:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44456 IP address blocks: 89.162.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:98:62:10:fd:7b:41:2d:f8:7a:9a:a3:08:53:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b Validity Not Before: Jan 1 08:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67383152bef8eb9c402b2562dc70c81c6b9e3f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fd:b5:42:a1:2d:4e:49:6b:be:4e:cd:00:d1: 21:62:c8:c9:45:b2:18:03:2b:ad:1e:a6:ad:27:69: a8:60:86:89:e6:16:ef:2e:5c:6f:e7:89:ff:30:3d: 79:c1:69:46:42:01:29:28:af:3c:6d:cc:16:0c:d5: 3d:3b:42:cb:02:2f:80:b3:13:08:25:ed:8d:db:de: 0b:02:51:36:70:c6:dc:cc:56:48:b0:39:4f:91:73: b0:a1:77:e7:2b:fb:54:dd:fe:1a:1e:ba:2d:d8:12: 8c:4f:9d:ca:eb:84:d5:52:03:9b:3f:fa:44:68:cc: 00:c7:2d:80:02:c9:d7:1d:4a:17:16:02:dd:f0:1d: 0b:05:de:6e:c4:65:2a:5d:df:a7:73:0e:0f:67:7e: cd:fc:24:94:eb:c0:e0:e7:1b:a9:ed:c4:c6:07:ff: e8:b1:4d:ee:49:ec:2f:f2:07:43:53:4d:4f:06:8d: f5:6e:17:1f:60:38:61:de:eb:00:a4:7a:f9:5e:03: 94:05:ea:a6:50:08:a5:ee:7a:aa:7e:b0:12:b2:e0: 17:c2:87:a4:79:17:7d:c8:74:c2:7f:72:ef:fd:d8: 42:17:60:61:04:8c:ec:97:f7:0c:af:36:ce:a4:01: 20:fb:3b:7c:fe:bd:bc:2f:d6:ad:a9:be:85:f0:8d: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:38:31:52:BE:F8:EB:9C:40:2B:25:62:DC:70:C8:1C:6B:9E:3F:79 X509v3 Authority Key Identifier: keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/ZzgxUr7465xAKyVi3HDIHGueP3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.162.191.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:93:96:3f:d1:6d:fa:6b:ea:b2:d1:7c:da:5f:16:55:46:a8: 2d:01:44:36:69:a8:41:43:e9:41:a8:58:2a:bb:3f:e5:cd:38: a2:bb:22:ab:18:b5:ff:2f:b6:de:bc:eb:db:fe:69:ba:1d:33: 44:81:18:a4:65:59:7a:f6:c6:69:25:3e:4d:74:5e:66:c6:b4: f0:77:62:1b:7a:67:a3:2b:6e:c2:df:dc:51:9b:e4:1a:de:24: be:a4:63:9d:ca:61:df:ed:0c:42:27:35:99:ee:cb:60:cb:23: 1e:03:ad:7f:7d:ec:d0:ef:66:08:e1:c3:15:04:aa:2b:da:14: 80:d3:99:57:86:8a:70:27:fa:b3:23:23:0d:de:fc:b2:b0:46: ef:2c:fd:32:bb:64:c7:a9:45:ed:b8:41:51:10:46:f2:6e:1f: 43:6b:c6:5b:46:cd:fe:b2:2f:0b:da:5c:26:0c:91:83:d7:c3: 2a:63:73:84:d9:99:c7:da:16:e2:22:6e:14:f2:55:57:15:89: 98:ed:6a:9a:42:61:35:52:fa:16:2f:18:df:04:3a:e2:71:f3: 2e:ae:f3:d0:00:78:46:51:b2:6c:f3:e0:74:d9:df:62:65:c5: 6b:da:f0:30:c3:76:92:95:c2:87:0d:c6:ad:6e:00:56:91:d2: bd:50:6c:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ophiEP17QS34epqjCFPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYjliOWUyNTY1ODBjNDM0NGJiMjQxNDQ1YjRkNTJlNTRm ZGQ1MGIwHhcNMjYwMTAxMDgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzM4MzE1MmJlZjhlYjljNDAyYjI1NjJkYzcwYzgxYzZiOWUzZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v21QqEtTklrvk7NANEhYsjJRbIY AyutHqatJ2moYIaJ5hbvLlxv54n/MD15wWlGQgEpKK88bcwWDNU9O0LLAi+AsxMI Je2N294LAlE2cMbczFZIsDlPkXOwoXfnK/tU3f4aHrot2BKMT53K64TVUgObP/pE aMwAxy2AAsnXHUoXFgLd8B0LBd5uxGUqXd+ncw4PZ37N/CSU68Dg5xup7cTGB//o sU3uSewv8gdDU01PBo31bhcfYDhh3usApHr5XgOUBeqmUAil7nqqfrASsuAXwoek eRd9yHTCf3Lv/dhCF2BhBIzsl/cMrzbOpAEg+zt8/r28L9atqb6F8I1qgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGc4MVK++OucQCslYtxwyBxrnj95MB8GA1UdIwQY MBaAFFK5ueJWWAxDRLskFEW01S5U/dULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAt ZGUwNWM1NDA0NWJiLzEvWnpneFVyNzQ2NXhBS3lWaTNIRElIR3VlUDNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAtZGUwNWM1NDA0NWJi LzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWaK/MA0G CSqGSIb3DQEBCwUAA4IBAQCKk5Y/0W36a+qy0XzaXxZVRqgtAUQ2aahBQ+lBqFgq uz/lzTiiuyKrGLX/L7bevOvb/mm6HTNEgRikZVl69sZpJT5NdF5mxrTwd2Ibemej K27C39xRm+Qa3iS+pGOdymHf7QxCJzWZ7stgyyMeA61/fezQ72YI4cMVBKor2hSA 05lXhopwJ/qzIyMN3vyysEbvLP0yu2THqUXtuEFREEbybh9Da8ZbRs3+si8L2lwm DJGD18MqY3OE2ZnH2hbiIm4U8lVXFYmY7WqaQmE1UvoWLxjfBDricfMurvPQAHhG UbJs8+B02d9iZcVr2vAww3aSlcKHDcatbgBWkdK9UGxK -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:23 2026 by rpki-client