This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/zSPet3ukkZtS1WIOyYYzyhfZzFw.roa File: zSPet3ukkZtS1WIOyYYzyhfZzFw.roa (raw, json) Hash identifier: h4L5+wstEU0/JXooPRxQ7bp+VFuQ40/GeZrdbqpTP+Y= Subject key identifier: CD:23:DE:B7:7B:A4:91:9B:52:D5:62:0E:C9:86:33:CA:17:D9:CC:5C Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E7853A7AC886190EA02B30D8BD679 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/zSPet3ukkZtS1WIOyYYzyhfZzFw.roa Signing time: Thu 01 Jan 2026 12:18:10 +0000 ROA not before: Thu 01 Jan 2026 12:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 89.251.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:78:53:a7:ac:88:61:90:ea:02:b3:0d:8b:d6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd23deb77ba4919b52d5620ec98633ca17d9cc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0a:ff:32:93:c7:48:74:ba:35:9f:aa:f7:82: c3:d2:ad:8f:8b:2b:e3:d7:aa:7f:e6:68:5a:a4:6c: 71:44:a3:8a:cd:af:21:d1:e1:ab:8f:45:bc:a7:be: 51:69:fb:97:55:34:52:31:b5:41:79:e7:0e:65:09: e9:3c:e6:f8:9e:61:48:75:6e:4a:70:72:30:ec:9b: 34:7f:f5:87:35:9f:fe:2b:1d:5a:00:de:16:f1:c8: 60:31:2b:8d:54:ba:9f:08:3a:10:14:69:5c:3f:7a: 52:81:cc:4d:2f:2a:4b:c8:c1:08:01:1b:a8:fc:ae: 32:02:8c:91:eb:5a:94:18:04:2d:ab:7a:2d:bc:c0: ae:ff:da:74:29:80:87:91:d8:67:61:e4:a0:c4:15: 83:cd:3c:7b:6a:9e:2e:a7:77:16:5e:91:73:d9:14: 7c:1b:19:1c:05:94:25:35:be:8b:d4:31:88:d2:3d: ee:14:1c:6a:17:6c:b7:d8:78:11:fc:3b:6c:19:12: 52:1d:3e:5a:98:9f:74:28:da:c3:ec:86:45:d7:b2: b1:da:33:39:3c:0c:de:56:8e:89:d9:b7:a8:34:5f: 1d:47:fc:0c:c0:3e:83:3d:43:ea:f3:7c:4a:d6:c6: 7e:a4:e9:b4:18:ed:38:d9:53:a8:09:07:bd:9b:ad: 79:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:23:DE:B7:7B:A4:91:9B:52:D5:62:0E:C9:86:33:CA:17:D9:CC:5C X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/zSPet3ukkZtS1WIOyYYzyhfZzFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.25.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:18:f8:b3:d1:f9:40:e9:0e:7a:d9:d8:ad:e7:5b:9f:00:34: 0a:40:18:c2:8e:ef:b1:1f:be:5f:23:3e:90:30:6d:60:7c:0a: 15:28:63:35:aa:b1:bc:1d:3c:1e:5c:06:05:46:af:05:88:2a: 31:5d:f3:d1:9f:85:08:87:d6:ea:00:18:22:b8:c0:23:c9:84: 0f:19:c8:d5:e5:99:b5:a9:8b:4e:84:6c:5d:93:ef:45:b9:bd: aa:3f:0d:91:68:fb:f0:88:48:2f:1f:cd:4f:a9:7d:a9:47:23: 0e:47:29:63:c7:a1:e5:19:a7:6a:89:37:68:46:08:a8:4f:a6: 34:8c:d4:84:df:82:3d:09:8c:85:21:c3:57:94:23:28:15:9c: 1f:40:a7:24:1f:61:bd:10:b8:d0:26:c6:64:c9:67:e0:74:ae: 44:88:64:82:fd:f1:af:ae:f8:87:96:a4:bb:31:5b:20:38:a1: 0d:74:e1:bb:ee:61:92:9e:d0:47:92:75:c6:84:55:64:80:57: 09:0f:de:66:d1:01:6d:7b:96:64:37:d3:9d:ce:a2:65:03:a4: a5:54:78:00:97:ed:bf:69:47:ce:95:0e:1d:bd:f5:91:e1:8f: 12:55:08:4f:e1:e3:17:39:7e:40:cc:78:80:ab:17:49:1f:51: eb:37:77:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnhTp6yIYZDqArMNi9Z5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDIzZGViNzdiYTQ5MTliNTJkNTYyMGVjOTg2MzNjYTE3ZDljYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wr/MpPHSHS6NZ+q94LD0q2Piyvj 16p/5mhapGxxRKOKza8h0eGrj0W8p75RafuXVTRSMbVBeecOZQnpPOb4nmFIdW5K cHIw7Js0f/WHNZ/+Kx1aAN4W8chgMSuNVLqfCDoQFGlcP3pSgcxNLypLyMEIARuo /K4yAoyR61qUGAQtq3otvMCu/9p0KYCHkdhnYeSgxBWDzTx7ap4up3cWXpFz2RR8 GxkcBZQlNb6L1DGI0j3uFBxqF2y32HgR/DtsGRJSHT5amJ90KNrD7IZF17Kx2jM5 PAzeVo6J2beoNF8dR/wMwD6DPUPq83xK1sZ+pOm0GO042VOoCQe9m615AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM0j3rd7pJGbUtViDsmGM8oX2cxcMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvelNQZXQzdWtrWnRTMVdJT3lZWXp5aGZaekZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsZMA0G CSqGSIb3DQEBCwUAA4IBAQBdGPiz0flA6Q562dit51ufADQKQBjCju+xH75fIz6Q MG1gfAoVKGM1qrG8HTweXAYFRq8FiCoxXfPRn4UIh9bqABgiuMAjyYQPGcjV5Zm1 qYtOhGxdk+9Fub2qPw2RaPvwiEgvH81PqX2pRyMORyljx6HlGadqiTdoRgioT6Y0 jNSE34I9CYyFIcNXlCMoFZwfQKckH2G9ELjQJsZkyWfgdK5EiGSC/fGvrviHlqS7 MVsgOKENdOG77mGSntBHknXGhFVkgFcJD95m0QFte5ZkN9OdzqJlA6SlVHgAl+2/ aUfOlQ4dvfWR4Y8SVQhP4eMXOX5AzHiAqxdJH1HrN3fl -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:04 2026 by rpki-client