This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/zIZO5OcLgytxydbFjh9zl-Q7rUM.roa File: zIZO5OcLgytxydbFjh9zl-Q7rUM.roa (raw, json) Hash identifier: SfPUXDi/ZZO3GvzHqo6VKjgUthfpKQn2oc9LE5TVOu8= Subject key identifier: CC:86:4E:E4:E7:0B:83:2B:71:C9:D6:C5:8E:1F:73:97:E4:3B:AD:43 Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a Certificate serial: 019B7B369D6DB6A15ECDF9CAAF93B08E3208 Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/zIZO5OcLgytxydbFjh9zl-Q7rUM.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43185 IP address blocks: 77.95.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9d:6d:b6:a1:5e:cd:f9:ca:af:93:b0:8e:32:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc864ee4e70b832b71c9d6c58e1f7397e43bad43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:e7:72:2e:a2:9c:eb:be:b1:b6:32:76:56: c2:4a:38:f5:ea:13:1d:7b:7c:5f:80:4e:7e:ea:fb: 0d:05:d6:4b:ba:46:73:ea:15:5a:2c:1b:ba:3d:ad: 6a:7f:f4:94:89:58:44:ed:67:0f:c3:1e:ee:f9:32: ca:7d:2a:16:ee:aa:13:93:71:71:4f:53:79:a5:d6: c1:de:15:a4:c6:f2:e1:c1:b8:ca:0b:fe:44:72:48: 17:20:f0:8a:96:08:de:94:2a:19:55:02:bd:2c:b0: 9a:29:ea:94:6c:4f:e3:c7:15:5e:63:58:51:ad:91: 75:18:5b:93:2a:84:74:18:96:73:92:29:5b:e4:59: dd:bd:d4:a4:34:9b:0b:26:0d:9f:f4:9a:0d:3f:19: bb:90:94:93:d4:29:05:1e:fa:b7:ef:63:c3:31:c0: 20:15:26:3f:c0:c4:b1:43:22:a3:68:d6:e4:fd:de: b8:fa:53:7f:7f:6b:e3:f6:e7:4b:7e:e6:34:05:a9: 18:28:9a:36:5a:84:65:8b:dd:f1:40:be:6d:1a:24: 1f:7d:43:c8:04:21:fb:4f:2d:59:98:52:22:ac:08: 71:79:e1:6c:4b:e4:09:44:d3:16:1f:07:5d:df:4a: b6:bf:35:58:b5:0f:73:3f:95:e8:fd:ab:fd:21:91: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:86:4E:E4:E7:0B:83:2B:71:C9:D6:C5:8E:1F:73:97:E4:3B:AD:43 X509v3 Authority Key Identifier: keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/zIZO5OcLgytxydbFjh9zl-Q7rUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.208.0/21 Signature Algorithm: sha256WithRSAEncryption 99:0e:36:03:d4:59:73:2d:9d:9a:14:54:19:6e:c8:42:b6:17: 6c:ee:e4:46:e8:38:e5:17:a4:29:63:c8:b1:88:0b:bd:bd:f3: e2:c6:2d:9c:06:93:14:82:82:ca:36:34:2e:ee:18:08:a3:78: ff:e4:01:18:c4:84:46:18:e8:73:18:e4:cd:5e:06:d6:2c:66: 88:9b:a5:03:2c:39:7f:62:de:3b:84:7b:0e:c2:57:98:ab:05: 9d:85:65:e1:af:42:7d:bd:14:98:59:e5:2a:4b:9c:f0:d5:f8: 60:34:90:0d:ed:1e:5d:e9:10:38:8c:d6:53:03:e3:8a:f0:06: ad:ee:ec:e7:61:de:e1:76:45:e6:3d:d7:85:51:11:06:c1:fd: 88:2e:e6:f9:d5:bc:82:39:a7:c2:0c:86:b3:c0:e1:49:ee:80: 92:2f:ad:51:ad:b9:d8:5d:16:8c:7c:e3:41:77:20:65:1e:c9: d7:3a:83:e7:02:c5:2a:05:19:fc:8a:04:8c:25:dd:14:ca:c8: 11:e0:ed:3c:e4:31:76:98:da:fc:ee:e1:20:80:d4:de:d9:4f: 7b:64:8f:8b:17:50:81:c0:18:02:5a:dc:1a:98:4d:e6:9b:b7: ee:19:f9:fb:89:0f:99:c0:e5:db:17:e3:eb:5e:e6:d4:67:c0: ac:b9:fc:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Np1ttqFezfnKr5OwjjIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOGEwYTNkNmE0NGE1ODMwNGUxYjFkYmY2MmU1ZDdhMTZi Mzg4N2EwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzg2NGVlNGU3MGI4MzJiNzFjOWQ2YzU4ZTFmNzM5N2U0M2JhZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlDnci6inOu+sbYydlbCSjj16hMd e3xfgE5+6vsNBdZLukZz6hVaLBu6Pa1qf/SUiVhE7WcPwx7u+TLKfSoW7qoTk3Fx T1N5pdbB3hWkxvLhwbjKC/5EckgXIPCKlgjelCoZVQK9LLCaKeqUbE/jxxVeY1hR rZF1GFuTKoR0GJZzkilb5FndvdSkNJsLJg2f9JoNPxm7kJST1CkFHvq372PDMcAg FSY/wMSxQyKjaNbk/d64+lN/f2vj9udLfuY0BakYKJo2WoRli93xQL5tGiQffUPI BCH7Ty1ZmFIirAhxeeFsS+QJRNMWHwdd30q2vzVYtQ9zP5Xo/av9IZEkqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMyGTuTnC4MrccnWxY4fc5fkO61DMB8GA1UdIwQY MBaAFNuKCj1qRKWDBOGx2/YuXXoWs4h6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMt NTZjNmQ1NTFhOTMyLzEveklaTzVPY0xneXR4eWRiRmpoOXpsLVE3clVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMtNTZjNmQ1NTFhOTMy LzEvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTV/QMA0G CSqGSIb3DQEBCwUAA4IBAQCZDjYD1FlzLZ2aFFQZbshCthds7uRG6DjlF6QpY8ix iAu9vfPixi2cBpMUgoLKNjQu7hgIo3j/5AEYxIRGGOhzGOTNXgbWLGaIm6UDLDl/ Yt47hHsOwleYqwWdhWXhr0J9vRSYWeUqS5zw1fhgNJAN7R5d6RA4jNZTA+OK8Aat 7uznYd7hdkXmPdeFUREGwf2ILub51byCOafCDIazwOFJ7oCSL61RrbnYXRaMfONB dyBlHsnXOoPnAsUqBRn8igSMJd0UysgR4O085DF2mNr87uEggNTe2U97ZI+LF1CB wBgCWtwamE3mm7fuGfn7iQ+ZwOXbF+PrXubUZ8Csufx6 -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:03 2026 by rpki-client