This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rZUB2NZ1IM8JLCuZm6gCtdQMIT8.roa File: rZUB2NZ1IM8JLCuZm6gCtdQMIT8.roa (raw, json) Hash identifier: 5GiKlsos1DOZZ+mbD99ErbmG/UB/TB6p8TXQgj5fUbw= Subject key identifier: AD:95:01:D8:D6:75:20:CF:09:2C:2B:99:9B:A8:02:B5:D4:0C:21:3F Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12E8F6FAF64B1906987C43FB218396 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rZUB2NZ1IM8JLCuZm6gCtdQMIT8.roa Signing time: Fri 02 Jan 2026 00:19:32 +0000 ROA not before: Fri 02 Jan 2026 00:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9096 IP address blocks: 212.243.80.0/24 maxlen: 24 217.192.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e8:f6:fa:f6:4b:19:06:98:7c:43:fb:21:83:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad9501d8d67520cf092c2b999ba802b5d40c213f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:7a:14:91:16:7d:6f:f6:ae:0d:16:29:d7: 83:63:b1:37:5f:11:92:44:7e:13:44:64:ce:48:86: 50:8a:ed:20:a2:54:f8:5a:3f:0b:6d:73:d2:a2:f9: fc:bb:63:1e:4f:a6:8a:de:eb:20:8d:22:29:1b:0d: 6c:81:cd:77:31:61:c4:ec:65:5e:e5:24:75:10:80: 81:fc:1d:25:68:7d:3e:a7:ac:c2:cd:dd:a2:b2:e5: 5e:3e:60:cf:9d:1f:78:1d:c3:ef:cd:9a:2a:28:43: 19:b9:39:1f:b9:b1:f4:5d:64:97:d9:fd:66:7c:48: 6a:a2:11:ad:f7:f3:d5:f6:fb:c9:bb:6b:73:11:00: 92:0a:c2:a5:35:d3:cb:27:a1:57:da:b4:55:f4:12: e7:ae:c4:91:94:a7:ea:58:22:47:b0:00:90:3c:9f: 3f:7e:a3:a7:04:3e:84:cd:c4:82:9a:8a:db:0e:5b: 88:6a:34:4c:98:8a:2b:da:69:f5:cd:70:63:17:cb: 93:eb:5d:61:4b:fc:58:d3:84:eb:04:94:c9:c3:8a: 6d:11:d9:80:6b:49:10:8b:9e:a5:33:0c:8a:11:38: 51:f9:f0:a3:05:ca:3b:7a:9a:33:76:4c:b6:d3:a8: f1:a2:1a:0e:47:ca:f7:72:e3:d5:56:dd:08:4b:88: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:95:01:D8:D6:75:20:CF:09:2C:2B:99:9B:A8:02:B5:D4:0C:21:3F X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/rZUB2NZ1IM8JLCuZm6gCtdQMIT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.243.80.0/24 217.192.86.0/24 Signature Algorithm: sha256WithRSAEncryption ab:02:7b:0e:a3:5a:c7:a2:4c:e9:7c:95:21:ae:b8:63:27:0f: 4c:70:d3:f5:66:5b:3f:a7:0b:66:2c:fc:23:73:5d:9b:5b:5a: 73:10:5c:eb:d9:4a:8e:48:64:73:f1:f0:7d:84:26:f1:60:dc: aa:35:af:0f:cf:53:c6:49:82:28:48:da:6d:ed:ca:2a:f1:ad: 2c:ce:9e:2a:dc:99:a3:b2:9d:00:60:6b:92:11:e4:99:bb:4e: e1:d9:a2:37:4d:75:17:1c:ab:62:3b:53:b8:86:c2:f1:f6:cf: 65:4e:9e:b4:66:78:58:18:19:24:44:87:0f:47:c6:51:16:b7: 82:c8:3c:b1:16:6b:fd:7f:8a:89:fa:44:ef:e3:58:8e:f2:d7: e9:a3:9b:dd:46:3f:83:74:be:d5:de:a6:d2:4b:ff:45:49:f9: 88:1d:09:de:1e:bd:d1:ba:db:f8:14:55:28:07:09:ea:fa:98: 0f:40:93:08:ca:c8:eb:7a:a1:10:c9:98:b9:7b:b9:a1:47:a9: 47:85:a8:e0:73:de:4f:b4:ff:af:f5:1c:4d:0b:51:f5:73:80: 57:f4:85:b1:b7:6c:f4:a0:90:2d:f6:dc:0e:ba:f0:8f:b9:b0: 3c:9d:f0:9e:da:9a:f2:3c:71:d3:e8:e8:f1:b9:1b:33:da:b1: 8a:35:7b:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Euj2+vZLGQaYfEP7IYOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDk1MDFkOGQ2NzUyMGNmMDkyYzJiOTk5YmE4MDJiNWQ0MGMyMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1x6FJEWfW/2rg0WKdeDY7E3XxGS RH4TRGTOSIZQiu0golT4Wj8LbXPSovn8u2MeT6aK3usgjSIpGw1sgc13MWHE7GVe 5SR1EICB/B0laH0+p6zCzd2isuVePmDPnR94HcPvzZoqKEMZuTkfubH0XWSX2f1m fEhqohGt9/PV9vvJu2tzEQCSCsKlNdPLJ6FX2rRV9BLnrsSRlKfqWCJHsACQPJ8/ fqOnBD6EzcSCmorbDluIajRMmIor2mn1zXBjF8uT611hS/xY04TrBJTJw4ptEdmA a0kQi56lMwyKEThR+fCjBco7epozdky206jxohoOR8r3cuPVVt0IS4g9zwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK2VAdjWdSDPCSwrmZuoArXUDCE/MB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvclpVQjJOWjFJTThKTEN1Wm02Z0N0ZFFNSVQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1PNQAwQA 2cBWMA0GCSqGSIb3DQEBCwUAA4IBAQCrAnsOo1rHokzpfJUhrrhjJw9McNP1Zls/ pwtmLPwjc12bW1pzEFzr2UqOSGRz8fB9hCbxYNyqNa8Pz1PGSYIoSNpt7coq8a0s zp4q3Jmjsp0AYGuSEeSZu07h2aI3TXUXHKtiO1O4hsLx9s9lTp60ZnhYGBkkRIcP R8ZRFreCyDyxFmv9f4qJ+kTv41iO8tfpo5vdRj+DdL7V3qbSS/9FSfmIHQneHr3R utv4FFUoBwnq+pgPQJMIysjreqEQyZi5e7mhR6lHhajgc95PtP+v9RxNC1H1c4BX 9IWxt2z0oJAt9twOuvCPubA8nfCe2pryPHHT6OjxuRsz2rGKNXtI -----END CERTIFICATE-----Generated at Mon Jan 26 14:44:27 2026 by rpki-client