This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ZPjQrQxYpzjEwA_UR_qpQO5uvIg.roa File: ZPjQrQxYpzjEwA_UR_qpQO5uvIg.roa (raw, json) Hash identifier: gkFwC/P9v8TU7hxr5gFrWEGRIUcdJZ5T4cE+weDTUk8= Subject key identifier: 64:F8:D0:AD:0C:58:A7:38:C4:C0:0F:D4:47:FA:A9:40:EE:6E:BC:88 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F85337A5975E552BF08357C6EA4A60E Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ZPjQrQxYpzjEwA_UR_qpQO5uvIg.roa Signing time: Fri 02 Jan 2026 16:23:14 +0000 ROA not before: Fri 02 Jan 2026 16:23:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8474 IP address blocks: 194.50.206.0/23 maxlen: 24 195.138.96.0/19 maxlen: 24 195.138.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:33:7a:59:75:e5:52:bf:08:35:7c:6e:a4:a6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64f8d0ad0c58a738c4c00fd447faa940ee6ebc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e1:82:7a:b4:71:a5:fe:e8:03:36:1a:2b:52: fc:27:62:59:4c:35:78:50:51:5f:02:84:87:48:b2: b2:34:b7:fe:6d:4f:0b:ee:d6:36:64:65:e5:2d:e4: 74:19:09:c8:31:be:68:c5:d9:31:1a:59:5d:99:a4: b1:c7:3b:06:ec:46:33:a8:83:ed:12:68:bf:14:9a: 82:d8:bf:82:b2:c6:78:56:82:b2:18:85:af:7f:a9: 17:a6:41:a5:bb:5d:ed:88:11:ea:90:b4:df:d8:2f: c7:7b:27:7f:4b:9c:54:45:5b:ae:fd:f8:9b:35:9d: 3a:8e:63:ec:a0:f7:19:02:b6:af:e2:6a:7d:98:d9: 26:cd:18:5b:6b:c0:39:fb:21:b9:ba:63:7f:09:e4: 28:53:5f:fd:c1:85:3a:69:94:d1:d4:ef:60:a3:14: 5d:6b:8c:6b:70:c1:6e:56:53:01:8c:95:fb:30:24: 01:78:b5:ea:17:0a:16:29:d2:29:73:0c:99:a4:44: df:55:19:15:58:d3:52:a4:5a:90:f2:9b:3d:1b:18: 2b:3d:46:61:d7:c4:04:21:4c:95:89:b8:ef:ed:07: ca:e0:00:c3:f4:f6:c9:46:16:7f:f6:c4:e7:f2:8b: 83:83:04:57:55:91:79:f8:ff:3d:78:a9:40:ad:23: c0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F8:D0:AD:0C:58:A7:38:C4:C0:0F:D4:47:FA:A9:40:EE:6E:BC:88 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ZPjQrQxYpzjEwA_UR_qpQO5uvIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.206.0/23 195.138.96.0/19 Signature Algorithm: sha256WithRSAEncryption a1:f3:4f:ee:59:d2:0e:b6:8e:ed:84:b8:d6:24:eb:56:af:f6: fc:e0:6d:b3:93:2d:64:6e:47:c3:a0:10:f3:73:5d:99:07:8f: bf:bf:5b:c3:a9:6e:2c:fc:1a:82:97:72:1f:49:7c:3a:02:0f: 74:2a:cd:c0:f0:54:ab:74:4d:30:36:65:35:ce:42:ab:1d:7b: 44:87:33:ee:0d:0c:85:6b:60:98:b0:9f:dd:af:fd:af:25:2e: 4b:5d:3c:75:8d:db:1b:c6:19:a5:28:38:97:bd:2f:94:22:cb: b1:50:53:ad:1a:14:39:4a:cb:a1:d3:4e:c8:da:2e:76:a2:c3: 60:9d:62:75:a2:49:02:f0:c5:1b:8e:4d:8a:7a:89:4f:37:79: 21:ee:5e:f3:8c:d1:7a:46:53:24:cd:9f:a2:73:f3:e8:85:15: 68:b5:5a:9d:3a:8c:ec:e4:a4:a0:dc:a8:80:ed:14:f4:7e:60: 96:a9:81:57:e9:fd:9c:95:41:d5:a5:10:42:90:98:16:6f:17: 29:57:9d:1d:87:bd:b9:f4:f2:46:89:e9:fc:f7:b0:4d:6b:78: fa:88:56:31:b8:c2:08:c4:93:6f:34:10:57:b1:95:bf:f4:9a: 80:ea:49:67:af:fd:61:f4:78:db:61:c6:af:18:d1:54:34:06: c7:c6:98:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hTN6WXXlUr8INXxupKYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGY4ZDBhZDBjNThhNzM4YzRjMDBmZDQ0N2ZhYTk0MGVlNmViYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeGCerRxpf7oAzYaK1L8J2JZTDV4 UFFfAoSHSLKyNLf+bU8L7tY2ZGXlLeR0GQnIMb5oxdkxGlldmaSxxzsG7EYzqIPt Emi/FJqC2L+CssZ4VoKyGIWvf6kXpkGlu13tiBHqkLTf2C/Heyd/S5xURVuu/fib NZ06jmPsoPcZArav4mp9mNkmzRhba8A5+yG5umN/CeQoU1/9wYU6aZTR1O9goxRd a4xrcMFuVlMBjJX7MCQBeLXqFwoWKdIpcwyZpETfVRkVWNNSpFqQ8ps9GxgrPUZh 18QEIUyVibjv7QfK4ADD9PbJRhZ/9sTn8ouDgwRXVZF5+P89eKlArSPAOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGT40K0MWKc4xMAP1Ef6qUDubryIMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvWlBqUXJReFlwempFd0FfVVJfcXBRTzV1dklnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwjLOAwQF w4pgMA0GCSqGSIb3DQEBCwUAA4IBAQCh80/uWdIOto7thLjWJOtWr/b84G2zky1k bkfDoBDzc12ZB4+/v1vDqW4s/BqCl3IfSXw6Ag90Ks3A8FSrdE0wNmU1zkKrHXtE hzPuDQyFa2CYsJ/dr/2vJS5LXTx1jdsbxhmlKDiXvS+UIsuxUFOtGhQ5Ssuh007I 2i52osNgnWJ1okkC8MUbjk2KeolPN3kh7l7zjNF6RlMkzZ+ic/PohRVotVqdOozs 5KSg3KiA7RT0fmCWqYFX6f2clUHVpRBCkJgWbxcpV50dh7259PJGien897BNa3j6 iFYxuMIIxJNvNBBXsZW/9JqA6klnr/1h9HjbYcavGNFUNAbHxpgk -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:36 2026 by rpki-client