This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/zR0iVYnP5N5Uny10sklHuoRT73Q.roa File: zR0iVYnP5N5Uny10sklHuoRT73Q.roa (raw, json) Hash identifier: xsNsTM2wWzgme/iKg5rHQAWH9S6RXpdv7UkbK6mK4Kg= Subject key identifier: CD:1D:22:55:89:CF:E4:DE:54:9F:2D:74:B2:49:47:BA:84:53:EF:74 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B8E6540FEA0753862BC7C7C1F6CD233B3 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/zR0iVYnP5N5Uny10sklHuoRT73Q.roa Signing time: Mon 05 Jan 2026 13:42:38 +0000 ROA not before: Mon 05 Jan 2026 13:42:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 89.249.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:65:40:fe:a0:75:38:62:bc:7c:7c:1f:6c:d2:33:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 5 13:42:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd1d225589cfe4de549f2d74b24947ba8453ef74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:a6:d5:30:74:48:5a:f3:d4:b6:bc:da:74: cd:8f:d5:b0:cd:6b:89:9a:e4:e6:45:5a:35:e1:9a: cd:60:b8:45:36:4b:ba:3a:df:33:e9:f7:74:54:97: 25:e3:52:c3:c5:f3:f6:73:45:2b:57:96:37:27:0e: c1:fb:14:6b:d9:45:40:4f:97:cb:99:1c:d4:d7:11: 4c:95:3f:38:d7:83:8f:f9:f0:e0:4b:8d:84:81:e0: 02:a9:61:70:74:39:3d:df:cf:58:e3:5e:32:12:61: c5:a9:34:d5:b8:a6:10:c7:96:37:56:15:64:3d:59: d5:01:8e:25:ce:5b:e1:87:5c:29:6d:ac:bd:b3:a0: c1:f0:fc:10:da:e6:d6:d2:dd:fe:19:3a:04:dc:2a: 7d:ae:79:f2:58:0d:3f:e5:16:2f:78:64:56:7b:e6: 13:b0:c6:35:fc:41:a5:77:06:4b:39:bd:84:c4:59: b7:3b:f7:61:a9:0a:d2:b1:40:86:44:2b:19:57:86: fe:10:b4:2a:a0:c2:bd:31:c3:c4:09:7c:e5:e3:21: 70:d8:ff:99:00:c3:c1:1a:1c:67:13:f5:06:a3:37: 43:c6:17:9d:e4:b9:9f:df:d9:74:2e:6e:00:db:8a: 30:34:ba:69:7c:85:9c:06:e8:2a:c3:b4:b0:30:32: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1D:22:55:89:CF:E4:DE:54:9F:2D:74:B2:49:47:BA:84:53:EF:74 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/zR0iVYnP5N5Uny10sklHuoRT73Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.199.0/24 Signature Algorithm: sha256WithRSAEncryption 01:75:28:f9:38:43:53:84:ea:36:34:fa:3a:44:8e:3b:13:31: a0:1d:5d:8b:bc:41:3b:2d:bc:86:8e:e0:ff:42:fa:d9:aa:7a: 1a:82:93:5e:29:6a:8c:6e:ed:bc:37:28:ac:a7:8f:ea:9b:57: 99:00:d6:27:24:8a:64:27:c6:ea:f8:9f:55:4b:77:5b:f2:b3: ab:a0:d4:5b:9b:16:03:c7:f4:f0:81:32:8a:95:ce:d9:8f:d7: 3d:6d:5f:2e:d9:27:0b:ba:80:40:4c:44:89:b6:ed:e7:36:38: 53:52:af:eb:c0:1c:b3:f5:13:73:74:3f:24:c8:c5:11:02:7b: 50:06:f7:41:ba:fc:7b:cb:d0:a9:c7:32:ae:ad:8e:a0:cf:e4: be:25:9d:38:1c:6b:83:78:96:bb:5b:d4:8e:ea:05:e3:bd:b6: 59:8d:31:62:b4:84:da:dc:4e:5b:8e:70:4e:58:80:b4:8a:6b: a7:7a:fa:c6:5d:46:1a:9b:de:35:5c:94:4c:dc:4e:ac:b9:5a: ae:cd:4b:ec:57:e0:c5:ce:f8:c1:da:73:a0:ac:5b:dd:31:54: 58:cc:94:58:49:01:b0:b0:00:35:0d:ae:d3:57:21:e5:10:29: 33:c6:5e:6c:a5:32:03:78:6a:be:41:65:8f:fb:d5:1e:d3:55: 14:85:cd:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuOZUD+oHU4Yrx8fB9s0jOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTA1MTM0MjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDFkMjI1NTg5Y2ZlNGRlNTQ5ZjJkNzRiMjQ5NDdiYTg0NTNlZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv2m1TB0SFrz1La82nTNj9WwzWuJ muTmRVo14ZrNYLhFNku6Ot8z6fd0VJcl41LDxfP2c0UrV5Y3Jw7B+xRr2UVAT5fL mRzU1xFMlT8414OP+fDgS42EgeACqWFwdDk9389Y414yEmHFqTTVuKYQx5Y3VhVk PVnVAY4lzlvhh1wpbay9s6DB8PwQ2ubW0t3+GToE3Cp9rnnyWA0/5RYveGRWe+YT sMY1/EGldwZLOb2ExFm3O/dhqQrSsUCGRCsZV4b+ELQqoMK9McPECXzl4yFw2P+Z AMPBGhxnE/UGozdDxhed5Lmf39l0Lm4A24owNLppfIWcBugqw7SwMDKotQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM0dIlWJz+TeVJ8tdLJJR7qEU+90MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvelIwaVZZblA1TjVVbnkxMHNrbEh1b1JUNzNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfnHMA0G CSqGSIb3DQEBCwUAA4IBAQABdSj5OENThOo2NPo6RI47EzGgHV2LvEE7LbyGjuD/ QvrZqnoagpNeKWqMbu28Nyisp4/qm1eZANYnJIpkJ8bq+J9VS3db8rOroNRbmxYD x/TwgTKKlc7Zj9c9bV8u2ScLuoBATESJtu3nNjhTUq/rwByz9RNzdD8kyMURAntQ BvdBuvx7y9CpxzKurY6gz+S+JZ04HGuDeJa7W9SO6gXjvbZZjTFitITa3E5bjnBO WIC0imunevrGXUYam941XJRM3E6suVquzUvsV+DFzvjB2nOgrFvdMVRYzJRYSQGw sAA1Da7TVyHlECkzxl5spTIDeGq+QWWP+9Ue01UUhc1U -----END CERTIFICATE-----Generated at Sat Jan 10 21:11:11 2026 by rpki-client