This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CZZDGoeHW2FZkYSEkksUTgNIUO8.roa File: CZZDGoeHW2FZkYSEkksUTgNIUO8.roa (raw, json) Hash identifier: gw7SczMULR4Pwsnxh17EezTjufHm2jpDVp+ql5VML+0= Subject key identifier: 09:96:43:1A:87:87:5B:61:59:91:84:84:92:4B:14:4E:03:48:50:EF Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EC79254A5E9C925F5809012A3A757 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CZZDGoeHW2FZkYSEkksUTgNIUO8.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47629 IP address blocks: 188.255.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c7:92:54:a5:e9:c9:25:f5:80:90:12:a3:a7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0996431a87875b6159918484924b144e034850ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:dc:67:df:b5:80:61:7e:d1:27:f1:c1:b0: 75:2a:49:b6:10:d3:dd:9b:09:4b:a8:39:18:9a:e1: fe:07:ad:a3:7d:e5:6d:d2:f1:d7:a7:f1:c4:0f:e2: 1f:e0:04:76:06:5f:4e:5a:25:84:0b:9e:54:5f:fe: 9f:06:25:95:df:f3:1c:e2:6d:38:b6:e0:76:8f:29: e2:be:fb:98:f9:2b:a4:86:8e:ea:96:84:d6:a0:34: 8f:88:c6:54:75:86:76:02:31:65:f3:14:10:04:1a: 74:2f:1f:e4:07:2f:9a:32:4e:39:e2:c4:59:b3:80: f7:55:18:46:a5:41:f9:5d:2a:f7:a2:38:4c:8c:1e: e3:57:29:df:bd:6f:79:e3:f1:fd:a2:55:35:f2:7a: e7:a0:2b:fc:7e:9e:0e:72:9c:bf:80:5e:90:13:77: 1a:73:73:49:53:80:a5:8a:98:c0:7d:a4:e5:6b:2b: 35:43:ec:2f:c4:c1:ff:02:04:67:e7:6f:99:19:d5: 3c:0e:c6:d0:54:15:cd:3a:af:7a:b0:63:21:3c:64: 89:4f:1d:f0:03:5b:9e:d8:e6:5a:78:fe:0c:a9:32: 72:15:cb:6f:7a:d6:51:c6:49:1d:ed:4e:0a:39:68: 2d:a9:03:68:b1:1e:4e:c9:f3:fc:f0:4d:c7:fc:80: da:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:96:43:1A:87:87:5B:61:59:91:84:84:92:4B:14:4E:03:48:50:EF X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CZZDGoeHW2FZkYSEkksUTgNIUO8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.230.0/24 Signature Algorithm: sha256WithRSAEncryption 10:f1:5f:06:b2:22:7c:c2:fb:09:d5:fd:de:da:12:e1:42:15: 17:44:aa:dc:2f:df:4d:42:32:e6:09:10:62:2b:a9:8f:08:8d: ef:0d:a7:7a:d0:32:cf:b0:9a:86:55:17:a3:57:44:3e:09:fe: d4:a4:a4:e3:77:fe:f4:a4:ca:9e:31:01:53:92:ae:11:90:30: 23:15:0c:17:a0:c2:53:8d:04:65:35:96:d5:80:58:32:66:cb: ba:79:fe:03:1f:92:fc:30:cb:ce:f3:7f:95:18:55:d7:80:37: 16:7e:c3:96:30:88:11:35:5f:f4:fb:97:db:3e:c8:84:bd:7e: f0:56:54:53:67:95:c9:0e:f2:96:02:0d:fa:51:3e:65:a8:4d: c8:cd:3c:58:a5:7f:58:08:0d:32:17:be:da:1c:83:63:c3:10: 8c:7d:09:9b:68:12:7f:fa:49:22:98:96:da:4b:8e:18:d5:5a: 14:6e:75:a0:6b:07:b5:ae:31:f3:f1:f2:a5:04:9d:79:ae:e2: fc:e2:df:7b:fd:7b:85:89:4f:58:a1:b9:f6:b4:11:99:64:d5: a2:6d:1f:70:c0:0e:20:01:07:47:32:c6:51:cf:8d:84:04:70: 60:17:dd:1a:f8:71:c4:bf:43:01:22:89:64:73:13:32:1a:9f: 23:1f:1c:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fseSVKXpySX1gJASo6dXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTk2NDMxYTg3ODc1YjYxNTk5MTg0ODQ5MjRiMTQ0ZTAzNDg1MGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+zcZ9+1gGF+0SfxwbB1Kkm2ENPd mwlLqDkYmuH+B62jfeVt0vHXp/HED+If4AR2Bl9OWiWEC55UX/6fBiWV3/Mc4m04 tuB2jynivvuY+Sukho7qloTWoDSPiMZUdYZ2AjFl8xQQBBp0Lx/kBy+aMk454sRZ s4D3VRhGpUH5XSr3ojhMjB7jVynfvW954/H9olU18nrnoCv8fp4Ocpy/gF6QE3ca c3NJU4ClipjAfaTlays1Q+wvxMH/AgRn52+ZGdU8DsbQVBXNOq96sGMhPGSJTx3w A1ue2OZaeP4MqTJyFctvetZRxkkd7U4KOWgtqQNosR5OyfP88E3H/IDaPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmWQxqHh1thWZGEhJJLFE4DSFDvMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvQ1paREdvZUhXMkZaa1lTRWtrc1VUZ05JVU84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/mMA0G CSqGSIb3DQEBCwUAA4IBAQAQ8V8GsiJ8wvsJ1f3e2hLhQhUXRKrcL99NQjLmCRBi K6mPCI3vDad60DLPsJqGVRejV0Q+Cf7UpKTjd/70pMqeMQFTkq4RkDAjFQwXoMJT jQRlNZbVgFgyZsu6ef4DH5L8MMvO83+VGFXXgDcWfsOWMIgRNV/0+5fbPsiEvX7w VlRTZ5XJDvKWAg36UT5lqE3IzTxYpX9YCA0yF77aHINjwxCMfQmbaBJ/+kkimJba S44Y1VoUbnWgawe1rjHz8fKlBJ15ruL84t97/XuFiU9Yobn2tBGZZNWibR9wwA4g AQdHMsZRz42EBHBgF90a+HHEv0MBIolkcxMyGp8jHxwz -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:51 2026 by rpki-client