This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zZFlcpuI0Km2iUd84DiwPG6e5uw.roa File: zZFlcpuI0Km2iUd84DiwPG6e5uw.roa (raw, json) Hash identifier: +mtZzGcR+6DxRYDijlYWXVsWtIK7iNza/yNimqqEqbc= Subject key identifier: CD:91:65:72:9B:88:D0:A9:B6:89:47:7C:E0:38:B0:3C:6E:9E:E6:EC Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED9C1ABDDDADBD5833721435EEAB5 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zZFlcpuI0Km2iUd84DiwPG6e5uw.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210734 IP address blocks: 93.186.64.0/24 maxlen: 24 188.255.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d9:c1:ab:dd:da:db:d5:83:37:21:43:5e:ea:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd9165729b88d0a9b689477ce038b03c6e9ee6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:66:21:c7:98:b9:61:cd:b4:5a:08:10:61: 83:22:af:dc:7b:8a:3c:cf:3a:5e:d9:99:d7:1c:7f: 8f:34:a7:db:41:bd:a3:03:de:9d:0a:22:09:fc:6e: 8a:aa:f7:91:b6:28:56:8b:c4:4c:fa:81:ae:01:31: 16:db:39:6b:11:14:7e:64:bb:6b:31:c6:e9:51:ae: 5f:52:0f:0d:71:59:67:4d:48:c4:df:12:10:6b:15: 32:a5:21:cb:37:6a:75:50:d0:75:e6:0f:6c:f1:7b: 5e:ad:f4:7c:60:8c:c7:b8:c5:d6:01:39:6d:30:83: 67:5e:78:d8:1a:de:05:89:4c:d6:08:69:f1:54:65: 96:77:96:19:10:f6:21:cb:14:31:18:b0:a1:44:06: 03:74:46:5c:56:68:85:79:6f:47:f5:e0:ce:b3:df: ae:0e:aa:08:7a:f0:8d:7b:48:38:09:4a:61:ee:2d: a9:35:e8:c1:8d:ad:11:b6:c2:71:d0:dd:68:17:51: 2a:d2:c1:40:85:2d:8f:07:6f:20:bb:87:7c:7e:82: be:5d:e7:0a:34:68:5a:56:17:c0:3a:b8:b5:14:07: c5:50:80:c4:bc:f3:ed:5c:53:ce:8e:d9:c4:e8:e7: c9:f1:89:30:d7:f6:fe:26:19:4b:c7:b6:12:e6:42: 0b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:91:65:72:9B:88:D0:A9:B6:89:47:7C:E0:38:B0:3C:6E:9E:E6:EC X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zZFlcpuI0Km2iUd84DiwPG6e5uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.186.64.0/24 188.255.199.0/24 Signature Algorithm: sha256WithRSAEncryption 50:25:7e:2d:d9:7f:37:56:05:d5:78:36:7d:61:47:d9:26:e9: 87:24:39:c9:86:cb:d6:9e:fe:ca:82:79:61:5b:02:a4:2c:be: 75:49:41:57:16:a5:87:cc:57:93:52:c7:d3:9d:6c:c7:b7:70: d3:b8:a0:d6:af:c7:1a:6d:d3:af:db:d1:7e:d1:25:9d:01:31: 92:6f:1d:c3:5e:20:1b:d1:14:bc:17:81:48:29:f8:37:0f:5d: a6:de:ff:7b:dd:72:01:b2:53:b0:db:d2:fe:a0:61:65:fa:2f: 1f:29:f9:66:06:e8:81:97:12:16:95:d2:a6:86:54:01:87:30: 99:39:e4:ae:2f:c0:be:38:c1:31:23:6c:19:60:33:9c:38:87: c4:ae:3a:8f:99:24:ce:9b:17:45:75:97:c1:66:ea:0f:f9:cc: ba:b1:d5:b3:e6:e1:49:00:4c:c8:f3:57:22:da:d1:61:9a:58: 26:f1:92:86:01:c0:0c:7b:40:ad:5c:e7:e8:0d:4c:c8:d9:33: ac:4e:c1:5b:5a:ed:6d:8a:4c:1c:52:f4:1d:a9:a6:bf:ec:33: 76:94:0b:8f:fd:6a:64:b7:a7:d2:7d:45:0f:83:5f:c7:16:75: 1a:5d:c8:be:f5:b5:94:f8:d7:fe:74:25:f8:8d:91:10:65:ac: 02:da:f2:21 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ftnBq93a29WDNyFDXuq1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDkxNjU3MjliODhkMGE5YjY4OTQ3N2NlMDM4YjAzYzZlOWVlNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMRmIceYuWHNtFoIEGGDIq/ce4o8 zzpe2ZnXHH+PNKfbQb2jA96dCiIJ/G6KqveRtihWi8RM+oGuATEW2zlrERR+ZLtr McbpUa5fUg8NcVlnTUjE3xIQaxUypSHLN2p1UNB15g9s8XterfR8YIzHuMXWATlt MINnXnjYGt4FiUzWCGnxVGWWd5YZEPYhyxQxGLChRAYDdEZcVmiFeW9H9eDOs9+u DqoIevCNe0g4CUph7i2pNejBja0RtsJx0N1oF1Eq0sFAhS2PB28gu4d8foK+XecK NGhaVhfAOri1FAfFUIDEvPPtXFPOjtnE6OfJ8Ykw1/b+JhlLx7YS5kILVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM2RZXKbiNCptolHfOA4sDxunubsMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvelpGbGNwdUkwS20yaVVkODREaXdQRzZlNXV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXbpAAwQA vP/HMA0GCSqGSIb3DQEBCwUAA4IBAQBQJX4t2X83VgXVeDZ9YUfZJumHJDnJhsvW nv7KgnlhWwKkLL51SUFXFqWHzFeTUsfTnWzHt3DTuKDWr8cabdOv29F+0SWdATGS bx3DXiAb0RS8F4FIKfg3D12m3v973XIBslOw29L+oGFl+i8fKflmBuiBlxIWldKm hlQBhzCZOeSuL8C+OMExI2wZYDOcOIfErjqPmSTOmxdFdZfBZuoP+cy6sdWz5uFJ AEzI81ci2tFhmlgm8ZKGAcAMe0CtXOfoDUzI2TOsTsFbWu1tikwcUvQdqaa/7DN2 lAuP/Wpkt6fSfUUPg1/HFnUaXci+9bWU+Nf+dCX4jZEQZawC2vIh -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:23 2026 by rpki-client