This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/zuaIfcfFIX5EeM-omKdGGgGs_mY.roa File: zuaIfcfFIX5EeM-omKdGGgGs_mY.roa (raw, json) Hash identifier: CvfuaqVfIoNAv4R8GIVYc0kHxO/XnZ6ljRU5mOaCsoE= Subject key identifier: CE:E6:88:7D:C7:C5:21:7E:44:78:CF:A8:98:A7:46:1A:01:AC:FE:66 Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80 Certificate serial: 019B7E38C077521841699CED1A1423DB64E7 Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/zuaIfcfFIX5EeM-omKdGGgGs_mY.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212598 IP address blocks: 5.42.202.0/24 maxlen: 24 91.142.130.0/24 maxlen: 24 185.102.87.0/24 maxlen: 24 194.31.59.0/24 maxlen: 24 194.31.64.0/24 maxlen: 24 194.31.79.0/24 maxlen: 24 194.31.87.0/24 maxlen: 24 2a0f:a440::/29 maxlen: 29 2a12:1dc7:fffd::/48 maxlen: 48 2a12:8540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c0:77:52:18:41:69:9c:ed:1a:14:23:db:64:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80 Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cee6887dc7c5217e4478cfa898a7461a01acfe66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:aa:f2:9b:16:c8:cd:d0:29:d0:cb:f8:11:e7: 3f:18:4a:10:ee:12:29:97:c8:b2:3b:85:fa:e7:bd: d4:ef:be:21:24:37:d2:20:4d:65:b1:e9:ef:69:d5: de:cc:6b:4a:5d:ca:2e:9c:41:b6:03:6e:28:4b:d0: 35:3c:a6:a3:ec:ee:b2:10:1b:ad:15:39:22:e7:81: d3:da:97:b6:7a:5c:b3:2d:06:50:7b:77:36:f7:b7: 9c:c9:99:90:30:cc:1e:0a:86:61:0d:13:5a:2d:bc: 67:5a:d0:88:5c:88:86:85:c6:ef:71:77:3d:d0:ce: e4:39:3e:4a:98:05:1e:c6:ac:b6:5d:7d:20:d8:eb: 76:58:31:7d:6b:2d:56:77:2a:ce:f9:c1:73:e8:b5: 49:20:62:23:53:bf:e3:10:1b:46:f3:b1:07:7e:a3: 79:8e:a8:00:10:e6:28:6f:40:9e:ba:d0:48:80:62: 71:a8:27:fc:e6:5b:8c:ae:84:16:5a:8c:ec:e4:dd: a0:dc:1c:70:89:53:f9:3a:24:5b:ec:b7:1b:97:dc: 50:74:a0:66:bf:97:88:a0:46:60:73:be:72:31:ba: 42:40:e2:ae:79:a2:31:b4:69:73:95:51:cc:73:e1: a7:85:9c:29:08:8f:ca:25:48:69:2d:b1:1d:60:ae: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E6:88:7D:C7:C5:21:7E:44:78:CF:A8:98:A7:46:1A:01:AC:FE:66 X509v3 Authority Key Identifier: keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/zuaIfcfFIX5EeM-omKdGGgGs_mY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.202.0/24 91.142.130.0/24 185.102.87.0/24 194.31.59.0/24 194.31.64.0/24 194.31.79.0/24 194.31.87.0/24 IPv6: 2a0f:a440::/29 2a12:1dc7:fffd::/48 2a12:8540::/29 Signature Algorithm: sha256WithRSAEncryption 09:78:49:6f:cc:d6:fc:e6:aa:8e:4e:57:aa:fa:6a:c1:73:e4: 42:cf:cf:8f:b8:ad:2e:8f:00:3e:26:01:9e:26:cc:92:bc:8a: e4:26:a2:4f:1c:a0:f7:78:70:df:d9:c2:fb:63:ec:32:21:5c: 6c:7d:10:5b:a4:af:fd:80:d0:93:37:33:cf:5a:59:d3:80:9f: bb:b8:b7:d7:a3:09:35:91:ab:a7:79:20:5f:14:e3:45:f7:25: 37:33:d3:0e:38:02:8f:54:6e:44:3f:d9:61:96:05:cc:87:a2: 67:6d:ea:3f:23:b1:48:ad:72:ea:78:e7:fc:fc:60:00:41:6f: 42:eb:86:2c:96:9b:47:b1:76:13:23:4e:95:35:24:b9:d9:b7: 3b:f2:60:38:ae:6d:73:8c:0c:f5:2f:45:d7:03:1c:a3:18:02: be:9e:72:7f:c1:0d:11:78:63:a8:03:cb:bf:cd:1c:0f:c8:f6: a9:f5:68:d1:ee:22:c0:16:a7:f8:b0:ae:62:98:66:66:99:c0: 29:5a:62:52:09:0b:08:77:ff:45:b3:58:09:a4:31:64:9f:90: 5c:9e:e5:83:10:fa:10:6f:cc:0c:0a:2f:4e:db:d6:45:73:4a: fd:b3:dc:1a:5d:6b:c9:8f:cd:cd:84:65:d9:b9:a8:bf:d5:80: 02:c2:c6:7c -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZt+OMB3UhhBaZztGhQj22TnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MmM3NGZjNTliN2FiMDk2YTI1N2QzYjYyOTlkMmY2ZmRh NDZhODAwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWU2ODg3ZGM3YzUyMTdlNDQ3OGNmYTg5OGE3NDYxYTAxYWNmZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKrymxbIzdAp0Mv4Eec/GEoQ7hIp l8iyO4X6573U774hJDfSIE1lsenvadXezGtKXcounEG2A24oS9A1PKaj7O6yEBut FTki54HT2pe2elyzLQZQe3c297ecyZmQMMweCoZhDRNaLbxnWtCIXIiGhcbvcXc9 0M7kOT5KmAUexqy2XX0g2Ot2WDF9ay1WdyrO+cFz6LVJIGIjU7/jEBtG87EHfqN5 jqgAEOYob0CeutBIgGJxqCf85luMroQWWozs5N2g3BxwiVP5OiRb7Lcbl9xQdKBm v5eIoEZgc75yMbpCQOKueaIxtGlzlVHMc+GnhZwpCI/KJUhpLbEdYK441QIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFM7miH3HxSF+RHjPqJinRhoBrP5mMB8GA1UdIwQY MBaAFFgsdPxZt6sJaiV9O2KZ0vb9pGqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0N4MF9GbTNxd2xxSlgwN1lwblM5djJrYW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iMTU4NTEtYTgzYi00MTVjLWFlZTUt ZjllZmMwNDU3ZmI5LzEvenVhSWZjZkZJWDVFZU0tb21LZEdHZ0dzX21ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iMTU4NTEtYTgzYi00MTVjLWFlZTUtZjllZmMwNDU3ZmI5 LzEvV0N4MF9GbTNxd2xxSlgwN1lwblM5djJrYW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTAwBAIAATAqAwQABSrKAwQA W46CAwQAuWZXAwQAwh87AwQAwh9AAwQAwh9PAwQAwh9XMB0EAgACMBcDBQMqD6RA AwcAKhIdx//9AwUDKhKFQDANBgkqhkiG9w0BAQsFAAOCAQEACXhJb8zW/Oaqjk5X qvpqwXPkQs/Pj7itLo8APiYBnibMkryK5CaiTxyg93hw39nC+2PsMiFcbH0QW6Sv /YDQkzczz1pZ04Cfu7i316MJNZGrp3kgXxTjRfclNzPTDjgCj1RuRD/ZYZYFzIei Z23qPyOxSK1y6njn/PxgAEFvQuuGLJabR7F2EyNOlTUkudm3O/JgOK5tc4wM9S9F 1wMcoxgCvp5yf8ENEXhjqAPLv80cD8j2qfVo0e4iwBan+LCuYphmZpnAKVpiUgkL CHf/RbNYCaQxZJ+QXJ7lgxD6EG/MDAovTtvWRXNK/bPcGl1ryY/NzYRl2bmov9WA AsLGfA== -----END CERTIFICATE-----Generated at Wed Jan 21 17:17:21 2026 by rpki-client