This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/zzcGdYNOZhe1jEco9OqFbyYvT9k.roa File: zzcGdYNOZhe1jEco9OqFbyYvT9k.roa (raw, json) Hash identifier: J+hhTkidSQB0Te9LHI8bfOqIwkK9dHKinjSyKGXTXTQ= Subject key identifier: CF:37:06:75:83:4E:66:17:B5:8C:47:28:F4:EA:85:6F:26:2F:4F:D9 Certificate issuer: /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a Certificate serial: 019B77594CA594EB5128E361DE8CD0144057 Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/zzcGdYNOZhe1jEco9OqFbyYvT9k.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31477 IP address blocks: 83.137.144.0/21 maxlen: 24 87.238.168.0/21 maxlen: 24 89.188.0.0/19 maxlen: 24 89.200.200.0/21 maxlen: 24 91.196.104.0/24 maxlen: 24 91.196.105.0/24 maxlen: 24 185.80.245.0/24 maxlen: 24 185.80.246.0/24 maxlen: 24 193.138.248.0/22 maxlen: 24 2a01:1b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4c:a5:94:eb:51:28:e3:61:de:8c:d0:14:40:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf370675834e6617b58c4728f4ea856f262f4fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:d7:28:1f:17:30:60:1e:f3:6d:ef:ec:46: c5:09:85:f6:c8:86:48:c9:d5:d4:fa:32:fc:7d:06: df:61:85:ea:8b:33:63:6e:81:41:69:61:bc:c0:de: 83:78:31:23:ba:bf:43:8a:83:78:bc:46:0c:f3:bc: 82:9b:7f:ba:65:ae:35:85:e3:62:bb:bf:65:15:da: 08:6f:39:db:5e:63:0e:12:42:35:6d:9e:b5:29:88: e6:21:2f:cd:0d:14:2f:61:01:ce:a0:2c:a1:24:4d: 49:9e:93:8b:c8:c9:2b:0b:9d:57:b7:b2:07:08:95: c9:3c:95:27:c4:1b:a8:b1:cf:d6:c3:d8:0f:fd:ee: 7d:5a:50:fa:69:02:56:08:22:28:16:ec:6f:76:e9: f7:92:b4:bd:f0:71:46:21:df:23:96:d3:7c:9d:eb: 28:83:bc:f8:c1:09:4e:e5:b7:b3:e1:b1:a4:78:f5: 6c:4e:ba:00:71:79:32:ff:9d:86:ef:57:bf:49:70: 8b:fa:33:2d:01:49:07:0c:6e:05:7e:4f:51:a5:b6: 56:d6:90:dc:48:4e:c8:f9:89:ca:44:e4:6f:e2:c0: a5:58:f4:94:1e:9b:5d:64:38:38:56:76:c0:2d:e2: 6d:da:86:17:f1:63:b6:a8:67:4c:30:3a:9e:b5:62: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:37:06:75:83:4E:66:17:B5:8C:47:28:F4:EA:85:6F:26:2F:4F:D9 X509v3 Authority Key Identifier: keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/zzcGdYNOZhe1jEco9OqFbyYvT9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.144.0/21 87.238.168.0/21 89.188.0.0/19 89.200.200.0/21 91.196.104.0/23 185.80.245.0-185.80.246.255 193.138.248.0/22 IPv6: 2a01:1b0::/32 Signature Algorithm: sha256WithRSAEncryption 31:7d:19:e5:b9:7e:67:8d:de:ed:78:87:f4:5d:70:a3:59:30: c0:55:f2:02:e4:ec:8a:fa:ec:b9:5f:d8:da:fb:60:58:bf:21: ac:42:58:c7:c5:93:b6:6f:96:f0:09:cd:56:48:62:cb:e1:1d: 08:79:e7:19:79:16:08:7b:fb:78:3b:cc:c1:3b:c0:60:65:95: 84:30:14:45:13:67:e6:ae:55:03:1d:39:6f:34:05:d2:84:bb: 97:6d:e0:15:b7:47:2e:68:02:7f:cf:7f:0a:15:1f:8d:21:be: d4:fa:67:96:0c:7a:2b:4b:a7:52:be:eb:47:19:71:60:8c:5b: e1:2f:be:00:02:18:52:dd:d8:06:ce:62:db:60:2f:af:ed:37: fe:71:a4:cb:0f:c1:c8:73:8f:c4:69:1f:aa:b4:41:c9:f5:d3: 45:79:a4:7e:8d:82:10:86:81:8f:c1:68:c1:c2:c2:1f:42:15: 69:a0:b4:19:2f:92:0a:7d:33:f8:c4:0d:7e:9a:96:5d:7b:70: 6b:24:8b:bb:66:85:70:cf:d1:28:90:fb:19:ed:ec:f4:c8:62: ce:e5:3b:ec:a5:d4:c1:01:2e:a8:c9:2e:24:41:80:eb:0d:bc: 79:0c:ef:ef:f8:8e:74:e9:52:25:5b:69:e8:c6:32:5d:6f:fd: bd:15:54:71 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt3WUyllOtRKONh3ozQFEBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZmZmMjE1MzhlMjI1NjE4MzE0NjE1ZTRmMGQwNjg4Yjdi MGRkNWEwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjM3MDY3NTgzNGU2NjE3YjU4YzQ3MjhmNGVhODU2ZjI2MmY0ZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpHXKB8XMGAe823v7EbFCYX2yIZI ydXU+jL8fQbfYYXqizNjboFBaWG8wN6DeDEjur9DioN4vEYM87yCm3+6Za41heNi u79lFdoIbznbXmMOEkI1bZ61KYjmIS/NDRQvYQHOoCyhJE1JnpOLyMkrC51Xt7IH CJXJPJUnxBuosc/Ww9gP/e59WlD6aQJWCCIoFuxvdun3krS98HFGId8jltN8neso g7z4wQlO5bez4bGkePVsTroAcXky/52G71e/SXCL+jMtAUkHDG4Ffk9RpbZW1pDc SE7I+YnKRORv4sClWPSUHptdZDg4VnbALeJt2oYX8WO2qGdMMDqetWLUOwIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFM83BnWDTmYXtYxHKPTqhW8mL0/ZMB8GA1UdIwQY MBaAFIz/8hU44iVhgxRhXk8NBoi3sN1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUt MjYxNjY2YzNhNTg5LzEvenpjR2RZTk9aaGUxakVjbzlPcUZieVl2VDlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUtMjYxNjY2YzNhNTg5 LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQDU4mQAwQD V+6oAwQFWbwAAwQDWcjIAwQBW8RoMAwDBAC5UPUDBAC5UPYDBALBivgwDQQCAAIw BwMFACoBAbAwDQYJKoZIhvcNAQELBQADggEBADF9GeW5fmeN3u14h/RdcKNZMMBV 8gLk7Ir67Llf2Nr7YFi/IaxCWMfFk7ZvlvAJzVZIYsvhHQh55xl5Fgh7+3g7zME7 wGBllYQwFEUTZ+auVQMdOW80BdKEu5dt4BW3Ry5oAn/PfwoVH40hvtT6Z5YMeitL p1K+60cZcWCMW+EvvgACGFLd2AbOYttgL6/tN/5xpMsPwchzj8RpH6q0Qcn100V5 pH6NghCGgY/BaMHCwh9CFWmgtBkvkgp9M/jEDX6all17cGski7tmhXDP0SiQ+xnt 7PTIYs7lO+yl1MEBLqjJLiRBgOsNvHkM7+/4jnTpUiVbaejGMl1v/b0VVHE= -----END CERTIFICATE-----Generated at Wed Feb 4 09:29:03 2026 by rpki-client