This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/zwsKXVVMmv0-EwryV2b3Xyq5PW4.roa File: zwsKXVVMmv0-EwryV2b3Xyq5PW4.roa (raw, json) Hash identifier: 5ydnlDVv4t0zmXg2O1tzQDXDv+ERwDuwKHdXunX5QqE= Subject key identifier: CF:0B:0A:5D:55:4C:9A:FD:3E:13:0A:F2:57:66:F7:5F:2A:B9:3D:6E Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba Certificate serial: 019B7AC7CFA647741BF1D0A1EF6C878CCD98 Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/zwsKXVVMmv0-EwryV2b3Xyq5PW4.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44392 IP address blocks: 195.93.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cf:a6:47:74:1b:f1:d0:a1:ef:6c:87:8c:cd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf0b0a5d554c9afd3e130af25766f75f2ab93d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:aa:cf:a8:2d:b2:df:e0:4c:b7:7b:b0:51:b6: 6c:1d:e7:e8:d6:96:03:75:61:05:a3:80:d6:5a:34: af:a3:eb:fa:1d:5d:2d:83:04:18:d8:95:cc:1c:72: c4:c8:bc:a4:41:09:e9:09:83:d5:2a:50:16:4a:e6: d4:1b:ce:8d:73:89:4a:6a:da:8c:e1:83:69:f2:cf: c6:63:e4:b2:e3:2a:41:31:a8:3b:59:ea:b4:83:ff: 51:d7:55:9b:23:82:07:52:38:aa:e0:be:c8:a4:cf: fc:1f:65:b9:6c:46:ad:3e:da:a3:28:54:39:89:5f: 86:04:30:16:3e:85:a7:d3:50:da:14:f7:c7:fa:6d: 33:6e:8a:06:f4:a2:44:aa:7f:18:7d:13:bc:bc:02: c3:b3:f2:f3:72:0b:12:1e:07:5e:8e:97:2a:0c:02: e1:b4:36:62:1a:20:08:49:0a:eb:10:ad:45:a9:6e: b8:36:ff:63:ea:91:7f:26:58:5a:73:78:96:e1:0a: 3a:e8:6c:f5:c6:57:43:26:76:90:9b:99:ee:e0:1f: 37:79:7d:b8:5c:2a:9e:47:e8:85:4b:69:7e:45:7a: e0:1b:ab:ae:ab:bc:a4:f8:3b:d7:49:01:6c:30:c4: 2d:3f:ab:4d:c8:58:28:d1:20:39:f2:1a:94:1f:ca: fe:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0B:0A:5D:55:4C:9A:FD:3E:13:0A:F2:57:66:F7:5F:2A:B9:3D:6E X509v3 Authority Key Identifier: keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/zwsKXVVMmv0-EwryV2b3Xyq5PW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.93.220.0/23 Signature Algorithm: sha256WithRSAEncryption 48:cd:16:3d:aa:5a:10:df:b9:5d:dd:03:07:fe:28:42:19:3b: 34:9c:07:b0:90:c7:41:19:a8:da:1c:39:68:a8:53:fa:ce:b0: b4:14:ef:27:0d:91:57:a0:84:33:7e:d8:54:03:f3:ef:f2:09: 5c:84:6e:4c:f6:86:b0:0a:ed:be:67:c3:49:4e:24:db:63:1c: 3f:e6:46:8c:6e:8f:db:3a:ba:ce:8c:61:ec:75:e8:5d:22:3a: e1:06:1a:77:4a:37:47:02:fd:30:d8:9e:70:b2:e3:e4:da:65: 26:3c:a9:4a:ef:24:e2:55:20:e8:5d:fd:d1:4b:2b:8e:c4:82: 30:31:73:13:99:4d:c1:31:4b:1b:d0:3c:eb:ab:97:53:b9:0a: f0:d7:15:fc:cb:d6:71:02:29:b0:a5:b8:5d:7f:0d:49:68:03: c4:c0:64:da:6c:e8:fc:df:36:10:03:96:e1:7b:f1:98:33:4f: 29:b1:d7:29:4c:bb:79:2c:0c:aa:7f:c8:46:94:6d:18:1e:71: ae:73:e7:ba:59:04:59:fb:74:f6:e7:8e:a9:fd:cf:0c:54:59: 29:a1:ea:1f:c3:6f:9c:6b:dc:56:0b:6a:e5:d3:7d:db:63:b9: 7a:5f:f7:8a:cd:8f:7c:bb:ba:50:c7:10:a6:f1:33:62:8a:78: 3e:6a:6e:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8+mR3Qb8dCh72yHjM2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzRlZjIwMGJjOWQyN2U5ZWQ3ZjNiYzZiNWMwNTI5MmQ4 NDMyYmEwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjBiMGE1ZDU1NGM5YWZkM2UxMzBhZjI1NzY2Zjc1ZjJhYjkzZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqrPqC2y3+BMt3uwUbZsHefo1pYD dWEFo4DWWjSvo+v6HV0tgwQY2JXMHHLEyLykQQnpCYPVKlAWSubUG86Nc4lKatqM 4YNp8s/GY+Sy4ypBMag7Weq0g/9R11WbI4IHUjiq4L7IpM/8H2W5bEatPtqjKFQ5 iV+GBDAWPoWn01DaFPfH+m0zbooG9KJEqn8YfRO8vALDs/LzcgsSHgdejpcqDALh tDZiGiAISQrrEK1FqW64Nv9j6pF/Jlhac3iW4Qo66Gz1xldDJnaQm5nu4B83eX24 XCqeR+iFS2l+RXrgG6uuq7yk+DvXSQFsMMQtP6tNyFgo0SA58hqUH8r+GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8LCl1VTJr9PhMK8ldm918quT1uMB8GA1UdIwQY MBaAFP7E7yALydJ+ntfzvGtcBSkthDK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMt NWVjY2VjOGQ5M2I0LzEvendzS1hWVk1tdjAtRXdyeVYyYjNYeXE1UFc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMtNWVjY2VjOGQ5M2I0 LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw13cMA0G CSqGSIb3DQEBCwUAA4IBAQBIzRY9qloQ37ld3QMH/ihCGTs0nAewkMdBGajaHDlo qFP6zrC0FO8nDZFXoIQzfthUA/Pv8glchG5M9oawCu2+Z8NJTiTbYxw/5kaMbo/b OrrOjGHsdehdIjrhBhp3SjdHAv0w2J5wsuPk2mUmPKlK7yTiVSDoXf3RSyuOxIIw MXMTmU3BMUsb0Dzrq5dTuQrw1xX8y9ZxAimwpbhdfw1JaAPEwGTabOj83zYQA5bh e/GYM08psdcpTLt5LAyqf8hGlG0YHnGuc+e6WQRZ+3T2546p/c8MVFkpoeofw2+c a9xWC2rl033bY7l6X/eKzY98u7pQxxCm8TNiing+am7F -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:38 2026 by rpki-client