This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zqMaS8qhEGn8VIewR5UjSNnZqsQ.roa File: zqMaS8qhEGn8VIewR5UjSNnZqsQ.roa (raw, json) Hash identifier: lEDAcLuMGyj+2MScNvRnHh0XZHAXsg+v/G7y6HiZKb0= Subject key identifier: CE:A3:1A:4B:CA:A1:10:69:FC:54:87:B0:47:95:23:48:D9:D9:AA:C4 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791077EE4678D3AAFA971E56DCF4E0E6 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zqMaS8qhEGn8VIewR5UjSNnZqsQ.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216082 IP address blocks: 212.68.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:77:ee:46:78:d3:aa:fa:97:1e:56:dc:f4:e0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cea31a4bcaa11069fc5487b047952348d9d9aac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a5:28:ff:31:49:e7:9e:0d:5c:1f:5f:90:ef: 08:49:b8:fb:f1:36:d7:51:57:47:3f:d7:0f:2e:04: d6:a2:89:ff:29:6e:99:f0:f1:91:67:8b:d2:db:16: 5c:05:f0:63:a1:61:21:40:83:03:56:6e:82:d0:df: 95:0f:a7:2f:7a:d9:73:b5:98:3f:78:99:83:17:9f: a3:0d:0e:e7:d2:06:79:f9:a1:6a:34:67:16:ff:2a: 29:e4:da:10:f8:56:9c:45:55:fa:a3:1f:3f:7a:bc: 26:60:ef:7e:48:38:71:13:56:bf:62:d8:ec:39:62: 72:0d:83:de:a5:f2:b4:51:17:73:c5:73:6a:7a:15: f9:c4:9c:cd:14:ac:5e:f6:ed:ef:af:7d:63:b7:7f: 42:33:50:d9:fa:c4:a2:ce:31:c0:d5:aa:cb:df:ec: cb:3f:b6:75:35:36:01:98:b2:2e:a0:50:db:90:28: 6e:39:60:a2:73:f5:a8:c2:31:13:f6:4c:7e:3a:65: 18:97:05:1b:25:ec:4f:68:73:d6:8c:c7:67:e9:37: 1c:48:f9:23:2e:a3:de:6f:61:75:57:b6:67:99:5a: 90:03:40:ce:4e:40:c2:e2:1c:64:ea:e9:91:60:9b: 5d:72:f5:b4:68:05:6e:d8:1d:3d:db:dd:78:41:4c: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A3:1A:4B:CA:A1:10:69:FC:54:87:B0:47:95:23:48:D9:D9:AA:C4 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zqMaS8qhEGn8VIewR5UjSNnZqsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.68.39.0/24 Signature Algorithm: sha256WithRSAEncryption 84:b9:17:5d:f3:8f:87:47:65:e2:31:f3:3c:ba:94:28:f6:08: bb:c4:bc:d8:f0:d1:b3:f0:8f:61:4f:f3:e0:61:1a:92:20:83: e2:be:89:19:7c:34:64:40:5b:32:f5:fa:44:9c:19:3f:3a:38: 4a:ba:28:c6:60:da:1d:ba:72:0f:04:0d:69:a4:c5:f5:a5:9d: 48:6a:86:d7:d2:00:a4:fa:e6:07:fb:d2:d1:00:d2:35:26:09: 95:7c:27:b5:8d:92:7f:fb:40:f4:a6:df:29:0d:32:b3:82:fc: fd:01:89:42:87:75:a6:23:62:ff:21:e0:7c:74:c5:45:46:7a: 39:19:c4:e2:ac:19:ef:23:5f:17:1b:65:8c:9c:03:ed:b7:90: 60:84:0c:4e:99:1a:46:29:2b:5a:9f:17:87:64:d3:90:29:56: 66:54:2c:96:50:69:1f:e9:48:45:d7:cb:65:f9:0b:f4:49:44: fb:58:86:27:9c:ad:0f:c2:49:9f:fb:9a:43:17:48:3d:5a:fc: 98:5d:e6:1a:2e:d0:01:89:7c:e1:99:4f:02:2b:0a:c0:00:a3: 66:15:8f:86:78:74:8d:f5:2d:19:45:49:db:4d:ec:72:0f:cc: 2b:b8:cb:f5:6b:0c:19:41:c8:06:ff:46:a6:7b:76:86:e4:a6: 62:e2:55:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHfuRnjTqvqXHlbc9ODmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWEzMWE0YmNhYTExMDY5ZmM1NDg3YjA0Nzk1MjM0OGQ5ZDlhYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Uo/zFJ554NXB9fkO8ISbj78TbX UVdHP9cPLgTWoon/KW6Z8PGRZ4vS2xZcBfBjoWEhQIMDVm6C0N+VD6cvetlztZg/ eJmDF5+jDQ7n0gZ5+aFqNGcW/yop5NoQ+FacRVX6ox8/erwmYO9+SDhxE1a/Ytjs OWJyDYPepfK0URdzxXNqehX5xJzNFKxe9u3vr31jt39CM1DZ+sSizjHA1arL3+zL P7Z1NTYBmLIuoFDbkChuOWCic/WowjET9kx+OmUYlwUbJexPaHPWjMdn6TccSPkj LqPeb2F1V7ZnmVqQA0DOTkDC4hxk6umRYJtdcvW0aAVu2B092914QUxG5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM6jGkvKoRBp/FSHsEeVI0jZ2arEMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvenFNYVM4cWhFR244Vklld1I1VWpTTm5acXNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EQnMA0G CSqGSIb3DQEBCwUAA4IBAQCEuRdd84+HR2XiMfM8upQo9gi7xLzY8NGz8I9hT/Pg YRqSIIPivokZfDRkQFsy9fpEnBk/OjhKuijGYNodunIPBA1ppMX1pZ1IaobX0gCk +uYH+9LRANI1JgmVfCe1jZJ/+0D0pt8pDTKzgvz9AYlCh3WmI2L/IeB8dMVFRno5 GcTirBnvI18XG2WMnAPtt5BghAxOmRpGKStanxeHZNOQKVZmVCyWUGkf6UhF18tl +Qv0SUT7WIYnnK0Pwkmf+5pDF0g9WvyYXeYaLtABiXzhmU8CKwrAAKNmFY+GeHSN 9S0ZRUnbTexyD8wruMv1awwZQcgG/0ame3aG5KZi4lWG -----END CERTIFICATE-----Generated at Wed Jan 21 13:34:40 2026 by rpki-client