This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa File: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (raw, json) Hash identifier: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I= Subject key identifier: CD:CA:8C:86:2C:6B:F5:F4:FD:A4:A2:10:E0:B1:DC:83:7D:D8:DA:BA Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38A4FE5DA3891F1C0085DFE01C01FF Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 77.47.156.0/22 maxlen: 24 77.47.243.0/24 maxlen: 24 195.178.140.0/23 maxlen: 24 212.111.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a4:fe:5d:a3:89:1f:1c:00:85:df:e0:1c:01:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdca8c862c6bf5f4fda4a210e0b1dc837dd8daba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0d:8f:dc:ff:19:49:c7:c4:03:39:f9:17:3d: 24:cd:8b:08:a8:83:bd:4d:1c:30:13:cc:c8:bf:dc: 6e:c9:3c:68:cb:dd:d5:11:c4:5d:4f:13:6c:64:8d: c3:4c:a5:14:fb:1e:78:a8:2c:ba:eb:a8:2b:b9:b0: ee:e1:25:4d:2e:75:c5:11:59:f4:09:65:ec:84:f8: 1a:40:b7:d8:4b:7b:ce:c3:a0:aa:26:9a:f5:53:31: c0:bb:2f:e9:25:43:17:27:27:1f:8e:d5:ba:1d:5d: ee:e0:c4:89:51:e3:02:31:f6:50:2c:7e:14:d9:ef: da:c8:05:74:a9:a4:78:c4:b4:7b:5e:a1:1f:12:5d: e6:5f:c5:46:cd:e4:b7:e4:8d:f7:c9:df:ac:6f:33: 8c:e5:ee:9e:ff:75:97:91:9e:39:fe:54:70:b7:f6: d3:d0:5a:43:18:3d:9e:fe:9b:dc:92:39:fc:8a:03: 19:f5:d7:25:86:e6:14:bd:7e:1f:21:b8:cf:ce:60: 4a:8a:b6:b7:06:73:83:75:4e:c8:f1:6e:61:9b:3c: 38:7c:cc:87:11:aa:2e:a6:b4:ef:f8:77:38:86:ec: ef:61:3a:3f:e0:e1:72:ea:ff:34:f7:f3:52:9a:86: d8:72:c3:6c:cd:6f:29:0c:10:a0:12:19:a3:34:8a: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CA:8C:86:2C:6B:F5:F4:FD:A4:A2:10:E0:B1:DC:83:7D:D8:DA:BA X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.156.0/22 77.47.243.0/24 195.178.140.0/23 212.111.220.0/22 Signature Algorithm: sha256WithRSAEncryption 78:17:29:4a:7c:73:ea:8a:3b:ce:91:2f:e5:e5:59:c5:93:3c: fd:7e:63:af:7e:37:2f:46:a7:c1:06:a9:3d:ba:1c:b4:fe:b0: 99:bc:d8:92:d4:a9:97:2c:e9:58:90:64:f8:25:5e:df:dc:20: df:4e:32:76:00:e5:48:78:8d:38:79:2f:1e:40:b6:fd:e8:5c: 38:ce:64:0d:59:41:2a:6d:e7:43:a0:7f:a4:31:ff:b9:16:ab: c3:ab:ec:43:f6:f6:b8:0b:22:4b:8c:bc:60:fb:3d:93:d4:56: 42:0a:ff:d6:22:86:99:c7:9f:7a:18:9c:58:31:19:16:95:21: c5:7c:b6:35:59:91:fb:79:9f:62:15:47:64:c0:cb:7a:1a:95: 43:ea:af:fb:e2:7f:4f:e6:80:69:c5:67:29:58:24:32:97:4c: c5:35:4e:9f:2b:de:8e:1c:87:0a:e6:08:20:d8:40:bb:f6:b1: 50:24:83:44:69:21:bc:12:28:6a:b6:b0:27:eb:7e:10:52:2e: c6:56:81:30:bf:f7:44:64:a8:47:0e:b8:28:1a:91:d5:c1:2e: 03:cf:4b:94:85:c1:f6:d0:ce:e4:eb:f7:32:75:a1:0a:78:86: 78:87:e2:21:4c:b1:66:a0:12:04:07:46:0f:5b:65:e7:97:c0: 07:4e:56:42 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OKT+XaOJHxwAhd/gHAH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGNhOGM4NjJjNmJmNWY0ZmRhNGEyMTBlMGIxZGM4MzdkZDhkYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g2P3P8ZScfEAzn5Fz0kzYsIqIO9 TRwwE8zIv9xuyTxoy93VEcRdTxNsZI3DTKUU+x54qCy666grubDu4SVNLnXFEVn0 CWXshPgaQLfYS3vOw6CqJpr1UzHAuy/pJUMXJycfjtW6HV3u4MSJUeMCMfZQLH4U 2e/ayAV0qaR4xLR7XqEfEl3mX8VGzeS35I33yd+sbzOM5e6e/3WXkZ45/lRwt/bT 0FpDGD2e/pvckjn8igMZ9dclhuYUvX4fIbjPzmBKira3BnODdU7I8W5hmzw4fMyH EaouprTv+Hc4huzvYTo/4OFy6v809/NSmobYcsNszW8pDBCgEhmjNIp/twIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFM3KjIYsa/X0/aSiEOCx3IN92Nq6MB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvemNxTWhpeHI5ZlQ5cEtJUTRMSGNnMzNZMnJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCTS+cAwQA TS/zAwQBw7KMAwQC1G/cMA0GCSqGSIb3DQEBCwUAA4IBAQB4FylKfHPqijvOkS/l 5VnFkzz9fmOvfjcvRqfBBqk9uhy0/rCZvNiS1KmXLOlYkGT4JV7f3CDfTjJ2AOVI eI04eS8eQLb96Fw4zmQNWUEqbedDoH+kMf+5FqvDq+xD9va4CyJLjLxg+z2T1FZC Cv/WIoaZx596GJxYMRkWlSHFfLY1WZH7eZ9iFUdkwMt6GpVD6q/74n9P5oBpxWcp WCQyl0zFNU6fK96OHIcK5ggg2EC79rFQJINEaSG8EihqtrAn634QUi7GVoEwv/dE ZKhHDrgoGpHVwS4Dz0uUhcH20M7k6/cydaEKeIZ4h+IhTLFmoBIEB0YPW2Xnl8AH TlZC -----END CERTIFICATE-----Generated at Sat Jan 10 05:02:58 2026 by rpki-client