This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/ZYe946WWsJLWYqwE2jrnQ5CvbLs.roa File: ZYe946WWsJLWYqwE2jrnQ5CvbLs.roa (raw, json) Hash identifier: YzJAKJVzdhVwg2Wfzuv11ahwmdOVCIuLQiQ88WgRMJY= Subject key identifier: 65:87:BD:E3:A5:96:B0:92:D6:62:AC:04:DA:3A:E7:43:90:AF:6C:BB Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f Certificate serial: 019B77C6D26C41CCA16DA40D13DE037D0863 Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/ZYe946WWsJLWYqwE2jrnQ5CvbLs.roa Signing time: Thu 01 Jan 2026 04:17:57 +0000 ROA not before: Thu 01 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210501 IP address blocks: 194.69.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d2:6c:41:cc:a1:6d:a4:0d:13:de:03:7d:08:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6587bde3a596b092d662ac04da3ae74390af6cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:80:2e:42:a1:dc:28:ab:b9:ca:45:a5:a7:32: c9:0f:b0:21:f5:c4:21:c4:b4:07:c7:03:e2:73:5a: c3:83:66:08:81:db:d4:84:83:28:6b:8e:22:1c:bb: da:c4:8c:77:9f:f6:eb:64:fd:25:96:1c:69:03:32: cc:de:d3:25:a7:1f:21:cb:c8:a8:d1:87:d5:36:1b: 69:80:b4:eb:ec:a2:b9:5b:2e:9e:08:12:53:25:69: e9:8d:77:9a:8a:f3:19:6e:71:61:35:d8:3d:dc:03: 6f:a9:e8:fd:e2:ab:64:7f:f8:3e:e0:e0:4c:07:2b: fe:e9:9a:41:20:5b:31:bc:84:db:1b:e1:b6:d2:07: f0:4e:7a:c9:ca:16:d2:39:a4:0f:03:b9:e5:28:78: 98:67:09:fb:39:b7:db:97:ca:0e:9a:8f:26:c9:6b: 93:a5:d8:29:3c:2a:9e:a5:34:75:33:22:56:7a:da: 19:94:6e:4b:0f:39:9f:bf:d2:8c:80:a1:7e:d2:8d: 93:94:e6:50:95:12:60:09:cf:d0:35:0d:8e:d8:ba: 33:ef:f6:25:21:67:d9:3c:bf:b1:96:4f:f2:54:83: c4:6f:f3:26:21:67:42:e2:43:7b:e5:a3:cb:6a:81: a1:8d:5c:1f:0f:d9:7c:9a:1e:d6:ee:38:bb:44:b1: 97:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:87:BD:E3:A5:96:B0:92:D6:62:AC:04:DA:3A:E7:43:90:AF:6C:BB X509v3 Authority Key Identifier: keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/ZYe946WWsJLWYqwE2jrnQ5CvbLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.69.167.0/24 Signature Algorithm: sha256WithRSAEncryption 27:d2:af:23:35:de:eb:3d:63:27:79:f3:a5:b2:2e:c9:7c:82: de:bb:51:12:5f:c7:6a:60:30:b4:d5:ed:ae:db:d8:0c:b0:c3: a0:e1:43:cf:a9:b0:9f:ea:d0:3f:56:db:1b:5e:de:9a:49:f0: 23:1a:06:39:13:cd:50:43:c7:26:06:fa:ee:39:24:70:03:0c: 3d:53:9e:13:74:e3:59:5c:e3:a7:dd:a8:65:06:93:9e:bd:16: 4f:0d:6b:95:1c:d8:12:34:ca:c5:62:5a:00:b8:05:d1:08:c5: c4:09:3a:bc:85:00:0f:b8:68:30:fd:4e:55:6b:52:a0:eb:6f: 5d:e8:3f:10:eb:38:3e:d5:6c:fa:9e:26:9e:c1:c4:6e:b7:51: ca:2b:82:ad:55:bb:f7:16:e5:8c:cc:97:42:41:9e:85:ab:77: d1:83:29:aa:77:7b:47:2e:6e:ac:d0:36:f5:6c:46:11:3d:a8: 33:43:d9:78:c2:b0:78:52:f1:b0:67:d3:dc:2f:b4:61:b7:91: e4:60:c2:e4:ce:2f:48:1c:b4:6a:e7:16:b8:01:fa:b8:ed:65: bb:4f:24:06:d1:5f:ae:ad:a1:8e:f7:d8:16:b4:97:c5:5e:2c: 9f:de:b4:3e:b0:12:24:f0:bd:ec:c4:4e:f9:4a:c0:aa:2d:2b: ae:6f:f6:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtJsQcyhbaQNE94DfQhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTE3MjgxYWNmOTZkMzhlNzlhMzVjOGJlYjY4YjhjMDU5 NzlhNmYwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTg3YmRlM2E1OTZiMDkyZDY2MmFjMDRkYTNhZTc0MzkwYWY2Y2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYAuQqHcKKu5ykWlpzLJD7Ah9cQh xLQHxwPic1rDg2YIgdvUhIMoa44iHLvaxIx3n/brZP0llhxpAzLM3tMlpx8hy8io 0YfVNhtpgLTr7KK5Wy6eCBJTJWnpjXeaivMZbnFhNdg93ANvqej94qtkf/g+4OBM Byv+6ZpBIFsxvITbG+G20gfwTnrJyhbSOaQPA7nlKHiYZwn7Obfbl8oOmo8myWuT pdgpPCqepTR1MyJWetoZlG5LDzmfv9KMgKF+0o2TlOZQlRJgCc/QNQ2O2Loz7/Yl IWfZPL+xlk/yVIPEb/MmIWdC4kN75aPLaoGhjVwfD9l8mh7W7ji7RLGXKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGWHveOllrCS1mKsBNo650OQr2y7MB8GA1UdIwQY MBaAFBpRcoGs+W0455o1yL62i4wFl5pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUt NzAyNzI2ODhlOTcwLzEvWlllOTQ2V1dzSkxXWXF3RTJqcm5RNUN2YkxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUtNzAyNzI2ODhlOTcw LzEvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkWnMA0G CSqGSIb3DQEBCwUAA4IBAQAn0q8jNd7rPWMnefOlsi7JfILeu1ESX8dqYDC01e2u 29gMsMOg4UPPqbCf6tA/VtsbXt6aSfAjGgY5E81QQ8cmBvruOSRwAww9U54TdONZ XOOn3ahlBpOevRZPDWuVHNgSNMrFYloAuAXRCMXECTq8hQAPuGgw/U5Va1Kg629d 6D8Q6zg+1Wz6niaewcRut1HKK4KtVbv3FuWMzJdCQZ6Fq3fRgymqd3tHLm6s0Db1 bEYRPagzQ9l4wrB4UvGwZ9PcL7Rht5HkYMLkzi9IHLRq5xa4Afq47WW7TyQG0V+u raGO99gWtJfFXiyf3rQ+sBIk8L3sxE75SsCqLSuub/YY -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:13 2026 by rpki-client