This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/0zzNK_dip5D-vbdS46pdPM0bWmY.roa File: 0zzNK_dip5D-vbdS46pdPM0bWmY.roa (raw, json) Hash identifier: +Q7jclQp9h+mglscOOjepjoQV01QfX45LZ55s+yRBPA= Subject key identifier: D3:3C:CD:2B:F7:62:A7:90:FE:BD:B7:52:E3:AA:5D:3C:CD:1B:5A:66 Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Certificate serial: 019B78A3414A20A798099308C2F3CEC3679D Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/0zzNK_dip5D-vbdS46pdPM0bWmY.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 192.162.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:41:4a:20:a7:98:09:93:08:c2:f3:ce:c3:67:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d33ccd2bf762a790febdb752e3aa5d3ccd1b5a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:51:b0:e2:03:60:71:59:13:1b:2c:c7:83: 2a:53:a7:83:bb:8d:62:2d:d7:53:59:65:aa:23:26: 61:f8:82:3e:53:17:4a:1f:71:26:44:55:a6:7b:ce: 2d:26:3c:d9:d8:ab:6c:93:4b:b4:07:9b:57:3f:13: 47:a6:c3:13:25:66:ad:8b:08:33:25:62:d2:9f:df: e4:79:6f:69:ca:b3:13:e0:0f:8b:fb:c5:36:82:39: eb:8b:3e:5f:0d:84:78:5d:c8:39:24:78:50:60:69: a5:7e:27:9f:e2:ed:6f:96:de:41:18:aa:3a:c8:6e: cf:37:83:9e:b6:d9:b7:b8:c0:22:a3:4d:a2:b2:9e: b2:8a:ab:61:50:f6:f5:89:93:8f:43:8b:c4:4e:5e: 67:82:fd:cc:aa:d3:f2:55:02:71:bd:bc:95:0e:ae: 4b:52:3e:37:6b:53:75:13:b9:1f:39:18:fa:75:7c: 93:cc:94:a0:05:82:69:11:1b:5f:1f:1e:eb:65:c5: b3:b7:45:5d:b2:03:6c:4f:0b:c8:40:8f:55:36:b2: 40:e6:cc:b1:db:2f:64:b5:75:56:3d:35:b1:08:fd: bc:bc:7e:26:6a:7c:86:0c:60:a2:09:ce:63:2b:01: f3:48:ee:57:aa:c0:a8:8e:75:22:64:81:ce:f9:f7: 60:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3C:CD:2B:F7:62:A7:90:FE:BD:B7:52:E3:AA:5D:3C:CD:1B:5A:66 X509v3 Authority Key Identifier: keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/0zzNK_dip5D-vbdS46pdPM0bWmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.219.0/24 Signature Algorithm: sha256WithRSAEncryption 49:36:2f:b5:d3:80:c3:96:cf:1f:ab:e1:4e:fa:0d:8b:be:2a: 60:d3:43:63:27:73:f5:c1:c5:7e:6b:7f:2d:46:ed:b7:fc:d9: f1:c0:ed:12:4a:1d:cc:6b:d3:1c:72:77:39:da:57:c2:3e:6f: 60:b9:0a:ae:4e:46:ce:e8:b1:c4:be:f6:ff:34:bc:97:d3:42: ea:99:5d:01:39:19:0e:50:67:1d:a5:1d:04:b1:75:7a:a9:0d: 75:bf:50:46:c7:a6:df:0e:8a:17:2d:1c:0e:38:f0:fa:05:8f: 3b:33:45:12:34:6a:af:81:b3:99:31:54:72:90:19:2a:00:d9: a7:b1:fa:03:6f:80:9b:a0:c7:b5:fa:75:38:11:96:23:ac:39: 58:c2:aa:32:38:09:22:85:6e:bc:e2:69:12:a2:5e:52:bb:3c: 20:00:21:44:16:c8:1e:aa:31:6e:01:d1:21:42:6f:c3:14:e6: 98:ab:63:33:74:90:f5:e1:90:69:9f:f1:b1:cc:18:0a:37:6d: 93:75:4c:90:f5:79:43:9d:c1:f9:b2:06:9e:33:af:66:61:df: aa:57:b7:ca:25:34:d9:8f:73:5f:f4:87:87:29:96:47:7c:b1: a6:1b:bd:51:bb:c6:06:01:ed:3d:fe:a0:ca:52:0b:82:be:2d: c9:a1:12:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0FKIKeYCZMIwvPOw2edMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzRmNzM0YzM2OTVlNjc5MDZhNzAzMmViMmU1OWZiM2Vi NDFiMjIwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzNjY2QyYmY3NjJhNzkwZmViZGI3NTJlM2FhNWQzY2NkMWI1YTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gFRsOIDYHFZExssx4MqU6eDu41i LddTWWWqIyZh+II+UxdKH3EmRFWme84tJjzZ2Ktsk0u0B5tXPxNHpsMTJWatiwgz JWLSn9/keW9pyrMT4A+L+8U2gjnriz5fDYR4Xcg5JHhQYGmlfief4u1vlt5BGKo6 yG7PN4Oettm3uMAio02isp6yiqthUPb1iZOPQ4vETl5ngv3MqtPyVQJxvbyVDq5L Uj43a1N1E7kfORj6dXyTzJSgBYJpERtfHx7rZcWzt0VdsgNsTwvIQI9VNrJA5syx 2y9ktXVWPTWxCP28vH4manyGDGCiCc5jKwHzSO5XqsCojnUiZIHO+fdg+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNM8zSv3YqeQ/r23UuOqXTzNG1pmMB8GA1UdIwQY MBaAFPN09zTDaV5nkGpwMusuWfs+tBsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt NGJlZjgzMjhhYWFiLzEvMHp6TktfZGlwNUQtdmJkUzQ2cGRQTTBiV21ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi LzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKLbMA0G CSqGSIb3DQEBCwUAA4IBAQBJNi+104DDls8fq+FO+g2Lvipg00NjJ3P1wcV+a38t Ru23/NnxwO0SSh3Ma9Mccnc52lfCPm9guQquTkbO6LHEvvb/NLyX00LqmV0BORkO UGcdpR0EsXV6qQ11v1BGx6bfDooXLRwOOPD6BY87M0USNGqvgbOZMVRykBkqANmn sfoDb4CboMe1+nU4EZYjrDlYwqoyOAkihW684mkSol5SuzwgACFEFsgeqjFuAdEh Qm/DFOaYq2MzdJD14ZBpn/GxzBgKN22TdUyQ9XlDncH5sgaeM69mYd+qV7fKJTTZ j3Nf9IeHKZZHfLGmG71Ru8YGAe09/qDKUguCvi3JoRKR -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:46 2026 by rpki-client