This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa File: zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa (raw, json) Hash identifier: RzZEQ/gzmc0sHqoihLaxMsPQLNBKCTKE0KmCQNShYdw= Subject key identifier: CC:B6:67:E5:F8:C8:C4:65:08:78:B2:6C:DF:1C:FE:0B:73:9D:00:AF Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019B7C80600D091733F9BAD42A8303008E10 Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50983 IP address blocks: 77.93.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:60:0d:09:17:33:f9:ba:d4:2a:83:03:00:8e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccb667e5f8c8c4650878b26cdf1cfe0b739d00af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:54:cc:63:b1:8c:39:9d:16:fb:a5:25:dc: 77:e0:02:7b:49:b1:3d:63:1f:4e:1c:e1:a6:0e:32: 24:84:c2:37:0d:7b:c1:74:89:17:e5:c8:e6:b5:32: 12:ea:66:0f:1f:37:d7:61:69:fc:96:74:95:d0:94: b3:c1:f6:53:cd:c1:d2:68:27:cd:f6:84:09:af:a1: db:5d:1d:90:82:e6:3c:54:64:a6:01:94:93:e0:24: 2a:58:3c:08:dd:34:a8:ec:dc:e4:e6:9e:9c:ef:5e: b6:e9:b2:ed:8a:9a:4c:bb:2e:dd:b6:ef:d2:65:b6: 32:16:7e:88:d1:a1:88:f5:cf:29:52:32:25:b2:26: 42:06:64:76:6f:b6:1d:e1:ec:c0:a8:bd:96:e7:09: f6:77:27:a7:5c:9d:52:ad:7e:e9:02:a2:36:69:e2: bd:42:41:a5:1d:dc:52:c3:80:b1:6b:53:99:da:3e: 7f:e7:d4:aa:57:3f:ad:03:c4:b5:6e:77:de:86:2a: ea:36:92:7f:9d:ac:39:9e:cd:60:83:46:92:96:0e: 07:90:c1:d2:5f:5f:a1:60:99:5e:70:4b:bc:39:f7: 83:ab:16:7c:d1:68:d4:d4:40:cd:d6:26:51:27:1b: c3:cf:ea:45:79:30:02:61:20:3a:82:4e:f7:28:04: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B6:67:E5:F8:C8:C4:65:08:78:B2:6C:DF:1C:FE:0B:73:9D:00:AF X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.173.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:15:c0:b4:62:13:95:1c:c3:9d:49:de:4f:c4:2c:b2:5d:c1: c3:47:2d:6c:32:cf:3c:b7:9e:d6:88:7a:8f:3a:9e:c1:a1:f9: 4c:70:46:44:b2:59:b5:33:64:cb:f3:09:a4:5e:bc:f0:f8:e5: de:bb:fe:32:03:c7:e5:bd:85:cb:b1:33:59:5a:e0:ea:f1:a2: f7:eb:ca:74:db:40:70:13:79:d2:ba:7f:b6:4a:61:af:1a:3c: 02:8d:4d:c1:70:07:d3:bf:60:64:73:7e:db:95:d9:53:d9:e8: 91:49:4a:a5:2c:d9:bf:28:55:15:8f:4c:42:b3:7e:88:f0:a3: 6c:c7:76:fc:02:34:2c:a2:7d:1f:a3:0a:bf:8d:db:2b:1a:3a: 03:49:b1:77:b9:7e:11:9b:ba:dd:79:05:db:63:c9:c0:59:4a: 10:ad:77:61:4e:21:84:14:15:39:4a:e1:07:00:58:5e:b6:05: f8:45:f3:57:c5:12:fa:06:6b:64:52:ae:b0:ea:a8:0c:ad:93: ec:65:b2:40:94:d1:14:9c:a5:94:ae:e3:c8:33:bb:70:5c:fe: ec:9c:c9:86:ef:80:5b:41:15:d4:ac:bb:1f:65:be:1a:78:8e: 6b:63:47:a9:9f:8d:a7:ca:a8:41:50:aa:79:e2:5c:e5:04:2a: c2:1b:9b:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGANCRcz+brUKoMDAI4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2I2NjdlNWY4YzhjNDY1MDg3OGIyNmNkZjFjZmUwYjczOWQwMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xJUzGOxjDmdFvulJdx34AJ7SbE9 Yx9OHOGmDjIkhMI3DXvBdIkX5cjmtTIS6mYPHzfXYWn8lnSV0JSzwfZTzcHSaCfN 9oQJr6HbXR2QguY8VGSmAZST4CQqWDwI3TSo7Nzk5p6c71626bLtippMuy7dtu/S ZbYyFn6I0aGI9c8pUjIlsiZCBmR2b7Yd4ezAqL2W5wn2dyenXJ1SrX7pAqI2aeK9 QkGlHdxSw4Cxa1OZ2j5/59SqVz+tA8S1bnfehirqNpJ/naw5ns1gg0aSlg4HkMHS X1+hYJlecEu8OfeDqxZ80WjU1EDN1iZRJxvDz+pFeTACYSA6gk73KASA4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMy2Z+X4yMRlCHiybN8c/gtznQCvMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvekxabjVmakl4R1VJZUxKczN4ei1DM09kQUs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV2tMA0G CSqGSIb3DQEBCwUAA4IBAQArFcC0YhOVHMOdSd5PxCyyXcHDRy1sMs88t57WiHqP Op7BoflMcEZEslm1M2TL8wmkXrzw+OXeu/4yA8flvYXLsTNZWuDq8aL368p020Bw E3nSun+2SmGvGjwCjU3BcAfTv2Bkc37bldlT2eiRSUqlLNm/KFUVj0xCs36I8KNs x3b8AjQson0fowq/jdsrGjoDSbF3uX4Rm7rdeQXbY8nAWUoQrXdhTiGEFBU5SuEH AFhetgX4RfNXxRL6BmtkUq6w6qgMrZPsZbJAlNEUnKWUruPIM7twXP7snMmG74Bb QRXUrLsfZb4aeI5rY0epn42nyqhBUKp54lzlBCrCG5t4 -----END CERTIFICATE-----Generated at Mon Jan 26 21:17:01 2026 by rpki-client