This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/zpnZiHFwy0LGsQziGTNhSdlz9Es.roa File: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (raw, json) Hash identifier: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs= Subject key identifier: CE:99:D9:88:71:70:CB:42:C6:B1:0C:E2:19:33:61:49:D9:73:F4:4B Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC80F2144F3290D4FF2B8C2790B8B4C Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/zpnZiHFwy0LGsQziGTNhSdlz9Es.roa Signing time: Thu 01 Jan 2026 18:18:10 +0000 ROA not before: Thu 01 Jan 2026 18:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216246 IP address blocks: 178.159.94.0/24 maxlen: 24 185.221.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0f:21:44:f3:29:0d:4f:f2:b8:c2:79:0b:8b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce99d9887170cb42c6b10ce219336149d973f44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:37:34:c3:11:e2:ff:f2:19:87:c9:9f:c2: f7:27:bc:0b:b3:9b:48:78:d4:00:13:54:93:f6:91: 3b:88:67:83:7e:c8:9f:02:88:f7:2a:3e:4d:ef:fb: 4f:80:83:6d:87:8a:fb:e7:90:a2:6f:68:32:9a:e0: 12:28:b5:90:cc:ae:bc:b3:bb:da:78:2b:0f:96:a1: af:2e:9c:c6:19:c8:36:2e:21:4f:f3:d0:95:d5:fc: df:f9:c2:f0:e9:51:a9:c5:42:ee:d1:a4:79:33:fb: ae:1f:a6:11:27:51:fc:fb:dd:81:bf:23:a7:f9:38: 96:78:ba:58:ec:87:ee:a6:66:83:81:e8:54:48:09: 03:fa:36:92:f0:4d:a0:db:0f:b2:2f:c0:1b:68:4a: 75:5c:31:37:6a:66:40:da:1f:30:4d:b4:07:41:35: 76:4a:2f:35:b0:24:ad:bf:b8:4e:55:51:6c:63:2e: 83:9f:5c:8f:60:d2:5f:27:a3:5a:a9:34:62:de:32: d5:0b:81:54:03:59:7d:75:bd:bb:21:e2:99:13:e6: a1:ea:07:cd:8d:c2:7f:8f:08:1c:88:aa:5e:2d:7b: 11:ae:23:bb:db:f0:61:0e:ad:3c:7e:e0:f9:88:47: 2b:7c:f4:58:be:a8:d8:19:18:34:53:a3:0e:58:50: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:99:D9:88:71:70:CB:42:C6:B1:0C:E2:19:33:61:49:D9:73:F4:4B X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/zpnZiHFwy0LGsQziGTNhSdlz9Es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.159.94.0/24 185.221.199.0/24 Signature Algorithm: sha256WithRSAEncryption 72:d0:42:44:a0:db:8a:a0:3a:60:43:a3:12:e0:3c:47:01:b1: a8:4a:58:92:44:c5:01:30:10:37:64:a3:79:bc:4a:d0:b8:4f: f3:ad:be:54:63:f4:ae:f7:4d:ff:cb:7c:61:71:b3:fd:a5:f5: 0c:bf:8e:45:ea:14:1e:81:81:d1:18:ea:44:45:bf:90:25:9c: 0a:b9:f8:1c:ed:74:cc:e7:39:4e:9c:72:56:e4:a0:d0:e5:d3: 42:2e:13:ed:55:63:e6:36:db:1e:7c:a0:b6:ae:b3:7c:a3:d2: ab:7d:e8:51:8e:18:f7:8f:fd:63:b2:79:e1:2f:04:07:76:39: 64:59:91:a7:5f:a8:ac:5e:77:51:f7:1b:fb:2d:66:15:f3:01: 77:51:1f:c6:c6:e0:23:23:89:20:53:f8:87:2c:09:50:39:2e: c7:0c:35:f8:81:f3:44:40:90:2c:de:f6:de:d4:40:54:47:13: 63:84:81:2c:cb:22:e8:f7:4e:34:92:e1:b2:42:7a:28:a2:72: 89:50:af:57:29:6b:6b:ef:cc:ae:e6:b6:42:3c:60:b9:b2:b2: 0e:35:42:83:99:6e:36:4a:49:e0:44:2e:10:08:d0:02:38:6e: b8:0e:07:17:08:b6:c4:d7:51:58:80:ba:08:59:2e:74:68:a8: 0d:05:80:d2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yA8hRPMpDU/yuMJ5C4tMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTk5ZDk4ODcxNzBjYjQyYzZiMTBjZTIxOTMzNjE0OWQ5NzNmNDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHM3NMMR4v/yGYfJn8L3J7wLs5tI eNQAE1ST9pE7iGeDfsifAoj3Kj5N7/tPgINth4r755Cib2gymuASKLWQzK68s7va eCsPlqGvLpzGGcg2LiFP89CV1fzf+cLw6VGpxULu0aR5M/uuH6YRJ1H8+92BvyOn +TiWeLpY7IfupmaDgehUSAkD+jaS8E2g2w+yL8AbaEp1XDE3amZA2h8wTbQHQTV2 Si81sCStv7hOVVFsYy6Dn1yPYNJfJ6NaqTRi3jLVC4FUA1l9db27IeKZE+ah6gfN jcJ/jwgciKpeLXsRriO72/BhDq08fuD5iEcrfPRYvqjYGRg0U6MOWFBcFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM6Z2YhxcMtCxrEM4hkzYUnZc/RLMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvenBuWmlIRnd5MExHc1F6aUdUTmhTZGx6OUVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsp9eAwQA ud3HMA0GCSqGSIb3DQEBCwUAA4IBAQBy0EJEoNuKoDpgQ6MS4DxHAbGoSliSRMUB MBA3ZKN5vErQuE/zrb5UY/Su903/y3xhcbP9pfUMv45F6hQegYHRGOpERb+QJZwK ufgc7XTM5zlOnHJW5KDQ5dNCLhPtVWPmNtsefKC2rrN8o9KrfehRjhj3j/1jsnnh LwQHdjlkWZGnX6isXndR9xv7LWYV8wF3UR/GxuAjI4kgU/iHLAlQOS7HDDX4gfNE QJAs3vbe1EBURxNjhIEsyyLo9040kuGyQnooonKJUK9XKWtr78yu5rZCPGC5srIO NUKDmW42SkngRC4QCNACOG64DgcXCLbE11FYgLoIWS50aKgNBYDS -----END CERTIFICATE-----Generated at Tue Jan 20 14:15:34 2026 by rpki-client