This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zJws6970tJCYIKsag5lZna451pA.roa File: zJws6970tJCYIKsag5lZna451pA.roa (raw, json) Hash identifier: GH2hjB9zZ9T2Ht6hHzd/rkc60hbEhvOgX8PV4y/REG4= Subject key identifier: CC:9C:2C:EB:DE:F4:B4:90:98:20:AB:1A:83:99:59:9D:AE:39:D6:90 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37CD28E2171494FC52AF7CF8CF0E8A Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zJws6970tJCYIKsag5lZna451pA.roa Signing time: Fri 02 Jan 2026 10:19:04 +0000 ROA not before: Fri 02 Jan 2026 10:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 147.90.1.0/24 maxlen: 24 158.173.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:cd:28:e2:17:14:94:fc:52:af:7c:f8:cf:0e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc9c2cebdef4b4909820ab1a8399599dae39d690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:95:00:02:c1:c7:c5:a4:63:ef:df:ff:0d:89: 13:74:80:ef:79:9a:fd:ee:8e:e8:a0:a1:dd:b8:1a: fe:1f:07:e1:d3:7c:51:1f:4a:77:3e:87:40:44:34: 88:ce:f1:5c:85:68:d3:25:0a:0b:90:a3:85:57:98: 26:29:34:b5:7d:71:7e:7b:29:0e:9f:83:48:fc:28: b9:c9:c2:3f:cd:06:6b:cc:49:19:ce:78:32:1b:42: b2:ff:cb:15:4c:cd:02:52:b3:c3:52:02:b3:83:0f: 36:b9:48:2d:7c:33:e9:b3:68:3b:4a:54:aa:9a:f9: 95:bd:31:70:c3:dc:42:1f:d0:14:43:81:5d:b9:fd: 8b:29:55:09:cd:ca:9a:1c:f6:67:ae:db:7b:94:36: 25:4b:af:ff:4b:e0:c3:42:1e:2f:46:72:9d:7e:cd: 0b:61:25:dc:39:8a:2a:fe:de:be:08:75:31:24:85: 3d:07:7e:a0:7d:30:2b:e3:c7:bf:47:34:c7:6f:2f: a0:7c:93:80:b2:08:bf:4e:40:a6:cb:56:71:7f:64: f1:04:6d:7a:12:6e:65:45:4b:15:20:1c:cf:18:97: b5:af:a8:73:06:17:32:2f:af:f9:e2:0e:15:be:3f: 1e:2d:ec:70:93:56:20:6c:28:c2:e1:59:40:4d:00: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9C:2C:EB:DE:F4:B4:90:98:20:AB:1A:83:99:59:9D:AE:39:D6:90 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/zJws6970tJCYIKsag5lZna451pA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.1.0/24 158.173.204.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:6a:d4:a7:83:39:7f:6a:48:92:8e:f5:63:35:6d:25:16:d4: 10:c8:f9:71:fb:91:70:a7:16:10:e6:09:a3:b5:7a:02:91:67: 12:bd:12:82:aa:2d:14:ab:6d:3a:37:e6:07:53:ba:03:8d:6a: 8c:e9:f2:46:2c:9d:b2:8e:7a:3a:23:f9:91:7e:55:d6:df:32: 1e:b0:19:22:a6:50:bf:e7:b1:91:ff:0c:66:fa:88:6c:7e:9a: 23:e4:01:b0:98:f1:f8:5d:20:27:19:33:e1:e5:ef:a5:49:44: a5:02:4a:c7:0b:00:42:cb:01:ab:d1:1a:1b:a9:6b:93:a8:fd: aa:7f:cc:38:ba:9a:6d:68:71:1f:77:da:91:61:b5:fc:54:12: 7c:c0:3c:96:6d:2f:57:ed:03:08:61:08:3b:c5:c3:22:56:69: 63:65:10:fc:6e:4c:81:d4:47:f1:a4:89:fa:ea:89:c0:96:b4: 2d:06:41:86:e7:3c:2e:fa:ba:75:75:d1:49:dd:ba:5a:dc:b3: b9:7c:42:16:84:9a:e1:d2:1d:e6:b2:7a:12:b7:66:07:8e:30: 51:a5:44:14:3c:43:18:8c:26:8b:3a:08:99:b6:25:e5:d7:19: b3:07:73:b8:ca:73:71:b7:f9:d4:98:cd:ba:6d:a8:e2:8c:fc: c8:42:24:8a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N80o4hcUlPxSr3z4zw6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzljMmNlYmRlZjRiNDkwOTgyMGFiMWE4Mzk5NTk5ZGFlMzlkNjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZUAAsHHxaRj79//DYkTdIDveZr9 7o7ooKHduBr+Hwfh03xRH0p3PodARDSIzvFchWjTJQoLkKOFV5gmKTS1fXF+eykO n4NI/Ci5ycI/zQZrzEkZzngyG0Ky/8sVTM0CUrPDUgKzgw82uUgtfDPps2g7SlSq mvmVvTFww9xCH9AUQ4Fduf2LKVUJzcqaHPZnrtt7lDYlS6//S+DDQh4vRnKdfs0L YSXcOYoq/t6+CHUxJIU9B36gfTAr48e/RzTHby+gfJOAsgi/TkCmy1Zxf2TxBG16 Em5lRUsVIBzPGJe1r6hzBhcyL6/54g4Vvj8eLexwk1YgbCjC4VlATQDl+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMycLOve9LSQmCCrGoOZWZ2uOdaQMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvekp3czY5NzB0SkNZSUtzYWc1bFpuYTQ1MXBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk1oBAwQA nq3MMA0GCSqGSIb3DQEBCwUAA4IBAQB7atSngzl/akiSjvVjNW0lFtQQyPlx+5Fw pxYQ5gmjtXoCkWcSvRKCqi0Uq206N+YHU7oDjWqM6fJGLJ2yjno6I/mRflXW3zIe sBkiplC/57GR/wxm+ohsfpoj5AGwmPH4XSAnGTPh5e+lSUSlAkrHCwBCywGr0Rob qWuTqP2qf8w4upptaHEfd9qRYbX8VBJ8wDyWbS9X7QMIYQg7xcMiVmljZRD8bkyB 1EfxpIn66onAlrQtBkGG5zwu+rp1ddFJ3bpa3LO5fEIWhJrh0h3msnoSt2YHjjBR pUQUPEMYjCaLOgiZtiXl1xmzB3O4ynNxt/nUmM26bajijPzIQiSK -----END CERTIFICATE-----Generated at Mon Jan 19 05:24:21 2026 by rpki-client