This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa File: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (raw, json) Hash identifier: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8= Subject key identifier: D5:90:96:FB:75:F2:57:B5:14:75:6B:E7:65:2D:F8:67:14:BE:BF:28 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019B7FF1DFD2E91355454DFA81B67FC5BFAE Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa Signing time: Fri 02 Jan 2026 18:21:56 +0000 ROA not before: Fri 02 Jan 2026 18:21:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16125 IP address blocks: 82.206.0.0/23 maxlen: 23 82.206.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:df:d2:e9:13:55:45:4d:fa:81:b6:7f:c5:bf:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jan 2 18:21:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d59096fb75f257b514756be7652df86714bebf28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:a0:98:78:92:a5:48:01:af:f3:ba:30:a0: 61:5f:68:84:34:0d:fb:cc:8e:65:95:99:66:15:43: dc:5b:15:3b:84:02:22:7e:aa:75:cf:5d:76:83:64: 5e:05:84:03:4c:5a:67:b9:23:dd:f3:f5:89:70:a0: 1b:0c:58:67:b8:c7:28:7c:f4:31:13:8e:67:4b:2d: 72:c0:d4:2f:af:2d:69:ca:95:9e:e4:f9:8a:a3:2c: 92:7c:dc:7a:b1:c7:53:fc:a5:8f:c7:95:77:c3:ec: d7:97:19:34:9f:d0:76:57:92:74:fc:55:77:41:81: 0d:00:c1:75:2b:92:0a:37:a5:30:67:aa:d7:8c:db: ef:f3:39:fb:e3:46:10:86:65:86:48:23:11:d1:7a: 89:44:99:ad:b1:15:2f:67:5a:67:40:c1:96:f8:33: 46:b6:1a:3b:44:aa:76:aa:d9:b7:be:31:66:1d:dd: 94:2b:de:ff:fa:48:05:06:b9:ae:6c:f2:81:df:1f: 01:ad:15:4d:07:50:3d:d1:a9:35:ac:a2:7e:57:ca: 0c:d7:4c:e2:fe:e6:55:1a:10:6f:0c:71:83:3b:77: dc:eb:cd:8f:a5:8b:2c:7d:e9:5d:74:67:d0:ba:af: de:d5:02:8c:ec:49:1b:ca:a5:5d:0a:7c:1f:39:50: c0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:90:96:FB:75:F2:57:B5:14:75:6B:E7:65:2D:F8:67:14:BE:BF:28 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.206.0.0/23 82.206.10.0/23 Signature Algorithm: sha256WithRSAEncryption 88:f0:22:77:71:ed:6f:c2:45:8c:97:96:61:50:b7:86:30:11: 61:4b:1c:80:97:02:b6:63:4b:b8:6e:04:02:b2:83:85:e4:74: 71:81:a6:b9:24:10:80:a3:b9:15:21:98:e3:59:a2:b4:6c:90: 14:7c:01:52:1e:79:5c:be:91:ff:ba:c1:2d:53:80:43:c7:8a: 24:7e:4f:72:19:b0:77:a9:85:df:99:e4:a9:3d:7b:65:7e:ca: 34:94:75:60:b9:ca:71:4e:3c:8c:3e:b7:d0:c5:1d:31:5a:5c: aa:94:f4:f7:05:43:8b:3c:5c:41:5c:a2:1b:37:34:38:07:43: 64:0c:db:47:8d:d4:25:5c:eb:44:99:ef:09:9a:83:e4:79:84: a2:df:6c:51:10:d2:12:4b:85:30:e6:35:38:a8:c8:4d:fc:4d: bf:87:58:05:b6:9b:f4:e2:99:ca:97:62:e0:04:c9:66:95:f3: 41:45:ae:f5:38:40:7e:8a:e8:37:c8:d0:f7:fc:63:d4:15:23: e3:db:cb:4b:8f:d5:bc:6e:1e:8c:5f:ca:82:af:cc:cc:fd:ab: 76:bc:04:de:54:30:57:71:18:a4:af:fa:5d:a7:35:09:3a:14: 2b:88:2f:b8:f7:a7:ce:dd:9a:55:b9:3f:e0:b4:9c:ee:1b:5b: c9:de:07:c8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8d/S6RNVRU36gbZ/xb+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwMTAyMTgyMTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTkwOTZmYjc1ZjI1N2I1MTQ3NTZiZTc2NTJkZjg2NzE0YmViZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfWgmHiSpUgBr/O6MKBhX2iENA37 zI5llZlmFUPcWxU7hAIifqp1z112g2ReBYQDTFpnuSPd8/WJcKAbDFhnuMcofPQx E45nSy1ywNQvry1pypWe5PmKoyySfNx6scdT/KWPx5V3w+zXlxk0n9B2V5J0/FV3 QYENAMF1K5IKN6UwZ6rXjNvv8zn740YQhmWGSCMR0XqJRJmtsRUvZ1pnQMGW+DNG tho7RKp2qtm3vjFmHd2UK97/+kgFBrmubPKB3x8BrRVNB1A90ak1rKJ+V8oM10zi /uZVGhBvDHGDO3fc682PpYssfelddGfQuq/e1QKM7EkbyqVdCnwfOVDADwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNWQlvt18le1FHVr52Ut+GcUvr8oMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvMVpDVy0zWHlWN1VVZFd2blpTMzRaeFMtdnlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUs4AAwQB Us4KMA0GCSqGSIb3DQEBCwUAA4IBAQCI8CJ3ce1vwkWMl5ZhULeGMBFhSxyAlwK2 Y0u4bgQCsoOF5HRxgaa5JBCAo7kVIZjjWaK0bJAUfAFSHnlcvpH/usEtU4BDx4ok fk9yGbB3qYXfmeSpPXtlfso0lHVgucpxTjyMPrfQxR0xWlyqlPT3BUOLPFxBXKIb NzQ4B0NkDNtHjdQlXOtEme8JmoPkeYSi32xRENISS4Uw5jU4qMhN/E2/h1gFtpv0 4pnKl2LgBMlmlfNBRa71OEB+iug3yND3/GPUFSPj28tLj9W8bh6MX8qCr8zM/at2 vATeVDBXcRikr/pdpzUJOhQriC+496fO3ZpVuT/gtJzuG1vJ3gfI -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:03 2026 by rpki-client