This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/zP-lIE53S9KLOnGVAdItzeWXU5o.roa File: zP-lIE53S9KLOnGVAdItzeWXU5o.roa (raw, json) Hash identifier: 4Klw+/57RY0QPNCQtJQdWUmn3Q/oNa3sFma4xpAYYxE= Subject key identifier: CC:FF:A5:20:4E:77:4B:D2:8B:3A:71:95:01:D2:2D:CD:E5:97:53:9A Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3 Certificate serial: 019B76EB07A628C8443D9EBB92B5CC9F41BE Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/zP-lIE53S9KLOnGVAdItzeWXU5o.roa Signing time: Thu 01 Jan 2026 00:17:52 +0000 ROA not before: Thu 01 Jan 2026 00:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64427 IP address blocks: 185.181.188.0/24 maxlen: 24 212.114.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:07:a6:28:c8:44:3d:9e:bb:92:b5:cc:9f:41:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3 Validity Not Before: Jan 1 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccffa5204e774bd28b3a719501d22dcde597539a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:01:27:2a:3e:bf:73:ff:b0:bd:30:77:04:75: 44:de:df:a3:6e:fe:a4:d2:76:c6:25:30:a2:cd:86: 38:24:ba:d7:61:2d:7d:16:5b:70:b8:08:38:85:d2: c7:37:ba:d0:09:fd:b2:ab:b7:2d:6f:e6:83:33:c5: 40:2b:d4:fe:64:3d:8f:b5:cd:9d:59:46:69:2b:1d: a5:86:02:03:1a:fb:ee:96:2f:aa:90:c9:6e:97:8b: ea:c7:49:55:e3:1c:f7:2a:56:1f:ba:c9:30:ce:86: 2a:31:46:b2:12:42:e9:0d:08:0f:5b:7d:91:4d:5d: fc:4f:aa:4c:51:79:48:6b:e7:ed:05:ab:b4:18:80: 9d:ae:02:50:b9:28:95:9d:a1:e5:d2:ec:7e:6d:de: 79:5f:ac:e2:41:3f:05:a7:11:78:33:c9:27:6f:dd: f4:b7:34:e9:04:88:e6:a5:f4:13:ff:47:0e:4b:5d: 0d:da:50:e2:57:83:44:c9:99:96:9f:8f:63:38:f3: ab:0c:1a:2a:e1:b5:01:82:89:b2:81:bf:3c:20:6b: cf:f6:bb:0a:5a:13:2e:ec:79:46:aa:7c:c8:97:3b: 9f:cb:fb:58:a6:98:1a:e1:bc:ed:8b:db:5e:3b:90: 88:de:a7:38:a8:2c:43:7c:91:63:7e:a3:d8:71:05: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FF:A5:20:4E:77:4B:D2:8B:3A:71:95:01:D2:2D:CD:E5:97:53:9A X509v3 Authority Key Identifier: keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/zP-lIE53S9KLOnGVAdItzeWXU5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.188.0/24 212.114.90.0/24 Signature Algorithm: sha256WithRSAEncryption 47:e5:66:42:63:dc:3c:c9:19:00:96:96:57:9b:50:fe:ec:2e: 91:0c:b5:d2:df:47:6d:4a:6f:26:12:f9:c9:13:94:84:a3:3f: 9b:e6:90:51:d6:4c:5e:6a:e6:a0:ab:77:67:2f:a9:dd:88:20: 64:5d:7d:78:5d:d2:72:80:2a:c2:7b:4f:d7:01:37:12:6a:f3: 74:b4:2f:a1:52:4a:9e:1c:f1:11:4f:d8:fd:ea:bc:0a:73:47: b5:b7:91:11:9a:c9:87:26:b4:4a:f1:72:ae:1d:f1:f1:40:b0: 79:f7:93:e0:d4:c2:9f:2b:5b:d0:84:59:1f:65:74:c5:c0:4b: c0:49:fe:18:e0:1f:c7:b0:03:51:35:80:ce:8f:4f:5f:a3:17: bb:55:45:2e:5e:07:6f:c8:7a:df:fc:44:d5:69:13:6c:8e:8c: 86:44:12:2f:94:24:61:03:0b:d0:36:33:8d:6e:4b:dc:99:83: b0:82:52:7c:c8:03:0d:08:4c:68:78:0f:12:a6:9d:b2:ab:18: 08:d5:4d:0e:cc:c1:74:c7:ba:c2:de:76:05:d8:a9:5e:df:5a: bd:60:f4:d6:88:50:50:27:ef:31:00:ea:88:f5:23:a6:d0:1a: 4c:d3:4e:ab:cf:c4:82:3d:66:c0:6c:50:03:3d:84:8f:68:1b: f3:db:88:c0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26wemKMhEPZ67krXMn0G+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNmM0Yzk0ZmVkNGZhOGI5MDNmNmY2ZmI1MzQwNDg0YzBl NGE0ZDMwHhcNMjYwMTAxMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2ZmYTUyMDRlNzc0YmQyOGIzYTcxOTUwMWQyMmRjZGU1OTc1MzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wEnKj6/c/+wvTB3BHVE3t+jbv6k 0nbGJTCizYY4JLrXYS19FltwuAg4hdLHN7rQCf2yq7ctb+aDM8VAK9T+ZD2Ptc2d WUZpKx2lhgIDGvvuli+qkMlul4vqx0lV4xz3KlYfuskwzoYqMUayEkLpDQgPW32R TV38T6pMUXlIa+ftBau0GICdrgJQuSiVnaHl0ux+bd55X6ziQT8FpxF4M8knb930 tzTpBIjmpfQT/0cOS10N2lDiV4NEyZmWn49jOPOrDBoq4bUBgomygb88IGvP9rsK WhMu7HlGqnzIlzufy/tYppga4bzti9teO5CI3qc4qCxDfJFjfqPYcQUL2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMz/pSBOd0vSizpxlQHSLc3ll1OaMB8GA1UdIwQY MBaAFFNsTJT+1PqLkD9vb7U0BITA5KTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQ1MDItYzVkOC00YjE0LTk4MzYt YTY3Zjk1ZjJkZTVlLzEvelAtbElFNTNTOUtMT25HVkFkSXR6ZVdYVTVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NmQ1MDItYzVkOC00YjE0LTk4MzYtYTY3Zjk1ZjJkZTVl LzEvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubW8AwQA 1HJaMA0GCSqGSIb3DQEBCwUAA4IBAQBH5WZCY9w8yRkAlpZXm1D+7C6RDLXS30dt Sm8mEvnJE5SEoz+b5pBR1kxeauagq3dnL6ndiCBkXX14XdJygCrCe0/XATcSavN0 tC+hUkqeHPERT9j96rwKc0e1t5ERmsmHJrRK8XKuHfHxQLB595Pg1MKfK1vQhFkf ZXTFwEvASf4Y4B/HsANRNYDOj09foxe7VUUuXgdvyHrf/ETVaRNsjoyGRBIvlCRh AwvQNjONbkvcmYOwglJ8yAMNCExoeA8Spp2yqxgI1U0OzMF0x7rC3nYF2Kle31q9 YPTWiFBQJ+8xAOqI9SOm0BpM006rz8SCPWbAbFADPYSPaBvz24jA -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:24 2026 by rpki-client