This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/zEwISNAn9YCW0Wsdm5RUCpSTUKM.roa File: zEwISNAn9YCW0Wsdm5RUCpSTUKM.roa (raw, json) Hash identifier: pK2Nt8VgUMcXHhwtUp37qnY4MdMfrXTVdUqLGk4kB7M= Subject key identifier: CC:4C:08:48:D0:27:F5:80:96:D1:6B:1D:9B:94:54:0A:94:93:50:A3 Certificate issuer: /CN=aab78616f3b39ed4820d04ce098ea7c20655314b Certificate serial: 019B7AC814739C84005E1AADDB2B070610A0 Authority key identifier: AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/zEwISNAn9YCW0Wsdm5RUCpSTUKM.roa Signing time: Thu 01 Jan 2026 18:18:11 +0000 ROA not before: Thu 01 Jan 2026 18:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202682 IP address blocks: 92.119.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:14:73:9c:84:00:5e:1a:ad:db:2b:07:06:10:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aab78616f3b39ed4820d04ce098ea7c20655314b Validity Not Before: Jan 1 18:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc4c0848d027f58096d16b1d9b94540a949350a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:96:54:9c:8c:25:88:f5:3e:b1:bf:68:95:d8: 88:81:4c:f4:38:88:41:cf:37:94:2c:a2:7f:e8:0d: 03:d2:79:3c:d1:2d:44:b8:08:d8:86:5a:33:d1:d7: f5:78:58:1d:02:3c:08:83:53:6e:77:00:5a:65:c2: d6:41:0d:9e:be:29:1c:23:15:e7:a1:7a:c7:9d:bb: 49:58:43:5b:c4:1f:ac:a9:8f:51:1e:a3:95:07:f7: b7:09:66:b9:a2:8e:80:fa:87:9c:c6:9e:da:80:43: 19:9b:fc:71:10:4e:80:31:c9:57:ff:e6:23:e3:99: e6:51:df:5c:a8:a7:8b:b8:42:46:ce:57:3b:6e:62: 6c:13:25:85:d3:40:31:c6:ee:cd:7a:1a:cf:0f:a9: d1:52:24:dd:20:3d:15:da:04:b2:0e:03:00:b3:1c: 7a:24:09:59:b2:2d:53:d3:df:4b:5b:b1:2d:66:5a: a0:da:7e:66:97:e5:f9:4f:22:59:63:0f:f6:aa:4e: e2:64:77:de:68:7b:3d:70:00:d7:f1:4b:a3:17:47: 63:5b:e0:64:0b:be:35:41:bb:30:bb:c1:2c:c3:97: c4:f4:b5:4b:11:95:1f:00:71:b8:e7:46:f7:7f:99: 11:af:da:36:21:e6:a5:65:cd:64:8f:9b:ba:77:54: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4C:08:48:D0:27:F5:80:96:D1:6B:1D:9B:94:54:0A:94:93:50:A3 X509v3 Authority Key Identifier: keyid:AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/zEwISNAn9YCW0Wsdm5RUCpSTUKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.64.0/22 Signature Algorithm: sha256WithRSAEncryption 04:ff:17:cc:c8:62:6b:ed:12:07:a9:23:6a:49:37:66:ac:23: a7:27:87:b5:be:5d:97:59:92:f0:19:d3:84:ae:be:76:fa:3e: ff:31:40:86:96:cd:6c:56:48:d7:38:6b:29:43:c4:f3:a9:35: c0:d4:9a:13:50:38:ea:b8:53:ee:88:c1:99:ca:2f:5c:4f:c0: 24:f8:64:3a:d2:b3:25:1b:25:4f:d5:ca:ff:db:12:01:fd:3d: d8:ab:8d:73:56:4d:bd:15:7c:1c:75:da:d5:36:12:a0:5c:24: fc:b4:45:9d:7b:ed:9a:d8:a5:13:2e:fd:54:39:8f:df:d3:da: e9:72:86:df:ac:a3:c8:c7:b4:0b:35:f6:0a:73:08:19:23:8f: 3e:6c:61:1c:cf:7b:45:bc:27:68:3c:aa:11:67:02:93:09:80: 7d:f0:94:9d:a9:c6:72:25:99:9f:b6:19:e6:fd:6c:71:15:1f: 93:32:c5:d2:bc:3d:d7:0c:e1:f5:87:b2:d9:32:22:96:e4:2c: 6b:f1:a4:7f:5d:3d:03:ed:e2:78:6d:9d:da:1b:2b:81:03:d4: e5:0c:4b:a0:cd:6b:81:aa:6a:ed:8b:23:e2:7e:65:3d:60:9e: c2:51:38:6a:f5:7b:f9:c8:21:42:48:b4:5a:38:20:45:d8:fb: 60:9d:b4:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBRznIQAXhqt2ysHBhCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYjc4NjE2ZjNiMzllZDQ4MjBkMDRjZTA5OGVhN2MyMDY1 NTMxNGIwHhcNMjYwMTAxMTgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzRjMDg0OGQwMjdmNTgwOTZkMTZiMWQ5Yjk0NTQwYTk0OTM1MGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/pZUnIwliPU+sb9oldiIgUz0OIhB zzeULKJ/6A0D0nk80S1EuAjYhloz0df1eFgdAjwIg1NudwBaZcLWQQ2evikcIxXn oXrHnbtJWENbxB+sqY9RHqOVB/e3CWa5oo6A+oecxp7agEMZm/xxEE6AMclX/+Yj 45nmUd9cqKeLuEJGzlc7bmJsEyWF00Axxu7NehrPD6nRUiTdID0V2gSyDgMAsxx6 JAlZsi1T099LW7EtZlqg2n5ml+X5TyJZYw/2qk7iZHfeaHs9cADX8UujF0djW+Bk C741Qbswu8Esw5fE9LVLEZUfAHG450b3f5kRr9o2IealZc1kj5u6d1QqQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxMCEjQJ/WAltFrHZuUVAqUk1CjMB8GA1UdIwQY MBaAFKq3hhbzs57Ugg0EzgmOp8IGVTFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXJlR0Z2T3pudFNDRFFUT0NZNm53Z1pWTVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jMzhiNmItYWIwOS00NmFhLTg3ZWYt ZWJhYTZmZjdkODg2LzEvekV3SVNOQW45WUNXMFdzZG01UlVDcFNUVUtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9jMzhiNmItYWIwOS00NmFhLTg3ZWYtZWJhYTZmZjdkODg2 LzEvcXJlR0Z2T3pudFNDRFFUT0NZNm53Z1pWTVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHdAMA0G CSqGSIb3DQEBCwUAA4IBAQAE/xfMyGJr7RIHqSNqSTdmrCOnJ4e1vl2XWZLwGdOE rr52+j7/MUCGls1sVkjXOGspQ8TzqTXA1JoTUDjquFPuiMGZyi9cT8Ak+GQ60rMl GyVP1cr/2xIB/T3Yq41zVk29FXwcddrVNhKgXCT8tEWde+2a2KUTLv1UOY/f09rp cobfrKPIx7QLNfYKcwgZI48+bGEcz3tFvCdoPKoRZwKTCYB98JSdqcZyJZmfthnm /WxxFR+TMsXSvD3XDOH1h7LZMiKW5Cxr8aR/XT0D7eJ4bZ3aGyuBA9TlDEugzWuB qmrtiyPifmU9YJ7CUThq9Xv5yCFCSLRaOCBF2PtgnbST -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:21 2026 by rpki-client