This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/zKzb524TG9Tb_yZBVp0kQkUxmSk.roa File: zKzb524TG9Tb_yZBVp0kQkUxmSk.roa (raw, json) Hash identifier: cnf66+cFIoDpuzcLy7f9twjeNJ6EZMaeYTno/sX1Zz0= Subject key identifier: CC:AC:DB:E7:6E:13:1B:D4:DB:FF:26:41:56:9D:24:42:45:31:99:29 Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa Certificate serial: 019B7910C899BD1115278DDD02FFC3EF5048 Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/zKzb524TG9Tb_yZBVp0kQkUxmSk.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210178 IP address blocks: 194.61.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c8:99:bd:11:15:27:8d:dd:02:ff:c3:ef:50:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccacdbe76e131bd4dbff2641569d244245319929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:44:d8:48:91:85:b4:8d:c9:15:94:4f:d2:d5: 5e:10:27:a2:74:c6:26:b6:6f:df:57:bd:28:24:d4: 65:67:a2:7b:be:53:d2:a5:50:0d:aa:ca:a6:02:b4: 7c:79:39:af:c0:dc:be:be:01:6a:e6:ef:4f:a2:b6: 93:41:d9:d6:0c:05:ae:00:c9:31:d0:06:54:b7:1e: bb:36:a1:98:27:44:f0:00:33:bb:d4:d7:d0:3b:0a: e7:30:a1:b6:00:dc:2b:1f:41:22:26:0c:68:fc:dc: 0e:ec:15:4f:f9:5a:c3:38:53:15:5e:8b:4f:81:c3: ab:a6:34:18:aa:ec:a7:b5:f9:de:ec:74:40:47:15: 4e:6c:fa:f8:a9:db:ae:eb:3e:0d:1a:4b:30:00:9e: 18:b3:cc:df:a5:07:5a:e1:3e:f4:85:c0:6a:98:d8: 44:0a:30:4c:24:d3:37:4a:18:1c:60:ad:3f:5d:30: bc:fc:ed:4c:96:41:2c:47:a0:55:c0:3f:ad:2e:89: d7:ae:00:53:7f:2a:81:8c:90:66:b2:14:c6:4a:fe: dc:09:94:a0:85:0d:4c:18:51:5e:0a:ae:8a:f7:58: 21:e5:f3:24:46:ce:7f:5d:01:75:94:c5:09:d1:4c: 8a:da:c6:40:eb:f2:7c:57:1b:07:51:eb:71:df:11: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AC:DB:E7:6E:13:1B:D4:DB:FF:26:41:56:9D:24:42:45:31:99:29 X509v3 Authority Key Identifier: keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/zKzb524TG9Tb_yZBVp0kQkUxmSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.140.0/22 Signature Algorithm: sha256WithRSAEncryption 69:c4:30:a3:ed:bd:bf:0d:dd:34:a4:9a:4b:78:00:52:ee:31: 01:9e:af:c7:e4:3b:3a:94:25:e0:da:c8:e7:5b:c1:d4:42:d3: d4:40:0f:3c:87:f4:e9:ea:f6:14:a4:06:1c:57:91:89:7d:45: b5:0e:68:7c:40:da:99:d4:56:1e:8e:57:4f:7a:81:07:b0:43: 7b:5e:48:d2:7a:34:85:36:20:bd:95:68:8a:18:1f:50:22:4c: 31:ab:16:e7:79:ba:f5:91:89:05:3d:6a:9d:e2:d6:b2:a2:b3: 10:3c:66:fb:57:18:bb:e3:36:fd:1a:37:e2:4b:43:2a:70:64: 2e:96:c5:1b:84:f0:b4:a9:6f:83:dc:6f:84:47:9e:9a:69:a8: d5:0d:15:e9:25:9b:a6:0d:3e:87:97:fb:bc:44:f5:84:58:f8: e8:d1:06:0d:b9:92:99:ed:67:f0:4f:e3:47:1f:43:40:38:80: 8e:a6:7e:ec:a8:5c:a2:97:d2:7a:f1:cd:de:92:4c:16:b7:ec: 96:cb:63:69:ed:12:cc:59:f3:73:a5:be:03:45:c4:3f:f9:75: 52:da:77:4c:69:b8:ad:52:39:b0:9e:53:d8:8f:22:7f:99:5e: 24:c6:de:20:d1:56:c6:dc:14:c2:c4:4b:9c:42:36:0e:0e:ce: b3:8e:75:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EMiZvREVJ43dAv/D71BIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZTQyMWE2ZDk2ZTk5ZDYzZjdjZmI0OTljYTcxMTdjODIz MDRlYWEwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2FjZGJlNzZlMTMxYmQ0ZGJmZjI2NDE1NjlkMjQ0MjQ1MzE5OTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUTYSJGFtI3JFZRP0tVeECeidMYm tm/fV70oJNRlZ6J7vlPSpVANqsqmArR8eTmvwNy+vgFq5u9PoraTQdnWDAWuAMkx 0AZUtx67NqGYJ0TwADO71NfQOwrnMKG2ANwrH0EiJgxo/NwO7BVP+VrDOFMVXotP gcOrpjQYquyntfne7HRARxVObPr4qduu6z4NGkswAJ4Ys8zfpQda4T70hcBqmNhE CjBMJNM3ShgcYK0/XTC8/O1MlkEsR6BVwD+tLonXrgBTfyqBjJBmshTGSv7cCZSg hQ1MGFFeCq6K91gh5fMkRs5/XQF1lMUJ0UyK2sZA6/J8VxsHUetx3xFb0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMys2+duExvU2/8mQVadJEJFMZkpMB8GA1UdIwQY MBaAFCHkIabZbpnWP3z7SZynEXyCME6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZDRiMmMtOTQ1ZC00ZjM5LWIyMzMt M2U2YjcwMjViNjVlLzEvekt6YjUyNFRHOVRiX3laQlZwMGtRa1V4bVNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xZDRiMmMtOTQ1ZC00ZjM5LWIyMzMtM2U2YjcwMjViNjVl LzEvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwj2MMA0G CSqGSIb3DQEBCwUAA4IBAQBpxDCj7b2/Dd00pJpLeABS7jEBnq/H5Ds6lCXg2sjn W8HUQtPUQA88h/Tp6vYUpAYcV5GJfUW1Dmh8QNqZ1FYejldPeoEHsEN7XkjSejSF NiC9lWiKGB9QIkwxqxbnebr1kYkFPWqd4tayorMQPGb7Vxi74zb9GjfiS0MqcGQu lsUbhPC0qW+D3G+ER56aaajVDRXpJZumDT6Hl/u8RPWEWPjo0QYNuZKZ7WfwT+NH H0NAOICOpn7sqFyil9J68c3ekkwWt+yWy2Np7RLMWfNzpb4DRcQ/+XVS2ndMabit UjmwnlPYjyJ/mV4kxt4g0VbG3BTCxEucQjYODs6zjnW1 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:08 2026 by rpki-client