This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/zNJS94Qg6zJgG0ukhEJxGF_OMC0.roa File: zNJS94Qg6zJgG0ukhEJxGF_OMC0.roa (raw, json) Hash identifier: aV6TdV9v9sN+i6/OTAbHJF/itl6jRzuUd0kDdhEhu30= Subject key identifier: CC:D2:52:F7:84:20:EB:32:60:1B:4B:A4:84:42:71:18:5F:CE:30:2D Certificate issuer: /CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd Certificate serial: 019B7D5CAECBD08AE1246A87918B72855AD1 Authority key identifier: E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/zNJS94Qg6zJgG0ukhEJxGF_OMC0.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 185.238.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ae:cb:d0:8a:e1:24:6a:87:91:8b:72:85:5a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccd252f78420eb32601b4ba4844271185fce302d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:20:fe:97:35:b8:fb:1c:b9:19:f5:87:c2: 68:4e:59:be:06:3d:86:84:f7:32:ae:85:cc:5f:1f: 5a:1c:2e:f8:8b:22:fe:dc:d0:1a:76:bf:5b:81:bd: 37:42:44:aa:67:8b:e1:61:49:82:16:2c:32:52:a4: c1:ec:0b:ef:ff:5c:6d:8c:46:68:49:a9:78:0d:be: b4:3a:01:2b:2e:55:c1:c7:a4:99:8e:2c:e4:4f:f6: 91:3f:1f:65:01:38:59:3e:44:d7:6c:dc:2a:12:63: aa:bb:88:bb:b5:4e:6b:d9:03:71:54:6b:71:24:12: f6:f5:92:76:2f:a8:1e:5f:d2:17:c0:13:60:b6:bd: 07:6a:a2:5b:a3:db:08:dd:0f:d5:2c:6b:24:68:4d: 3d:72:6d:c2:04:5a:3a:12:ea:16:bb:cd:29:b8:82: 43:54:57:0e:40:a8:7d:57:a0:2e:62:2f:62:78:ba: 55:ea:0f:b5:ad:ee:41:84:63:ff:69:2f:20:30:65: 85:23:a7:06:5e:26:2d:36:e0:a3:4e:41:4a:52:56: a5:c1:c6:23:67:a8:04:cd:b4:38:dc:7d:06:e3:58: da:31:4b:e2:72:30:d2:08:f7:f4:cb:f2:d3:2b:bb: ff:99:82:6f:9a:6c:99:5b:d2:05:42:72:e3:a5:a7: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D2:52:F7:84:20:EB:32:60:1B:4B:A4:84:42:71:18:5F:CE:30:2D X509v3 Authority Key Identifier: keyid:E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/zNJS94Qg6zJgG0ukhEJxGF_OMC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.141.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:46:21:10:3f:1e:a5:ae:94:28:87:b0:ae:bd:fc:7f:d2:8e: 1f:83:92:0a:de:3f:5a:5b:49:62:71:3f:21:99:e6:f2:41:f1: fa:19:94:79:3f:74:f8:ef:4d:7a:f9:0e:c7:67:7d:0f:6e:af: 8d:51:ce:23:bd:25:99:c4:66:a5:07:63:59:52:0c:e6:31:03: 25:30:1d:8c:56:73:87:0e:b0:db:65:e5:73:5c:b7:c4:a6:7b: 21:4d:8b:22:ab:4d:0c:f7:b6:fc:36:cb:3d:c1:be:d5:6d:a7: e7:89:c5:d2:17:e3:fc:56:39:70:45:5a:26:8c:6c:7d:e7:8e: 16:de:56:f3:53:f2:d8:66:02:c7:b2:68:64:72:3c:7a:44:bc: 9f:d9:ad:3a:e4:06:68:f7:27:7a:03:39:0e:82:94:1e:46:ad: ba:2f:b6:76:cd:3d:bd:62:69:f2:5d:03:86:9d:2a:2c:bb:d7: 97:8e:e9:06:7b:79:0a:68:cb:d9:23:fe:a7:1d:38:45:1c:46: 20:80:97:c1:a3:52:21:0f:60:e7:44:ee:55:e4:e3:7c:8e:7f: 62:72:2b:5d:d6:2c:02:ca:45:a4:c6:9a:01:14:7a:6e:32:bc: b2:0e:ec:91:34:e1:38:2a:fb:3b:40:ee:9f:71:a8:85:a4:1a: cc:d3:20:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XK7L0IrhJGqHkYtyhVrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZDBhODRiYWIzZGVmNDFkNmFhYTkwMjhkZTdhNDc1ZDMy ZDEyYmQwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2QyNTJmNzg0MjBlYjMyNjAxYjRiYTQ4NDQyNzExODVmY2UzMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXQg/pc1uPscuRn1h8JoTlm+Bj2G hPcyroXMXx9aHC74iyL+3NAadr9bgb03QkSqZ4vhYUmCFiwyUqTB7Avv/1xtjEZo Sal4Db60OgErLlXBx6SZjizkT/aRPx9lAThZPkTXbNwqEmOqu4i7tU5r2QNxVGtx JBL29ZJ2L6geX9IXwBNgtr0HaqJbo9sI3Q/VLGskaE09cm3CBFo6EuoWu80puIJD VFcOQKh9V6AuYi9ieLpV6g+1re5BhGP/aS8gMGWFI6cGXiYtNuCjTkFKUlalwcYj Z6gEzbQ43H0G41jaMUvicjDSCPf0y/LTK7v/mYJvmmyZW9IFQnLjpae5sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMzSUveEIOsyYBtLpIRCcRhfzjAtMB8GA1UdIwQY MBaAFOPQqEurPe9B1qqpAo3npHXTLRK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDlDb1M2czk3MEhXcXFrQ2plZWtkZE10RXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jYjUxZjUtYTg0My00OWM0LTlmMTkt MTBlYjhhZGZlYTdlLzEvek5KUzk0UWc2ekpnRzB1a2hFSnhHRl9PTUMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jYjUxZjUtYTg0My00OWM0LTlmMTktMTBlYjhhZGZlYTdl LzEvNDlDb1M2czk3MEhXcXFrQ2plZWtkZE10RXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue6NMA0G CSqGSIb3DQEBCwUAA4IBAQAaRiEQPx6lrpQoh7Cuvfx/0o4fg5IK3j9aW0licT8h mebyQfH6GZR5P3T47016+Q7HZ30Pbq+NUc4jvSWZxGalB2NZUgzmMQMlMB2MVnOH DrDbZeVzXLfEpnshTYsiq00M97b8Nss9wb7VbafnicXSF+P8VjlwRVomjGx9544W 3lbzU/LYZgLHsmhkcjx6RLyf2a065AZo9yd6AzkOgpQeRq26L7Z2zT29YmnyXQOG nSosu9eXjukGe3kKaMvZI/6nHThFHEYggJfBo1IhD2DnRO5V5ON8jn9icitd1iwC ykWkxpoBFHpuMryyDuyRNOE4Kvs7QO6fcaiFpBrM0yCS -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:13 2026 by rpki-client