This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/zOlbYakBDFrDkzOA_oQQlx1iDuY.roa File: zOlbYakBDFrDkzOA_oQQlx1iDuY.roa (raw, json) Hash identifier: e4ZY7J1Y5uCYePF8wJU1/GcTHqOerk0hFlX4a1/MwvE= Subject key identifier: CC:E9:5B:61:A9:01:0C:5A:C3:93:33:80:FE:84:10:97:1D:62:0E:E6 Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0 Certificate serial: 019B7D5C64B3AD6D39D396A26D4C90822CE8 Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/zOlbYakBDFrDkzOA_oQQlx1iDuY.roa Signing time: Fri 02 Jan 2026 06:19:25 +0000 ROA not before: Fri 02 Jan 2026 06:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16298 IP address blocks: 185.190.232.0/22 maxlen: 22 217.119.0.0/20 maxlen: 20 2a02:29b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:64:b3:ad:6d:39:d3:96:a2:6d:4c:90:82:2c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0 Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cce95b61a9010c5ac3933380fe8410971d620ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4a:92:7d:7c:86:f3:21:37:44:37:70:2e:a9: 25:6a:81:16:f0:16:7f:c0:b1:57:46:f6:33:84:a0: 44:c6:76:5f:d0:ad:9b:6c:b7:b5:f8:75:44:96:05: d9:0e:8e:8d:82:cb:9f:83:f9:47:e8:bd:91:97:18: 43:77:a8:e5:cf:38:2e:0b:bf:02:b1:6a:00:da:3d: fb:bc:99:82:03:b9:24:db:12:88:4a:97:42:68:85: 88:cd:92:59:54:d8:23:c1:b4:d7:1c:71:30:0f:12: f2:83:94:11:ff:e7:77:01:66:3b:c9:65:04:1b:be: be:d6:9f:b9:2a:c7:c1:fc:08:2c:f7:2c:6c:45:d2: 3a:6b:a8:6a:15:2a:dc:6e:33:09:16:1c:e9:64:bc: ef:51:36:8c:87:d7:8d:f9:ce:db:2f:ec:2c:aa:1a: 9a:b9:72:7c:98:7d:85:6b:8e:7b:fb:f7:b3:3a:4f: e7:de:60:5d:5d:d4:40:94:52:1e:a0:ac:27:9e:62: f0:6f:bf:49:ba:96:3a:57:6d:30:67:24:1f:05:4e: 35:b3:b5:3a:cf:54:31:b7:cb:72:df:ed:38:fa:1e: 2f:1c:b7:b7:51:f9:19:04:57:7f:4b:03:02:33:de: 83:40:21:8d:b4:ec:23:93:5b:22:63:d8:fe:1d:f2: 3e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E9:5B:61:A9:01:0C:5A:C3:93:33:80:FE:84:10:97:1D:62:0E:E6 X509v3 Authority Key Identifier: keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/zOlbYakBDFrDkzOA_oQQlx1iDuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.232.0/22 217.119.0.0/20 IPv6: 2a02:29b0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:2d:52:f3:90:d7:20:ec:8a:47:2a:b9:66:42:d4:da:c4:fd: 05:6b:91:56:11:9b:23:c8:3e:fc:87:38:2a:a2:7b:43:57:bd: 50:2d:34:5b:82:88:85:2a:a5:9c:89:51:57:1a:96:e9:f4:96: cf:c0:f2:53:a5:3f:1e:29:80:c9:e6:93:b2:fb:62:d5:b9:5a: 04:3a:4b:59:db:86:75:9e:33:68:79:43:fc:45:fa:92:3d:5e: 47:cb:8c:bf:46:18:64:48:d4:f2:13:ad:3b:57:03:a2:91:84: 86:31:d9:2e:e7:25:2e:8f:25:7c:d4:b4:ff:0a:c3:48:ed:6f: 1f:2e:a8:86:e6:fc:4b:8c:55:10:a9:19:91:1b:f6:a2:90:f0: 56:8d:88:0d:54:ed:2b:94:39:03:c6:cb:28:ee:26:92:55:fb: 77:12:b3:f4:61:ee:03:d4:48:fe:11:0f:51:5f:ae:14:7f:c2: 62:e2:bd:ab:c8:9f:14:d7:b8:45:b8:38:b0:94:13:a1:f0:8c: 18:80:f0:ac:eb:74:1e:5f:8a:a3:05:b4:1a:1b:20:1b:1f:c7: 06:27:f3:27:8c:af:9d:85:e2:8d:3d:e1:67:80:22:c4:7a:76: 60:72:3a:84:9b:9e:01:8b:20:7d:31:75:2c:00:06:6b:0c:0d: b2:80:db:d1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XGSzrW0505aibUyQgizoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzAwZTllMzA0NjU5MWY4YmE1NTI0NDgwZGRmN2M2ZmM0 YzYwZTAwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2U5NWI2MWE5MDEwYzVhYzM5MzMzODBmZTg0MTA5NzFkNjIwZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkqSfXyG8yE3RDdwLqklaoEW8BZ/ wLFXRvYzhKBExnZf0K2bbLe1+HVElgXZDo6Ngsufg/lH6L2RlxhDd6jlzzguC78C sWoA2j37vJmCA7kk2xKISpdCaIWIzZJZVNgjwbTXHHEwDxLyg5QR/+d3AWY7yWUE G76+1p+5KsfB/Ags9yxsRdI6a6hqFSrcbjMJFhzpZLzvUTaMh9eN+c7bL+wsqhqa uXJ8mH2Fa457+/ezOk/n3mBdXdRAlFIeoKwnnmLwb79JupY6V20wZyQfBU41s7U6 z1Qxt8ty3+04+h4vHLe3UfkZBFd/SwMCM96DQCGNtOwjk1siY9j+HfI+rQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMzpW2GpAQxaw5MzgP6EEJcdYg7mMB8GA1UdIwQY MBaAFJ3ADp4wRlkfi6VSRIDd98b8TGDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNBT25qQkdXUi1McFZKRWdOMzN4dnhNWU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84YWQ1NzMtNTk3Ny00ZDc2LTgzZWIt YmIwMzE5MjEzYTI5LzEvek9sYllha0JERnJEa3pPQV9vUVFseDFpRHVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84YWQ1NzMtNTk3Ny00ZDc2LTgzZWItYmIwMzE5MjEzYTI5 LzEvbmNBT25qQkdXUi1McFZKRWdOMzN4dnhNWU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCub7oAwQE 2XcAMA0EAgACMAcDBQAqAimwMA0GCSqGSIb3DQEBCwUAA4IBAQBPLVLzkNcg7IpH KrlmQtTaxP0Fa5FWEZsjyD78hzgqontDV71QLTRbgoiFKqWciVFXGpbp9JbPwPJT pT8eKYDJ5pOy+2LVuVoEOktZ24Z1njNoeUP8RfqSPV5Hy4y/RhhkSNTyE607VwOi kYSGMdku5yUujyV81LT/CsNI7W8fLqiG5vxLjFUQqRmRG/aikPBWjYgNVO0rlDkD xsso7iaSVft3ErP0Ye4D1Ej+EQ9RX64Uf8Ji4r2ryJ8U17hFuDiwlBOh8IwYgPCs 63QeX4qjBbQaGyAbH8cGJ/MnjK+dheKNPeFngCLEenZgcjqEm54BiyB9MXUsAAZr DA2ygNvR -----END CERTIFICATE-----Generated at Tue Feb 10 04:50:23 2026 by rpki-client