This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/zKiUuzBd1YWykiUrRUUwX5tO6bs.roa File: zKiUuzBd1YWykiUrRUUwX5tO6bs.roa (raw, json) Hash identifier: y8cm0E4j8O5AETPE7XQcmtwd9G5PQ9YxWJ2I6KtKvMw= Subject key identifier: CC:A8:94:BB:30:5D:D5:85:B2:92:25:2B:45:45:30:5F:9B:4E:E9:BB Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE03C7D1CCEC806D84181AFC79B70A Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/zKiUuzBd1YWykiUrRUUwX5tO6bs.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 81.29.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:03:c7:d1:cc:ec:80:6d:84:18:1a:fc:79:b7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cca894bb305dd585b292252b4545305f9b4ee9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:58:25:e0:96:b8:2a:1c:15:68:f7:d0:3e:0b: 4e:e1:6f:cb:92:d8:ed:79:67:91:8b:ab:59:c9:98: 02:1c:ad:70:a9:66:e1:0e:04:72:a3:af:ed:fa:f8: 77:d8:ff:62:09:c5:f5:97:ba:96:70:b5:d9:3d:97: 8e:e8:c1:46:46:5d:e3:05:d2:2f:30:48:9f:2c:5a: 30:d0:97:83:18:27:08:11:9b:29:34:69:bd:cc:00: be:31:a8:c8:8d:04:f0:e5:c0:4f:e5:d1:bf:02:05: 47:5d:12:bd:1a:7d:f4:63:51:a7:c8:cc:8f:07:b3: 4d:57:c4:92:79:dc:96:2d:42:9c:d2:59:70:e8:ad: 99:c6:cf:c4:32:b1:23:03:71:7a:4b:84:fd:bc:46: 7f:c1:df:c5:9e:2b:20:5e:fa:5c:93:63:76:47:ad: c5:e0:78:cd:ba:1c:b0:c5:6e:c2:3a:fb:95:14:d0: 54:75:47:c7:40:55:5e:5c:6a:81:0d:36:c7:8e:28: 6a:94:b4:d4:83:ec:2d:54:96:f9:4a:d2:76:38:22: e0:39:0d:d5:6e:f6:73:56:fd:6b:30:51:f6:0e:d1: 6b:f6:a0:ec:5d:29:0f:75:6b:c0:b8:1c:48:a8:49: 89:ea:5f:82:71:6c:79:d4:fb:41:c9:dd:72:31:96: ac:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A8:94:BB:30:5D:D5:85:B2:92:25:2B:45:45:30:5F:9B:4E:E9:BB X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/zKiUuzBd1YWykiUrRUUwX5tO6bs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.158.0/24 Signature Algorithm: sha256WithRSAEncryption 90:bf:57:47:27:96:19:70:a7:a4:0d:8d:e7:53:fd:64:33:be: d9:93:a4:f3:65:9f:76:dd:13:ec:ad:43:cb:2a:98:da:81:64: 0a:9f:9e:3f:78:b9:c9:c2:fb:c1:7a:3c:26:31:3b:89:e9:8f: b1:a3:39:91:5d:5f:40:4e:07:b9:a0:a2:6c:9e:59:17:0d:c9: 4a:74:f5:ce:0b:5b:b2:e9:92:04:61:fd:d4:d5:1e:0a:3a:61: 03:a0:1b:2c:bc:7b:32:d7:8b:46:41:31:9b:1e:10:9b:66:8e: 73:01:fe:89:77:42:82:ea:26:4f:a8:59:15:b3:08:f0:5f:ef: 3e:e7:57:6e:f2:7c:2c:11:37:51:1a:cb:47:06:c1:a2:0f:a9: 92:3d:0e:a4:91:89:f4:df:9a:e7:e6:c2:b2:f9:1b:be:4d:e1: 62:93:06:98:0d:69:77:7e:c3:2b:36:57:af:90:13:cc:9e:19: dc:6f:94:be:24:69:5c:70:63:f1:7c:3d:4e:2a:d2:31:e9:a9: 8d:2d:2d:1a:c0:b8:17:8a:06:87:37:82:52:ae:fe:d0:e0:4d: 70:0b:ac:3c:e2:e5:b7:eb:dd:d2:b6:aa:20:c5:89:ee:e8:4b: f8:19:bc:63:9f:90:d9:a3:72:7b:96:bc:43:f6:4a:f6:33:57: a2:ec:15:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gPH0czsgG2EGBr8ebcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2E4OTRiYjMwNWRkNTg1YjI5MjI1MmI0NTQ1MzA1ZjliNGVlOWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1gl4Ja4KhwVaPfQPgtO4W/Lktjt eWeRi6tZyZgCHK1wqWbhDgRyo6/t+vh32P9iCcX1l7qWcLXZPZeO6MFGRl3jBdIv MEifLFow0JeDGCcIEZspNGm9zAC+MajIjQTw5cBP5dG/AgVHXRK9Gn30Y1GnyMyP B7NNV8SSedyWLUKc0llw6K2Zxs/EMrEjA3F6S4T9vEZ/wd/FnisgXvpck2N2R63F 4HjNuhywxW7COvuVFNBUdUfHQFVeXGqBDTbHjihqlLTUg+wtVJb5StJ2OCLgOQ3V bvZzVv1rMFH2DtFr9qDsXSkPdWvAuBxIqEmJ6l+CcWx51PtByd1yMZasFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMyolLswXdWFspIlK0VFMF+bTum7MB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvektpVXV6QmQxWVd5a2lVclJVVXdYNXRPNmJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2eMA0G CSqGSIb3DQEBCwUAA4IBAQCQv1dHJ5YZcKekDY3nU/1kM77Zk6TzZZ923RPsrUPL KpjagWQKn54/eLnJwvvBejwmMTuJ6Y+xozmRXV9ATge5oKJsnlkXDclKdPXOC1uy 6ZIEYf3U1R4KOmEDoBssvHsy14tGQTGbHhCbZo5zAf6Jd0KC6iZPqFkVswjwX+8+ 51du8nwsETdRGstHBsGiD6mSPQ6kkYn035rn5sKy+Ru+TeFikwaYDWl3fsMrNlev kBPMnhncb5S+JGlccGPxfD1OKtIx6amNLS0awLgXigaHN4JSrv7Q4E1wC6w84uW3 693StqogxYnu6Ev4Gbxjn5DZo3J7lrxD9kr2M1ei7BUI -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:25 2026 by rpki-client