This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/Z-WbSmra_G1kvyx-Bej3vkhtQis.roa File: Z-WbSmra_G1kvyx-Bej3vkhtQis.roa (raw, json) Hash identifier: gk+4vFFmmxKEtInMkLHpcbUkvzWIfqwHSMm2pJIJXSU= Subject key identifier: 67:E5:9B:4A:6A:DA:FC:6D:64:BF:2C:7E:05:E8:F7:BE:48:6D:42:2B Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db Certificate serial: 019B77C73AC231D52C043117AA0950B5F57D Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/Z-WbSmra_G1kvyx-Bej3vkhtQis.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 194.172.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3a:c2:31:d5:2c:04:31:17:aa:09:50:b5:f5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67e59b4a6adafc6d64bf2c7e05e8f7be486d422b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:47:b7:da:a8:fd:85:d3:cf:b2:73:e8:2e:dd: 11:98:26:6d:f9:55:75:06:7e:bb:ec:45:29:40:00: 0b:84:bb:58:cd:e8:d6:6f:15:5d:75:ac:ba:b9:f9: 3d:9a:30:04:1d:d0:fe:1c:20:a4:ca:ee:67:9a:40: 3e:75:71:b5:95:29:cc:bc:70:d6:08:e7:87:fe:c0: ea:65:86:3b:7b:4b:fa:42:ac:3d:db:cc:b3:56:ad: 5f:4c:38:db:61:ac:4d:b0:9e:c8:cc:a2:eb:c2:13: 04:00:e8:dc:d8:22:65:46:2e:96:74:96:40:57:65: dc:a8:dc:e5:42:86:8d:d5:da:e4:19:92:42:23:a0: ff:97:fc:09:62:86:02:9b:ff:6a:81:c2:f6:30:c0: 2b:40:f5:2e:ef:6e:c6:39:d6:8c:e0:a9:3b:dd:a8: ae:c2:8f:9e:1f:e6:d6:dd:9f:03:a4:6b:9b:da:70: 73:a0:3c:12:df:d2:06:f4:43:1e:1c:bb:e6:1b:1a: 3d:82:53:8b:5d:3a:31:a8:c5:cd:8c:5e:9c:d1:5c: bf:08:a3:bf:69:77:01:87:d3:c4:f5:f6:d6:95:db: be:7a:52:c7:db:20:74:15:e9:25:4a:5c:0d:33:bb: d5:be:f2:1f:c0:04:d3:34:cc:db:ef:d1:1a:59:0c: a2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E5:9B:4A:6A:DA:FC:6D:64:BF:2C:7E:05:E8:F7:BE:48:6D:42:2B X509v3 Authority Key Identifier: keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/Z-WbSmra_G1kvyx-Bej3vkhtQis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.172.58.0/24 Signature Algorithm: sha256WithRSAEncryption 70:38:c7:a7:60:fe:27:ef:60:a4:1b:61:19:dc:0b:ba:73:26: 49:e6:3e:e6:ad:bc:02:61:69:8b:bd:8f:4c:e0:49:f4:91:30: cd:3b:74:ba:b7:23:cd:8c:05:4c:67:5f:59:4e:49:46:5f:bb: c6:31:00:b3:23:54:6f:69:4e:ed:0d:1b:01:46:7a:9c:d3:41: 36:e3:20:7a:d4:e1:a6:48:0d:b5:9a:e2:31:9d:54:21:9f:76: 02:ed:73:d2:40:9c:09:9f:2b:59:49:a6:cb:5d:64:2b:d7:a3: 95:e3:60:5d:3b:04:f9:75:ea:ab:69:6f:72:da:3e:13:44:07: e0:3c:01:7f:cc:49:39:d5:ef:4a:e1:16:53:30:81:48:71:ad: be:78:58:40:da:2c:9f:c3:3a:e2:55:8f:a3:ff:05:c7:52:c0: 4d:31:53:1a:27:53:9d:75:5a:e0:c6:79:89:d1:4a:3b:3e:67: 04:7d:20:2b:be:72:8f:14:c3:17:ca:5c:44:a4:9a:1c:81:bd: e0:05:40:c7:99:a8:e9:58:43:c5:d1:f7:a9:74:b5:75:b2:37: 26:e4:76:61:6b:6f:c2:ac:8c:a1:6d:1e:dd:f2:f3:8a:90:f6: f0:d6:6e:8e:71:2f:20:6e:02:0d:38:b5:6f:b8:ed:f0:c6:a2: d9:60:fe:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzrCMdUsBDEXqglQtfV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmN2EwMjU4YTUyMWU5OWQyMTNmYjMwZTc5NjY3ZTU4NGUz N2M3ZGIwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2U1OWI0YTZhZGFmYzZkNjRiZjJjN2UwNWU4ZjdiZTQ4NmQ0MjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ue32qj9hdPPsnPoLt0RmCZt+VV1 Bn677EUpQAALhLtYzejWbxVdday6ufk9mjAEHdD+HCCkyu5nmkA+dXG1lSnMvHDW COeH/sDqZYY7e0v6Qqw928yzVq1fTDjbYaxNsJ7IzKLrwhMEAOjc2CJlRi6WdJZA V2XcqNzlQoaN1drkGZJCI6D/l/wJYoYCm/9qgcL2MMArQPUu727GOdaM4Kk73aiu wo+eH+bW3Z8DpGub2nBzoDwS39IG9EMeHLvmGxo9glOLXToxqMXNjF6c0Vy/CKO/ aXcBh9PE9fbWldu+elLH2yB0FeklSlwNM7vVvvIfwATTNMzb79EaWQyiKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGflm0pq2vxtZL8sfgXo975IbUIrMB8GA1UdIwQY MBaAFL96AlilIemdIT+zDnlmflhON8fbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84N2Q0OGEtZmEyNy00YjkzLWI0ZTgt YjUzOWQ2Y2VhNmUxLzEvWi1XYlNtcmFfRzFrdnl4LUJlajN2a2h0UWlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84N2Q0OGEtZmEyNy00YjkzLWI0ZTgtYjUzOWQ2Y2VhNmUx LzEvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqw6MA0G CSqGSIb3DQEBCwUAA4IBAQBwOMenYP4n72CkG2EZ3Au6cyZJ5j7mrbwCYWmLvY9M 4En0kTDNO3S6tyPNjAVMZ19ZTklGX7vGMQCzI1RvaU7tDRsBRnqc00E24yB61OGm SA21muIxnVQhn3YC7XPSQJwJnytZSabLXWQr16OV42BdOwT5deqraW9y2j4TRAfg PAF/zEk51e9K4RZTMIFIca2+eFhA2iyfwzriVY+j/wXHUsBNMVMaJ1OddVrgxnmJ 0Uo7PmcEfSArvnKPFMMXylxEpJocgb3gBUDHmajpWEPF0fepdLV1sjcm5HZha2/C rIyhbR7d8vOKkPbw1m6OcS8gbgINOLVvuO3wxqLZYP7D -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:15 2026 by rpki-client