This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/z9qeSQqLtFJYAzoPoWqDQVc-rT8.roa File: z9qeSQqLtFJYAzoPoWqDQVc-rT8.roa (raw, json) Hash identifier: ZbaC8gEUuwDU0zVtTrY3vbSTCq0FecXsOteKoQHF2rc= Subject key identifier: CF:DA:9E:49:0A:8B:B4:52:58:03:3A:0F:A1:6A:83:41:57:3E:AD:3F Certificate issuer: /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83 Certificate serial: 019B7CED59EEE6F35E00515D0E8D736F1A59 Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/z9qeSQqLtFJYAzoPoWqDQVc-rT8.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202621 IP address blocks: 185.159.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:59:ee:e6:f3:5e:00:51:5d:0e:8d:73:6f:1a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83 Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfda9e490a8bb45258033a0fa16a8341573ead3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:12:ea:ff:84:1f:06:9e:8a:7d:e4:d5:9d: 20:f3:47:c7:2a:ed:c1:4e:32:d4:30:8f:b0:03:19: 66:fe:da:ae:7f:b5:39:7a:7a:0b:3b:b0:9f:05:bc: f7:6f:be:90:54:68:a4:98:a1:60:74:e3:fc:65:26: ad:9f:37:5b:50:ad:4d:3c:4f:07:68:0a:03:9d:fb: 85:34:0f:8c:eb:4d:68:4d:5a:ad:68:28:08:07:7f: dc:e3:00:1b:5b:2a:b4:8d:bc:07:15:2b:e9:eb:55: b8:f8:e2:ec:45:af:8f:6a:5d:48:f1:b4:35:cf:08: 5d:d4:24:c2:43:8c:16:ad:91:bf:57:df:a6:00:d1: f1:85:e9:a7:75:69:a6:6f:f8:10:9f:87:42:c8:34: e0:cb:5e:12:e7:6b:a1:3d:a9:8c:2a:01:7c:c7:0f: 23:3e:fd:95:13:5d:d0:77:1d:7e:cf:90:5a:f3:c8: ba:bd:9f:77:10:c5:ae:de:ec:32:29:22:9f:14:18: 36:bc:38:6e:07:65:94:a2:eb:7b:27:d9:ad:97:3d: 6c:1e:26:0d:a0:58:cb:95:91:04:c3:84:04:f8:d2: 00:53:28:f3:27:e1:7f:4f:66:db:2b:86:8d:70:79: 4e:ec:ed:5a:e3:d3:37:6e:25:49:72:b3:25:2a:34: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DA:9E:49:0A:8B:B4:52:58:03:3A:0F:A1:6A:83:41:57:3E:AD:3F X509v3 Authority Key Identifier: keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/z9qeSQqLtFJYAzoPoWqDQVc-rT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.16.0/23 Signature Algorithm: sha256WithRSAEncryption 11:16:ba:2c:9a:36:e0:04:66:06:56:77:fd:ae:0c:2c:ed:23: 46:38:93:73:9f:1d:9a:fa:d7:2e:47:83:06:53:cc:f4:95:c8: d4:96:2e:b0:86:91:3c:f1:40:85:47:1d:2d:9f:68:7f:5a:e5: f6:c5:85:4a:16:24:8d:8d:dc:60:d6:da:eb:d9:18:3e:88:04: 5a:3c:53:0f:c6:ed:a9:44:0e:db:71:7b:3a:6e:e1:0c:11:ad: 43:75:ec:aa:99:0a:08:44:56:4a:f2:c9:1b:72:39:ea:63:18: 09:ab:18:11:a3:6c:17:52:ce:dd:8d:3d:62:12:aa:1d:0e:64: 33:d5:1d:36:a1:76:5f:1f:8d:84:f1:49:95:97:89:2d:46:28: c0:6f:42:00:94:af:20:e1:32:b4:d3:09:2d:4f:9f:dc:c1:21: 1f:36:31:f1:57:a8:24:e0:c6:61:2f:0a:6a:19:11:cd:5b:2c: c1:9f:1c:45:fb:f0:e8:eb:cc:f4:6f:c4:e1:d0:87:56:57:05: fe:7e:9e:b7:3c:72:df:0e:b3:17:61:bb:6e:38:a1:bb:7e:6e: 8d:66:6d:77:41:7c:01:c7:69:5c:f6:39:49:1b:55:b0:f1:e8: ab:4f:da:b2:f9:ad:2b:13:17:f1:b1:46:00:28:32:4c:1e:42: 01:3b:0f:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Vnu5vNeAFFdDo1zbxpZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTEyZWJkOGZmZjJhNmIwNTRkZWQ5ZGUzZDhmNjVlYTYz NWZiODMwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmRhOWU0OTBhOGJiNDUyNTgwMzNhMGZhMTZhODM0MTU3M2VhZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArikS6v+EHwaein3k1Z0g80fHKu3B TjLUMI+wAxlm/tquf7U5enoLO7CfBbz3b76QVGikmKFgdOP8ZSatnzdbUK1NPE8H aAoDnfuFNA+M601oTVqtaCgIB3/c4wAbWyq0jbwHFSvp61W4+OLsRa+Pal1I8bQ1 zwhd1CTCQ4wWrZG/V9+mANHxhemndWmmb/gQn4dCyDTgy14S52uhPamMKgF8xw8j Pv2VE13Qdx1+z5Ba88i6vZ93EMWu3uwyKSKfFBg2vDhuB2WUout7J9mtlz1sHiYN oFjLlZEEw4QE+NIAUyjzJ+F/T2bbK4aNcHlO7O1a49M3biVJcrMlKjRMvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/ankkKi7RSWAM6D6Fqg0FXPq0/MB8GA1UdIwQY MBaAFHDhLr2P/yprBU3tnePY9l6mNfuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09FdXZZX19LbXNGVGUyZDQ5ajJYcVkxLTRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MGE1MjYtYzkwZS00YTM5LTgyNDct NTQyZDNhYTc2NTVlLzEvejlxZVNRcUx0RkpZQXpvUG9XcURRVmMtclQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81MGE1MjYtYzkwZS00YTM5LTgyNDctNTQyZDNhYTc2NTVl LzEvY09FdXZZX19LbXNGVGUyZDQ5ajJYcVkxLTRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZ8QMA0G CSqGSIb3DQEBCwUAA4IBAQARFrosmjbgBGYGVnf9rgws7SNGOJNznx2a+tcuR4MG U8z0lcjUli6whpE88UCFRx0tn2h/WuX2xYVKFiSNjdxg1trr2Rg+iARaPFMPxu2p RA7bcXs6buEMEa1DdeyqmQoIRFZK8skbcjnqYxgJqxgRo2wXUs7djT1iEqodDmQz 1R02oXZfH42E8UmVl4ktRijAb0IAlK8g4TK00wktT5/cwSEfNjHxV6gk4MZhLwpq GRHNWyzBnxxF+/Do68z0b8Th0IdWVwX+fp63PHLfDrMXYbtuOKG7fm6NZm13QXwB x2lc9jlJG1Ww8eirT9qy+a0rExfxsUYAKDJMHkIBOw/L -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:46 2026 by rpki-client