This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/zYS-dwQtCh2dFbW4IV6hfG_8xYw.roa File: zYS-dwQtCh2dFbW4IV6hfG_8xYw.roa (raw, json) Hash identifier: fhJgy4L5lI5bxEqwJcc/VgO0/xvWjnY5mfId21lwGRU= Subject key identifier: CD:84:BE:77:04:2D:0A:1D:9D:15:B5:B8:21:5E:A1:7C:6F:FC:C5:8C Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Certificate serial: 019B7DCABC6273311B4AA49AACF92BCEE47F Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/zYS-dwQtCh2dFbW4IV6hfG_8xYw.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 87.238.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bc:62:73:31:1b:4a:a4:9a:ac:f9:2b:ce:e4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd84be77042d0a1d9d15b5b8215ea17c6ffcc58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:5b:02:b1:cc:37:f7:fa:ed:96:ee:8f:2e: e3:c5:d6:6e:a3:ac:20:cd:17:57:a3:09:3f:69:07: cf:d2:4d:f8:18:40:36:ea:4e:cb:d9:e2:10:31:97: 55:9b:d4:6b:9b:44:bc:30:50:2b:d4:99:0c:d6:94: c5:17:e2:7c:6b:9f:a9:40:41:79:99:9b:35:6b:84: e0:df:4a:56:1b:f5:be:f3:84:d4:99:69:50:c9:bf: 8e:1a:23:fe:1c:c2:eb:96:91:be:74:46:57:25:f0: 41:cb:f0:52:bc:2f:9b:a4:33:46:95:32:f3:56:1f: a0:e8:35:89:ad:a9:5a:04:2f:e0:03:da:4a:79:58: 4e:16:e3:cf:04:f0:29:d1:b9:2d:20:1a:f4:18:0e: f4:e6:79:10:93:f2:cf:0f:ea:79:86:24:ce:4b:3f: 1d:24:cd:42:75:30:d3:67:47:3f:40:7c:5c:cf:94: c6:e0:75:25:dd:9f:cc:b6:a9:69:74:dd:99:9a:43: fe:12:b7:40:39:0e:52:97:01:d4:92:a4:f7:1b:88: 30:cb:0d:33:96:fc:9c:86:8d:b8:f0:cf:01:61:a5: 4b:18:eb:72:6c:63:53:f3:00:61:a7:22:ce:a1:ba: e8:3b:28:73:98:c0:2d:f9:91:fa:5d:79:00:95:56: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:84:BE:77:04:2D:0A:1D:9D:15:B5:B8:21:5E:A1:7C:6F:FC:C5:8C X509v3 Authority Key Identifier: keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/zYS-dwQtCh2dFbW4IV6hfG_8xYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.238.139.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:1a:2a:75:bc:37:58:79:08:a4:85:ba:5c:84:62:3d:f0:54: 21:53:d6:7e:56:9c:b5:64:ed:61:d5:b3:56:1e:63:31:a2:ee: 6e:b6:c6:3d:dd:23:a3:31:81:14:a8:8b:2e:b2:c6:78:dc:65: 72:d6:74:1e:36:59:e7:d1:97:13:e2:18:58:63:e7:07:78:4d: d3:a8:cf:a3:32:b4:eb:40:bb:e9:4e:a0:c1:94:58:5f:49:4c: 05:db:5d:7d:80:ee:94:d9:58:4c:74:86:34:20:b1:3c:97:92: 0d:5e:55:fc:e5:01:2d:06:e9:96:f8:7b:63:ca:96:b9:7d:1d: 3a:bb:3a:9d:f8:59:79:92:cd:42:4a:d6:03:24:99:19:07:7a: 58:b9:7d:09:3a:37:48:c4:80:22:b9:cf:92:95:70:00:94:70: cd:58:2f:4c:a1:98:76:2d:22:ed:14:34:eb:c5:e5:b3:f8:4d: 5a:94:3a:d7:19:ab:48:dc:dc:ee:0b:9a:f3:0e:8a:f7:90:2b: 34:9b:57:13:37:76:4f:58:30:35:53:86:76:37:55:f8:4f:ba: e7:6d:9f:c3:16:df:22:9d:ef:6a:4a:6f:4d:49:a2:42:f7:9b: e8:a9:fa:6f:58:01:e3:d1:98:41:b3:cc:01:05:07:d2:44:02: a8:b5:44:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yrxiczEbSqSarPkrzuR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MmYwZTQyYjA4YWE0NTFmYzU4M2EzNThlYzM3MGZmYmQy ZGFjNjgwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDg0YmU3NzA0MmQwYTFkOWQxNWI1YjgyMTVlYTE3YzZmZmNjNThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKhbArHMN/f67Zbujy7jxdZuo6wg zRdXowk/aQfP0k34GEA26k7L2eIQMZdVm9Rrm0S8MFAr1JkM1pTFF+J8a5+pQEF5 mZs1a4Tg30pWG/W+84TUmWlQyb+OGiP+HMLrlpG+dEZXJfBBy/BSvC+bpDNGlTLz Vh+g6DWJralaBC/gA9pKeVhOFuPPBPAp0bktIBr0GA705nkQk/LPD+p5hiTOSz8d JM1CdTDTZ0c/QHxcz5TG4HUl3Z/MtqlpdN2ZmkP+ErdAOQ5SlwHUkqT3G4gwyw0z lvycho248M8BYaVLGOtybGNT8wBhpyLOobroOyhzmMAt+ZH6XXkAlVYvWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2EvncELQodnRW1uCFeoXxv/MWMMB8GA1UdIwQY MBaAFGcvDkKwiqRR/Fg6NY7DcP+9LaxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTct ZjBiOTYyZjUyNDE0LzEvellTLWR3UXRDaDJkRmJXNElWNmhmR184eFl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTctZjBiOTYyZjUyNDE0 LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+6LMA0G CSqGSIb3DQEBCwUAA4IBAQB9Gip1vDdYeQikhbpchGI98FQhU9Z+Vpy1ZO1h1bNW HmMxou5utsY93SOjMYEUqIsussZ43GVy1nQeNlnn0ZcT4hhYY+cHeE3TqM+jMrTr QLvpTqDBlFhfSUwF2119gO6U2VhMdIY0ILE8l5INXlX85QEtBumW+Htjypa5fR06 uzqd+Fl5ks1CStYDJJkZB3pYuX0JOjdIxIAiuc+SlXAAlHDNWC9MoZh2LSLtFDTr xeWz+E1alDrXGatI3NzuC5rzDor3kCs0m1cTN3ZPWDA1U4Z2N1X4T7rnbZ/DFt8i ne9qSm9NSaJC95voqfpvWAHj0ZhBs8wBBQfSRAKotURe -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:47 2026 by rpki-client