This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/zdseOPWgg2lI8B3aFn07MpAjRqU.roa File: zdseOPWgg2lI8B3aFn07MpAjRqU.roa (raw, json) Hash identifier: YqWsQFGJ8i94tJHUWkQ69hRrtwrZJWfCWmhdU6kJ5iQ= Subject key identifier: CD:DB:1E:38:F5:A0:83:69:48:F0:1D:DA:16:7D:3B:32:90:23:46:A5 Certificate issuer: /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215 Certificate serial: 019B7FF2C6842C45C52D33C2ADBE1FC46C90 Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/zdseOPWgg2lI8B3aFn07MpAjRqU.roa Signing time: Fri 02 Jan 2026 18:22:55 +0000 ROA not before: Fri 02 Jan 2026 18:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48451 IP address blocks: 94.124.40.0/21 maxlen: 21 2a00:f78::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:c6:84:2c:45:c5:2d:33:c2:ad:be:1f:c4:6c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215 Validity Not Before: Jan 2 18:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cddb1e38f5a0836948f01dda167d3b32902346a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:91:83:40:da:1e:f3:20:a5:f1:c4:96:81: b6:ce:10:03:d4:e2:88:69:40:d3:78:b0:db:89:12: 4d:18:fd:a7:b0:60:76:7d:41:4b:8a:99:f5:69:27: 50:2b:11:50:63:9f:56:08:11:cc:fc:52:02:bf:09: 42:bd:d6:b3:b1:ab:12:dd:c5:6f:aa:98:9f:cb:fd: f9:e0:64:7d:c3:ce:2d:52:c2:11:5a:1e:8f:f1:de: d5:5e:33:dc:f7:ff:f9:b4:f3:6d:aa:50:69:d7:df: f5:26:57:54:b9:1c:f3:73:ea:16:88:e9:87:bf:b4: 28:6b:a8:c6:35:d7:b8:51:cd:7e:aa:64:88:f4:f4: 92:82:59:84:ba:96:92:1a:6a:38:ed:9a:ba:3c:87: f7:9e:78:b2:8d:fc:4f:10:1c:86:84:f0:7f:dc:97: af:04:fa:9f:a6:00:7e:79:9b:a4:4d:bc:22:7f:3d: 79:72:8c:e2:55:9e:e2:b0:30:a0:cd:27:8e:d1:45: 92:77:a7:95:40:de:6c:e6:0f:04:bd:c6:11:c7:c2: 74:ca:24:11:ec:0d:b5:ed:47:cf:ba:a8:28:54:83: 39:a0:4a:98:f9:be:f0:cc:48:a0:62:78:1f:e7:8c: 2a:ba:01:46:a7:b5:a4:57:f8:89:de:2c:3f:d9:92: 80:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DB:1E:38:F5:A0:83:69:48:F0:1D:DA:16:7D:3B:32:90:23:46:A5 X509v3 Authority Key Identifier: keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/zdseOPWgg2lI8B3aFn07MpAjRqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.124.40.0/21 IPv6: 2a00:f78::/32 Signature Algorithm: sha256WithRSAEncryption 93:4c:9d:27:6b:2a:f7:8c:13:f1:66:90:f6:fc:61:da:c4:a7: b4:75:ae:be:88:dc:ba:19:de:12:74:c7:26:26:a8:46:02:7f: 33:e2:08:aa:ce:ee:ec:89:12:1a:b0:5f:07:cc:6b:59:84:20: b1:2d:d8:32:b8:28:45:69:eb:9b:9d:d6:1f:b4:e6:67:89:f2: 6e:a7:8d:97:2b:66:e1:29:76:3a:50:f7:da:f1:96:f0:46:a0: 6b:31:32:46:36:9c:4e:50:1a:d8:4e:23:bf:f1:b0:e4:ad:60: 59:6a:35:eb:d0:1e:6f:16:b7:a9:e5:f2:ca:25:ee:e2:03:9b: 6f:34:88:2d:c4:f7:70:34:30:1e:3c:ed:b7:0c:78:bf:3a:ed: 39:5f:66:16:59:9a:ca:2f:ce:9b:cc:04:39:8d:97:9e:e3:3d: 09:a3:af:b9:f2:08:23:21:3f:72:f5:ac:e8:b5:f8:29:d5:82: a9:0f:84:d1:f4:ec:df:9c:9a:95:51:8f:be:61:f8:86:b7:4f: 49:ee:65:0b:77:f3:9e:c5:2a:54:fc:72:0f:4d:72:6e:d3:08: ba:5e:3b:58:ce:98:6f:9f:af:53:8d:45:dd:85:d7:a1:35:40: 2c:15:4f:b0:5d:ad:fe:68:37:2c:94:8b:0b:1b:2f:25:00:9a: 4b:04:65:5e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8saELEXFLTPCrb4fxGyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODYzYTU4OTMyZWIxODMyMzk0MTZhMWNmNjZhOGZmYzNj ZTcyMTUwHhcNMjYwMTAyMTgyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGRiMWUzOGY1YTA4MzY5NDhmMDFkZGExNjdkM2IzMjkwMjM0NmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK2Rg0DaHvMgpfHEloG2zhAD1OKI aUDTeLDbiRJNGP2nsGB2fUFLipn1aSdQKxFQY59WCBHM/FICvwlCvdazsasS3cVv qpify/354GR9w84tUsIRWh6P8d7VXjPc9//5tPNtqlBp19/1JldUuRzzc+oWiOmH v7Qoa6jGNde4Uc1+qmSI9PSSglmEupaSGmo47Zq6PIf3nniyjfxPEByGhPB/3Jev BPqfpgB+eZukTbwifz15coziVZ7isDCgzSeO0UWSd6eVQN5s5g8EvcYRx8J0yiQR 7A217UfPuqgoVIM5oEqY+b7wzEigYngf54wqugFGp7WkV/iJ3iw/2ZKA/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM3bHjj1oINpSPAd2hZ9OzKQI0alMB8GA1UdIwQY MBaAFK2GOliTLrGDI5QWoc9mqP/DznIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllZNldKTXVzWU1qbEJhaHoyYW9fOFBPY2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC82YWQ2NzUtYzQ5Yi00NzhhLWJhNjAt M2I4ZTU2MWRjMjc2LzEvemRzZU9QV2dnMmxJOEIzYUZuMDdNcEFqUnFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC82YWQ2NzUtYzQ5Yi00NzhhLWJhNjAtM2I4ZTU2MWRjMjc2 LzEvcllZNldKTXVzWU1qbEJhaHoyYW9fOFBPY2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXnwoMA0E AgACMAcDBQAqAA94MA0GCSqGSIb3DQEBCwUAA4IBAQCTTJ0nayr3jBPxZpD2/GHa xKe0da6+iNy6Gd4SdMcmJqhGAn8z4giqzu7siRIasF8HzGtZhCCxLdgyuChFaeub ndYftOZnifJup42XK2bhKXY6UPfa8ZbwRqBrMTJGNpxOUBrYTiO/8bDkrWBZajXr 0B5vFrep5fLKJe7iA5tvNIgtxPdwNDAePO23DHi/Ou05X2YWWZrKL86bzAQ5jZee 4z0Jo6+58ggjIT9y9azotfgp1YKpD4TR9OzfnJqVUY++YfiGt09J7mULd/OexSpU /HIPTXJu0wi6XjtYzphvn69TjUXdhdehNUAsFU+wXa3+aDcslIsLGy8lAJpLBGVe -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:03 2026 by rpki-client