This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zyPqIwgvyXC9lIUoG61mB6n09UU.roa File: zyPqIwgvyXC9lIUoG61mB6n09UU.roa (raw, json) Hash identifier: vO04NStXDDqi7y92fry/H4qNWdoUZgsfcjDUmEnQqDM= Subject key identifier: CF:23:EA:23:08:2F:C9:70:BD:94:85:28:1B:AD:66:07:A9:F4:F5:45 Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961 Certificate serial: 019B7BA484F92A5C1D4A63937210AFAC41D8 Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zyPqIwgvyXC9lIUoG61mB6n09UU.roa Signing time: Thu 01 Jan 2026 22:18:58 +0000 ROA not before: Thu 01 Jan 2026 22:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206613 IP address blocks: 195.39.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:84:f9:2a:5c:1d:4a:63:93:72:10:af:ac:41:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961 Validity Not Before: Jan 1 22:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf23ea23082fc970bd9485281bad6607a9f4f545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:14:e8:1d:55:c5:e6:5d:31:3b:e1:ae:38:37: 30:46:b9:48:26:11:63:fb:74:c0:33:4e:ff:6f:f2: 6f:62:9d:8f:ab:ee:11:16:7e:8f:c5:44:08:80:9a: 3d:95:a5:4c:23:bc:d2:50:15:5a:3a:ad:82:f3:f7: cf:89:0b:c7:4d:ac:9c:5b:d3:1b:ec:d5:48:06:b2: 7b:da:ed:26:81:5d:78:30:7b:4e:fe:79:47:23:b6: cd:f3:cf:61:66:d5:2d:97:f0:3e:ca:35:11:24:d3: 48:ad:17:ab:06:60:b2:d2:cf:5d:68:93:32:b5:da: eb:33:a0:99:1d:fc:7b:34:2f:94:78:5c:ee:92:4f: e3:72:ce:d2:41:13:2c:66:89:a4:de:e2:1e:e2:0e: cf:8f:49:97:b6:5d:ef:f7:4a:b7:43:1c:b2:b4:6a: 75:2e:89:f0:0d:b1:25:bc:09:54:b5:04:15:a4:7e: 27:fb:ab:9c:13:eb:85:2e:6d:76:51:9c:54:4d:70: 64:dc:72:91:30:23:45:b0:38:96:0f:3d:69:8d:48: 09:77:3d:c2:8a:41:e8:dd:75:76:b4:90:4b:9d:ec: 92:01:70:74:93:e8:08:06:de:53:6c:e4:42:92:a0: ef:5a:86:58:27:a6:7c:71:2e:10:2f:92:4a:15:c0: 81:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:23:EA:23:08:2F:C9:70:BD:94:85:28:1B:AD:66:07:A9:F4:F5:45 X509v3 Authority Key Identifier: keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zyPqIwgvyXC9lIUoG61mB6n09UU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.39.239.0/24 Signature Algorithm: sha256WithRSAEncryption 53:2a:e3:80:ce:08:63:00:f5:cf:73:8d:00:b4:c7:6a:36:9f: 0c:91:81:1f:0f:ef:4b:71:82:8e:72:a5:07:46:7e:99:bc:a6: a8:4c:b0:9c:62:7f:91:e8:79:1c:23:89:e7:7f:75:5c:26:62: c3:9d:b0:16:40:72:5f:05:2f:fb:43:86:f1:8f:4d:4d:bc:45: 6b:54:0f:97:14:66:c4:ce:ff:0b:be:9b:f5:42:ec:c5:1d:ab: 20:0a:9c:b3:70:48:e0:b5:e7:39:9e:81:c5:c5:74:06:0e:e1: 3d:f9:ff:55:d8:29:e1:d3:35:7f:2b:85:03:71:ff:24:f7:50: b7:98:18:a9:ff:2f:6c:cc:3a:0d:db:82:5b:0b:4c:66:48:31: 1e:a4:98:3a:cf:a0:2d:d2:69:82:ae:59:e1:62:30:ed:f2:81: 96:37:d4:24:70:68:f0:25:f4:f4:7e:59:1d:f7:e7:b0:29:cb: 78:23:31:d3:a7:5e:c8:e6:8f:75:7a:83:e2:34:3f:ea:9a:d2: d8:56:6f:3a:d1:8f:6b:41:de:2e:4f:81:fc:1e:5f:cc:4a:32: d0:3e:e6:59:df:e6:d2:29:f1:3a:3c:08:d2:6c:2c:8c:25:0c: 78:31:b8:02:11:99:dd:c0:36:82:1f:91:b6:10:28:7e:88:54: b8:8c:88:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pIT5KlwdSmOTchCvrEHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMTc5ZTg5YWFhMmQ1OWVlZTRiZDY4NThmYWU1YmIzZmRh NzQ5NjEwHhcNMjYwMTAxMjIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjIzZWEyMzA4MmZjOTcwYmQ5NDg1MjgxYmFkNjYwN2E5ZjRmNTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBToHVXF5l0xO+GuODcwRrlIJhFj +3TAM07/b/JvYp2Pq+4RFn6PxUQIgJo9laVMI7zSUBVaOq2C8/fPiQvHTaycW9Mb 7NVIBrJ72u0mgV14MHtO/nlHI7bN889hZtUtl/A+yjURJNNIrRerBmCy0s9daJMy tdrrM6CZHfx7NC+UeFzukk/jcs7SQRMsZomk3uIe4g7Pj0mXtl3v90q3QxyytGp1 LonwDbElvAlUtQQVpH4n+6ucE+uFLm12UZxUTXBk3HKRMCNFsDiWDz1pjUgJdz3C ikHo3XV2tJBLneySAXB0k+gIBt5TbORCkqDvWoZYJ6Z8cS4QL5JKFcCBWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8j6iMIL8lwvZSFKButZgep9PVFMB8GA1UdIwQY MBaAFM4XnomqotWe7kvWhY+uW7P9p0lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUt M2Q3OTY1NTM5YmM3LzEvenlQcUl3Z3Z5WEM5bElVb0c2MW1CNm4wOVVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUtM2Q3OTY1NTM5YmM3 LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyfvMA0G CSqGSIb3DQEBCwUAA4IBAQBTKuOAzghjAPXPc40AtMdqNp8MkYEfD+9LcYKOcqUH Rn6ZvKaoTLCcYn+R6HkcI4nnf3VcJmLDnbAWQHJfBS/7Q4bxj01NvEVrVA+XFGbE zv8Lvpv1QuzFHasgCpyzcEjgtec5noHFxXQGDuE9+f9V2Cnh0zV/K4UDcf8k91C3 mBip/y9szDoN24JbC0xmSDEepJg6z6At0mmCrlnhYjDt8oGWN9QkcGjwJfT0flkd 9+ewKct4IzHTp17I5o91eoPiND/qmtLYVm860Y9rQd4uT4H8Hl/MSjLQPuZZ3+bS KfE6PAjSbCyMJQx4MbgCEZndwDaCH5G2ECh+iFS4jIi+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:43 2026 by rpki-client