This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/zc1RxQ-wCAjo2YyTdgBOf576bf0.roa File: zc1RxQ-wCAjo2YyTdgBOf576bf0.roa (raw, json) Hash identifier: vkvB5T6NKTKK2PGToAyqMv7sLiy7bF7pWaJUrDMf/r8= Subject key identifier: CD:CD:51:C5:0F:B0:08:08:E8:D9:8C:93:76:00:4E:7F:9E:FA:6D:FD Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4 Certificate serial: 019B797F3FF9F37B7E07FB30F570C55DA4B9 Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/zc1RxQ-wCAjo2YyTdgBOf576bf0.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51324 IP address blocks: 45.93.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3f:f9:f3:7b:7e:07:fb:30:f5:70:c5:5d:a4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4 Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdcd51c50fb00808e8d98c9376004e7f9efa6dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:af:38:c9:5b:e7:56:1e:b5:b9:65:25:9d: b7:a4:c9:36:0a:9f:d5:90:b9:b8:54:6f:fb:3d:c6: 6a:6a:f5:3a:d2:c8:84:14:42:16:cb:3e:a0:d7:3f: b6:13:21:41:10:86:01:7c:d6:5c:d2:f0:5f:b1:51: d2:10:5a:67:bb:8f:fd:61:76:5f:9e:99:d2:e5:88: 06:94:86:e0:24:66:dd:c4:6a:46:4e:1c:e6:ef:c2: 5f:16:31:a6:09:91:13:04:4c:25:da:cc:41:88:17: b8:a6:7c:b4:59:68:90:d2:8a:ad:fa:e9:f7:de:f5: 7b:df:a0:b1:16:f2:b8:92:d7:f7:f3:af:54:04:35: ce:be:0c:b8:49:0d:c4:a3:f2:c4:04:e2:93:4d:1d: 7c:c8:91:f2:64:70:2d:7e:fc:a1:54:f4:10:a5:ff: f5:1a:da:4f:c8:68:1a:04:0e:eb:d2:03:ed:e5:df: db:83:a0:23:93:29:2d:64:af:40:35:db:43:36:75: 8b:3c:db:27:a3:e5:d3:7c:91:40:90:23:f6:e0:44: 2f:b0:41:0a:d7:59:94:24:37:67:9d:e6:15:a2:ca: 71:5f:ff:78:23:2d:78:cf:69:02:bc:1d:8e:47:15: 16:13:18:f5:b7:f1:08:79:ba:3e:50:82:d6:ac:94: fe:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CD:51:C5:0F:B0:08:08:E8:D9:8C:93:76:00:4E:7F:9E:FA:6D:FD X509v3 Authority Key Identifier: keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/zc1RxQ-wCAjo2YyTdgBOf576bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.188.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:97:e4:c6:32:b9:5c:3e:bb:7b:13:7d:35:31:03:40:3d:f2: c3:8f:65:72:02:24:a5:6b:3c:9f:26:a4:67:70:e5:f7:9f:1a: 8b:be:42:d7:42:c3:43:56:16:be:f0:ab:fc:f3:ac:ab:e4:ee: c7:9a:dc:de:6b:cd:46:a2:bb:00:af:98:be:a7:6a:01:56:46: ea:3f:48:6d:d2:3a:45:b5:9d:ad:6b:da:ee:67:cd:4f:90:63: 86:da:d6:37:91:e6:51:0c:41:b6:df:62:ec:52:b0:20:c2:7b: 98:fe:6e:5a:83:12:64:5b:42:aa:64:f9:b4:d3:60:c7:fe:f1: 32:93:75:e4:41:89:33:7d:89:45:dd:8e:cb:4e:89:99:be:9c: 72:4e:b3:b2:08:5a:c9:fe:da:24:f6:f9:d2:f9:cd:33:8d:91: 47:03:6a:67:56:2e:06:9c:da:f9:68:bd:18:cc:47:b9:98:1f: 6f:81:12:55:d5:08:dc:9c:2c:2d:75:5c:96:ac:72:69:26:4e: 7c:ac:61:dc:7a:6b:34:2d:95:3f:0b:af:80:47:3f:ac:03:56: a0:52:75:65:a3:ab:6c:11:b2:f4:83:a4:e1:fe:5c:43:6e:24: 0f:d4:bb:16:6a:7e:30:f4:31:e1:6d:a7:60:76:d4:5e:4d:e1: 47:b7:0e:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fz/583t+B/sw9XDFXaS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjljOTJiYzA5YmY2YjhkYTY1MzNkZDdhN2IwYjFhNTdl NjVlYTQwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGNkNTFjNTBmYjAwODA4ZThkOThjOTM3NjAwNGU3ZjllZmE2ZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JmvOMlb51YetbllJZ23pMk2Cp/V kLm4VG/7PcZqavU60siEFEIWyz6g1z+2EyFBEIYBfNZc0vBfsVHSEFpnu4/9YXZf npnS5YgGlIbgJGbdxGpGThzm78JfFjGmCZETBEwl2sxBiBe4pny0WWiQ0oqt+un3 3vV736CxFvK4ktf3869UBDXOvgy4SQ3Eo/LEBOKTTR18yJHyZHAtfvyhVPQQpf/1 GtpPyGgaBA7r0gPt5d/bg6AjkyktZK9ANdtDNnWLPNsno+XTfJFAkCP24EQvsEEK 11mUJDdnneYVospxX/94Iy14z2kCvB2ORxUWExj1t/EIebo+UILWrJT+xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM3NUcUPsAgI6NmMk3YATn+e+m39MB8GA1UdIwQY MBaAFCtpySvAm/a42mUz3Xp7CxpX5l6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJuSks4Q2I5cmphWlRQZGVuc0xHbGZtWHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81YjNmZmUtOWY5ZC00MTg5LWE4Y2Et MDg0YWFiYTBmNTg4LzEvemMxUnhRLXdDQWpvMll5VGRnQk9mNTc2YmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81YjNmZmUtOWY5ZC00MTg5LWE4Y2EtMDg0YWFiYTBmNTg4 LzEvSzJuSks4Q2I5cmphWlRQZGVuc0xHbGZtWHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLV28MA0G CSqGSIb3DQEBCwUAA4IBAQCMl+TGMrlcPrt7E301MQNAPfLDj2VyAiSlazyfJqRn cOX3nxqLvkLXQsNDVha+8Kv886yr5O7Hmtzea81GorsAr5i+p2oBVkbqP0ht0jpF tZ2ta9ruZ81PkGOG2tY3keZRDEG232LsUrAgwnuY/m5agxJkW0KqZPm002DH/vEy k3XkQYkzfYlF3Y7LTomZvpxyTrOyCFrJ/tok9vnS+c0zjZFHA2pnVi4GnNr5aL0Y zEe5mB9vgRJV1QjcnCwtdVyWrHJpJk58rGHcems0LZU/C6+ARz+sA1agUnVlo6ts EbL0g6Th/lxDbiQP1LsWan4w9DHhbadgdtReTeFHtw5j -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:36 2026 by rpki-client