This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/ZdKh3a8XEvF05LVjsi9wkRymFVg.roa File: ZdKh3a8XEvF05LVjsi9wkRymFVg.roa (raw, json) Hash identifier: NE20D4V8pCaAFdHiKB+G1Vp2zobKDlYDSABykJAJbXM= Subject key identifier: 65:D2:A1:DD:AF:17:12:F1:74:E4:B5:63:B2:2F:70:91:1C:A6:15:58 Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b Certificate serial: 019B7F13D5C537183DE5082E2A3F36620B46 Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/ZdKh3a8XEvF05LVjsi9wkRymFVg.roa Signing time: Fri 02 Jan 2026 14:19:24 +0000 ROA not before: Fri 02 Jan 2026 14:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57494 IP address blocks: 195.178.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:d5:c5:37:18:3d:e5:08:2e:2a:3f:36:62:0b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b Validity Not Before: Jan 2 14:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65d2a1ddaf1712f174e4b563b22f70911ca61558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:bd:0c:67:5b:3c:57:8f:4a:fd:4f:8b:eb: e2:72:ab:ba:cc:60:aa:fb:52:f1:09:bd:1e:db:87: 65:99:4f:7a:27:35:f9:08:28:01:d6:99:0d:2d:96: ca:92:8a:16:77:ca:f9:b3:aa:63:b9:73:45:37:e0: 4a:06:f3:fb:ed:1f:a0:a0:49:60:28:2a:fa:8b:ec: 04:9a:e1:ba:ba:02:b2:4f:77:88:77:d1:f4:a1:03: 86:57:04:29:1a:91:84:b5:4f:9a:01:53:99:76:36: ce:6a:b5:99:2b:01:03:3c:39:ec:e5:b3:ea:57:8f: e9:7e:2f:b4:79:61:0f:68:19:cd:75:0a:8a:59:6a: fb:d3:80:f5:7c:88:d3:ba:d5:73:41:40:b7:5d:17: 55:a2:61:01:92:c5:9f:af:6b:ba:40:9d:3e:86:3b: b5:1b:fb:9f:9a:9b:5c:2f:5c:9c:e3:55:60:19:d8: 8b:cf:ac:89:4e:0d:60:ae:f5:c3:a4:b7:12:5d:7a: 78:a3:01:b3:f6:1c:5f:bd:42:b6:bc:32:5b:63:71: c2:a7:d3:dd:82:81:fd:6b:b1:eb:b1:61:db:77:f3: ca:65:d0:c9:34:f9:a7:67:7d:cc:f0:15:69:2e:5d: 64:12:bd:09:05:ba:73:ec:50:fb:8e:35:9c:03:b6: a0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D2:A1:DD:AF:17:12:F1:74:E4:B5:63:B2:2F:70:91:1C:A6:15:58 X509v3 Authority Key Identifier: keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/ZdKh3a8XEvF05LVjsi9wkRymFVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.17.0/24 Signature Algorithm: sha256WithRSAEncryption 82:89:6a:3b:6c:72:1c:7e:9b:23:6b:91:42:57:aa:45:3b:f7: 25:bd:9f:27:b9:5b:87:07:87:1d:cd:0e:16:c8:a3:c3:d3:24: df:03:30:f2:40:9d:54:73:e1:a2:de:98:ba:b7:4e:7c:f9:65: 1c:b7:87:33:09:b0:fc:a2:2c:f5:a0:c2:2d:87:05:b9:4e:58: 03:d7:57:54:81:c0:d7:d5:7a:06:97:c5:7c:d2:3e:36:a7:8f: f0:a3:e5:0c:cb:d1:4b:39:42:61:2c:41:69:e7:ce:83:4d:5b: ee:de:6f:fd:85:ff:53:f9:33:1b:34:44:19:05:f7:62:9b:79: 19:88:5e:00:cb:53:8e:53:f3:b0:76:ff:2c:3f:e5:2d:9e:6f: 37:58:98:49:79:d7:85:77:14:08:f0:2d:06:26:1d:1e:b4:c9: 23:56:84:d5:99:84:5f:9e:8b:96:c9:c9:99:0f:45:5e:af:43: 89:55:1c:37:92:d3:7d:b1:a0:81:24:2e:bb:04:d0:51:c7:b7: 82:d2:c9:e0:9f:11:98:20:a6:21:b4:65:73:89:b6:14:a1:94: f6:60:50:5b:e4:c6:5d:9d:04:17:c5:e8:c9:f7:5f:df:f5:8f: 91:90:6c:86:f3:ef:4f:f6:91:c1:d9:46:3a:07:88:0f:fe:d9: e1:af:8a:c2 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E9XFNxg95QguKj82YgtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTAwYWJlMTg0YTYyNWI3NmY4ZDFmYmNlZWY4MTdhYWY3 MTQxNWIwHhcNMjYwMTAyMTQxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWQyYTFkZGFmMTcxMmYxNzRlNGI1NjNiMjJmNzA5MTFjYTYxNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2u9DGdbPFePSv1Pi+vicqu6zGCq +1LxCb0e24dlmU96JzX5CCgB1pkNLZbKkooWd8r5s6pjuXNFN+BKBvP77R+goElg KCr6i+wEmuG6ugKyT3eId9H0oQOGVwQpGpGEtU+aAVOZdjbOarWZKwEDPDns5bPq V4/pfi+0eWEPaBnNdQqKWWr704D1fIjTutVzQUC3XRdVomEBksWfr2u6QJ0+hju1 G/ufmptcL1yc41VgGdiLz6yJTg1grvXDpLcSXXp4owGz9hxfvUK2vDJbY3HCp9Pd goH9a7HrsWHbd/PKZdDJNPmnZ33M8BVpLl1kEr0JBbpz7FD7jjWcA7agdwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGXSod2vFxLxdOS1Y7IvcJEcphVYMB8GA1UdIwQY MBaAFPngCr4YSmJbdvjR+87vgXqvcUFbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lQUt2aGhLWWx0Mi1OSDd6dS1CZXE5eFFWcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvOGEzMjJmLWRjMjgtNDIyZi1iNTcw LTU4YjY0ZDU1N2MwYy8xL1pkS2gzYThYRXZGMDVMVmpzaTl3a1J5bUZWZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWYvOGEzMjJmLWRjMjgtNDIyZi1iNTcwLTU4YjY0ZDU1N2Mw Yy8xLzEtZUFLdmhoS1lsdDItTkg3enUtQmVxOXhRVnMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDshEw DQYJKoZIhvcNAQELBQADggEBAIKJajtschx+myNrkUJXqkU79yW9nye5W4cHhx3N DhbIo8PTJN8DMPJAnVRz4aLemLq3Tnz5ZRy3hzMJsPyiLPWgwi2HBblOWAPXV1SB wNfVegaXxXzSPjanj/Cj5QzL0Us5QmEsQWnnzoNNW+7eb/2F/1P5Mxs0RBkF92Kb eRmIXgDLU45T87B2/yw/5S2ebzdYmEl514V3FAjwLQYmHR60ySNWhNWZhF+ei5bJ yZkPRV6vQ4lVHDeS032xoIEkLrsE0FHHt4LSyeCfEZggpiG0ZXOJthShlPZgUFvk xl2dBBfF6Mn3X9/1j5GQbIbz70/2kcHZRjoHiA/+2eGvisI= -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:57 2026 by rpki-client