This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa File: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (raw, json) Hash identifier: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM= Subject key identifier: 67:05:00:DC:B6:BE:08:B3:B6:BE:8E:E7:FB:83:B4:5C:E8:78:F1:7C Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDC741E4936A202FBA7F93AD215E0E Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa Signing time: Fri 02 Jan 2026 04:18:36 +0000 ROA not before: Fri 02 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 88.80.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c7:41:e4:93:6a:20:2f:ba:7f:93:ad:21:5e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=670500dcb6be08b3b6be8ee7fb83b45ce878f17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:8c:ec:86:a5:11:ff:6f:58:de:e3:b2:49: 9e:db:bf:39:25:f3:ef:4a:61:8d:5e:25:8a:4e:88: 6d:be:3f:27:5b:3f:53:33:8f:ce:96:92:7b:51:7b: 74:29:90:63:f8:6a:bc:6f:2a:2e:e4:6f:70:29:b7: 87:8b:de:6d:5e:cc:b1:a2:29:f7:0f:77:47:6f:b6: f2:1a:3a:88:fe:d5:b3:0a:29:2b:6f:b9:64:2f:09: c3:a5:cb:64:57:62:84:ff:15:8f:4a:99:46:f7:f0: b2:98:dd:14:c5:ea:1f:d4:32:70:6d:03:43:6d:ca: 34:79:19:b8:ab:f9:d6:11:b5:6e:b4:a9:da:a1:51: be:e8:22:12:e2:42:87:7f:d3:2e:1d:08:37:63:ab: 53:12:e8:ca:b6:02:67:1a:c1:e2:ae:a2:dc:58:4b: ef:30:a2:77:61:5b:53:0d:e0:0d:15:ae:8e:bd:b9: e3:0b:99:9e:68:8d:e8:c8:02:63:1d:96:3a:6f:7e: 4a:17:62:9a:ae:a0:7e:1e:c2:96:92:07:55:55:fa: 31:e9:cc:e2:cd:be:3a:cc:87:92:25:e0:f6:8d:b2: b8:89:88:7e:48:1b:49:08:7c:df:22:d1:95:05:78: c0:e1:8f:47:8e:26:e2:43:18:75:ba:70:31:a0:56: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:00:DC:B6:BE:08:B3:B6:BE:8E:E7:FB:83:B4:5C:E8:78:F1:7C X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.140.0/24 Signature Algorithm: sha256WithRSAEncryption 62:de:19:35:92:31:ae:dc:b9:fa:27:ed:f5:ad:dd:00:59:01: 63:e9:30:b6:ad:ec:40:9b:8b:09:01:21:7a:95:f6:18:9c:59: 91:7c:49:ef:ba:00:93:fd:64:af:e8:0d:d8:fe:63:26:17:64: e8:7e:8e:89:75:70:98:6a:3e:14:ee:63:a0:42:91:f3:6f:e7: b0:6d:da:b9:28:3c:41:ba:b3:87:ea:7e:9e:24:cb:8e:ae:5b: 82:62:47:72:16:2b:74:ba:f3:53:32:ff:02:94:5d:81:57:93: d3:21:b2:96:e6:14:e6:74:d8:c5:ea:4d:36:83:91:ef:59:7f: 06:4e:ad:d7:5e:82:85:95:68:42:18:20:60:e6:7f:b1:2b:bb: 90:8c:b9:26:ad:f6:5d:8f:99:3c:b2:df:8d:ad:14:84:0c:c3: 08:ce:e2:b0:bf:5c:b7:f9:e9:c1:1c:88:7f:f5:7b:1e:10:18: 07:7a:ab:7a:c6:55:98:89:31:9e:29:68:db:d8:ca:68:d0:66: 82:71:58:95:92:21:46:3d:21:79:0b:2b:4a:3c:9d:34:ac:4a: 07:ca:1f:16:fe:a8:ed:4a:6f:92:1f:6b:33:09:fb:25:b9:33: 3f:6c:7d:d6:f6:88:2f:3f:f5:25:d5:52:d9:7d:80:e7:64:a8: 20:c6:e7:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87cdB5JNqIC+6f5OtIV4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzA1MDBkY2I2YmUwOGIzYjZiZThlZTdmYjgzYjQ1Y2U4NzhmMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqiM7IalEf9vWN7jskme2785JfPv SmGNXiWKTohtvj8nWz9TM4/OlpJ7UXt0KZBj+Gq8byou5G9wKbeHi95tXsyxoin3 D3dHb7byGjqI/tWzCikrb7lkLwnDpctkV2KE/xWPSplG9/CymN0Uxeof1DJwbQND bco0eRm4q/nWEbVutKnaoVG+6CIS4kKHf9MuHQg3Y6tTEujKtgJnGsHirqLcWEvv MKJ3YVtTDeANFa6OvbnjC5meaI3oyAJjHZY6b35KF2KarqB+HsKWkgdVVfox6czi zb46zIeSJeD2jbK4iYh+SBtJCHzfItGVBXjA4Y9HjibiQxh1unAxoFY54wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGcFANy2vgiztr6O5/uDtFzoePF8MB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvWndVQTNMYS1DTE8ydm83bi00TzBYT2g0OFh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCMMA0G CSqGSIb3DQEBCwUAA4IBAQBi3hk1kjGu3Ln6J+31rd0AWQFj6TC2rexAm4sJASF6 lfYYnFmRfEnvugCT/WSv6A3Y/mMmF2Tofo6JdXCYaj4U7mOgQpHzb+ewbdq5KDxB urOH6n6eJMuOrluCYkdyFit0uvNTMv8ClF2BV5PTIbKW5hTmdNjF6k02g5HvWX8G Tq3XXoKFlWhCGCBg5n+xK7uQjLkmrfZdj5k8st+NrRSEDMMIzuKwv1y3+enBHIh/ 9XseEBgHeqt6xlWYiTGeKWjb2Mpo0GaCcViVkiFGPSF5CytKPJ00rEoHyh8W/qjt Sm+SH2szCfsluTM/bH3W9ogvP/Ul1VLZfYDnZKggxud+ -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:39 2026 by rpki-client