This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa File: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (raw, json) Hash identifier: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg= Subject key identifier: CD:16:59:E9:4C:0F:8E:3C:70:E7:C5:5A:07:5A:E9:90:8E:66:94:AA Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDC8BBDB3E7921EF5FD4EB8D15A9A3 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa Signing time: Fri 02 Jan 2026 04:18:36 +0000 ROA not before: Fri 02 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 88.80.142.0/24 maxlen: 24 88.80.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c8:bb:db:3e:79:21:ef:5f:d4:eb:8d:15:a9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd1659e94c0f8e3c70e7c55a075ae9908e6694aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2f:18:d7:e6:8b:7a:ab:e2:ea:ee:3b:20:ea: e4:19:c1:61:fe:e8:6a:87:60:c6:57:ce:a5:c3:c9: c5:58:a3:6c:f6:46:30:31:dd:29:76:21:18:0e:11: 87:62:63:c2:85:12:9d:57:58:ee:64:c1:cc:a6:1d: 4a:42:ec:c1:fc:2c:f6:16:62:c2:be:93:5d:bd:39: e5:1c:b1:c1:60:27:ec:54:fa:69:04:32:da:fc:10: e6:e3:c4:bf:73:04:b3:a1:3e:ba:fe:0a:bc:ef:c1: 3a:f5:9d:13:7d:31:15:9b:84:a9:45:8a:0d:fc:4e: 08:e6:46:d6:4d:03:18:6d:5b:9f:ba:7c:fc:8f:76: 88:2d:06:b3:fd:8c:00:b3:58:98:a7:82:0b:fd:10: fa:cc:a0:14:21:e2:46:e6:8a:d8:07:a7:0b:e6:8f: b7:93:95:e4:6a:95:4f:24:48:f0:33:c3:f9:5c:3f: 50:fa:ed:22:c0:27:f4:c6:6e:e1:24:39:c8:3c:7c: 33:7c:61:de:af:47:1c:86:3f:ef:62:69:9b:49:a1: 0e:4b:e0:d9:ab:c4:d1:8c:45:f0:f6:65:49:eb:16: e8:ce:72:a9:3c:7c:a4:90:a9:61:50:70:b8:51:b1: 83:5e:90:c4:c7:73:53:69:24:64:05:85:f1:63:61: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:16:59:E9:4C:0F:8E:3C:70:E7:C5:5A:07:5A:E9:90:8E:66:94:AA X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.142.0/23 Signature Algorithm: sha256WithRSAEncryption 17:a7:83:1e:f3:4a:c0:1e:64:31:03:98:79:dc:b4:6d:17:c8: b1:f2:7a:ef:02:a7:ae:45:43:51:e0:76:9d:5e:8b:36:d0:b9: 38:22:a0:f4:b5:a8:99:05:b3:e0:87:5b:a4:98:df:aa:06:c5: df:48:14:10:8b:a5:52:67:88:82:8a:83:ac:bd:d7:b1:10:38: ac:da:e0:68:14:f0:06:54:e6:92:92:a0:a9:97:0c:25:3d:b3: b6:d9:f1:c6:9b:2c:43:3a:2a:46:79:44:b9:f9:d4:89:7e:8a: 53:a4:0c:9e:45:85:dc:ea:b9:f2:4a:f8:24:3c:5f:fe:00:cc: a7:0d:26:9d:d6:cf:b4:e2:da:d4:40:5d:b7:56:59:fa:3d:1e: 72:8e:de:c0:12:67:6d:6f:5d:d2:f7:36:a8:f3:c2:40:6a:f5: a5:41:46:aa:af:1a:6f:bd:ff:b6:71:a2:bb:46:99:2f:57:ab: e5:00:ae:64:19:7e:ab:1c:1c:2f:3c:76:7f:76:6a:44:7c:40: 64:05:66:61:40:b3:10:ca:7c:99:54:2e:f0:02:35:d1:11:a7: 22:6a:f4:28:f9:d0:61:5e:82:25:e0:80:7f:3f:36:01:67:38: 52:eb:a0:c1:b9:9d:b2:a6:11:bd:fe:2d:2f:63:ad:31:df:71: 65:7e:d9:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ci72z55Ie9f1OuNFamjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDE2NTllOTRjMGY4ZTNjNzBlN2M1NWEwNzVhZTk5MDhlNjY5NGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi8Y1+aLeqvi6u47IOrkGcFh/uhq h2DGV86lw8nFWKNs9kYwMd0pdiEYDhGHYmPChRKdV1juZMHMph1KQuzB/Cz2FmLC vpNdvTnlHLHBYCfsVPppBDLa/BDm48S/cwSzoT66/gq878E69Z0TfTEVm4SpRYoN /E4I5kbWTQMYbVufunz8j3aILQaz/YwAs1iYp4IL/RD6zKAUIeJG5orYB6cL5o+3 k5XkapVPJEjwM8P5XD9Q+u0iwCf0xm7hJDnIPHwzfGHer0cchj/vYmmbSaEOS+DZ q8TRjEXw9mVJ6xboznKpPHykkKlhUHC4UbGDXpDEx3NTaSRkBYXxY2GVHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM0WWelMD448cOfFWgda6ZCOZpSqMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvelJaWjZVd1Bqanh3NThWYUIxcnBrSTVtbEtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWFCOMA0G CSqGSIb3DQEBCwUAA4IBAQAXp4Me80rAHmQxA5h53LRtF8ix8nrvAqeuRUNR4Had Xos20Lk4IqD0taiZBbPgh1ukmN+qBsXfSBQQi6VSZ4iCioOsvdexEDis2uBoFPAG VOaSkqCplwwlPbO22fHGmyxDOipGeUS5+dSJfopTpAyeRYXc6rnySvgkPF/+AMyn DSad1s+04trUQF23Vln6PR5yjt7AEmdtb13S9zao88JAavWlQUaqrxpvvf+2caK7 RpkvV6vlAK5kGX6rHBwvPHZ/dmpEfEBkBWZhQLMQynyZVC7wAjXREaciavQo+dBh XoIl4IB/PzYBZzhS66DBuZ2yphG9/i0vY60x33Flftlh -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:31 2026 by rpki-client