This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/zDNouUxa3WBuZGVPOGveYWb3T6I.roa File: zDNouUxa3WBuZGVPOGveYWb3T6I.roa (raw, json) Hash identifier: dlBZu5xfm6bRA2HTdrEgFNefU2JSuyk/ZA0x+VgcU8o= Subject key identifier: CC:33:68:B9:4C:5A:DD:60:6E:64:65:4F:38:6B:DE:61:66:F7:4F:A2 Certificate issuer: /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563 Certificate serial: 019B7C80406F526265A61453884EED59C2E1 Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/zDNouUxa3WBuZGVPOGveYWb3T6I.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 88.84.64.0/19 maxlen: 24 95.142.0.0/20 maxlen: 24 185.117.176.0/22 maxlen: 24 217.15.32.0/20 maxlen: 24 217.149.144.0/20 maxlen: 24 2a02:2068::/29 maxlen: 48 2a02:206a::/32 maxlen: 32 2a02:206b::/32 maxlen: 32 2a02:206d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:40:6f:52:62:65:a6:14:53:88:4e:ed:59:c2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc3368b94c5add606e64654f386bde6166f74fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:3f:9d:02:24:60:e5:65:c1:6f:fa:d0:db: 52:7d:7a:a0:bb:22:b5:a2:c3:f6:fd:17:84:ef:e0: e1:fb:72:cd:9d:4f:9b:95:20:4a:be:54:4a:52:3f: 2d:9b:d0:c4:53:0d:b3:b4:06:29:df:0f:a0:db:f9: 86:82:1c:81:8f:c4:78:ee:e0:4e:27:12:b5:13:1b: 62:f0:42:f1:d5:f3:1c:81:64:1a:b7:d0:dc:da:94: e6:a0:5f:3b:be:b6:17:3a:dc:18:8c:6a:8c:b0:ab: ec:d2:cf:a5:a9:d1:03:f8:4f:04:af:0e:40:d4:93: f7:31:c2:20:ae:67:3b:fe:85:4b:7f:dd:89:79:c6: f0:2e:bf:ef:a6:2a:60:49:02:ba:69:94:fb:fa:35: b8:f7:aa:a3:38:fb:a0:8e:3b:84:e4:37:33:97:aa: fd:71:1a:6d:41:53:44:07:60:e5:04:81:8e:d7:78: dc:a8:ea:cd:cc:69:d9:62:9e:68:f4:b7:dd:15:ef: c6:6f:c9:8e:03:b4:bf:c3:fa:56:9c:84:64:2a:d3: fd:2c:67:65:c8:94:7c:91:15:a2:79:e9:44:0b:cf: 62:12:95:c8:54:5d:5e:0c:27:b8:bc:03:0a:67:54: 50:06:8d:63:30:85:6d:09:b1:09:9f:05:40:8e:9f: 4d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:33:68:B9:4C:5A:DD:60:6E:64:65:4F:38:6B:DE:61:66:F7:4F:A2 X509v3 Authority Key Identifier: keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/zDNouUxa3WBuZGVPOGveYWb3T6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.84.64.0/19 95.142.0.0/20 185.117.176.0/22 217.15.32.0/20 217.149.144.0/20 IPv6: 2a02:2068::/29 Signature Algorithm: sha256WithRSAEncryption 58:41:e5:76:cf:35:36:bd:c7:bd:e3:fa:89:93:25:01:e8:84: be:4a:92:30:93:6b:74:77:b2:7b:14:73:61:da:31:d1:30:0a: 0e:6d:2c:5d:d3:58:52:36:b7:84:5f:d7:fd:fd:83:15:32:65: ec:be:59:f9:3a:a5:af:80:34:46:ea:f1:30:86:9c:ba:9c:32: a9:03:62:a9:05:29:fd:94:4d:cc:29:af:22:40:6b:cb:0e:57: 56:fd:a3:16:ce:7c:76:20:13:ef:48:ef:bf:8b:82:7d:78:54: 21:fd:20:58:6b:d7:8d:1f:47:86:b6:2e:4a:30:24:72:d4:30: 8e:58:a7:8e:45:a8:54:aa:cc:fe:86:a3:3e:de:dd:34:98:3b: d5:20:b9:21:a8:89:dd:3c:c9:3c:e3:53:33:7b:68:49:3c:eb: b8:0c:02:f8:26:b6:4d:b8:5b:a8:05:65:a5:eb:4f:f1:92:62: fd:8a:94:a1:64:f2:65:d0:7c:94:e7:b8:b3:67:19:a4:76:4c: 38:38:07:27:1d:d9:06:49:60:1d:c9:47:a3:0c:8a:c7:b7:c6: 65:55:4f:48:70:83:df:d0:2e:0d:36:cc:81:a4:fd:ff:47:4f: f5:ad:6e:25:34:02:9b:f1:85:d7:fb:b3:c2:c2:0c:a1:db:c0: cd:ab:e1:24 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8gEBvUmJlphRTiE7tWcLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjQ3YjczZWU4ZmJlZGQyNWY0MWIzYjE3YjJiZTA4ZjVi ZjY1NjMwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzMzNjhiOTRjNWFkZDYwNmU2NDY1NGYzODZiZGU2MTY2Zjc0ZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsA/nQIkYOVlwW/60NtSfXqguyK1 osP2/ReE7+Dh+3LNnU+blSBKvlRKUj8tm9DEUw2ztAYp3w+g2/mGghyBj8R47uBO JxK1Exti8ELx1fMcgWQat9Dc2pTmoF87vrYXOtwYjGqMsKvs0s+lqdED+E8Erw5A 1JP3McIgrmc7/oVLf92JecbwLr/vpipgSQK6aZT7+jW496qjOPugjjuE5Dczl6r9 cRptQVNEB2DlBIGO13jcqOrNzGnZYp5o9LfdFe/Gb8mOA7S/w/pWnIRkKtP9LGdl yJR8kRWieelEC89iEpXIVF1eDCe4vAMKZ1RQBo1jMIVtCbEJnwVAjp9NowIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFMwzaLlMWt1gbmRlTzhr3mFm90+iMB8GA1UdIwQY MBaAFDT0e3Puj77dJfQbOxeyvgj1v2VjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBSN2MtNlB2dDBsOUJzN0Y3Sy1DUFdfWldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wZmM1YzktNGVjNi00ZGY2LTgyYzQt ZDg3ZTQwNDdmODUzLzEvekROb3VVeGEzV0J1WkdWUE9HdmVZV2IzVDZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wZmM1YzktNGVjNi00ZGY2LTgyYzQtZDg3ZTQwNDdmODUz LzEvTlBSN2MtNlB2dDBsOUJzN0Y3Sy1DUFdfWldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFWFRAAwQE X44AAwQCuXWwAwQE2Q8gAwQE2ZWQMA0EAgACMAcDBQMqAiBoMA0GCSqGSIb3DQEB CwUAA4IBAQBYQeV2zzU2vce94/qJkyUB6IS+SpIwk2t0d7J7FHNh2jHRMAoObSxd 01hSNreEX9f9/YMVMmXsvln5OqWvgDRG6vEwhpy6nDKpA2KpBSn9lE3MKa8iQGvL DldW/aMWznx2IBPvSO+/i4J9eFQh/SBYa9eNH0eGti5KMCRy1DCOWKeORahUqsz+ hqM+3t00mDvVILkhqIndPMk841Mze2hJPOu4DAL4JrZNuFuoBWWl60/xkmL9ipSh ZPJl0HyU57izZxmkdkw4OAcnHdkGSWAdyUejDIrHt8ZlVU9IcIPf0C4NNsyBpP3/ R0/1rW4lNAKb8YXX+7PCwgyh28DNq+Ek -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:31 2026 by rpki-client