This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/Ze7KRAUjPeqGh8cPqUx4LdDwghM.roa File: Ze7KRAUjPeqGh8cPqUx4LdDwghM.roa (raw, json) Hash identifier: 9nj7uwXDpwi4IaoN4BLsfOwzpOwzS34nmfQiM2vUZE0= Subject key identifier: 65:EE:CA:44:05:23:3D:EA:86:87:C7:0F:A9:4C:78:2D:D0:F0:82:13 Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b Certificate serial: 019B76EB788A46DECB55EA8954EC89FECE93 Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/Ze7KRAUjPeqGh8cPqUx4LdDwghM.roa Signing time: Thu 01 Jan 2026 00:18:21 +0000 ROA not before: Thu 01 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16001 IP address blocks: 80.250.128.0/20 maxlen: 20 185.255.64.0/22 maxlen: 22 194.76.19.0/24 maxlen: 24 2a00:ecc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:78:8a:46:de:cb:55:ea:89:54:ec:89:fe:ce:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65eeca4405233dea8687c70fa94c782dd0f08213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:f2:f7:25:b2:0b:13:06:83:f2:95:d0:02: 35:33:79:28:66:4f:40:a4:e2:08:fa:10:5b:e9:10: 87:b8:04:bf:08:f4:fb:56:c6:77:0e:2b:b2:cc:81: 4c:e6:4f:0b:b0:5a:3a:1b:b8:61:8b:44:b6:26:9f: a5:e8:38:af:fb:39:ca:37:de:50:f7:5d:44:ff:87: eb:9b:8b:32:1c:78:87:ae:28:8b:bd:00:14:3e:a6: a9:a1:7d:b4:e6:c4:3d:ea:75:99:5c:da:2e:dd:ab: 76:e8:ed:c4:38:ed:76:b6:b1:e3:e2:bd:c3:db:79: c6:6e:0e:78:81:8e:24:27:0a:44:a6:b5:1f:8d:d9: ca:78:56:08:73:ef:86:2b:f6:b0:8b:3f:68:e9:9f: 60:59:6f:70:4a:94:40:5e:91:d8:ec:30:e3:30:37: 34:36:81:3f:b4:d2:b2:04:84:79:d5:91:ba:88:41: 1d:aa:79:8c:a6:58:e6:94:fb:ff:b0:a8:75:8c:be: dd:eb:b5:fc:84:1e:0b:a5:33:53:41:1a:2a:27:a0: 06:a5:ce:bd:ed:f3:94:63:be:a2:d9:eb:97:4c:5d: bb:4c:00:18:85:86:e2:b2:6b:0a:0d:60:2a:b6:5e: 74:a7:4a:43:34:b3:db:ce:d2:4b:70:9d:08:8f:28: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EE:CA:44:05:23:3D:EA:86:87:C7:0F:A9:4C:78:2D:D0:F0:82:13 X509v3 Authority Key Identifier: keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/Ze7KRAUjPeqGh8cPqUx4LdDwghM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.250.128.0/20 185.255.64.0/22 194.76.19.0/24 IPv6: 2a00:ecc0::/32 Signature Algorithm: sha256WithRSAEncryption d4:d7:5f:f0:56:33:51:34:bf:eb:82:71:9f:31:71:b2:2d:1e: 9a:d7:ce:54:cd:a9:6a:12:82:85:59:7d:fa:0b:94:d5:08:4e: 8f:c2:8a:41:a9:92:52:22:54:f7:9c:68:5e:2f:b6:ae:cd:bc: 67:f2:14:06:b7:a4:95:ef:4e:d5:2b:e7:d6:b6:42:7a:40:8e: e0:fd:3e:b6:09:05:88:e9:46:a5:ed:86:46:46:88:df:87:f1: 93:fb:4a:bd:62:21:44:69:27:bd:e7:b1:be:b3:75:b2:25:0a: fd:6f:5c:eb:e4:41:c3:64:44:17:b8:19:a7:c2:b7:a0:0c:21: 79:4c:01:2e:2c:f4:ce:83:92:92:30:38:0d:84:b3:56:56:3a: aa:63:ac:31:b5:f0:4d:e1:20:7d:94:c4:06:c8:f8:f6:69:df: c9:c6:76:e9:54:cf:3c:60:8d:ce:9a:9c:1c:e9:b8:bd:07:07: c6:af:8c:33:16:f5:3b:3c:3c:a9:f5:16:16:53:94:8b:65:12: 65:41:a5:85:f5:e6:60:20:60:94:20:8c:ae:04:aa:f5:d6:08: fb:80:b2:dd:d6:22:2e:95:f6:a6:ed:c6:83:8b:da:ac:a6:29: 14:90:e4:70:01:57:79:19:cc:83:26:54:84:29:b3:b1:03:55: 2c:63:a4:4a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt263iKRt7LVeqJVOyJ/s6TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZjY0NTc3MGQyOTE0NDAyZDZjOTViOGRhZjUxZjdmZmUx Mjc3MmIwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWVlY2E0NDA1MjMzZGVhODY4N2M3MGZhOTRjNzgyZGQwZjA4MjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDby9yWyCxMGg/KV0AI1M3koZk9A pOII+hBb6RCHuAS/CPT7VsZ3DiuyzIFM5k8LsFo6G7hhi0S2Jp+l6Div+znKN95Q 911E/4frm4syHHiHriiLvQAUPqapoX205sQ96nWZXNou3at26O3EOO12trHj4r3D 23nGbg54gY4kJwpEprUfjdnKeFYIc++GK/awiz9o6Z9gWW9wSpRAXpHY7DDjMDc0 NoE/tNKyBIR51ZG6iEEdqnmMpljmlPv/sKh1jL7d67X8hB4LpTNTQRoqJ6AGpc69 7fOUY76i2euXTF27TAAYhYbismsKDWAqtl50p0pDNLPbztJLcJ0Ijyg8IwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGXuykQFIz3qhofHD6lMeC3Q8IITMB8GA1UdIwQY MBaAFI72RXcNKRRALWyVuNr1H3/+EncrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDkt NjU2OTU3ZjM4NjdlLzEvWmU3S1JBVWpQZXFHaDhjUHFVeDRMZER3Z2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDktNjU2OTU3ZjM4Njdl LzEvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUPqAAwQC uf9AAwQAwkwTMA0EAgACMAcDBQAqAOzAMA0GCSqGSIb3DQEBCwUAA4IBAQDU11/w VjNRNL/rgnGfMXGyLR6a185UzalqEoKFWX36C5TVCE6PwopBqZJSIlT3nGheL7au zbxn8hQGt6SV707VK+fWtkJ6QI7g/T62CQWI6Ual7YZGRojfh/GT+0q9YiFEaSe9 57G+s3WyJQr9b1zr5EHDZEQXuBmnwregDCF5TAEuLPTOg5KSMDgNhLNWVjqqY6wx tfBN4SB9lMQGyPj2ad/JxnbpVM88YI3Ompwc6bi9BwfGr4wzFvU7PDyp9RYWU5SL ZRJlQaWF9eZgIGCUIIyuBKr11gj7gLLd1iIulfam7caDi9qspikUkORwAVd5GcyD JlSEKbOxA1UsY6RK -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:49 2026 by rpki-client