This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/zEeP9jNbHcrziM4NoTdt_uL6054.roa File: zEeP9jNbHcrziM4NoTdt_uL6054.roa (raw, json) Hash identifier: ub4Z+QcgKEhR/M0Z+CEOAnRu0nqsZI8hpuezxPH15Vo= Subject key identifier: CC:47:8F:F6:33:5B:1D:CA:F3:88:CE:0D:A1:37:6D:FE:E2:FA:D3:9E Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8 Certificate serial: 019B7D5C286E60111D4903F276988D44C627 Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/zEeP9jNbHcrziM4NoTdt_uL6054.roa Signing time: Fri 02 Jan 2026 06:19:10 +0000 ROA not before: Fri 02 Jan 2026 06:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39440 IP address blocks: 81.88.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:28:6e:60:11:1d:49:03:f2:76:98:8d:44:c6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8 Validity Not Before: Jan 2 06:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc478ff6335b1dcaf388ce0da1376dfee2fad39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:1b:f4:db:7f:48:f1:41:73:f9:0a:92:7a: 9c:48:1c:d1:06:39:16:64:85:89:0d:5e:8a:82:e2: 66:1c:04:8c:7f:a7:9e:e0:8c:c3:36:8d:b8:0c:9e: 42:93:09:94:a5:79:db:41:54:05:23:b5:ab:94:11: 96:07:3a:98:7f:8a:f0:7d:32:96:d5:11:88:6c:fe: 0a:2d:2f:9b:d4:d7:12:b8:6a:10:62:f4:89:3f:e8: e2:a8:21:61:88:5d:87:70:a9:b7:f8:3f:dd:7e:91: 97:4a:64:de:31:f2:06:e7:7d:7b:d8:74:f2:a1:49: 98:e8:ff:1d:b3:1e:05:cc:5d:90:12:18:ab:83:79: 60:a1:71:57:9c:e6:00:3d:8f:54:ad:f6:f4:65:d7: 7a:45:cb:59:68:20:b0:0d:ec:05:84:f2:6f:b2:a4: 55:dc:fd:e4:04:48:28:2a:42:18:21:00:d7:77:da: 00:c2:2e:9a:21:25:db:64:a9:98:1b:5a:ab:2f:98: bc:69:2d:11:a4:8d:c9:e7:6b:eb:3e:be:5f:e6:34: ef:2a:54:c0:03:c9:1a:5a:1c:c1:34:64:0e:31:27: 72:0a:64:8a:20:ec:70:83:5f:79:f0:1a:b0:40:22: 64:9d:12:90:1d:6c:13:90:0d:f6:67:1e:fb:5a:c5: 00:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:47:8F:F6:33:5B:1D:CA:F3:88:CE:0D:A1:37:6D:FE:E2:FA:D3:9E X509v3 Authority Key Identifier: keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/zEeP9jNbHcrziM4NoTdt_uL6054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.88.184.0/21 Signature Algorithm: sha256WithRSAEncryption 13:80:c8:b3:fb:ed:03:00:c3:a8:d3:a8:0e:e9:06:dd:3b:b9: 14:6a:08:f8:d1:43:fc:70:4c:75:fa:26:e0:a9:57:ec:f3:f8: e4:eb:66:ba:51:fb:19:5a:6b:f4:65:05:69:87:fb:5a:f6:10: 95:48:59:ae:14:df:af:f0:67:9c:c8:70:b1:64:c0:14:17:6e: fc:0b:68:c5:5c:fe:86:0b:f1:eb:63:16:bd:9b:4e:48:1c:61: 5a:c5:fb:c3:f2:d5:99:4b:1e:d3:ba:a2:fb:eb:2d:4d:b4:76: 28:b6:df:56:bb:88:3f:fd:22:75:8f:ae:94:57:4d:74:08:d8: 4a:2c:8d:ac:a4:cb:d4:d7:03:ce:76:17:1c:b9:60:2d:16:cd: 13:e8:07:80:22:49:96:10:92:b7:bb:76:f7:c5:0c:68:42:cd: 94:c0:af:e9:9e:b5:51:52:ec:86:0e:43:db:e4:d1:d8:d4:15: e3:ea:69:82:8c:ab:31:66:6d:14:de:da:b9:92:27:bc:68:54: 01:e8:be:7c:b8:8b:71:c1:b2:3e:c5:31:cd:a5:81:ef:0d:7f: bb:0c:b8:dd:88:de:e6:20:a8:09:d3:6b:40:7c:f0:cb:1e:76: 71:20:ef:44:75:8e:ef:5a:cc:a1:9b:ae:50:76:a0:ff:9d:e0: cb:61:44:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XChuYBEdSQPydpiNRMYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZTY3ZmNiMGJkYzYwMDFkOGNmNzA3M2M2NDllYjk4MTlm YzVlYjgwHhcNMjYwMTAyMDYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzQ3OGZmNjMzNWIxZGNhZjM4OGNlMGRhMTM3NmRmZWUyZmFkMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrIb9Nt/SPFBc/kKknqcSBzRBjkW ZIWJDV6KguJmHASMf6ee4IzDNo24DJ5CkwmUpXnbQVQFI7WrlBGWBzqYf4rwfTKW 1RGIbP4KLS+b1NcSuGoQYvSJP+jiqCFhiF2HcKm3+D/dfpGXSmTeMfIG53172HTy oUmY6P8dsx4FzF2QEhirg3lgoXFXnOYAPY9Urfb0Zdd6RctZaCCwDewFhPJvsqRV 3P3kBEgoKkIYIQDXd9oAwi6aISXbZKmYG1qrL5i8aS0RpI3J52vrPr5f5jTvKlTA A8kaWhzBNGQOMSdyCmSKIOxwg1958BqwQCJknRKQHWwTkA32Zx77WsUAIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxHj/YzWx3K84jODaE3bf7i+tOeMB8GA1UdIwQY MBaAFLnmf8sL3GAB2M9wc8ZJ65gZ/F64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEt ZmE3MWFlMDVkYzNmLzEvekVlUDlqTmJIY3J6aU00Tm9UZHRfdUw2MDU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEtZmE3MWFlMDVkYzNm LzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUVi4MA0G CSqGSIb3DQEBCwUAA4IBAQATgMiz++0DAMOo06gO6QbdO7kUagj40UP8cEx1+ibg qVfs8/jk62a6UfsZWmv0ZQVph/ta9hCVSFmuFN+v8GecyHCxZMAUF278C2jFXP6G C/HrYxa9m05IHGFaxfvD8tWZSx7TuqL76y1NtHYott9Wu4g//SJ1j66UV010CNhK LI2spMvU1wPOdhccuWAtFs0T6AeAIkmWEJK3u3b3xQxoQs2UwK/pnrVRUuyGDkPb 5NHY1BXj6mmCjKsxZm0U3tq5kie8aFQB6L58uItxwbI+xTHNpYHvDX+7DLjdiN7m IKgJ02tAfPDLHnZxIO9EdY7vWsyhm65QdqD/neDLYUQO -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:32 2026 by rpki-client