This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Z0t9Up-qusxTZUub1_7i1G-MClE.roa File: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (raw, json) Hash identifier: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc= Subject key identifier: 67:4B:7D:52:9F:AA:BA:CC:53:65:4B:9B:D7:FE:E2:D4:6F:8C:0A:51 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBD8E46FBAFF65AB717E9CB6FE27C4 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Z0t9Up-qusxTZUub1_7i1G-MClE.roa Signing time: Thu 01 Jan 2026 14:17:38 +0000 ROA not before: Thu 01 Jan 2026 14:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12810 IP address blocks: 80.75.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:d8:e4:6f:ba:ff:65:ab:71:7e:9c:b6:fe:27:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=674b7d529faabacc53654b9bd7fee2d46f8c0a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:fa:be:98:81:8e:36:c3:af:85:20:36:1b: 60:05:a6:7b:32:fa:94:04:8d:9b:d6:b1:87:05:87: a7:76:42:d4:26:44:4e:b2:75:b9:83:5d:eb:a6:91: 6d:11:e9:c4:da:21:25:cb:7a:1f:6b:33:e4:8a:50: 01:c2:67:9a:03:7d:19:37:08:a5:94:4b:d9:9b:17: 3e:20:84:2d:bc:1e:2f:78:45:11:ab:46:ba:ad:b3: b8:a8:3e:90:e6:14:4b:97:16:ae:02:e8:37:43:44: 4e:3c:f7:b9:0f:06:1c:e1:6b:64:d5:f5:ed:c8:dc: dd:c2:74:a4:70:62:b6:00:85:e9:e9:97:e6:c3:ae: 1f:a7:23:14:06:b3:be:9e:79:d0:65:d7:00:8e:ee: 13:98:20:94:03:0d:b0:48:8c:b5:68:8e:bd:80:9d: 1a:1d:1e:5b:96:2f:dd:56:fa:8a:a4:5a:5a:88:a6: dd:79:6b:9c:9e:2a:ec:fc:7f:42:4c:6a:2d:b9:17: 58:5c:0d:c3:3f:4f:a5:d6:8f:84:a4:90:b2:ce:09: 0a:63:5a:ca:64:90:8b:96:af:3e:02:0a:4e:f2:4c: 34:a4:c9:30:48:10:4c:36:e0:a3:7e:cf:4c:12:bc: e5:d6:28:8b:27:b3:02:c9:43:56:fa:13:2b:1f:4f: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4B:7D:52:9F:AA:BA:CC:53:65:4B:9B:D7:FE:E2:D4:6F:8C:0A:51 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Z0t9Up-qusxTZUub1_7i1G-MClE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.52.0/22 Signature Algorithm: sha256WithRSAEncryption 92:f1:fc:18:61:71:d9:8e:9d:07:91:31:15:a3:2f:09:f2:fe: d4:a6:60:bd:b2:32:a3:d4:37:cb:69:f7:43:90:97:2e:86:58: 90:33:c5:23:f8:63:f3:40:0f:46:ed:8f:5f:d8:ab:87:f8:0a: 85:12:03:41:ea:cb:e2:fb:12:28:6d:89:fd:1b:b8:34:1c:f9: 61:a4:3f:34:96:60:d9:89:ad:d8:c6:36:3d:6a:a9:fa:09:21: 60:fa:16:5e:13:08:5c:90:b9:31:a0:ad:5d:5c:44:a5:e5:66: 8b:c5:ef:6f:03:7f:f6:a7:f4:3f:29:3f:af:3d:d9:54:a2:8d: 17:c8:2d:fa:52:12:d9:15:54:f9:4a:42:85:77:3c:0a:96:2a: e2:0c:bd:1c:5f:ad:32:13:4b:14:eb:4a:5a:ef:b7:a5:eb:2d: 9a:30:da:69:37:8c:84:a2:33:78:47:43:9b:ba:86:e5:2e:a1: 2a:3f:d8:97:d9:c9:42:4a:50:c0:39:a0:c0:4d:d6:39:b5:f0: 62:ca:db:69:f8:d6:92:a5:7a:fa:aa:d5:e0:17:c7:78:c5:14: 58:16:6b:39:72:ba:89:7c:8f:3d:65:50:4d:3b:2d:72:71:02: 59:9d:5f:29:e6:ad:a9:1a:ab:49:16:d1:a1:18:2c:c8:b7:63: d5:11:9c:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt569jkb7r/Zatxfpy2/ifEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzRiN2Q1MjlmYWFiYWNjNTM2NTRiOWJkN2ZlZTJkNDZmOGMwYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yf6vpiBjjbDr4UgNhtgBaZ7MvqU BI2b1rGHBYendkLUJkROsnW5g13rppFtEenE2iEly3ofazPkilABwmeaA30ZNwil lEvZmxc+IIQtvB4veEURq0a6rbO4qD6Q5hRLlxauAug3Q0ROPPe5DwYc4Wtk1fXt yNzdwnSkcGK2AIXp6Zfmw64fpyMUBrO+nnnQZdcAju4TmCCUAw2wSIy1aI69gJ0a HR5bli/dVvqKpFpaiKbdeWucnirs/H9CTGotuRdYXA3DP0+l1o+EpJCyzgkKY1rK ZJCLlq8+AgpO8kw0pMkwSBBMNuCjfs9MErzl1iiLJ7MCyUNW+hMrH08v4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGdLfVKfqrrMU2VLm9f+4tRvjApRMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvWjB0OVVwLXF1c3hUWlV1YjFfN2kxRy1NQ2xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUEs0MA0G CSqGSIb3DQEBCwUAA4IBAQCS8fwYYXHZjp0HkTEVoy8J8v7UpmC9sjKj1DfLafdD kJcuhliQM8Uj+GPzQA9G7Y9f2KuH+AqFEgNB6svi+xIobYn9G7g0HPlhpD80lmDZ ia3YxjY9aqn6CSFg+hZeEwhckLkxoK1dXESl5WaLxe9vA3/2p/Q/KT+vPdlUoo0X yC36UhLZFVT5SkKFdzwKliriDL0cX60yE0sU60pa77el6y2aMNppN4yEojN4R0Ob uoblLqEqP9iX2clCSlDAOaDATdY5tfBiyttp+NaSpXr6qtXgF8d4xRRYFms5crqJ fI89ZVBNOy1ycQJZnV8p5q2pGqtJFtGhGCzIt2PVEZz/ -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:22 2026 by rpki-client