This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa File: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (raw, json) Hash identifier: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ= Subject key identifier: CC:92:38:CD:24:8C:F9:7C:BA:7A:54:ED:10:5F:EA:F8:22:62:F3:26 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE503C35380818660072CBEDF4A70 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa Signing time: Thu 01 Jan 2026 14:17:41 +0000 ROA not before: Thu 01 Jan 2026 14:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205902 IP address blocks: 212.183.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e5:03:c3:53:80:81:86:60:07:2c:be:df:4a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc9238cd248cf97cba7a54ed105feaf82262f326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:b4:b0:3c:9c:cf:f6:67:9a:ae:e6:83:19: ef:78:cc:23:2c:1d:bf:ef:11:54:06:63:3e:c5:1f: 58:3b:29:3f:20:70:aa:3d:cb:db:12:32:09:43:da: 59:15:d3:26:5c:ab:dd:25:8f:ea:53:63:b1:0a:1b: 44:ad:1b:b9:de:7c:f0:56:f7:31:2b:cc:4b:ed:6e: 02:78:be:61:4e:71:7c:6a:12:8c:d1:cf:7a:6c:c0: 02:9c:2d:e7:66:e2:aa:b5:6b:e7:5d:f1:56:d7:36: 52:af:98:b1:b6:20:63:20:04:80:8b:3b:71:10:07: 91:4c:2b:74:b8:9c:88:3d:39:ed:15:ef:23:22:92: 7d:d4:d6:51:eb:c2:93:af:da:d4:5d:d5:52:5e:ec: 89:fb:39:87:3c:9e:6b:40:88:cd:2c:3b:27:3f:eb: f2:4b:82:f6:f6:99:0c:ce:cf:32:ec:f6:73:a2:b2: fb:c0:ad:5b:da:3a:2e:da:90:10:c2:d1:86:42:52: 86:20:10:c7:dd:9b:b1:2f:69:c3:02:a2:2b:d1:b6: c1:b1:97:bb:7a:c4:6a:35:11:17:7b:10:37:ed:20: ae:40:f8:ee:82:b9:bc:25:d0:f0:69:a9:5f:33:4f: 78:8c:8b:56:ab:56:db:6f:9b:44:59:21:7e:e2:f1: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:92:38:CD:24:8C:F9:7C:BA:7A:54:ED:10:5F:EA:F8:22:62:F3:26 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.183.27.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:8d:21:51:0b:72:20:63:85:a4:6d:2d:02:f4:12:ba:98:c9: af:12:f2:44:b9:2a:fd:62:36:db:89:2f:c2:b9:0b:f9:3a:c9: 82:70:89:8e:73:5e:01:fd:55:52:a3:b9:6e:c8:fa:04:b8:87: 20:c1:9e:e0:a3:cd:df:a6:7e:29:aa:1e:49:5f:09:90:e2:79: 6a:25:7b:e4:f7:02:0c:d5:04:c1:1b:24:fd:eb:71:b3:80:e1: 3d:61:56:cd:b6:b0:61:2e:63:32:eb:45:a6:54:16:7c:42:31: ee:39:20:53:ba:b5:70:b1:e0:e7:d0:6d:55:43:23:15:7e:bf: e0:ba:ea:d2:11:44:c4:59:81:9e:61:63:9e:51:a7:e8:af:9f: ab:6f:2b:3b:e7:9f:cd:80:a7:64:5d:4f:af:bc:80:a6:8b:e1: 92:d6:d8:6d:c8:d7:e0:db:a9:6b:72:1a:d8:88:5b:fd:94:21: fe:e5:89:d3:a0:8e:30:4a:81:ce:81:08:fd:e0:32:83:72:de: da:68:6d:70:68:9c:6f:17:0c:48:35:15:1e:50:97:3d:82:4e: 7c:e5:d5:37:4e:8f:63:64:8b:39:cb:37:07:a4:74:de:fb:22: d7:26:05:03:3a:20:fe:7f:07:a6:cb:d1:da:ea:ee:0c:e5:a1: 83:d3:39:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+UDw1OAgYZgByy+30pwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzkyMzhjZDI0OGNmOTdjYmE3YTU0ZWQxMDVmZWFmODIyNjJmMzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpW0sDycz/Znmq7mgxnveMwjLB2/ 7xFUBmM+xR9YOyk/IHCqPcvbEjIJQ9pZFdMmXKvdJY/qU2OxChtErRu53nzwVvcx K8xL7W4CeL5hTnF8ahKM0c96bMACnC3nZuKqtWvnXfFW1zZSr5ixtiBjIASAiztx EAeRTCt0uJyIPTntFe8jIpJ91NZR68KTr9rUXdVSXuyJ+zmHPJ5rQIjNLDsnP+vy S4L29pkMzs8y7PZzorL7wK1b2jou2pAQwtGGQlKGIBDH3ZuxL2nDAqIr0bbBsZe7 esRqNREXexA37SCuQPjugrm8JdDwaalfM094jItWq1bbb5tEWSF+4vFTrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMySOM0kjPl8unpU7RBf6vgiYvMmMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvekpJNHpTU00tWHk2ZWxUdEVGX3EtQ0ppOHlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1LcbMA0G CSqGSIb3DQEBCwUAA4IBAQCNjSFRC3IgY4WkbS0C9BK6mMmvEvJEuSr9YjbbiS/C uQv5OsmCcImOc14B/VVSo7luyPoEuIcgwZ7go83fpn4pqh5JXwmQ4nlqJXvk9wIM 1QTBGyT963GzgOE9YVbNtrBhLmMy60WmVBZ8QjHuOSBTurVwseDn0G1VQyMVfr/g uurSEUTEWYGeYWOeUafor5+rbys755/NgKdkXU+vvICmi+GS1thtyNfg26lrchrY iFv9lCH+5YnToI4wSoHOgQj94DKDct7aaG1waJxvFwxINRUeUJc9gk585dU3To9j ZIs5yzcHpHTe+yLXJgUDOiD+fwemy9Ha6u4M5aGD0znF -----END CERTIFICATE-----Generated at Tue Jan 27 04:23:20 2026 by rpki-client