This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa File: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (raw, json) Hash identifier: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4= Subject key identifier: CD:5B:F0:B0:80:D3:B4:F0:F9:2F:03:6D:71:74:08:69:30:66:51:3C Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE07A9A97BA7624469A4A6588900F Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa Signing time: Thu 01 Jan 2026 14:17:40 +0000 ROA not before: Thu 01 Jan 2026 14:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199437 IP address blocks: 188.21.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e0:7a:9a:97:ba:76:24:46:9a:4a:65:88:90:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd5bf0b080d3b4f0f92f036d717408693066513c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:44:6e:2f:ec:eb:eb:45:61:13:49:6a:1c: e6:32:4d:a6:69:27:c1:e5:e8:18:18:e3:79:e2:b7: c0:28:7b:f6:06:b6:be:f3:74:6a:3d:bc:ae:cc:97: cd:a5:ad:6f:eb:1d:cc:67:0a:15:81:fd:af:e0:85: e8:97:5b:91:3f:25:59:e5:70:d3:38:9b:76:f9:a1: 82:d4:0c:a9:17:2a:f4:a6:f1:7a:e6:de:3d:ec:8a: 7e:c4:1a:4c:74:ba:17:38:d7:b4:92:03:78:31:21: 80:aa:6a:a5:a8:76:05:ae:af:72:70:0f:87:95:5a: 55:3d:5b:4a:17:c0:cb:f4:3e:f3:dc:13:9a:c8:f8: 2f:0a:5b:a6:57:b9:05:d7:7f:7b:2f:10:ee:07:0c: d6:84:56:7f:9d:36:7f:fb:44:57:dd:f9:f1:8e:77: aa:10:81:76:8c:75:69:bb:00:21:38:68:e0:78:58: 73:cd:60:f0:09:53:36:e6:f9:6f:e4:3a:8d:de:78: 82:bf:3b:8a:5d:5d:4d:c5:3c:bf:76:d4:e8:af:3d: 81:66:12:de:9f:c7:40:d8:1e:17:79:34:cd:ab:4d: 77:1f:46:7f:d8:c4:5a:c3:97:b3:30:4e:9c:a9:0b: d9:b2:58:03:4c:a1:e8:99:d4:b1:9b:c3:8a:2b:94: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5B:F0:B0:80:D3:B4:F0:F9:2F:03:6D:71:74:08:69:30:66:51:3C X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.21.6.0/24 Signature Algorithm: sha256WithRSAEncryption 25:d0:76:bc:a0:74:01:4d:c3:c2:35:b1:de:25:12:74:f3:bb: 44:d6:1a:83:64:50:e3:de:ff:78:83:ce:8e:43:1f:12:a1:d9: 08:6b:a2:5d:79:67:00:02:4a:65:eb:c5:00:73:5d:18:a0:9f: f9:70:e4:f0:5e:44:83:e6:3e:67:87:09:71:75:d4:e4:05:dc: 49:20:42:29:3e:34:e2:04:a1:e4:7c:95:2f:ca:3a:0b:ea:b3: 9e:31:ad:f8:0f:56:10:f7:ef:1c:c7:bb:2f:29:6b:3c:1b:34: 57:3c:7f:93:ac:8b:d3:c1:97:5f:ee:62:d4:27:77:f3:2a:18: 68:98:3a:14:80:3c:76:42:42:3e:78:77:fb:b9:cb:56:58:9e: 2c:6e:08:a8:5c:eb:bf:41:e4:61:03:14:f3:8e:da:b8:5f:f1: 18:b3:9e:13:7f:94:b5:6d:ed:89:51:50:d3:02:a2:da:7b:58: fd:d5:59:9d:68:98:72:49:a3:76:3e:66:c6:e7:f4:a5:f0:8f: 91:83:69:53:17:f4:bb:7a:89:08:1b:08:43:06:f9:ed:b2:c8: da:8e:c2:8e:cf:fd:99:fd:cf:1c:87:51:24:5f:b4:9f:1c:c5: c4:b4:11:d8:3e:c6:e7:87:77:8f:23:30:3d:d5:92:7e:cb:ef: e1:2d:a0:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+B6mpe6diRGmkpliJAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDViZjBiMDgwZDNiNGYwZjkyZjAzNmQ3MTc0MDg2OTMwNjY1MTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIhEbi/s6+tFYRNJahzmMk2maSfB 5egYGON54rfAKHv2Bra+83RqPbyuzJfNpa1v6x3MZwoVgf2v4IXol1uRPyVZ5XDT OJt2+aGC1AypFyr0pvF65t497Ip+xBpMdLoXONe0kgN4MSGAqmqlqHYFrq9ycA+H lVpVPVtKF8DL9D7z3BOayPgvClumV7kF1397LxDuBwzWhFZ/nTZ/+0RX3fnxjneq EIF2jHVpuwAhOGjgeFhzzWDwCVM25vlv5DqN3niCvzuKXV1NxTy/dtTorz2BZhLe n8dA2B4XeTTNq013H0Z/2MRaw5ezME6cqQvZslgDTKHomdSxm8OKK5QGKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM1b8LCA07Tw+S8DbXF0CGkwZlE8MB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvelZ2d3NJRFR0UEQ1THdOdGNYUUlhVEJtVVR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvBUGMA0G CSqGSIb3DQEBCwUAA4IBAQAl0Ha8oHQBTcPCNbHeJRJ087tE1hqDZFDj3v94g86O Qx8SodkIa6JdeWcAAkpl68UAc10YoJ/5cOTwXkSD5j5nhwlxddTkBdxJIEIpPjTi BKHkfJUvyjoL6rOeMa34D1YQ9+8cx7svKWs8GzRXPH+TrIvTwZdf7mLUJ3fzKhho mDoUgDx2QkI+eHf7uctWWJ4sbgioXOu/QeRhAxTzjtq4X/EYs54Tf5S1be2JUVDT AqLae1j91VmdaJhySaN2PmbG5/Sl8I+Rg2lTF/S7eokIGwhDBvntssjajsKOz/2Z /c8ch1EkX7SfHMXEtBHYPsbnh3ePIzA91ZJ+y+/hLaDb -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:25 2026 by rpki-client