This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/0ZSPMOhVl_CYEffmgJIA-ZebrN8.roa File: 0ZSPMOhVl_CYEffmgJIA-ZebrN8.roa (raw, json) Hash identifier: 9FNLm9UezI9LWG0EYY6elTehFhNHqrh8PSFbqazgLkI= Subject key identifier: D1:94:8F:30:E8:55:97:F0:98:11:F7:E6:80:92:00:F9:97:9B:AC:DF Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782 Certificate serial: 019B7BA3E7A777C0148A55B4F31CC493FD4D Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/0ZSPMOhVl_CYEffmgJIA-ZebrN8.roa Signing time: Thu 01 Jan 2026 22:18:17 +0000 ROA not before: Thu 01 Jan 2026 22:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204835 IP address blocks: 45.11.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e7:a7:77:c0:14:8a:55:b4:f3:1c:c4:93:fd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782 Validity Not Before: Jan 1 22:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1948f30e85597f09811f7e6809200f9979bacdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:18:2d:58:ed:5b:1e:a3:c0:06:90:35:2b: 6a:61:7e:3b:05:26:32:31:9a:c3:a3:55:b8:52:1f: ca:09:81:45:b0:5f:4d:2a:da:ad:1e:87:b8:29:11: b2:e4:6e:17:27:98:d3:af:fb:dc:24:f6:7f:20:d8: d0:82:13:8a:20:3a:92:be:af:75:a3:a2:a4:1a:7d: 4b:f0:e1:41:ba:05:f2:b0:e8:6d:14:ac:b5:36:38: c9:20:83:24:4e:57:c8:13:97:c9:93:e2:34:57:89: 80:cd:dd:ee:f0:09:6f:4f:a2:fe:5a:45:39:ae:40: bd:2d:d7:10:0c:c8:5f:b1:c2:d3:90:f6:9c:f9:63: 27:8d:b4:13:cb:a8:76:ae:8c:c3:4c:81:89:bb:88: bf:00:19:c1:f3:57:5c:f1:65:e8:41:b4:92:c0:06: 11:55:55:a6:57:1a:ee:87:6a:2d:79:c0:35:5e:f6: f8:5c:3b:33:2d:d3:a0:df:07:e5:f7:2f:1d:c9:0a: f2:12:94:1c:0c:c2:48:a5:a3:46:3e:90:c8:71:c2: 64:a4:40:29:8e:3b:a5:82:0e:bb:b5:e7:4f:7b:0e: 3d:1c:e8:d6:76:9f:03:ee:82:cc:3e:12:fa:77:9e: 9b:9c:ea:09:d6:21:6e:df:d9:6c:b3:c1:b0:5c:2f: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:94:8F:30:E8:55:97:F0:98:11:F7:E6:80:92:00:F9:97:9B:AC:DF X509v3 Authority Key Identifier: keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/0ZSPMOhVl_CYEffmgJIA-ZebrN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.208.0/24 Signature Algorithm: sha256WithRSAEncryption 79:b0:94:4b:6d:6e:41:a1:b3:d2:eb:16:48:7c:17:0f:65:45: 67:38:68:9d:13:a7:88:da:2f:20:c7:ae:bb:05:be:14:54:8d: f8:c8:60:b4:75:eb:54:90:fd:f7:66:2f:7f:fc:d0:09:73:1f: 5a:6d:b0:b2:8e:da:8b:e8:d8:9a:93:39:47:43:46:57:3a:03: b2:ec:1a:0b:b9:ed:60:4a:43:69:2f:d5:c1:ef:90:2c:7e:64: 33:ce:48:4a:c5:a0:8b:5d:48:17:9d:5b:39:5b:ab:fa:f9:23: 06:2b:9c:28:70:47:b8:6e:7c:04:aa:7f:a7:87:ca:a8:82:05: b9:20:a4:4e:5e:4e:68:a9:6f:21:8d:3b:27:a7:e4:ef:37:32: d7:c7:a1:1c:ed:dd:1e:07:79:eb:aa:ee:f3:56:2d:a3:5c:11: 8b:5d:ee:a5:b5:24:ee:49:18:20:a4:a8:41:60:08:69:17:70: 41:6d:28:4b:96:77:d2:b2:6b:df:fb:14:a9:3a:3a:3a:13:37: 1d:c8:84:0c:63:ec:65:e6:1e:6a:07:be:b6:05:7c:8c:9b:bf: a6:ac:92:06:ed:81:6e:77:b6:b8:3b:81:98:b5:ee:8b:d5:2a: c7:8e:1c:31:c7:6d:80:9b:43:6e:65:93:45:83:f5:3e:99:b7: 05:b7:1d:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+end8AUilW08xzEk/1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDYwMDQwZWYzYTA4MjNhYTk3M2YwZDA1OTJiMWRkYTgw OGY3ODIwHhcNMjYwMTAxMjIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTk0OGYzMGU4NTU5N2YwOTgxMWY3ZTY4MDkyMDBmOTk3OWJhY2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSMYLVjtWx6jwAaQNStqYX47BSYy MZrDo1W4Uh/KCYFFsF9NKtqtHoe4KRGy5G4XJ5jTr/vcJPZ/INjQghOKIDqSvq91 o6KkGn1L8OFBugXysOhtFKy1NjjJIIMkTlfIE5fJk+I0V4mAzd3u8AlvT6L+WkU5 rkC9LdcQDMhfscLTkPac+WMnjbQTy6h2rozDTIGJu4i/ABnB81dc8WXoQbSSwAYR VVWmVxruh2otecA1Xvb4XDszLdOg3wfl9y8dyQryEpQcDMJIpaNGPpDIccJkpEAp jjulgg67tedPew49HOjWdp8D7oLMPhL6d56bnOoJ1iFu39lss8GwXC/8kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGUjzDoVZfwmBH35oCSAPmXm6zfMB8GA1UdIwQY MBaAFIwGAEDvOggjqpc/DQWSsd2oCPeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4Yjkt NGU0YTM1ZGQzNjc3LzEvMFpTUE1PaFZsX0NZRWZmbWdKSUEtWmVick44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4YjktNGU0YTM1ZGQzNjc3 LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQvQMA0G CSqGSIb3DQEBCwUAA4IBAQB5sJRLbW5BobPS6xZIfBcPZUVnOGidE6eI2i8gx667 Bb4UVI34yGC0detUkP33Zi9//NAJcx9abbCyjtqL6NiakzlHQ0ZXOgOy7BoLue1g SkNpL9XB75AsfmQzzkhKxaCLXUgXnVs5W6v6+SMGK5wocEe4bnwEqn+nh8qoggW5 IKROXk5oqW8hjTsnp+TvNzLXx6Ec7d0eB3nrqu7zVi2jXBGLXe6ltSTuSRggpKhB YAhpF3BBbShLlnfSsmvf+xSpOjo6EzcdyIQMY+xl5h5qB762BXyMm7+mrJIG7YFu d7a4O4GYte6L1SrHjhwxx22Am0NuZZNFg/U+mbcFtx0k -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:50 2026 by rpki-client