This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ZqakqTE7GYtyLXmG9nVlhVHIcRY.roa File: ZqakqTE7GYtyLXmG9nVlhVHIcRY.roa (raw, json) Hash identifier: b9trciA1gVlZjkEulQY+drBn/88cZkzBxnJ6Up6Zkoc= Subject key identifier: 66:A6:A4:A9:31:3B:19:8B:72:2D:79:86:F6:75:65:85:51:C8:71:16 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8CBE1C421CD1A180FF292564C18AF Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ZqakqTE7GYtyLXmG9nVlhVHIcRY.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198116 IP address blocks: 87.110.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cb:e1:c4:21:cd:1a:18:0f:f2:92:56:4c:18:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66a6a4a9313b198b722d7986f675658551c87116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:07:a5:d2:41:23:2d:32:11:86:b4:18:7a: dc:69:1b:14:21:b5:f1:f6:e2:e8:a4:cb:e4:57:95: 12:d9:bb:59:1b:db:ac:d3:e7:50:8f:00:8c:da:07: 19:f7:7c:31:27:50:05:1b:77:b1:f2:6c:95:83:f4: c7:02:d2:fc:d4:b7:5b:84:ae:c9:79:f9:07:c0:f5: dc:79:5e:44:87:95:8f:74:f0:30:cc:c3:eb:bc:83: e8:a7:b3:8d:26:0e:51:ed:0d:e0:d9:41:98:b8:bd: af:00:29:84:b0:6d:22:1c:a0:44:62:0b:bc:cf:fd: 77:96:3e:c9:a5:3d:90:13:40:b6:be:ef:16:fb:c6: 3e:14:e8:3d:39:98:69:ae:4f:69:b5:5a:58:e6:d2: 46:c1:7f:8c:90:e2:bc:a6:d3:bf:88:c7:dd:b8:8c: 99:b7:60:58:d9:da:b7:fb:13:41:d2:33:57:1a:b2: 8b:09:21:c1:b0:f9:1c:f9:54:93:1a:91:9a:d1:ec: 51:1f:ca:db:50:5f:d0:08:ef:7c:c0:45:19:12:52: 3d:24:97:8f:b9:72:97:fe:6f:d8:81:2b:d8:68:53: 13:9b:04:79:0c:02:b9:ce:16:d0:4c:78:55:ab:6a: 77:a2:78:50:1c:96:01:4e:5e:d8:61:76:d6:f9:6f: 00:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A6:A4:A9:31:3B:19:8B:72:2D:79:86:F6:75:65:85:51:C8:71:16 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ZqakqTE7GYtyLXmG9nVlhVHIcRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.110.204.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:c2:43:a9:ac:6f:80:a8:55:44:a1:1b:af:6c:bb:94:dc:55: 89:ad:25:dc:eb:8a:5e:19:97:92:c2:7c:4b:8f:f6:27:3a:6e: f9:79:29:be:99:bd:38:8a:9e:51:0b:8b:f1:83:14:ac:1d:23: ae:3a:8b:ad:06:98:23:e2:11:3e:02:2c:16:b1:55:95:a1:72: ec:04:ea:92:dc:f0:32:99:40:46:13:72:4b:de:62:7a:e5:36: bb:c1:2b:74:f7:9c:3c:a1:2e:4f:54:dc:1c:46:dc:0e:71:c3: 87:e9:40:9c:b5:93:55:1d:3d:b2:c4:83:89:6c:ff:35:d5:ff: 45:68:17:90:84:98:60:92:25:18:67:0a:9f:17:59:18:d2:fe: e5:0c:38:bc:9c:b3:7f:77:58:88:8d:85:1c:d9:47:38:95:22: 42:19:3d:db:4f:b7:c7:e5:e8:c1:ba:d0:68:29:5c:12:c8:38: 8e:80:e2:4c:a8:8c:ef:73:c9:6d:6f:1f:d2:17:e1:67:7e:9d: 49:c2:39:63:34:ab:9e:ff:be:e2:53:fd:c1:6a:c7:5a:cb:5d: 26:14:2f:69:b6:0f:cb:1e:7c:c1:b5:3b:60:a6:e8:d7:6a:b8: f4:db:40:60:e1:c4:e9:75:28:26:c2:5b:5d:a1:38:07:6f:26: 34:88:68:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMvhxCHNGhgP8pJWTBivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmE2YTRhOTMxM2IxOThiNzIyZDc5ODZmNjc1NjU4NTUxYzg3MTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l4HpdJBIy0yEYa0GHrcaRsUIbXx 9uLopMvkV5US2btZG9us0+dQjwCM2gcZ93wxJ1AFG3ex8myVg/THAtL81LdbhK7J efkHwPXceV5Eh5WPdPAwzMPrvIPop7ONJg5R7Q3g2UGYuL2vACmEsG0iHKBEYgu8 z/13lj7JpT2QE0C2vu8W+8Y+FOg9OZhprk9ptVpY5tJGwX+MkOK8ptO/iMfduIyZ t2BY2dq3+xNB0jNXGrKLCSHBsPkc+VSTGpGa0exRH8rbUF/QCO98wEUZElI9JJeP uXKX/m/YgSvYaFMTmwR5DAK5zhbQTHhVq2p3onhQHJYBTl7YYXbW+W8AXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGampKkxOxmLci15hvZ1ZYVRyHEWMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvWnFha3FURTdHWXR5TFhtRzluVmxoVkhJY1JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV27MMA0G CSqGSIb3DQEBCwUAA4IBAQBNwkOprG+AqFVEoRuvbLuU3FWJrSXc64peGZeSwnxL j/YnOm75eSm+mb04ip5RC4vxgxSsHSOuOoutBpgj4hE+AiwWsVWVoXLsBOqS3PAy mUBGE3JL3mJ65Ta7wSt095w8oS5PVNwcRtwOccOH6UCctZNVHT2yxIOJbP811f9F aBeQhJhgkiUYZwqfF1kY0v7lDDi8nLN/d1iIjYUc2Uc4lSJCGT3bT7fH5ejButBo KVwSyDiOgOJMqIzvc8ltbx/SF+Fnfp1JwjljNKue/77iU/3Basday10mFC9ptg/L HnzBtTtgpujXarj020Bg4cTpdSgmwltdoTgHbyY0iGiF -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:41 2026 by rpki-client