This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/z_xGZhxe5MsuVI5qesbUYtoyclQ.roa File: z_xGZhxe5MsuVI5qesbUYtoyclQ.roa (raw, json) Hash identifier: ++hbqD2qSBT4GXZ1p8GcJIbdCQiGlp4k1ahNQTGmz14= Subject key identifier: CF:FC:46:66:1C:5E:E4:CB:2E:54:8E:6A:7A:C6:D4:62:DA:32:72:54 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8CAAF8BF239219059979886B5C83E Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/z_xGZhxe5MsuVI5qesbUYtoyclQ.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59967 IP address blocks: 87.246.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ca:af:8b:f2:39:21:90:59:97:98:86:b5:c8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cffc46661c5ee4cb2e548e6a7ac6d462da327254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:df:d5:fe:46:fb:c0:86:3c:25:23:1a:ab: 3f:91:ee:57:fd:b6:bd:7b:e6:56:df:62:f2:97:c9: 5e:99:2b:6b:f1:0e:d8:c0:34:84:44:b8:53:d9:d8: 24:4e:21:90:6e:af:9d:9e:60:04:c0:5f:1c:05:36: 40:ba:96:dd:50:28:ca:9e:46:13:1a:eb:fb:db:2b: f2:82:be:b8:9b:1b:e6:32:9f:21:97:c8:df:65:e1: b9:1e:41:cc:26:bb:3d:b3:8c:65:78:53:c6:7d:90: 9c:60:40:88:af:5a:ae:70:78:70:e5:9b:55:5e:1c: 56:f0:27:11:c7:e2:21:42:90:a2:13:cd:9e:3a:1b: b4:b8:f4:7a:38:17:c3:bc:0b:21:fb:cd:8e:dc:01: d4:55:dd:05:4c:d0:e2:d6:a0:e8:a5:42:5a:5f:b5: 4f:e0:f4:ff:27:1e:db:71:7a:6d:12:a0:a7:30:81: 92:b8:00:99:84:54:46:a9:07:1c:61:eb:5e:73:ab: ea:fc:18:8b:40:4a:16:2d:54:69:f3:40:a6:e4:44: a3:b4:b6:29:7e:cb:73:25:f3:2d:7d:77:04:5e:c4: 90:c3:b3:12:35:4f:fd:0e:57:1e:c5:30:2f:32:ca: 2b:2e:e4:26:ee:dc:6e:06:b3:d3:99:08:3e:b9:81: 1e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FC:46:66:1C:5E:E4:CB:2E:54:8E:6A:7A:C6:D4:62:DA:32:72:54 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/z_xGZhxe5MsuVI5qesbUYtoyclQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.246.163.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:e1:6e:92:47:08:15:e5:00:b0:b4:8a:43:22:0d:be:4e:de: 1c:7e:40:8e:a1:cd:27:2d:5e:52:13:24:1b:19:18:10:f8:d8: 9b:4a:87:ae:00:5c:fb:1e:85:1a:8a:30:54:9a:44:2a:7a:ba: 50:99:07:17:11:56:a1:4d:56:b8:93:c8:ef:13:09:be:57:58: e6:4b:32:0c:6b:1d:52:c6:6c:58:f7:da:bf:61:e4:47:db:9d: b3:82:d6:5e:b5:d3:7f:9a:03:1d:c0:43:a5:ed:74:28:ae:95: 92:91:95:74:5e:b4:45:7a:44:98:6d:e6:a4:e3:f5:15:0b:7a: 26:4c:75:a0:c4:9f:43:10:a3:8d:9f:9e:98:f8:04:b5:fe:04: bd:67:e5:30:f6:93:e6:da:af:9f:cd:8e:c8:05:f5:19:8c:76: 6d:22:bd:f3:00:37:24:fe:fe:ae:f4:55:6b:de:ab:d4:ba:f7: 1b:a1:0c:09:ac:6a:d1:ee:72:7c:c0:e3:c4:f7:11:8a:7d:bf: d9:c5:a5:71:4f:51:80:e7:22:ab:ca:ec:96:83:d7:3d:99:2e: 97:ed:33:23:00:92:bb:8e:37:17:6b:a6:8d:8d:20:36:1d:0e: c1:b7:8d:8b:75:3a:94:b7:41:5b:f0:5b:62:64:3c:56:2d:7e: 54:b7:d1:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMqvi/I5IZBZl5iGtcg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmZjNDY2NjFjNWVlNGNiMmU1NDhlNmE3YWM2ZDQ2MmRhMzI3MjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrHf1f5G+8CGPCUjGqs/ke5X/ba9 e+ZW32Lyl8lemStr8Q7YwDSERLhT2dgkTiGQbq+dnmAEwF8cBTZAupbdUCjKnkYT Guv72yvygr64mxvmMp8hl8jfZeG5HkHMJrs9s4xleFPGfZCcYECIr1qucHhw5ZtV XhxW8CcRx+IhQpCiE82eOhu0uPR6OBfDvAsh+82O3AHUVd0FTNDi1qDopUJaX7VP 4PT/Jx7bcXptEqCnMIGSuACZhFRGqQccYetec6vq/BiLQEoWLVRp80Cm5ESjtLYp fstzJfMtfXcEXsSQw7MSNU/9DlcexTAvMsorLuQm7txuBrPTmQg+uYEe3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/8RmYcXuTLLlSOanrG1GLaMnJUMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvel94R1poeGU1TXN1Vkk1cWVzYlVZdG95Y2xRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/ajMA0G CSqGSIb3DQEBCwUAA4IBAQBv4W6SRwgV5QCwtIpDIg2+Tt4cfkCOoc0nLV5SEyQb GRgQ+NibSoeuAFz7HoUaijBUmkQqerpQmQcXEVahTVa4k8jvEwm+V1jmSzIMax1S xmxY99q/YeRH252zgtZetdN/mgMdwEOl7XQorpWSkZV0XrRFekSYbeak4/UVC3om THWgxJ9DEKONn56Y+AS1/gS9Z+Uw9pPm2q+fzY7IBfUZjHZtIr3zADck/v6u9FVr 3qvUuvcboQwJrGrR7nJ8wOPE9xGKfb/ZxaVxT1GA5yKryuyWg9c9mS6X7TMjAJK7 jjcXa6aNjSA2HQ7Bt42LdTqUt0Fb8FtiZDxWLX5Ut9Gc -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:57 2026 by rpki-client