This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/zwoEbeG7cznNdo6CQKTmEF-I2Ro.roa File: zwoEbeG7cznNdo6CQKTmEF-I2Ro.roa (raw, json) Hash identifier: 0oxPeHzwQq5Edhpd0nUDh0o4qqb8SIRthaXI0l4px8g= Subject key identifier: CF:0A:04:6D:E1:BB:73:39:CD:76:8E:82:40:A4:E6:10:5F:88:D9:1A Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8CCC0EE89986741453AFECD748D4C Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/zwoEbeG7cznNdo6CQKTmEF-I2Ro.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199577 IP address blocks: 80.233.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cc:c0:ee:89:98:67:41:45:3a:fe:cd:74:8d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf0a046de1bb7339cd768e8240a4e6105f88d91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:6a:d7:3f:3b:25:53:46:ae:27:bc:4e:0f: b2:b2:42:f4:82:47:49:84:74:4e:12:df:9b:36:94: b1:5a:0f:91:87:27:04:1b:eb:7e:05:55:4a:6b:ee: b7:e5:7a:ba:e1:cd:dd:05:a5:af:e1:fc:20:75:5a: fb:8d:64:8f:92:3a:d3:69:1d:b1:d7:8b:c5:dd:c8: b7:36:54:fe:df:12:bf:ed:1d:e2:a4:2c:a6:f1:10: 28:28:fe:fe:3d:bd:d5:93:e7:de:3c:72:fd:27:70: 6d:02:19:87:f4:cf:d0:36:21:ad:25:55:11:98:32: 75:a8:b7:9d:cb:6d:45:0d:fd:e2:94:83:c7:93:83: bc:0c:81:1a:91:16:f5:01:5e:07:cc:5b:7f:73:cd: b3:c0:ad:5b:f1:4f:78:f6:b6:63:76:1f:39:85:33: e7:65:a1:24:6e:cd:b4:1b:9c:4a:f8:93:28:f6:2a: 30:bc:2b:06:7f:5c:7c:72:ac:6a:74:1c:8a:cd:8c: bc:52:50:1d:a1:15:a3:a1:91:93:78:0c:b7:2c:50: 75:72:4d:cc:43:c4:7b:f8:ca:ca:e2:32:c7:dc:00: e4:19:05:d1:c4:25:e7:aa:44:a6:61:36:de:2d:56: 91:3e:ba:15:e7:d7:22:03:6a:b5:2a:14:db:b1:7d: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0A:04:6D:E1:BB:73:39:CD:76:8E:82:40:A4:E6:10:5F:88:D9:1A X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/zwoEbeG7cznNdo6CQKTmEF-I2Ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.233.187.0/24 Signature Algorithm: sha256WithRSAEncryption ab:f0:65:b4:bc:ac:7a:fe:dd:c3:11:3b:4b:6d:3e:f8:35:27: 14:77:f4:1e:40:8f:f6:46:45:3a:3e:0a:c9:f6:c5:e2:ea:9c: 8f:06:e6:7d:ae:28:69:9c:21:bf:cf:81:0a:1e:50:40:1f:ba: 3e:fe:d9:cd:4d:64:0b:a4:d0:40:7e:6e:8f:c7:c8:95:e7:4f: 4b:7b:b3:16:d5:0e:c8:3d:d7:46:37:34:e5:38:03:4d:62:cd: e7:8b:ad:b2:68:23:db:f0:ee:e1:59:6d:e5:21:0e:29:c3:f9: f8:ce:da:b8:51:65:49:a5:df:a3:7e:d6:8d:1c:63:f6:c2:00: 6a:f2:e1:e3:15:38:db:e1:e2:27:bd:c9:41:86:98:dc:5f:c3: 8a:32:da:7c:55:6c:08:86:c4:37:d6:dd:f3:07:77:5f:24:82: 2e:8c:37:a9:68:ba:1c:92:bf:89:56:42:35:33:3a:5f:22:4b: ab:b6:ca:bc:bf:00:b3:ef:39:53:2e:38:a7:32:62:7d:b8:d9: 0f:fe:b7:30:df:f4:f3:ed:59:43:6b:12:df:b8:8a:31:9f:ee: 3e:41:83:2d:b5:59:18:24:64:88:88:e6:e1:24:ae:ad:ac:16: 13:d2:57:61:b7:5d:bd:c0:16:8c:f4:69:63:99:01:ba:76:49: d4:6d:0e:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMzA7omYZ0FFOv7NdI1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjBhMDQ2ZGUxYmI3MzM5Y2Q3NjhlODI0MGE0ZTYxMDVmODhkOTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI9q1z87JVNGrie8Tg+yskL0gkdJ hHROEt+bNpSxWg+RhycEG+t+BVVKa+635Xq64c3dBaWv4fwgdVr7jWSPkjrTaR2x 14vF3ci3NlT+3xK/7R3ipCym8RAoKP7+Pb3Vk+fePHL9J3BtAhmH9M/QNiGtJVUR mDJ1qLedy21FDf3ilIPHk4O8DIEakRb1AV4HzFt/c82zwK1b8U949rZjdh85hTPn ZaEkbs20G5xK+JMo9iowvCsGf1x8cqxqdByKzYy8UlAdoRWjoZGTeAy3LFB1ck3M Q8R7+MrK4jLH3ADkGQXRxCXnqkSmYTbeLVaRProV59ciA2q1KhTbsX047QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8KBG3hu3M5zXaOgkCk5hBfiNkaMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvendvRWJlRzdjem5OZG82Q1FLVG1FRi1JMlJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOm7MA0G CSqGSIb3DQEBCwUAA4IBAQCr8GW0vKx6/t3DETtLbT74NScUd/QeQI/2RkU6PgrJ 9sXi6pyPBuZ9rihpnCG/z4EKHlBAH7o+/tnNTWQLpNBAfm6Px8iV509Le7MW1Q7I PddGNzTlOANNYs3ni62yaCPb8O7hWW3lIQ4pw/n4ztq4UWVJpd+jftaNHGP2wgBq 8uHjFTjb4eInvclBhpjcX8OKMtp8VWwIhsQ31t3zB3dfJIIujDepaLockr+JVkI1 MzpfIkurtsq8vwCz7zlTLjinMmJ9uNkP/rcw3/Tz7VlDaxLfuIoxn+4+QYMttVkY JGSIiObhJK6trBYT0ldht129wBaM9GljmQG6dknUbQ5/ -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:19 2026 by rpki-client