This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/zpkqiEr6OZxmuI9IUaACDy7tIx8.roa File: zpkqiEr6OZxmuI9IUaACDy7tIx8.roa (raw, json) Hash identifier: p3BKr125MAv68ooq8iK1eGRE8YMR/faVc2WdwuZpJ74= Subject key identifier: CE:99:2A:88:4A:FA:39:9C:66:B8:8F:48:51:A0:02:0F:2E:ED:23:1F Certificate issuer: /CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3 Certificate serial: 019B77587F885CE7B82CEA68422250EAFA78 Authority key identifier: 10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/zpkqiEr6OZxmuI9IUaACDy7tIx8.roa Signing time: Thu 01 Jan 2026 02:17:26 +0000 ROA not before: Thu 01 Jan 2026 02:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51114 IP address blocks: 178.250.80.0/21 maxlen: 24 2a03:b400::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7f:88:5c:e7:b8:2c:ea:68:42:22:50:ea:fa:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3 Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce992a884afa399c66b88f4851a0020f2eed231f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:71:1f:f0:21:cd:b8:f3:dd:6a:da:f2:0a: cc:d8:52:df:39:a3:cb:26:ba:5d:71:14:dc:80:35: 26:47:57:0e:f7:1e:b5:be:cd:42:a1:e5:98:53:4c: 4a:25:e0:4e:a3:82:7a:ad:0c:5a:fa:a7:f9:29:0e: 13:a8:7c:a1:d4:f4:26:ef:1a:fe:71:8e:0c:80:77: 62:af:f3:cc:bb:6f:6b:70:b2:c3:de:ff:38:f5:d2: ad:4c:23:03:ae:3e:56:37:01:ad:03:23:0c:db:f8: ff:e8:a9:3e:ee:e0:29:4b:b7:b9:66:a3:f7:8d:f4: a8:c4:1b:ff:70:d7:4f:3e:ac:3b:39:50:70:11:dd: fb:24:17:59:8e:2d:e4:45:c1:fe:47:b4:db:58:1a: 16:f7:2e:95:8b:7b:5d:f0:7c:c3:89:d8:6a:8b:cc: ba:05:c0:2e:e2:63:01:92:f4:4e:e6:f0:df:cf:e4: 4d:6b:58:f6:3a:39:a2:2d:b3:05:72:fa:f0:77:1d: d2:e3:72:a5:26:c7:a8:09:72:5d:a9:3d:56:06:75: 9f:6a:03:2c:e4:3f:e4:cf:29:26:53:d3:c8:52:26: 6e:a9:5c:a4:bb:5b:b5:f8:f7:ab:a8:3c:33:f4:94: eb:e9:8a:b4:1d:30:a4:22:28:05:2f:6e:0c:e7:96: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:99:2A:88:4A:FA:39:9C:66:B8:8F:48:51:A0:02:0F:2E:ED:23:1F X509v3 Authority Key Identifier: keyid:10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/zpkqiEr6OZxmuI9IUaACDy7tIx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.80.0/21 IPv6: 2a03:b400::/32 Signature Algorithm: sha256WithRSAEncryption bc:90:31:77:ee:12:9a:9f:41:1d:77:78:55:c0:c3:92:1f:e4: af:27:a5:74:53:fe:71:de:dd:8e:3b:92:58:19:cb:4e:00:18: 82:48:3c:ff:35:7c:d5:bb:52:72:0c:77:b0:c2:73:8d:f2:0a: 33:36:e7:67:9a:b1:c1:3d:5c:9f:d7:04:81:d7:4a:fa:de:e3: 48:75:bb:96:22:b4:27:14:a1:70:c4:0e:43:f9:5e:0f:5a:91: 97:03:7a:31:0e:3f:7f:a2:8c:2f:5e:d2:f3:34:bc:22:74:61: e6:0a:1c:81:c4:56:5c:62:87:00:e9:18:51:a8:21:96:25:4e: 24:f0:6c:3d:61:b8:c7:c2:8f:80:e3:9f:8f:38:8a:90:07:6e: 49:2b:14:f5:bf:ca:df:f7:9a:4e:ad:08:e3:1f:14:02:48:6c: 7e:f0:ab:d4:49:cb:c5:19:d1:2c:ad:95:d9:e5:a2:ff:fb:c4: b9:b0:8e:c0:2a:34:39:97:e1:f1:ef:11:b4:6a:d4:73:20:b9: 66:0e:8e:28:0d:2d:a1:a4:b3:e0:c9:69:84:c9:0b:bd:78:53: 1f:d0:9c:51:16:32:0b:32:77:5c:f5:08:95:bc:21:a5:9a:37: b4:d3:dc:bd:54:9c:42:15:4d:be:ee:d6:2c:b8:ef:59:cf:a9: 28:70:ef:63 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WH+IXOe4LOpoQiJQ6vp4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTViYThkNDlhMmRkMWU5MWMzYWFjY2JjZjE0NGYwNDU5 M2YxYjMwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTk5MmE4ODRhZmEzOTljNjZiODhmNDg1MWEwMDIwZjJlZWQyMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufJxH/Ahzbjz3Wra8grM2FLfOaPL JrpdcRTcgDUmR1cO9x61vs1CoeWYU0xKJeBOo4J6rQxa+qf5KQ4TqHyh1PQm7xr+ cY4MgHdir/PMu29rcLLD3v849dKtTCMDrj5WNwGtAyMM2/j/6Kk+7uApS7e5ZqP3 jfSoxBv/cNdPPqw7OVBwEd37JBdZji3kRcH+R7TbWBoW9y6Vi3td8HzDidhqi8y6 BcAu4mMBkvRO5vDfz+RNa1j2OjmiLbMFcvrwdx3S43KlJseoCXJdqT1WBnWfagMs 5D/kzykmU9PIUiZuqVyku1u1+PerqDwz9JTr6Yq0HTCkIigFL24M55aflQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM6ZKohK+jmcZriPSFGgAg8u7SMfMB8GA1UdIwQY MBaAFBBVuo1Jot0ekcOqzLzxRPBFk/GzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lMWQ4ZjgtZGJkZC00N2EzLThjNjgt NGVkYWY3N2EwZTVkLzEvenBrcWlFcjZPWnhtdUk5SVVhQUNEeTd0SXg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lMWQ4ZjgtZGJkZC00N2EzLThjNjgtNGVkYWY3N2EwZTVk LzEvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDsvpQMA0E AgACMAcDBQAqA7QAMA0GCSqGSIb3DQEBCwUAA4IBAQC8kDF37hKan0Edd3hVwMOS H+SvJ6V0U/5x3t2OO5JYGctOABiCSDz/NXzVu1JyDHewwnON8gozNudnmrHBPVyf 1wSB10r63uNIdbuWIrQnFKFwxA5D+V4PWpGXA3oxDj9/oowvXtLzNLwidGHmChyB xFZcYocA6RhRqCGWJU4k8Gw9YbjHwo+A45+POIqQB25JKxT1v8rf95pOrQjjHxQC SGx+8KvUScvFGdEsrZXZ5aL/+8S5sI7AKjQ5l+Hx7xG0atRzILlmDo4oDS2hpLPg yWmEyQu9eFMf0JxRFjILMndc9QiVvCGlmje009y9VJxCFU2+7tYsuO9Zz6kocO9j -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:11 2026 by rpki-client