This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/zohxQuS5AskoBq_QI8wS3eLXlJg.roa File: zohxQuS5AskoBq_QI8wS3eLXlJg.roa (raw, json) Hash identifier: YoRSJtnJP6z9m3eQuabiT5K2smOYe/Ori3Z7WmULeCM= Subject key identifier: CE:88:71:42:E4:B9:02:C9:28:06:AF:D0:23:CC:12:DD:E2:D7:94:98 Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Certificate serial: 019B7F855AD9B446E4618EFA977604B1FBB6 Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/zohxQuS5AskoBq_QI8wS3eLXlJg.roa Signing time: Fri 02 Jan 2026 16:23:24 +0000 ROA not before: Fri 02 Jan 2026 16:23:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15652 IP address blocks: 79.133.196.96/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5a:d9:b4:46:e4:61:8e:fa:97:76:04:b1:fb:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Validity Not Before: Jan 2 16:23:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce887142e4b902c92806afd023cc12dde2d79498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:a8:58:9b:b5:89:ee:c0:71:40:ef:0a:d8: 44:32:59:7f:9f:5a:ff:4b:63:b1:8a:7f:ed:48:2b: b7:ea:5a:4d:46:1a:0b:e8:53:64:15:77:2a:06:d2: 49:c1:30:01:9d:6e:19:8a:9a:a3:1e:fd:b3:2d:82: 39:5b:55:a6:c4:96:41:1b:0f:ba:16:ba:9f:aa:27: 16:93:be:e7:e5:49:88:9c:6c:00:6d:bc:51:0d:4a: e3:bb:e4:01:a8:73:c6:49:4d:24:24:0e:8a:b3:eb: 0b:7e:dc:66:3f:a5:48:ee:03:15:d1:e5:71:c4:4f: af:2e:0c:60:e4:ee:61:32:80:4b:3b:6b:93:ac:f7: a8:17:a9:73:6a:b0:39:3b:f2:5e:a4:ed:9f:29:a1: 57:53:de:23:9a:90:3c:97:30:f8:16:ac:b1:5b:2f: 26:8c:06:30:c5:d7:78:1e:40:72:1c:61:d5:76:b2: aa:99:5b:d8:b7:b5:33:87:ec:1e:83:03:13:97:11: 5f:25:86:5d:cc:e5:03:a2:7d:da:65:bf:a8:84:8d: 94:72:a0:7f:a4:7e:58:db:24:04:e1:d5:56:f7:d1: 14:6d:69:14:54:66:2c:7f:f2:c6:4d:18:2e:dc:46: 7d:87:5a:87:34:be:fa:32:ed:83:14:a1:73:b2:c9: a5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:88:71:42:E4:B9:02:C9:28:06:AF:D0:23:CC:12:DD:E2:D7:94:98 X509v3 Authority Key Identifier: keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/zohxQuS5AskoBq_QI8wS3eLXlJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.133.196.96/27 Signature Algorithm: sha256WithRSAEncryption c7:17:4c:a0:21:e3:e5:a5:18:d9:ac:25:db:8e:13:62:85:bf: 67:e1:ed:31:ec:61:de:c5:2e:ea:37:f8:e6:b5:bd:0e:14:f7: df:d7:0d:25:32:e3:8c:00:8b:ac:b7:7c:5b:8b:5e:eb:6f:3e: 7a:8c:31:26:35:90:67:17:67:bc:6f:4e:8f:52:6a:97:44:ac: 75:28:fc:3f:74:97:a8:0d:2e:1b:b6:44:0c:a5:e3:35:da:49: 3e:14:a8:ae:d6:9d:87:ce:9e:bd:af:19:5b:de:d5:98:e6:bb: d3:7f:2d:9c:1f:01:49:33:a1:51:74:c1:72:9f:ce:96:bd:e2: 43:49:fd:84:70:83:7e:4b:78:07:1f:d8:56:60:96:f1:38:6f: e1:cc:fe:12:d6:3e:19:81:fa:d2:9d:99:3d:9e:61:fc:03:57: 76:4f:95:d8:da:43:5d:7e:d4:3e:1c:2a:0e:48:a5:56:68:77: 63:2f:fe:b0:61:0b:fb:7f:48:42:a1:0d:1b:8c:38:70:b6:70: 03:24:08:99:d9:d1:b3:1d:43:0f:1c:64:49:5e:37:c3:0e:69: c9:20:57:a7:6a:5b:95:5e:4f:0d:5c:38:63:a8:36:41:f7:1a: ab:7e:4b:0d:67:cf:4b:eb:8d:fc:cc:25:8d:8e:85:47:97:27: 67:b1:68:68 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hVrZtEbkYY76l3YEsfu2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzg4NDAyMWQxYjAyZThjMTZiNTU1NzQzZGZlYjlkYThl NDhlMzEwHhcNMjYwMTAyMTYyMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTg4NzE0MmU0YjkwMmM5MjgwNmFmZDAyM2NjMTJkZGUyZDc5NDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvaoWJu1ie7AcUDvCthEMll/n1r/ S2Oxin/tSCu36lpNRhoL6FNkFXcqBtJJwTABnW4ZipqjHv2zLYI5W1WmxJZBGw+6 FrqfqicWk77n5UmInGwAbbxRDUrju+QBqHPGSU0kJA6Ks+sLftxmP6VI7gMV0eVx xE+vLgxg5O5hMoBLO2uTrPeoF6lzarA5O/JepO2fKaFXU94jmpA8lzD4FqyxWy8m jAYwxdd4HkByHGHVdrKqmVvYt7Uzh+wegwMTlxFfJYZdzOUDon3aZb+ohI2UcqB/ pH5Y2yQE4dVW99EUbWkUVGYsf/LGTRgu3EZ9h1qHNL76Mu2DFKFzssmlXwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFM6IcULkuQLJKAav0CPMEt3i15SYMB8GA1UdIwQY MBaAFNw4hAIdGwLowWtVV0Pf652o5I4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEt ZDhiNGUwZDBkNmQ1LzEvem9oeFF1UzVBc2tvQnFfUUk4d1MzZUxYbEpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEtZDhiNGUwZDBkNmQ1 LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFT4XEYDAN BgkqhkiG9w0BAQsFAAOCAQEAxxdMoCHj5aUY2awl244TYoW/Z+HtMexh3sUu6jf4 5rW9DhT339cNJTLjjACLrLd8W4te628+eowxJjWQZxdnvG9Oj1Jql0SsdSj8P3SX qA0uG7ZEDKXjNdpJPhSortadh86eva8ZW97VmOa7038tnB8BSTOhUXTBcp/Olr3i Q0n9hHCDfkt4Bx/YVmCW8Thv4cz+EtY+GYH60p2ZPZ5h/ANXdk+V2NpDXX7UPhwq DkilVmh3Yy/+sGEL+39IQqENG4w4cLZwAyQImdnRsx1DDxxkSV43ww5pySBXp2pb lV5PDVw4Y6g2Qfcaq35LDWfPS+uN/MwljY6FR5cnZ7FoaA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:16:41 2026 by rpki-client