This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/zZw6yHhTGaiehJRPnKBCXl7fzk0.roa File: zZw6yHhTGaiehJRPnKBCXl7fzk0.roa (raw, json) Hash identifier: JhHdxaOglOY4GqRj3hcRx5vP0XPh9msSmzYnXnjWKKk= Subject key identifier: CD:9C:3A:C8:78:53:19:A8:9E:84:94:4F:9C:A0:42:5E:5E:DF:CE:4D Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530 Certificate serial: 019C41C7B502A3F88437C1E5A5BC4737A81C Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/zZw6yHhTGaiehJRPnKBCXl7fzk0.roa Signing time: Mon 09 Feb 2026 09:42:12 +0000 ROA not before: Mon 09 Feb 2026 09:42:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 194.117.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:c7:b5:02:a3:f8:84:37:c1:e5:a5:bc:47:37:a8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530 Validity Not Before: Feb 9 09:42:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd9c3ac8785319a89e84944f9ca0425e5edfce4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:00:ae:16:83:fa:6d:d2:bd:02:f8:94:f7:c8: ee:ae:60:44:27:08:01:75:c1:94:d4:97:37:17:24: b1:69:95:99:f3:8d:97:a8:3b:d3:e4:dc:96:d4:3b: f6:06:70:85:3e:07:d1:4c:a8:0e:c7:21:4e:b2:92: af:e3:f5:9a:6d:2d:61:2b:7a:23:bd:3f:b6:c9:a7: 3c:ae:51:b9:42:3b:61:16:5d:a3:d6:8b:c9:60:38: 6e:d3:b6:b7:47:32:f6:4b:fb:75:a5:0b:38:7f:94: 2c:e1:61:d5:b5:4b:9c:90:cc:21:42:f9:0f:15:5e: ff:9b:bf:30:28:c4:1a:dc:4a:f5:b9:a3:ee:b1:04: 39:7a:32:01:fa:24:1c:a0:d0:2c:22:98:9f:52:79: 1f:61:3d:af:28:60:0a:36:c4:88:e3:8c:17:35:06: d0:b8:d0:3d:da:3b:d8:d8:ca:81:4f:ab:a6:38:42: e0:2b:77:69:b9:41:35:2f:4a:7e:30:7c:fb:23:e0: 43:e4:91:36:e4:f9:ee:20:29:e5:90:6d:c3:a3:0d: 28:89:7a:04:98:5c:a7:ef:2e:5e:e0:9c:ce:b1:67: f2:ac:70:6e:9c:f1:be:3e:9d:ef:21:e8:a6:78:ec: 94:e0:20:e7:7a:d7:a5:2d:13:bf:c5:08:41:b0:73: 49:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9C:3A:C8:78:53:19:A8:9E:84:94:4F:9C:A0:42:5E:5E:DF:CE:4D X509v3 Authority Key Identifier: keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/zZw6yHhTGaiehJRPnKBCXl7fzk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.64.0/24 Signature Algorithm: sha256WithRSAEncryption 20:4a:4e:17:e2:13:25:62:c8:3d:d2:7a:c4:77:6b:7c:32:41: 9d:d8:1b:48:d8:0e:12:b7:7b:02:d4:5b:18:0e:f4:93:bc:4f: ae:7a:75:58:78:4e:00:59:ad:a8:5f:6c:a1:d7:a0:16:c1:b5: b4:de:42:b8:38:dc:af:71:99:46:6a:66:fc:7f:30:10:96:58: 6d:dc:2f:48:97:16:7e:2d:3b:8d:9b:22:78:8a:8a:5b:51:38: 33:45:03:de:40:8e:55:e8:1a:e3:de:75:9d:50:c9:3e:f5:c0: 05:8c:10:4b:2e:8e:31:b9:cc:df:49:3d:67:4a:32:9e:e1:ca: 6b:a5:c9:e4:3b:6a:da:e1:5e:20:c4:54:9a:66:fa:58:3f:8a: b9:b2:4f:02:c9:78:9c:45:a4:d6:ff:bf:d1:97:1c:fa:64:9b: 6c:c7:c3:c0:2e:33:8f:37:aa:fa:d7:02:9c:a7:0c:42:b8:61: 12:ab:8a:4a:b4:98:31:7f:45:7e:8c:af:2c:c0:b1:66:1f:74: 69:46:3e:ab:71:32:d0:6c:aa:a8:ea:13:b9:c0:8b:ee:7e:91: 21:16:68:05:de:9e:fd:10:5d:b0:82:2c:6d:ac:3f:ab:d9:a0: ef:ab:ba:bf:ca:78:f7:45:a8:9d:ba:d4:0b:49:b9:f8:15:9f: f0:e8:57:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZxBx7UCo/iEN8HlpbxHN6gcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2NlYzkwNjNhODg3NDE4NDE5MDhiMGM1Mjk3ZmNkYmI0 Mzk1MzAwHhcNMjYwMjA5MDk0MjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDljM2FjODc4NTMxOWE4OWU4NDk0NGY5Y2EwNDI1ZTVlZGZjZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gCuFoP6bdK9AviU98jurmBEJwgB dcGU1Jc3FySxaZWZ842XqDvT5NyW1Dv2BnCFPgfRTKgOxyFOspKv4/WabS1hK3oj vT+2yac8rlG5QjthFl2j1ovJYDhu07a3RzL2S/t1pQs4f5Qs4WHVtUuckMwhQvkP FV7/m78wKMQa3Er1uaPusQQ5ejIB+iQcoNAsIpifUnkfYT2vKGAKNsSI44wXNQbQ uNA92jvY2MqBT6umOELgK3dpuUE1L0p+MHz7I+BD5JE25PnuICnlkG3Dow0oiXoE mFyn7y5e4JzOsWfyrHBunPG+Pp3vIeimeOyU4CDnetelLRO/xQhBsHNJ5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2cOsh4UxmonoSUT5ygQl5e385NMB8GA1UdIwQY MBaAFFc87JBjqIdBhBkIsMUpf827Q5UwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEt NTQ1NGU1YTE2ZjQyLzEvelp3NnlIaFRHYWllaEpSUG5LQkNYbDdmemswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEtNTQ1NGU1YTE2ZjQy LzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnVAMA0G CSqGSIb3DQEBCwUAA4IBAQAgSk4X4hMlYsg90nrEd2t8MkGd2BtI2A4St3sC1FsY DvSTvE+uenVYeE4AWa2oX2yh16AWwbW03kK4ONyvcZlGamb8fzAQllht3C9IlxZ+ LTuNmyJ4iopbUTgzRQPeQI5V6Brj3nWdUMk+9cAFjBBLLo4xuczfST1nSjKe4cpr pcnkO2ra4V4gxFSaZvpYP4q5sk8CyXicRaTW/7/Rlxz6ZJtsx8PALjOPN6r61wKc pwxCuGESq4pKtJgxf0V+jK8swLFmH3RpRj6rcTLQbKqo6hO5wIvufpEhFmgF3p79 EF2wgixtrD+r2aDvq7q/ynj3RaidutQLSbn4FZ/w6Fdi -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:24 2026 by rpki-client