This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/zwmO5OtCGJNIiJzbj5PsPCNBg1A.roa File: zwmO5OtCGJNIiJzbj5PsPCNBg1A.roa (raw, json) Hash identifier: 4w1oRI5piM/eFxb64iTkw75OFvdOlvJgDWTugaHDe2M= Subject key identifier: CF:09:8E:E4:EB:42:18:93:48:88:9C:DB:8F:93:EC:3C:23:41:83:50 Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578 Certificate serial: 019B7AC7AA76102A01AFF452117122FB781F Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/zwmO5OtCGJNIiJzbj5PsPCNBg1A.roa Signing time: Thu 01 Jan 2026 18:17:44 +0000 ROA not before: Thu 01 Jan 2026 18:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399970 IP address blocks: 194.104.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:aa:76:10:2a:01:af:f4:52:11:71:22:fb:78:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578 Validity Not Before: Jan 1 18:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf098ee4eb42189348889cdb8f93ec3c23418350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:02:fd:fe:e4:6f:06:5d:7b:a7:a6:3f:b7: 56:d4:ff:8e:8d:4e:45:1a:57:d1:b6:c0:b3:07:92: 78:00:89:3a:35:c6:dc:71:df:10:4b:a4:5b:18:84: 79:23:04:36:b1:00:23:06:93:d1:c5:a6:00:1b:16: df:8f:f2:93:29:48:61:86:c6:9f:2d:7f:3f:a0:a6: 56:3b:0b:3a:fa:15:64:98:10:50:e0:e0:7e:68:f7: 61:22:7e:f2:c6:82:ab:8c:d3:cd:bb:26:3b:e1:cb: d6:f7:ca:92:75:31:1e:3a:af:d1:6b:c1:ef:0f:db: 79:13:74:84:54:5b:7f:19:6a:a3:05:75:d4:02:1e: b4:d5:42:f3:1f:1e:cb:41:83:6c:c2:35:2c:7c:f8: 18:ad:e7:1b:d8:b6:2c:7a:4f:9e:1f:cc:82:4f:09: 8d:b4:28:de:2e:fb:4b:8a:10:a9:3f:bb:99:2a:f8: 5d:b3:3d:23:12:ff:3b:13:a2:64:fc:03:84:5a:5c: 38:8b:2c:01:49:9b:40:ef:2e:5b:15:3c:26:8a:47: 41:dc:7c:3e:60:c4:b8:f6:8e:c2:e2:0b:1a:59:72: f9:b1:d5:47:2f:9e:c0:67:b5:d4:b2:7a:81:6d:45: 18:4d:bf:a7:db:6c:fb:de:79:c6:87:76:2f:a5:58: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:09:8E:E4:EB:42:18:93:48:88:9C:DB:8F:93:EC:3C:23:41:83:50 X509v3 Authority Key Identifier: keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/zwmO5OtCGJNIiJzbj5PsPCNBg1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption b1:c0:f0:41:06:5e:ae:2b:8b:25:0c:9b:72:50:73:69:c1:da: de:2f:ee:5f:6e:84:a4:d6:cb:17:74:1c:c4:d3:b8:a0:0d:ed: 19:a5:04:61:fb:f2:38:c7:ad:92:7a:7b:0b:a3:02:51:c0:1b: eb:72:6b:b4:98:fa:68:73:62:f7:b6:ef:fa:c0:8b:40:05:b8: 55:fd:8c:69:79:06:8d:19:55:cf:c3:f5:fa:80:e3:cd:4b:ff: fa:19:7a:8d:a9:71:56:be:62:d3:c9:59:ad:8a:e0:90:4b:95: 5f:05:86:14:40:fc:80:9a:51:dd:06:b7:47:91:8b:77:22:08: d5:e2:fd:35:05:1f:52:1f:34:af:1c:72:dc:d4:b7:bb:94:d5: 27:a1:c8:af:ad:bc:05:3b:40:2c:71:c8:0b:f1:f7:a0:7f:d6: e9:9c:85:b1:74:65:8e:b7:8e:25:f5:b7:f4:5f:c4:eb:ab:f3: 89:d4:a3:60:33:f0:dc:ab:8c:5c:b4:5f:d1:cb:86:70:44:51: 2e:da:e6:d7:75:f4:88:7e:9f:0a:b6:9f:5a:4f:75:c5:4d:e1: 69:73:a6:af:64:78:ec:35:2f:90:27:fb:3c:5c:da:af:2f:b0: c8:59:6b:ce:5c:30:34:fe:99:2e:22:c9:fd:32:15:ef:dd:d8: 4f:5c:1f:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6p2ECoBr/RSEXEi+3gfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWY2ZmJmZTAwYTA4NTkyYjdiYjBlZGZkYzIwMDJiZmM3 MmI1NzgwHhcNMjYwMTAxMTgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjA5OGVlNGViNDIxODkzNDg4ODljZGI4ZjkzZWMzYzIzNDE4MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmcC/f7kbwZde6emP7dW1P+OjU5F GlfRtsCzB5J4AIk6Ncbccd8QS6RbGIR5IwQ2sQAjBpPRxaYAGxbfj/KTKUhhhsaf LX8/oKZWOws6+hVkmBBQ4OB+aPdhIn7yxoKrjNPNuyY74cvW98qSdTEeOq/Ra8Hv D9t5E3SEVFt/GWqjBXXUAh601ULzHx7LQYNswjUsfPgYrecb2LYsek+eH8yCTwmN tCjeLvtLihCpP7uZKvhdsz0jEv87E6Jk/AOEWlw4iywBSZtA7y5bFTwmikdB3Hw+ YMS49o7C4gsaWXL5sdVHL57AZ7XUsnqBbUUYTb+n22z73nnGh3YvpVgnEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8JjuTrQhiTSIic24+T7DwjQYNQMB8GA1UdIwQY MBaAFM+fb7/gCghZK3uw7f3CACv8crV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUt MzQyYTllZTczZDg1LzEvendtTzVPdENHSk5JaUp6Ymo1UHNQQ05CZzFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUtMzQyYTllZTczZDg1 LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmiBMA0G CSqGSIb3DQEBCwUAA4IBAQCxwPBBBl6uK4slDJtyUHNpwdreL+5fboSk1ssXdBzE 07igDe0ZpQRh+/I4x62SensLowJRwBvrcmu0mPpoc2L3tu/6wItABbhV/YxpeQaN GVXPw/X6gOPNS//6GXqNqXFWvmLTyVmtiuCQS5VfBYYUQPyAmlHdBrdHkYt3IgjV 4v01BR9SHzSvHHLc1Le7lNUnocivrbwFO0AsccgL8fegf9bpnIWxdGWOt44l9bf0 X8Trq/OJ1KNgM/Dcq4xctF/Ry4ZwRFEu2ubXdfSIfp8Ktp9aT3XFTeFpc6avZHjs NS+QJ/s8XNqvL7DIWWvOXDA0/pkuIsn9MhXv3dhPXB8E -----END CERTIFICATE-----Generated at Sat Jan 10 04:00:45 2026 by rpki-client