This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/zPI2dAwZCeRJxOtOl0Q4FV5K-VM.roa File: zPI2dAwZCeRJxOtOl0Q4FV5K-VM.roa (raw, json) Hash identifier: 7EdIt7WNjOWwD3LAs62jBK2d7T5ICCKDQV4IeNUeDeY= Subject key identifier: CC:F2:36:74:0C:19:09:E4:49:C4:EB:4E:97:44:38:15:5E:4A:F9:53 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 019BC6577631AA4F3FD4C02282A836DF6DC3 Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/zPI2dAwZCeRJxOtOl0Q4FV5K-VM.roa Signing time: Fri 16 Jan 2026 10:26:18 +0000 ROA not before: Fri 16 Jan 2026 10:26:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 92.249.36.0/24 maxlen: 24 92.249.37.0/24 maxlen: 24 92.249.38.0/24 maxlen: 24 92.249.39.0/24 maxlen: 24 172.216.0.0/24 maxlen: 24 172.216.1.0/24 maxlen: 24 172.216.2.0/24 maxlen: 24 172.216.3.0/24 maxlen: 24 172.216.4.0/24 maxlen: 24 172.216.5.0/24 maxlen: 24 172.216.6.0/24 maxlen: 24 172.216.7.0/24 maxlen: 24 172.216.8.0/24 maxlen: 24 172.216.9.0/24 maxlen: 24 172.216.10.0/24 maxlen: 24 172.216.11.0/24 maxlen: 24 172.216.12.0/24 maxlen: 24 203.21.66.0/24 maxlen: 24 2a09:a700::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:57:76:31:aa:4f:3f:d4:c0:22:82:a8:36:df:6d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Jan 16 10:26:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccf236740c1909e449c4eb4e974438155e4af953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:e5:4e:5e:bf:0b:93:ca:fc:cb:86:10:1c: a6:24:70:f1:71:dd:e9:31:06:a2:c2:99:65:94:39: 5d:f2:3e:b0:f5:8e:94:68:06:72:7d:7a:f2:c2:cb: 45:83:a6:9e:f3:45:07:d3:c6:e2:6b:df:be:92:1b: d3:99:66:1d:d0:95:65:c6:39:96:5e:8e:b2:52:ec: 1b:d4:3e:b0:ca:5c:2b:bf:58:20:7d:58:5a:e6:32: 4d:cf:75:fc:98:26:30:ac:f6:93:58:2a:3e:7b:10: bf:53:e1:ef:ce:67:f1:aa:8e:1f:b6:1e:59:f8:70: 7a:4f:ee:e7:c9:78:8b:2a:8d:4b:5d:44:fb:96:f7: a3:7d:de:c9:0b:8d:6b:0e:7c:1c:02:eb:42:87:c7: 97:04:3c:1a:49:6c:07:87:b5:0a:d7:de:be:b7:d1: 24:6f:56:6c:74:e5:ad:45:1d:9a:7f:dd:8d:de:de: ac:d8:fc:36:30:39:4c:90:18:33:4a:f8:16:23:d6: f0:89:cb:2a:e4:d1:31:f4:5a:ac:c3:33:46:3d:5e: 35:89:df:23:b4:46:c6:34:18:bb:f2:fb:98:98:cc: bf:4d:75:f8:81:cd:db:a7:1d:5b:6f:70:69:f0:a9: 2d:7c:1e:24:34:80:1a:91:07:4f:5e:aa:b6:1f:c5: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F2:36:74:0C:19:09:E4:49:C4:EB:4E:97:44:38:15:5E:4A:F9:53 X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/zPI2dAwZCeRJxOtOl0Q4FV5K-VM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.36.0/22 172.216.0.0-172.216.12.255 203.21.66.0/24 IPv6: 2a09:a700::/29 Signature Algorithm: sha256WithRSAEncryption 4a:fb:ac:4c:46:0d:86:9f:f8:4e:31:fb:22:ac:91:e8:dc:0d: 9b:1b:d7:cd:d0:a8:dc:6b:fb:74:ee:bb:d6:87:15:86:f3:a7: 5d:ee:c7:22:10:ea:d3:ba:78:45:27:0a:b0:3c:c8:c4:23:79: e0:8f:62:8f:0b:e8:89:66:df:b0:27:12:a0:e1:82:7d:25:d7: b6:d5:a2:d0:e6:4c:d7:89:fb:ec:a3:1e:e6:08:9f:3c:1f:11: a9:c6:5a:65:96:3d:e9:49:1c:9c:67:01:12:be:00:f0:eb:11: 5c:69:46:1b:3e:45:d3:39:7d:8e:01:80:66:36:08:dc:24:44: c9:69:df:57:8e:e0:29:b6:08:a3:1b:d0:20:8e:1c:a3:02:80: e7:cd:ef:43:56:35:17:1a:86:d3:d5:51:08:84:b5:1d:82:f9: 81:e7:6a:04:54:2d:fb:6c:cb:23:43:1d:5d:2b:43:a8:cc:5c: b3:9b:90:f9:00:97:bb:c9:f3:6b:7b:20:51:3d:2d:2d:3e:fa: c6:e6:6c:44:9c:f4:4b:db:9a:37:90:e3:ca:1a:d3:20:23:7c: 22:03:fb:b4:91:17:94:db:1e:ab:ae:ba:9d:02:6d:90:57:29: 58:d4:63:d7:37:e9:cb:57:4f:ac:67:51:23:6d:bd:b6:91:06: 53:47:fc:c1 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZvGV3Yxqk8/1MAigqg2323DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYwMTE2MTAyNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2YyMzY3NDBjMTkwOWU0NDljNGViNGU5NzQ0MzgxNTVlNGFmOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvnlTl6/C5PK/MuGEBymJHDxcd3p MQaiwplllDld8j6w9Y6UaAZyfXrywstFg6ae80UH08bia9++khvTmWYd0JVlxjmW Xo6yUuwb1D6wylwrv1ggfVha5jJNz3X8mCYwrPaTWCo+exC/U+Hvzmfxqo4fth5Z +HB6T+7nyXiLKo1LXUT7lvejfd7JC41rDnwcAutCh8eXBDwaSWwHh7UK196+t9Ek b1ZsdOWtRR2af92N3t6s2Pw2MDlMkBgzSvgWI9bwicsq5NEx9FqswzNGPV41id8j tEbGNBi78vuYmMy/TXX4gc3bpx1bb3Bp8KktfB4kNIAakQdPXqq2H8VlhQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFMzyNnQMGQnkScTrTpdEOBVeSvlTMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvelBJMmRBd1pDZVJKeE90T2wwUTRGVjVLLVZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAfBAIAATAZAwQCXPkkMAsD AwOs2AMEAKzYDAMEAMsVQjANBAIAAjAHAwUDKgmnADANBgkqhkiG9w0BAQsFAAOC AQEASvusTEYNhp/4TjH7IqyR6NwNmxvXzdCo3Gv7dO671ocVhvOnXe7HIhDq07p4 RScKsDzIxCN54I9ijwvoiWbfsCcSoOGCfSXXttWi0OZM14n77KMe5gifPB8RqcZa ZZY96UkcnGcBEr4A8OsRXGlGGz5F0zl9jgGAZjYI3CREyWnfV47gKbYIoxvQII4c owKA583vQ1Y1FxqG09VRCIS1HYL5gedqBFQt+2zLI0MdXStDqMxcs5uQ+QCXu8nz a3sgUT0tLT76xuZsRJz0S9uaN5DjyhrTICN8IgP7tJEXlNseq666nQJtkFcpWNRj 1zfpy1dPrGdRI229tpEGU0f8wQ== -----END CERTIFICATE-----Generated at Mon Jan 19 17:30:01 2026 by rpki-client