This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/zPStaZsfPYqzEeXC4gEAq5tIzW0.roa File: zPStaZsfPYqzEeXC4gEAq5tIzW0.roa (raw, json) Hash identifier: rrCGM4WWxov5TxyVuLiBLthKY+9HoXWP3nXelKVvZlA= Subject key identifier: CC:F4:AD:69:9B:1F:3D:8A:B3:11:E5:C2:E2:01:00:AB:9B:48:CD:6D Certificate issuer: /CN=c9b232958097b5863eafd047bb315171eaa01fb7 Certificate serial: 019B7DCACD78F3518FD7BC1380166E8BB0F5 Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/zPStaZsfPYqzEeXC4gEAq5tIzW0.roa Signing time: Fri 02 Jan 2026 08:20:01 +0000 ROA not before: Fri 02 Jan 2026 08:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202842 IP address blocks: 95.128.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:cd:78:f3:51:8f:d7:bc:13:80:16:6e:8b:b0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7 Validity Not Before: Jan 2 08:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccf4ad699b1f3d8ab311e5c2e20100ab9b48cd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:2a:81:cc:80:4d:64:14:6d:35:7e:1d:41: 8a:e2:31:7a:bb:10:2b:78:ab:b4:1f:4e:77:ae:4e: 1b:a4:2e:0b:49:7b:0c:a3:cb:1e:bf:72:e3:76:f2: 1e:64:43:fa:5c:d8:df:ff:a2:79:64:4e:e8:81:0e: b0:fe:43:e7:cd:52:a6:76:4a:24:11:f2:1e:64:a1: bd:48:cc:4d:13:2c:ac:1c:06:9f:f9:cb:03:da:2a: 9d:9f:15:68:37:64:2a:82:49:6a:39:55:b1:7d:6a: 7f:f1:02:84:f7:a1:19:48:a5:c0:1a:86:1b:e0:86: 4c:26:2b:f8:55:80:83:0a:6a:3b:8d:36:a5:59:81: 5e:c9:c4:da:37:84:01:38:bf:c9:7a:8a:a2:90:41: 3d:7e:ee:68:e2:e8:f1:c9:ab:69:2b:e3:7c:4a:6a: 34:dc:d5:e1:87:d1:14:4e:5e:e7:01:de:e3:1c:00: b8:8d:5e:70:1b:a6:90:28:81:a9:af:c0:60:34:10: 78:10:b6:80:e2:de:fb:31:7f:0f:c7:dc:ca:38:15: f2:ca:b7:ea:43:06:14:e9:02:95:dd:84:f2:d9:53: 7d:b9:17:11:a9:15:86:b3:11:12:98:be:5b:04:05: bd:99:36:fb:a4:61:16:06:a7:9d:1d:2d:e1:d8:49: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F4:AD:69:9B:1F:3D:8A:B3:11:E5:C2:E2:01:00:AB:9B:48:CD:6D X509v3 Authority Key Identifier: keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/zPStaZsfPYqzEeXC4gEAq5tIzW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.174.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:87:f1:80:4f:63:2d:1a:30:02:79:1d:76:26:63:ac:d5:62: 85:8f:61:f9:41:46:37:9b:5a:7f:96:2c:7d:fc:e0:73:11:3f: 5e:03:9c:52:74:6d:e8:54:76:66:66:b1:d5:85:bd:d7:96:5c: ce:48:26:33:a1:c9:d8:2b:c2:40:91:5f:29:c1:ab:78:91:07: 90:d1:12:47:fb:96:41:5d:f6:ef:1e:c6:68:c3:3b:37:42:74: 93:63:76:9c:7d:9f:03:5f:c1:55:e0:94:ed:c7:ed:f9:6b:ca: 69:fc:c7:c7:59:d9:19:cc:f3:9a:a1:b2:e7:a8:6f:c7:c7:03: ef:23:4b:7f:ea:57:0c:4f:e1:a3:a5:8a:7b:fd:67:a1:95:0d: 4e:2a:06:60:f2:c9:cc:ae:e1:4e:19:15:31:b8:7a:f0:04:bc: a0:8b:5e:f0:a6:8c:fa:7d:72:ce:4f:14:0b:14:e9:2c:aa:84: dd:bc:1d:db:20:39:e1:61:49:f1:13:b4:fc:26:11:4e:98:15: f3:fd:3c:05:2b:f8:25:e0:77:fa:ae:ce:ae:ee:98:d9:1b:0f: bf:6e:c5:ba:00:61:82:4b:1f:21:91:c1:11:e5:38:fd:db:de: fc:49:16:b5:f9:ee:2d:13:ed:f7:d7:04:75:96:97:03:2b:d8: 53:08:9c:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ys1481GP17wTgBZui7D1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjIzMjk1ODA5N2I1ODYzZWFmZDA0N2JiMzE1MTcxZWFh MDFmYjcwHhcNMjYwMTAyMDgyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2Y0YWQ2OTliMWYzZDhhYjMxMWU1YzJlMjAxMDBhYjliNDhjZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWEqgcyATWQUbTV+HUGK4jF6uxAr eKu0H053rk4bpC4LSXsMo8sev3LjdvIeZEP6XNjf/6J5ZE7ogQ6w/kPnzVKmdkok EfIeZKG9SMxNEyysHAaf+csD2iqdnxVoN2QqgklqOVWxfWp/8QKE96EZSKXAGoYb 4IZMJiv4VYCDCmo7jTalWYFeycTaN4QBOL/JeoqikEE9fu5o4ujxyatpK+N8Smo0 3NXhh9EUTl7nAd7jHAC4jV5wG6aQKIGpr8BgNBB4ELaA4t77MX8Px9zKOBXyyrfq QwYU6QKV3YTy2VN9uRcRqRWGsxESmL5bBAW9mTb7pGEWBqedHS3h2En4FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMz0rWmbHz2KsxHlwuIBAKubSM1tMB8GA1UdIwQY MBaAFMmyMpWAl7WGPq/QR7sxUXHqoB+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUt MDdiN2ZlZjA4NThmLzEvelBTdGFac2ZQWXF6RWVYQzRnRUFxNXRJelcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUtMDdiN2ZlZjA4NThm LzEveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4CuMA0G CSqGSIb3DQEBCwUAA4IBAQA6h/GAT2MtGjACeR12JmOs1WKFj2H5QUY3m1p/lix9 /OBzET9eA5xSdG3oVHZmZrHVhb3XllzOSCYzocnYK8JAkV8pwat4kQeQ0RJH+5ZB XfbvHsZowzs3QnSTY3acfZ8DX8FV4JTtx+35a8pp/MfHWdkZzPOaobLnqG/HxwPv I0t/6lcMT+GjpYp7/WehlQ1OKgZg8snMruFOGRUxuHrwBLygi17wpoz6fXLOTxQL FOksqoTdvB3bIDnhYUnxE7T8JhFOmBXz/TwFK/gl4Hf6rs6u7pjZGw+/bsW6AGGC Sx8hkcER5Tj92978SRa1+e4tE+331wR1lpcDK9hTCJyN -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:15 2026 by rpki-client