This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/zNK-oPXBuxp1H51GnlCM2lcNtzk.roa File: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (raw, json) Hash identifier: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU= Subject key identifier: CC:D2:BE:A0:F5:C1:BB:1A:75:1F:9D:46:9E:50:8C:DA:57:0D:B7:39 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019B7F14322C5647D65C707E3BEB76905DC4 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/zNK-oPXBuxp1H51GnlCM2lcNtzk.roa Signing time: Fri 02 Jan 2026 14:19:48 +0000 ROA not before: Fri 02 Jan 2026 14:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 93.152.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:32:2c:56:47:d6:5c:70:7e:3b:eb:76:90:5d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Jan 2 14:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccd2bea0f5c1bb1a751f9d469e508cda570db739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:b9:a4:5c:78:fc:84:7c:24:59:e4:8f:67: 13:61:5e:1b:9d:9d:96:8a:29:53:d8:cb:ab:b4:3b: 6d:c1:b2:fe:45:d2:34:d8:3b:d8:b0:71:ae:d0:b6: 6a:c0:03:68:b2:82:e2:38:79:88:1d:89:50:5f:34: 4e:71:ce:53:36:d7:f6:93:6a:56:e1:22:e0:cc:fa: 69:7b:d8:89:81:7d:b2:04:8d:a9:6a:8a:8b:cc:f7: d9:21:7a:27:c4:b6:6f:53:b3:53:46:2c:76:a4:ef: 5a:3e:01:89:8c:97:47:c4:9d:4b:44:8e:a4:58:51: cb:90:09:9f:4f:1f:a2:33:33:fe:54:c8:71:4d:6e: 2a:e7:05:7f:f5:55:3e:9d:1f:1e:28:70:7b:e1:0d: 43:8b:35:12:dd:0a:1f:e5:dc:51:55:51:f5:3e:fa: 8d:20:bc:e4:2e:9a:e4:58:95:87:81:f8:1e:cd:e5: 56:f5:ae:e0:0f:7b:60:f3:60:81:69:bf:18:e9:54: 59:c6:cc:9c:c9:cd:e7:66:4f:78:97:c3:ca:00:59: c9:0b:00:d2:52:54:af:b0:22:4b:fc:8c:25:6e:1c: b3:33:7a:f6:92:69:45:a4:c0:b7:db:9c:0e:73:31: f0:ed:0a:ef:6f:77:f0:92:6b:a3:a5:7a:e3:c4:81: d4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D2:BE:A0:F5:C1:BB:1A:75:1F:9D:46:9E:50:8C:DA:57:0D:B7:39 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/zNK-oPXBuxp1H51GnlCM2lcNtzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.152.225.0/24 Signature Algorithm: sha256WithRSAEncryption aa:89:68:12:df:4f:c1:ea:28:d2:7f:74:ea:c7:70:0c:a2:df: 6f:6c:93:2f:77:78:74:25:30:60:29:cb:50:5c:d9:67:93:b8: 5d:52:4c:d6:e4:f8:53:53:c4:d6:2b:09:87:14:84:a0:fb:97: 20:51:f0:c9:63:63:54:85:c3:ce:8f:21:de:25:98:4c:bc:dc: 57:84:e6:a0:1a:0b:a6:31:63:98:7c:23:25:d8:67:11:54:ba: 87:42:ab:6d:90:37:1c:c5:87:1f:64:ef:db:5b:42:59:55:a7: 38:e0:1a:35:7b:92:fb:ec:95:eb:aa:16:c0:f1:2c:bc:bc:17: 3d:81:ed:09:51:60:84:48:bc:e3:1d:1a:36:05:89:59:52:c4: 76:41:c7:27:84:b6:07:f1:31:89:11:7d:46:79:aa:2b:05:98: 52:ca:f9:c2:1a:53:20:ac:a0:c1:19:51:7d:5f:9f:7f:fd:44: fa:8d:69:11:6c:39:7f:a8:ac:ba:a4:df:ff:20:5b:cd:e5:48: 50:b7:ae:e6:5f:df:8b:ae:9a:6e:e9:79:fb:39:f9:0a:a5:e6: bf:77:6d:70:68:b3:63:9d:e8:a9:5d:d8:c9:0d:c8:ff:2a:b1: 98:88:b9:e2:27:a7:27:0d:8f:55:ec:57:bf:2f:18:2c:2f:df: b7:d7:c1:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FDIsVkfWXHB+O+t2kF3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwMTAyMTQxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2QyYmVhMGY1YzFiYjFhNzUxZjlkNDY5ZTUwOGNkYTU3MGRiNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvy5pFx4/IR8JFnkj2cTYV4bnZ2W iilT2MurtDttwbL+RdI02DvYsHGu0LZqwANosoLiOHmIHYlQXzROcc5TNtf2k2pW 4SLgzPppe9iJgX2yBI2paoqLzPfZIXonxLZvU7NTRix2pO9aPgGJjJdHxJ1LRI6k WFHLkAmfTx+iMzP+VMhxTW4q5wV/9VU+nR8eKHB74Q1DizUS3Qof5dxRVVH1PvqN ILzkLprkWJWHgfgezeVW9a7gD3tg82CBab8Y6VRZxsycyc3nZk94l8PKAFnJCwDS UlSvsCJL/IwlbhyzM3r2kmlFpMC325wOczHw7Qrvb3fwkmujpXrjxIHUqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMzSvqD1wbsadR+dRp5QjNpXDbc5MB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvek5LLW9QWEJ1eHAxSDUxR25sQ00ybGNOdHprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZjhMA0G CSqGSIb3DQEBCwUAA4IBAQCqiWgS30/B6ijSf3Tqx3AMot9vbJMvd3h0JTBgKctQ XNlnk7hdUkzW5PhTU8TWKwmHFISg+5cgUfDJY2NUhcPOjyHeJZhMvNxXhOagGgum MWOYfCMl2GcRVLqHQqttkDccxYcfZO/bW0JZVac44Bo1e5L77JXrqhbA8Sy8vBc9 ge0JUWCESLzjHRo2BYlZUsR2QccnhLYH8TGJEX1GeaorBZhSyvnCGlMgrKDBGVF9 X59//UT6jWkRbDl/qKy6pN//IFvN5UhQt67mX9+Lrppu6Xn7OfkKpea/d21waLNj neipXdjJDcj/KrGYiLniJ6cnDY9V7Fe/LxgsL9+318Gq -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:48 2026 by rpki-client