This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SZnp-_Phd8jmh-2b9zRQNPI2XJU.roa File: SZnp-_Phd8jmh-2b9zRQNPI2XJU.roa (raw, json) Hash identifier: 8E96iye7+dcWrMY4qjantdn4m4G4QLqJt0h0LNB4k/0= Subject key identifier: 49:99:E9:FB:F3:E1:77:C8:E6:87:ED:9B:F7:34:50:34:F2:36:5C:95 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019B7DCAE02AD739C689861AA1F00B31C28D Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SZnp-_Phd8jmh-2b9zRQNPI2XJU.roa Signing time: Fri 02 Jan 2026 08:20:06 +0000 ROA not before: Fri 02 Jan 2026 08:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 87.254.16.0/24 maxlen: 24 87.254.17.0/24 maxlen: 24 217.25.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e0:2a:d7:39:c6:89:86:1a:a1:f0:0b:31:c2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Jan 2 08:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4999e9fbf3e177c8e687ed9bf7345034f2365c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2f:67:f5:7e:1d:6e:cc:d4:6d:e3:b8:41:e8: 16:eb:aa:c7:f2:fc:8a:3b:a1:75:fe:16:16:0a:14: 2c:ad:ba:cd:71:3c:44:76:23:55:78:35:d6:be:d5: 4a:2a:d8:80:80:0b:2f:31:86:bf:d7:62:03:a2:28: 36:60:3e:8f:74:47:69:00:18:43:75:a0:70:d6:37: 52:14:86:28:19:04:91:63:2d:fa:c5:5c:a3:79:b1: 77:0e:89:6a:4f:6b:6b:04:17:2e:ac:16:53:66:ce: 58:36:e9:0e:ad:bc:98:7a:c7:bc:b3:2c:19:37:4c: 83:00:fb:66:2a:d0:a2:68:ff:9f:bb:f9:21:7f:ca: 85:70:95:65:da:39:dc:52:d0:e8:dd:22:75:6d:fe: 48:dc:02:84:7b:50:96:d4:fd:3b:d2:15:8a:c6:78: 8b:7f:6c:cd:ba:af:48:3a:51:11:a8:54:da:e8:cf: 83:4e:bc:d0:53:e7:79:cd:1a:7e:46:e2:c4:2f:5f: 75:d0:9d:01:0a:40:c6:69:49:3a:cf:99:a8:f0:ec: 2a:33:43:35:7c:2e:00:39:8f:08:95:43:ea:a2:1d: 4a:b1:74:31:ed:12:a9:6e:c6:ed:e6:7e:1a:46:79: a7:f4:50:da:6d:11:a3:fc:80:95:65:70:04:0e:9b: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:99:E9:FB:F3:E1:77:C8:E6:87:ED:9B:F7:34:50:34:F2:36:5C:95 X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SZnp-_Phd8jmh-2b9zRQNPI2XJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.16.0/23 217.25.1.0/24 Signature Algorithm: sha256WithRSAEncryption 70:9a:3a:cb:bc:85:6d:2e:23:b3:7c:10:63:e2:d2:d5:3f:db: 02:f4:c7:14:74:2a:2f:a8:b9:61:42:a5:cf:49:79:2e:ff:e9: 13:9b:3a:12:dc:4f:23:ce:65:82:a5:d5:e2:33:85:aa:b1:a5: 19:a8:8b:2c:05:9a:56:1a:d0:99:83:aa:1b:e2:b1:86:5f:b2: ff:f5:b9:0a:6d:52:ad:38:4c:57:a3:65:92:94:f6:85:0e:4d: 60:6e:b5:c1:d2:e1:77:77:30:e5:ff:da:a7:76:6f:0a:9c:a0: f0:2d:93:49:8e:fd:5f:1f:c8:51:7f:99:20:f7:e0:0a:5b:8c: ff:08:44:b5:cd:43:d3:03:c1:1f:eb:bd:cd:41:58:1b:15:d3: de:24:e7:da:f7:2f:29:a1:82:3d:93:ce:71:25:fa:75:50:95: 46:4c:fd:48:dd:9e:3a:70:76:fc:77:52:5a:7a:da:d5:6f:d6: 0a:57:48:35:ff:52:60:a3:32:e2:c5:c0:0c:ba:47:0e:db:3b: c0:7f:68:76:84:da:65:18:2b:f0:65:81:5d:be:2a:35:38:e3: 76:23:a0:97:5c:21:0b:52:bb:9c:25:5c:d1:81:7a:73:04:39: a7:d1:74:84:3e:c4:bb:71:42:6d:39:8e:05:6c:c1:81:c5:24: e9:35:85:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yuAq1znGiYYaofALMcKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMTAyMDgyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTk5ZTlmYmYzZTE3N2M4ZTY4N2VkOWJmNzM0NTAzNGYyMzY1Yzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i9n9X4dbszUbeO4QegW66rH8vyK O6F1/hYWChQsrbrNcTxEdiNVeDXWvtVKKtiAgAsvMYa/12IDoig2YD6PdEdpABhD daBw1jdSFIYoGQSRYy36xVyjebF3DolqT2trBBcurBZTZs5YNukOrbyYese8sywZ N0yDAPtmKtCiaP+fu/khf8qFcJVl2jncUtDo3SJ1bf5I3AKEe1CW1P070hWKxniL f2zNuq9IOlERqFTa6M+DTrzQU+d5zRp+RuLEL1910J0BCkDGaUk6z5mo8OwqM0M1 fC4AOY8IlUPqoh1KsXQx7RKpbsbt5n4aRnmn9FDabRGj/ICVZXAEDpsKwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEmZ6fvz4XfI5oftm/c0UDTyNlyVMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvU1pucC1fUGhkOGptaC0yYjl6UlFOUEkyWEpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV/4QAwQA 2RkBMA0GCSqGSIb3DQEBCwUAA4IBAQBwmjrLvIVtLiOzfBBj4tLVP9sC9McUdCov qLlhQqXPSXku/+kTmzoS3E8jzmWCpdXiM4WqsaUZqIssBZpWGtCZg6ob4rGGX7L/ 9bkKbVKtOExXo2WSlPaFDk1gbrXB0uF3dzDl/9qndm8KnKDwLZNJjv1fH8hRf5kg 9+AKW4z/CES1zUPTA8Ef673NQVgbFdPeJOfa9y8poYI9k85xJfp1UJVGTP1I3Z46 cHb8d1JaetrVb9YKV0g1/1JgozLixcAMukcO2zvAf2h2hNplGCvwZYFdvio1OON2 I6CXXCELUrucJVzRgXpzBDmn0XSEPsS7cUJtOY4FbMGBxSTpNYUR -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:21 2026 by rpki-client