This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/zGhncm-i1rjvD2kEZf1PVRbZys4.roa File: zGhncm-i1rjvD2kEZf1PVRbZys4.roa (raw, json) Hash identifier: X0UKTaPuCW7quZznGBHXE4TKgZ7+lY9qZyCg4ygXK70= Subject key identifier: CC:68:67:72:6F:A2:D6:B8:EF:0F:69:04:65:FD:4F:55:16:D9:CA:CE Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019B7DCAE3350C818A30EE6C2803D6CF1E00 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/zGhncm-i1rjvD2kEZf1PVRbZys4.roa Signing time: Fri 02 Jan 2026 08:20:07 +0000 ROA not before: Fri 02 Jan 2026 08:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 87.254.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 08:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e3:35:0c:81:8a:30:ee:6c:28:03:d6:cf:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Jan 2 08:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc6867726fa2d6b8ef0f690465fd4f5516d9cace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8e:cb:09:47:b7:6a:c8:c3:a5:5b:4a:74:b0: b6:3a:09:27:74:bf:f6:be:c5:39:7f:be:57:e9:d1: 3c:eb:31:cb:7b:5d:03:dd:dd:79:bd:a4:6a:ab:b9: 56:9d:9f:01:94:e9:97:45:5f:76:db:8f:b8:13:e6: 88:2c:d7:9e:c5:b0:9d:b6:5f:a0:58:ae:38:38:80: 8f:42:cd:2e:cb:24:1d:04:b8:62:37:75:ad:39:c3: a6:e9:b5:62:a7:35:ae:fd:be:c5:09:a6:b8:6a:bd: a8:21:92:be:5d:f3:4f:21:a2:2a:9c:0a:27:93:f9: d8:d1:6c:08:2c:03:31:17:8b:9d:e4:f1:94:6d:62: fc:a5:ad:32:a4:af:41:2a:cc:6c:f8:4e:92:db:51: 35:c7:49:ec:06:53:de:a7:65:48:58:eb:5f:1e:07: de:c0:14:f5:76:b3:e9:43:33:fe:a9:c7:73:95:fd: 38:08:3c:11:3d:9d:71:be:20:eb:c4:af:59:d6:cc: 9d:bb:75:50:6a:d3:20:bb:bc:78:d6:61:9b:55:18: 9a:e1:39:ec:cb:b6:84:74:5e:2c:d2:f9:fd:6a:d4: 8c:6b:80:92:51:ea:1f:df:14:84:0e:63:59:c4:f1: a5:f3:10:42:d8:f5:b4:a1:b6:c6:82:5f:96:74:04: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:68:67:72:6F:A2:D6:B8:EF:0F:69:04:65:FD:4F:55:16:D9:CA:CE X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/zGhncm-i1rjvD2kEZf1PVRbZys4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.31.0/24 Signature Algorithm: sha256WithRSAEncryption 61:b6:db:87:21:7d:1d:4f:dd:17:74:a3:14:66:d8:16:24:f9: 82:ad:80:1d:6c:7a:85:70:a0:a2:19:e8:5c:34:47:40:6b:2e: 70:2b:e2:69:9b:bb:f6:0a:7a:66:3d:84:9f:86:4d:e8:05:92: 15:7c:8a:dd:56:86:3d:5a:d7:7e:e6:8e:7f:dc:3d:80:f9:a7: f8:5a:2c:b1:57:b7:b8:d3:1f:d4:78:4e:7b:02:4b:f5:9b:2d: 7a:e2:fa:a6:8d:9d:c1:a7:e4:c0:11:dc:1f:c5:b8:7c:0e:cc: bd:f9:36:38:0a:1e:ae:91:9e:0a:f3:6d:c4:6d:24:f6:2b:92: 68:9a:b5:f6:b5:ba:ef:92:5d:bb:11:50:9c:82:a6:a3:57:0b: 65:f6:f7:d1:fd:d0:cd:07:20:ea:7b:7b:86:80:ab:65:9d:eb: 4f:8b:64:da:40:e4:7c:b1:16:cc:fb:f3:b8:20:76:2c:c7:bc: 3d:c8:b6:2b:86:e6:63:28:15:3c:4e:c6:bb:98:34:92:f4:36: 1a:64:3c:ae:29:29:c8:2c:51:77:c4:3e:bb:ca:84:d5:4b:b4: a8:d2:e0:8e:c4:c4:6c:3a:99:e9:a6:9a:b8:f4:12:94:cc:6e: 16:54:91:c1:0f:13:2d:10:91:7b:10:33:25:ca:2e:55:a1:73: af:a7:90:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yuM1DIGKMO5sKAPWzx4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMTAyMDgyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzY4Njc3MjZmYTJkNmI4ZWYwZjY5MDQ2NWZkNGY1NTE2ZDljYWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I7LCUe3asjDpVtKdLC2OgkndL/2 vsU5f75X6dE86zHLe10D3d15vaRqq7lWnZ8BlOmXRV9224+4E+aILNeexbCdtl+g WK44OICPQs0uyyQdBLhiN3WtOcOm6bVipzWu/b7FCaa4ar2oIZK+XfNPIaIqnAon k/nY0WwILAMxF4ud5PGUbWL8pa0ypK9BKsxs+E6S21E1x0nsBlPep2VIWOtfHgfe wBT1drPpQzP+qcdzlf04CDwRPZ1xviDrxK9Z1sydu3VQatMgu7x41mGbVRia4Tns y7aEdF4s0vn9atSMa4CSUeof3xSEDmNZxPGl8xBC2PW0obbGgl+WdARXwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxoZ3Jvota47w9pBGX9T1UW2crOMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvekdobmNtLWkxcmp2RDJrRVpmMVBWUmJaeXM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4fMA0G CSqGSIb3DQEBCwUAA4IBAQBhttuHIX0dT90XdKMUZtgWJPmCrYAdbHqFcKCiGehc NEdAay5wK+Jpm7v2CnpmPYSfhk3oBZIVfIrdVoY9Wtd+5o5/3D2A+af4WiyxV7e4 0x/UeE57Akv1my164vqmjZ3Bp+TAEdwfxbh8Dsy9+TY4Ch6ukZ4K823EbST2K5Jo mrX2tbrvkl27EVCcgqajVwtl9vfR/dDNByDqe3uGgKtlnetPi2TaQOR8sRbM+/O4 IHYsx7w9yLYrhuZjKBU8Tsa7mDSS9DYaZDyuKSnILFF3xD67yoTVS7So0uCOxMRs Opnpppq49BKUzG4WVJHBDxMtEJF7EDMlyi5VoXOvp5AS -----END CERTIFICATE-----Generated at Fri Jan 2 14:45:37 2026 by rpki-client