This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/Zgdla8WpljXwuiMywIAE2FoIesw.roa File: Zgdla8WpljXwuiMywIAE2FoIesw.roa (raw, json) Hash identifier: FyzW8LxvYeY4vlB6mW6T6bkS1rwFxCcKZpG6s/QT25o= Subject key identifier: 66:07:65:6B:C5:A9:96:35:F0:BA:23:32:C0:80:04:D8:5A:08:7A:CC Certificate issuer: /CN=7713f3582f63901305530b4b1936cd6e6611a30a Certificate serial: 019B7CEE21FE0F41701FE72196EEDDF6029B Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/Zgdla8WpljXwuiMywIAE2FoIesw.roa Signing time: Fri 02 Jan 2026 04:18:59 +0000 ROA not before: Fri 02 Jan 2026 04:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61329 IP address blocks: 194.13.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:21:fe:0f:41:70:1f:e7:21:96:ee:dd:f6:02:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6607656bc5a99635f0ba2332c08004d85a087acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c0:4b:2d:6f:cd:41:5d:c7:59:3d:7d:0f:e4: ca:89:4f:fe:65:a8:83:0e:bb:19:03:e1:e8:d6:b0: bb:34:d2:57:6e:39:0a:0d:aa:df:67:b7:4a:7c:29: ae:3b:26:5f:dc:6e:ca:2a:c1:b7:e3:ad:f6:c2:5e: 32:1f:fe:cd:e1:6a:0e:ec:75:22:54:aa:7e:aa:46: 61:8e:c0:4d:c5:7c:a8:50:ad:cf:f4:02:36:bb:11: 7e:19:78:04:a8:75:5e:15:78:19:b1:5e:6c:dd:34: 02:73:e0:1c:32:c8:9a:77:c4:8e:81:75:12:8a:01: 78:9a:fc:12:90:26:66:89:f2:54:d9:0b:56:33:ad: 08:b8:42:31:44:a5:f4:9b:47:c2:04:31:73:e2:38: b7:b3:c8:e2:17:32:e1:3f:f7:a6:ea:60:70:10:84: 4d:34:13:2f:a8:b9:ee:3c:f0:b3:d8:9a:71:5d:14: f6:f8:b5:70:b5:ea:ff:61:19:04:2c:ae:69:ec:20: 3b:f9:54:d2:a1:50:15:d9:b2:f3:22:22:b8:24:e5: 6a:3c:1f:53:88:b9:2e:dd:f7:7f:4f:ca:fb:d1:0f: 68:ea:cc:b5:20:85:34:70:f6:a6:1a:50:a0:97:20: 58:9d:e0:39:1b:4b:62:d8:6f:ad:a2:14:f6:89:ad: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:07:65:6B:C5:A9:96:35:F0:BA:23:32:C0:80:04:D8:5A:08:7A:CC X509v3 Authority Key Identifier: keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/Zgdla8WpljXwuiMywIAE2FoIesw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.13.120.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:26:50:b2:cb:dc:ea:94:9e:a9:d1:60:84:18:9e:e4:7e:7c: 2d:00:ae:4e:b7:76:04:7d:c1:90:7f:65:08:d1:69:e8:9d:d5: e5:dd:09:0a:b5:7a:34:09:bf:b2:d5:3e:12:21:5a:d5:7d:68: ed:23:45:95:51:6f:8f:19:d7:f4:34:ca:b6:b1:d4:6b:a0:fe: 6f:5d:e4:51:3d:67:a0:56:57:3b:06:d8:ae:02:68:f2:97:64: b1:7f:e7:8f:ea:cc:af:5a:a2:8e:2d:7c:be:73:de:27:72:76: 13:bf:49:42:67:5c:6a:db:fa:53:05:24:b1:6f:48:8d:bd:a8: ca:85:ad:49:ea:78:87:74:fe:06:82:c0:ae:e1:5b:f4:55:db: c3:63:a4:7e:b6:79:a7:74:3e:58:3c:0a:ce:f7:3c:7d:b5:e2: 58:b8:7e:ca:2f:e0:75:36:50:ae:50:d6:8d:f6:7c:56:c1:d8: 43:33:e6:77:c0:fa:26:e2:e9:65:28:ac:0e:0c:99:9f:ec:d1: fa:3e:c0:da:cc:b6:f6:e3:1a:22:7c:ba:7a:e6:bf:1a:89:c5: 7e:31:7c:ae:81:a7:38:de:25:42:a8:e4:94:f0:eb:97:cc:b8: 95:29:09:95:14:c3:e9:bf:9f:ff:b0:82:30:90:18:df:89:5b: cd:ae:00:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87iH+D0FwH+chlu7d9gKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTNmMzU4MmY2MzkwMTMwNTUzMGI0YjE5MzZjZDZlNjYx MWEzMGEwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjA3NjU2YmM1YTk5NjM1ZjBiYTIzMzJjMDgwMDRkODVhMDg3YWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsBLLW/NQV3HWT19D+TKiU/+ZaiD DrsZA+Ho1rC7NNJXbjkKDarfZ7dKfCmuOyZf3G7KKsG34632wl4yH/7N4WoO7HUi VKp+qkZhjsBNxXyoUK3P9AI2uxF+GXgEqHVeFXgZsV5s3TQCc+AcMsiad8SOgXUS igF4mvwSkCZmifJU2QtWM60IuEIxRKX0m0fCBDFz4ji3s8jiFzLhP/em6mBwEIRN NBMvqLnuPPCz2JpxXRT2+LVwter/YRkELK5p7CA7+VTSoVAV2bLzIiK4JOVqPB9T iLku3fd/T8r70Q9o6sy1IIU0cPamGlCglyBYneA5G0ti2G+tohT2ia225QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGYHZWvFqZY18LojMsCABNhaCHrMMB8GA1UdIwQY MBaAFHcT81gvY5ATBVMLSxk2zW5mEaMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQt MTg5ZDUzYWU0ZTNlLzEvWmdkbGE4V3Bsalh3dWlNeXdJQUUyRm9JZXN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQtMTg5ZDUzYWU0ZTNl LzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwg14MA0G CSqGSIb3DQEBCwUAA4IBAQBrJlCyy9zqlJ6p0WCEGJ7kfnwtAK5Ot3YEfcGQf2UI 0WnondXl3QkKtXo0Cb+y1T4SIVrVfWjtI0WVUW+PGdf0NMq2sdRroP5vXeRRPWeg Vlc7BtiuAmjyl2Sxf+eP6syvWqKOLXy+c94ncnYTv0lCZ1xq2/pTBSSxb0iNvajK ha1J6niHdP4GgsCu4Vv0VdvDY6R+tnmndD5YPArO9zx9teJYuH7KL+B1NlCuUNaN 9nxWwdhDM+Z3wPom4ullKKwODJmf7NH6PsDazLb24xoifLp65r8aicV+MXyugac4 3iVCqOSU8OuXzLiVKQmVFMPpv5//sIIwkBjfiVvNrgBR -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:37 2026 by rpki-client