This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/zYEDrEOZNFZoMdlO3DAnxS5eqJc.roa File: zYEDrEOZNFZoMdlO3DAnxS5eqJc.roa (raw, json) Hash identifier: LZDUp9nuJRfFK7K/b0GgwAZrAzR3hWtlaKiCODrTlMU= Subject key identifier: CD:81:03:AC:43:99:34:56:68:31:D9:4E:DC:30:27:C5:2E:5E:A8:97 Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8 Certificate serial: 019B7EA71C33BC67DAD87184382C10AE4A33 Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/zYEDrEOZNFZoMdlO3DAnxS5eqJc.roa Signing time: Fri 02 Jan 2026 12:20:39 +0000 ROA not before: Fri 02 Jan 2026 12:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1930 IP address blocks: 192.92.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1c:33:bc:67:da:d8:71:84:38:2c:10:ae:4a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd8103ac439934566831d94edc3027c52e5ea897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:26:fd:dd:ad:fb:d5:70:f6:5c:a5:3b:8b: 07:f5:ae:fe:e6:12:fe:af:b0:a5:11:c0:2e:a5:2c: 33:dd:54:73:91:70:ab:6e:3a:8a:86:e9:71:0d:3a: 5a:53:e0:f4:a0:bd:a5:83:f0:05:38:d5:60:49:dc: a9:34:f9:d7:81:db:a0:c8:2e:0a:c9:fa:b4:8f:84: 07:48:8a:ed:b5:a5:dc:45:5c:9e:7d:d3:f9:d3:c7: 35:4a:66:9a:eb:3c:ee:4e:e4:24:3d:a9:74:4b:9a: 44:0a:45:4e:58:5e:f7:8d:dd:eb:cb:1a:03:1a:eb: 20:7a:ad:ed:ba:52:db:fe:0d:bf:90:57:2f:4d:84: be:ed:97:be:5d:27:50:68:a0:52:a9:7c:5e:61:23: 44:26:71:aa:7b:be:39:3c:91:8f:2c:70:23:ef:b7: 49:85:45:04:32:92:a8:57:16:c0:b7:fa:71:11:1d: 67:7b:35:14:fc:77:54:58:f2:38:f7:07:12:05:b6: f7:e4:7c:9c:36:02:5f:e2:c7:b5:ed:2f:ca:ac:db: f3:99:d5:7c:e3:80:c7:79:9f:97:c7:c0:09:b5:e5: 53:ba:04:92:03:c2:e1:8f:b3:d9:62:f9:eb:87:8e: e1:a2:5f:f4:9b:52:09:a4:36:b5:ea:18:06:25:88: fb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:81:03:AC:43:99:34:56:68:31:D9:4E:DC:30:27:C5:2E:5E:A8:97 X509v3 Authority Key Identifier: keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/zYEDrEOZNFZoMdlO3DAnxS5eqJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.92.153.0/24 Signature Algorithm: sha256WithRSAEncryption 03:7c:ad:b5:23:b1:8d:e7:7b:cb:ff:2c:3c:15:28:3f:55:b1: 19:3f:37:0a:a1:6a:2f:60:77:0d:ec:c3:85:78:58:92:e3:18: 0c:81:78:a0:d9:90:60:00:ce:1a:1b:8c:1a:6c:75:b7:5e:68: fe:cc:63:5d:cf:5d:a5:7e:2f:b2:5c:e9:67:44:76:7e:4b:00: 33:06:10:7f:eb:52:93:15:ef:ca:bc:46:25:f7:63:0b:69:c5: 11:b9:3e:c0:dd:ee:6f:80:52:40:84:08:68:37:ed:e7:d0:ff: 5c:74:65:ae:c7:eb:a0:95:43:36:47:2b:31:e2:e3:08:33:a6: b1:2e:dd:39:23:1b:46:52:8c:51:41:22:c8:2b:e9:31:93:4c: 0a:6e:25:84:6d:02:da:f4:9f:66:4b:de:c6:09:91:e4:30:ed: 27:d2:b0:13:ea:d2:f8:1c:1b:90:fe:23:25:a1:2a:6c:f9:11: 55:9a:a5:95:16:ff:63:48:58:19:cb:48:46:fa:b7:14:2f:70: 6b:6d:de:25:55:51:3e:f1:f0:71:1e:75:48:8a:6a:2d:02:77: 82:74:33:95:80:4c:54:14:c1:10:72:d7:c1:aa:2b:8f:f3:01: 7e:dd:81:12:27:4b:ec:3a:17:23:58:05:6f:7a:c2:2d:f0:c6: f6:4f:0a:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pxwzvGfa2HGEOCwQrkozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMjQ4YjVlMDg4NTg5NjRiYTJiNTQ3MzE1MjAxNWZkNTk5 MWZkZjgwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDgxMDNhYzQzOTkzNDU2NjgzMWQ5NGVkYzMwMjdjNTJlNWVhODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDEm/d2t+9Vw9lylO4sH9a7+5hL+ r7ClEcAupSwz3VRzkXCrbjqKhulxDTpaU+D0oL2lg/AFONVgSdypNPnXgdugyC4K yfq0j4QHSIrttaXcRVyefdP508c1Smaa6zzuTuQkPal0S5pECkVOWF73jd3ryxoD Gusgeq3tulLb/g2/kFcvTYS+7Ze+XSdQaKBSqXxeYSNEJnGqe745PJGPLHAj77dJ hUUEMpKoVxbAt/pxER1nezUU/HdUWPI49wcSBbb35HycNgJf4se17S/KrNvzmdV8 44DHeZ+Xx8AJteVTugSSA8Lhj7PZYvnrh47hol/0m1IJpDa16hgGJYj7GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2BA6xDmTRWaDHZTtwwJ8UuXqiXMB8GA1UdIwQY MBaAFIIki14IhYlkuitUcxUgFf1Zkf34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYt YWU2NDY5YWIzZjQwLzEvellFRHJFT1pORlpvTWRsTzNEQW54UzVlcUpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYtYWU2NDY5YWIzZjQw LzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFyZMA0G CSqGSIb3DQEBCwUAA4IBAQADfK21I7GN53vL/yw8FSg/VbEZPzcKoWovYHcN7MOF eFiS4xgMgXig2ZBgAM4aG4wabHW3Xmj+zGNdz12lfi+yXOlnRHZ+SwAzBhB/61KT Fe/KvEYl92MLacURuT7A3e5vgFJAhAhoN+3n0P9cdGWux+uglUM2Rysx4uMIM6ax Lt05IxtGUoxRQSLIK+kxk0wKbiWEbQLa9J9mS97GCZHkMO0n0rAT6tL4HBuQ/iMl oSps+RFVmqWVFv9jSFgZy0hG+rcUL3Brbd4lVVE+8fBxHnVIimotAneCdDOVgExU FMEQctfBqiuP8wF+3YESJ0vsOhcjWAVvesIt8Mb2TwrV -----END CERTIFICATE-----Generated at Mon Jan 26 22:33:01 2026 by rpki-client