This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/zCOXAUBZXqisVY6lRfztNan2LPM.roa File: zCOXAUBZXqisVY6lRfztNan2LPM.roa (raw, json) Hash identifier: 7/x4omP0n6ejxfgW17vqQlbqviYR3EPl/2qYMEuPiKk= Subject key identifier: CC:23:97:01:40:59:5E:A8:AC:55:8E:A5:45:FC:ED:35:A9:F6:2C:F3 Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b Certificate serial: 019B7EA6BF47EEDE5F2CFBFA46A4CD46E008 Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/zCOXAUBZXqisVY6lRfztNan2LPM.roa Signing time: Fri 02 Jan 2026 12:20:15 +0000 ROA not before: Fri 02 Jan 2026 12:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47292 IP address blocks: 217.23.96.0/24 maxlen: 24 217.23.97.0/24 maxlen: 24 217.23.98.0/24 maxlen: 24 217.23.99.0/24 maxlen: 24 217.23.100.0/24 maxlen: 24 217.23.101.0/24 maxlen: 24 217.23.102.0/24 maxlen: 24 217.23.103.0/24 maxlen: 24 217.23.104.0/24 maxlen: 24 217.23.105.0/24 maxlen: 24 217.23.106.0/24 maxlen: 24 217.23.107.0/24 maxlen: 24 217.23.108.0/24 maxlen: 24 217.23.109.0/24 maxlen: 24 217.23.110.0/24 maxlen: 24 217.23.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:bf:47:ee:de:5f:2c:fb:fa:46:a4:cd:46:e0:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc23970140595ea8ac558ea545fced35a9f62cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:6e:5d:6d:8d:f0:cb:53:65:a8:0b:98:01: ad:b2:a8:34:9c:49:33:58:b9:b2:d9:4c:b8:86:5c: 9c:35:c7:9a:4d:66:68:74:ab:4c:06:6c:74:02:2d: 09:bf:3f:53:ac:96:ac:c5:50:8d:4e:79:a0:64:73: 64:a8:70:cd:74:72:57:72:e6:89:51:9e:96:de:8e: d5:84:fc:42:ab:2d:8d:53:7e:65:b2:62:99:26:69: df:bd:2f:98:48:9e:d1:6a:fe:89:86:5b:cb:b0:37: 3a:f2:9e:e2:a7:8c:89:0c:ba:41:ed:de:d1:62:84: 6e:1e:1a:cc:4d:b9:64:64:f4:0a:a2:bb:4b:0b:4b: dd:82:f5:a0:27:bc:cf:d8:8f:50:c6:df:42:08:93: a7:e5:ca:2a:79:7a:aa:ba:70:12:aa:ba:7a:62:c6: 82:30:26:f1:c5:19:94:35:4b:3a:01:8f:7b:cc:de: 95:76:30:c8:d6:7e:c2:a1:de:3a:04:9e:69:c1:f3: 84:2a:44:db:58:47:50:44:81:2c:54:f2:bb:d7:b3: db:c2:d2:4f:bb:24:b8:11:15:5e:dc:5b:05:02:22: ee:3b:96:35:d9:a0:ea:cb:72:a0:6f:33:4a:f0:ec: f4:72:0a:0a:2e:b8:fb:0d:72:26:be:b8:bd:be:5f: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:23:97:01:40:59:5E:A8:AC:55:8E:A5:45:FC:ED:35:A9:F6:2C:F3 X509v3 Authority Key Identifier: keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/zCOXAUBZXqisVY6lRfztNan2LPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.23.96.0/20 Signature Algorithm: sha256WithRSAEncryption 19:24:cb:2a:ed:bf:5e:af:b1:cb:34:22:8e:cc:72:73:09:c2: bc:84:f0:79:69:23:c2:69:1b:43:14:7d:50:d8:be:56:c8:2a: 06:fb:d4:a0:21:fe:86:d0:bf:d8:d8:38:fe:bf:ea:93:60:64: 83:4e:0c:b5:3c:47:eb:45:57:77:e8:b5:05:bb:68:be:ec:63: a9:20:92:07:81:a8:8e:64:a8:b4:69:e6:bc:b3:02:b8:f7:49: 11:f4:f4:5e:7f:b3:d6:60:0d:fd:19:d2:59:a3:23:76:25:78: df:e8:bd:16:84:19:0b:a7:d3:99:84:88:bf:c8:08:16:e2:1d: b1:2a:b2:dd:cf:1f:e6:8e:76:a4:7e:08:d3:c0:ba:a7:ff:62: 60:4b:97:8d:d5:52:c0:ff:6a:03:22:d3:84:0c:aa:54:64:d6: 53:95:59:6f:b8:c1:41:3b:d3:38:ad:1a:e8:1c:6b:2e:3f:67: ee:16:a0:2a:50:2b:80:50:6b:3b:9f:8b:21:06:e8:8e:b8:b1: 7c:85:58:8c:34:1d:7a:46:20:9b:e8:f2:b0:82:c9:4d:3a:a2: 25:a8:73:51:9e:34:0b:00:47:f4:37:e4:d0:a5:21:c6:6b:53: b0:d7:a9:d4:da:69:eb:0a:00:55:23:d8:a7:43:e2:af:2c:bf: b6:9f:34:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pr9H7t5fLPv6RqTNRuAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODRkMGNjNjcwM2JmOTQyYzZkYWM4OWRmZjFhN2JmNjYz MmVhOGIwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzIzOTcwMTQwNTk1ZWE4YWM1NThlYTU0NWZjZWQzNWE5ZjYyY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy65uXW2N8MtTZagLmAGtsqg0nEkz WLmy2Uy4hlycNceaTWZodKtMBmx0Ai0Jvz9TrJasxVCNTnmgZHNkqHDNdHJXcuaJ UZ6W3o7VhPxCqy2NU35lsmKZJmnfvS+YSJ7Rav6JhlvLsDc68p7ip4yJDLpB7d7R YoRuHhrMTblkZPQKortLC0vdgvWgJ7zP2I9Qxt9CCJOn5coqeXqqunASqrp6YsaC MCbxxRmUNUs6AY97zN6VdjDI1n7Cod46BJ5pwfOEKkTbWEdQRIEsVPK717PbwtJP uyS4ERVe3FsFAiLuO5Y12aDqy3KgbzNK8Oz0cgoKLrj7DXImvri9vl87jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMwjlwFAWV6orFWOpUX87TWp9izzMB8GA1UdIwQY MBaAFEmE0MxnA7+ULG2sid/xp79mMuqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjIt MTQ3MGJjY2VlYjFiLzEvekNPWEFVQlpYcWlzVlk2bFJmenROYW4yTFBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjItMTQ3MGJjY2VlYjFi LzEvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2RdgMA0G CSqGSIb3DQEBCwUAA4IBAQAZJMsq7b9er7HLNCKOzHJzCcK8hPB5aSPCaRtDFH1Q 2L5WyCoG+9SgIf6G0L/Y2Dj+v+qTYGSDTgy1PEfrRVd36LUFu2i+7GOpIJIHgaiO ZKi0aea8swK490kR9PRef7PWYA39GdJZoyN2JXjf6L0WhBkLp9OZhIi/yAgW4h2x KrLdzx/mjnakfgjTwLqn/2JgS5eN1VLA/2oDItOEDKpUZNZTlVlvuMFBO9M4rRro HGsuP2fuFqAqUCuAUGs7n4shBuiOuLF8hViMNB16RiCb6PKwgslNOqIlqHNRnjQL AEf0N+TQpSHGa1Ow16nU2mnrCgBVI9inQ+KvLL+2nzSZ -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:01 2026 by rpki-client