This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa File: ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa (raw, json) Hash identifier: b2Z3qDf5qe3MjesJLnqAMi8pQaoBZLbH5mVHFy7vu6c= Subject key identifier: 64:70:DF:CC:E7:74:56:CD:5C:14:7E:02:76:CD:CD:43:35:E6:E5:ED Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc Certificate serial: 019B7A5A90D075109E81054B44701E5CE57D Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12509 IP address blocks: 91.194.176.0/24 maxlen: 24 194.153.79.0/24 maxlen: 24 2001:67c:368::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:90:d0:75:10:9e:81:05:4b:44:70:1e:5c:e5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6470dfcce77456cd5c147e0276cdcd4335e6e5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:85:88:8e:1b:ed:b6:56:85:ac:e6:25:9d: 27:86:f4:a4:15:8d:74:fb:82:09:3b:4a:af:e3:ba: 27:10:ac:37:6d:6d:52:bf:b5:1f:f0:af:19:ae:0f: c3:ca:bc:9c:11:c7:ba:01:0b:d8:24:68:f8:08:f0: 98:21:14:90:b5:b3:7f:bf:e4:85:68:55:69:56:51: 53:33:76:bb:f3:32:f4:8d:e7:ef:b6:7f:6d:a5:3f: 9c:31:cc:5c:61:58:bf:dc:28:d8:91:91:74:d7:f2: c1:6d:b5:d8:37:f3:02:77:08:2e:e7:8a:68:fc:bc: 02:eb:cf:97:e4:be:f1:bd:07:69:d3:52:4f:cc:35: a4:9b:b6:d8:80:55:4f:1e:52:13:07:db:8e:b1:20: 4d:d1:c5:54:30:e2:0f:28:0a:36:99:06:ad:a6:ea: 04:db:23:ab:b7:9a:b4:c0:50:27:58:67:00:6f:10: de:14:1a:a4:dd:a5:0b:4b:4b:7f:e0:f1:52:1a:b1: 3a:6f:76:72:0d:53:8c:ff:e4:2c:1b:da:1a:6d:79: 04:29:2b:87:2a:1e:8b:6c:2a:77:07:eb:c5:f0:53: b9:eb:7d:52:b5:04:25:19:68:cd:57:61:89:0b:6b: d4:22:f0:c2:f3:82:65:81:29:b2:cb:82:86:67:71: f2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:70:DF:CC:E7:74:56:CD:5C:14:7E:02:76:CD:CD:43:35:E6:E5:ED X509v3 Authority Key Identifier: keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.176.0/24 194.153.79.0/24 IPv6: 2001:67c:368::/48 Signature Algorithm: sha256WithRSAEncryption 83:f0:f2:94:46:e1:d6:95:f0:90:4b:91:c9:2a:93:77:3f:9e: 02:d1:49:a0:9d:38:8e:2e:39:9d:07:a9:e0:e6:65:ac:71:95: 73:76:68:69:a0:34:b9:93:7e:2b:56:2e:c4:f3:38:21:c0:c4: 66:3c:6e:03:2c:3c:3f:ff:8d:fd:cb:67:ac:84:e6:2a:59:8d: 5a:ff:d9:95:de:1e:c8:59:db:08:30:37:da:89:44:54:c6:e1: 98:74:e1:02:c1:4a:14:96:01:95:9c:f0:6e:38:7e:05:d2:9d: 4a:c2:ce:0c:8b:22:77:a8:be:fe:f2:58:a0:a1:fe:5c:5b:f5: 75:7c:55:e3:92:19:25:08:49:d7:01:1d:59:9f:ed:1d:48:f0: c8:95:62:16:0f:64:18:82:05:99:89:c1:c8:4f:3a:43:6a:62: 6f:1d:30:39:80:4a:ab:51:fe:b8:50:7a:d4:38:8f:4f:b3:aa: 61:83:6a:6f:91:4c:65:b6:ec:0a:9a:79:2d:12:fd:8b:dd:dd: 34:36:48:af:a4:b3:a8:62:1c:41:8a:0e:20:72:e8:f8:3b:8c: de:1c:f5:b1:97:cb:35:61:f9:4f:e3:3c:c6:9a:6e:61:cd:12: b5:aa:1c:c6:4e:43:cb:a9:3b:5a:94:1d:40:e9:da:a1:18:b0: 9c:da:98:15 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6WpDQdRCegQVLRHAeXOV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4 NGY2ZGMwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDcwZGZjY2U3NzQ1NmNkNWMxNDdlMDI3NmNkY2Q0MzM1ZTZlNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYWFiI4b7bZWhazmJZ0nhvSkFY10 +4IJO0qv47onEKw3bW1Sv7Uf8K8Zrg/DyrycEce6AQvYJGj4CPCYIRSQtbN/v+SF aFVpVlFTM3a78zL0jefvtn9tpT+cMcxcYVi/3CjYkZF01/LBbbXYN/MCdwgu54po /LwC68+X5L7xvQdp01JPzDWkm7bYgFVPHlITB9uOsSBN0cVUMOIPKAo2mQatpuoE 2yOrt5q0wFAnWGcAbxDeFBqk3aULS0t/4PFSGrE6b3ZyDVOM/+QsG9oabXkEKSuH Kh6LbCp3B+vF8FO5631StQQlGWjNV2GJC2vUIvDC84JlgSmyy4KGZ3Hy3wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFGRw38zndFbNXBR+AnbNzUM15uXtMB8GA1UdIwQY MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt MGE4NjM1OGU5Yzg0LzEvWkhEZnpPZDBWczFjRkg0Q2RzM05RelhtNWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0 LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW8KwAwQA wplPMA8EAgACMAkDBwAgAQZ8A2gwDQYJKoZIhvcNAQELBQADggEBAIPw8pRG4daV 8JBLkckqk3c/ngLRSaCdOI4uOZ0HqeDmZaxxlXN2aGmgNLmTfitWLsTzOCHAxGY8 bgMsPD//jf3LZ6yE5ipZjVr/2ZXeHshZ2wgwN9qJRFTG4Zh04QLBShSWAZWc8G44 fgXSnUrCzgyLIneovv7yWKCh/lxb9XV8VeOSGSUISdcBHVmf7R1I8MiVYhYPZBiC BZmJwchPOkNqYm8dMDmASqtR/rhQetQ4j0+zqmGDam+RTGW27AqaeS0S/Yvd3TQ2 SK+ks6hiHEGKDiBy6Pg7jN4c9bGXyzVh+U/jPMaabmHNErWqHMZOQ8upO1qUHUDp 2qEYsJzamBU= -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:06 2026 by rpki-client