This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/zp6AvUoMe9iCoAq9x5r0S8AYxec.roa File: zp6AvUoMe9iCoAq9x5r0S8AYxec.roa (raw, json) Hash identifier: X3bBF0Ic6iTw88nHub1cmld7xWKzFn1W8243XqYcOlc= Subject key identifier: CE:9E:80:BD:4A:0C:7B:D8:82:A0:0A:BD:C7:9A:F4:4B:C0:18:C5:E7 Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78 Certificate serial: 019B7F8294EB8128E6CC74F5FCCA635EBAD5 Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/zp6AvUoMe9iCoAq9x5r0S8AYxec.roa Signing time: Fri 02 Jan 2026 16:20:22 +0000 ROA not before: Fri 02 Jan 2026 16:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40339 IP address blocks: 81.16.184.0/21 maxlen: 24 194.62.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:94:eb:81:28:e6:cc:74:f5:fc:ca:63:5e:ba:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78 Validity Not Before: Jan 2 16:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce9e80bd4a0c7bd882a00abdc79af44bc018c5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:db:32:40:7c:96:23:80:1c:34:57:a2:38:08: b6:31:cf:71:be:d0:af:73:15:04:e3:ae:35:ab:ec: 37:a5:e4:69:35:ad:73:f9:86:a7:c2:32:5a:61:fb: 14:d2:73:5f:fa:88:b6:7d:98:3f:ec:37:91:43:58: 9c:5a:be:a6:1d:88:2b:8c:e2:82:4b:1b:58:54:26: a3:ad:19:91:b4:97:23:92:0d:e1:42:55:88:8a:d9: f4:74:59:42:14:26:7a:c3:11:90:b7:ba:86:3d:aa: 37:98:7b:8f:81:f2:9b:43:3e:a4:a2:89:2e:2d:be: a1:76:89:f8:29:0d:55:fe:33:4b:09:8b:97:1f:f8: c5:65:e0:f8:be:81:71:db:f7:3d:d0:7f:c2:ea:09: 19:98:f9:32:68:8b:74:7c:e1:03:db:32:3b:ba:f0: 0b:0f:09:4d:f9:51:dd:5c:e5:61:a9:5b:15:9a:8c: e1:0c:2c:2c:7f:15:87:39:6a:f0:66:66:a2:d0:44: d5:c6:97:88:4f:73:40:5e:20:85:03:52:4c:59:af: ed:cd:e6:1c:5b:72:6e:dc:5c:20:1e:9c:90:47:1f: a7:fd:01:c0:8d:93:5d:22:62:ef:04:1b:02:f7:a1: 58:bb:eb:e2:95:74:47:c0:6f:c3:43:05:84:4e:75: eb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9E:80:BD:4A:0C:7B:D8:82:A0:0A:BD:C7:9A:F4:4B:C0:18:C5:E7 X509v3 Authority Key Identifier: keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/zp6AvUoMe9iCoAq9x5r0S8AYxec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.16.184.0/21 194.62.244.0/22 Signature Algorithm: sha256WithRSAEncryption 07:ff:61:eb:96:ed:6f:9f:49:bd:53:a3:2b:c4:0f:69:8f:90: 82:2c:a0:be:29:1b:5e:06:a6:d8:54:48:39:e6:58:00:a1:b5: 2b:9d:f5:6d:f8:0b:69:55:9c:2b:1a:10:1d:36:4b:ef:b2:fb: 0a:db:18:78:0d:a4:2a:0e:54:8d:4a:72:dc:4a:95:ed:d8:9b: 96:bd:a7:22:3f:79:81:fe:b2:30:22:74:f6:0f:af:26:09:50: f3:3c:0d:e1:48:da:5c:7f:25:7b:3a:5e:6d:ea:eb:ef:3a:77: fd:3d:1a:6b:12:c6:ca:0d:b9:43:75:b7:cc:82:75:c1:25:27: fb:bb:a8:a5:56:5a:57:13:b3:c2:03:21:4c:9f:2b:03:0f:32: 8d:9d:35:80:8e:f8:7d:23:16:b8:e7:fc:15:da:58:b0:81:76: 8f:62:71:60:83:8e:bf:fa:e4:f2:ce:21:d8:31:45:ac:95:d9: 61:3f:c8:e8:c4:93:9c:e4:09:19:90:3b:ed:3e:ff:36:1e:e1: 34:b2:f5:e5:9a:ff:9c:9b:10:e8:6d:cb:8a:64:cd:4d:2e:f4: 6e:b0:e9:dd:cd:20:8d:b7:23:4e:dd:fd:10:9f:85:0b:8b:b2: 6d:ac:88:9b:12:15:51:bf:f1:fa:d3:2e:b1:98:e1:93:b7:4a: a4:71:b3:38 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gpTrgSjmzHT1/MpjXrrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzdkZDI1Y2E1ZmIxZGM5MTNjMmZmYjkxNmZhMjJmYjg2 MTBiNzgwHhcNMjYwMTAyMTYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTllODBiZDRhMGM3YmQ4ODJhMDBhYmRjNzlhZjQ0YmMwMThjNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tsyQHyWI4AcNFeiOAi2Mc9xvtCv cxUE4641q+w3peRpNa1z+YanwjJaYfsU0nNf+oi2fZg/7DeRQ1icWr6mHYgrjOKC SxtYVCajrRmRtJcjkg3hQlWIitn0dFlCFCZ6wxGQt7qGPao3mHuPgfKbQz6kooku Lb6hdon4KQ1V/jNLCYuXH/jFZeD4voFx2/c90H/C6gkZmPkyaIt0fOED2zI7uvAL DwlN+VHdXOVhqVsVmozhDCwsfxWHOWrwZmai0ETVxpeIT3NAXiCFA1JMWa/tzeYc W3Ju3FwgHpyQRx+n/QHAjZNdImLvBBsC96FYu+vilXRHwG/DQwWETnXrVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM6egL1KDHvYgqAKvcea9EvAGMXnMB8GA1UdIwQY MBaAFHfH3SXKX7HckTwv+5Fvoi+4YQt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYt ZGRiMzViMWFiYWQ1LzEvenA2QXZVb01lOWlDb0FxOXg1cjBTOEFZeGVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYtZGRiMzViMWFiYWQ1 LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDURC4AwQC wj70MA0GCSqGSIb3DQEBCwUAA4IBAQAH/2Hrlu1vn0m9U6MrxA9pj5CCLKC+KRte BqbYVEg55lgAobUrnfVt+AtpVZwrGhAdNkvvsvsK2xh4DaQqDlSNSnLcSpXt2JuW vaciP3mB/rIwInT2D68mCVDzPA3hSNpcfyV7Ol5t6uvvOnf9PRprEsbKDblDdbfM gnXBJSf7u6ilVlpXE7PCAyFMnysDDzKNnTWAjvh9Ixa45/wV2liwgXaPYnFgg46/ +uTyziHYMUWsldlhP8joxJOc5AkZkDvtPv82HuE0svXlmv+cmxDobcuKZM1NLvRu sOndzSCNtyNO3f0Qn4ULi7JtrIibEhVRv/H60y6xmOGTt0qkcbM4 -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:42 2026 by rpki-client