This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zJU3Z47LM4V-oHK1kt4OzvwG1LM.roa File: zJU3Z47LM4V-oHK1kt4OzvwG1LM.roa (raw, json) Hash identifier: CjNBPH76HNYSbiJM3LdPtrbFzdhkSCMvo5Qn3US4mdc= Subject key identifier: CC:95:37:67:8E:CB:33:85:7E:A0:72:B5:92:DE:0E:CE:FC:06:D4:B3 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA78402EE2AA9EB394B0FAB4412A734 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zJU3Z47LM4V-oHK1kt4OzvwG1LM.roa Signing time: Fri 02 Jan 2026 12:21:05 +0000 ROA not before: Fri 02 Jan 2026 12:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200121 IP address blocks: 176.211.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:84:02:ee:2a:a9:eb:39:4b:0f:ab:44:12:a7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc9537678ecb33857ea072b592de0ecefc06d4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:00:e6:9b:fe:43:83:d6:44:5d:56:b1:13: 15:c1:45:c1:f7:5b:b9:ca:5d:67:82:c8:0c:14:1d: 7c:7a:a7:35:4e:81:d1:26:8f:36:0d:3f:1a:09:28: 9f:b8:ef:d8:c8:2d:c1:a8:71:36:ab:8a:b7:88:88: 6f:af:04:4d:dd:4a:b2:60:bc:cd:87:ac:a6:28:40: 22:65:cd:05:de:ea:ea:10:5d:26:70:a9:a4:55:c4: bf:28:2c:6d:bc:6b:b0:7e:b0:91:11:b3:93:3f:e6: d2:cd:e9:f8:10:d2:ab:56:3c:4d:b6:d4:48:39:1d: 6c:74:60:91:1b:4f:97:6f:66:62:ac:fe:e2:27:a7: e6:62:b6:83:5b:67:c2:1a:a0:c9:68:bb:d0:b7:e3: 0c:4b:cf:3d:6e:ef:49:5e:e4:09:d1:5b:0a:a9:b2: 47:40:c9:b2:c6:56:5b:35:e2:de:14:32:67:59:f7: b4:7f:a9:7c:77:66:ca:14:7b:49:0e:2e:32:fc:00: 1d:4f:16:7d:eb:61:a7:c0:83:45:4e:70:a8:9f:ab: 0b:f5:be:1f:6f:42:13:54:2c:c3:f0:df:37:de:79: 77:ec:15:16:b1:a3:cf:aa:18:4c:f3:e0:62:c9:12: d0:de:90:8c:96:e5:ea:0e:bf:fc:30:5d:16:ab:03: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:95:37:67:8E:CB:33:85:7E:A0:72:B5:92:DE:0E:CE:FC:06:D4:B3 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/zJU3Z47LM4V-oHK1kt4OzvwG1LM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.211.124.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:bd:ac:11:ef:d9:3a:88:f7:81:f6:c2:c5:27:99:9b:2a:0a: 0b:c7:96:94:19:ee:8c:2a:c1:d5:c4:32:84:16:77:04:da:e2: 61:40:ad:4d:00:cb:56:c6:03:79:1c:3f:f2:46:fd:0e:94:2f: 99:98:13:6a:38:b2:cc:4f:08:e8:94:70:ea:3f:3f:7a:04:5f: 90:47:4f:bc:ce:3f:38:1b:b0:26:5d:9d:b2:ea:02:aa:8b:06: 71:87:b0:a8:f3:77:7d:d8:aa:fa:c6:58:b2:e9:1e:28:52:4a: 0e:89:ed:31:4c:bc:37:97:f6:5c:a3:f8:a1:47:51:41:11:de: 35:ed:ae:5a:cc:ea:c8:6c:41:0c:33:08:b2:61:c9:3f:5d:fc: 7c:95:1b:dd:09:32:f6:15:81:0a:2e:17:1a:8b:f4:83:7b:38: 4a:c6:39:77:cc:6d:5f:8f:cf:57:f7:c6:ca:65:ec:af:c3:c2: 6d:15:ec:d3:42:04:ec:e3:82:c4:25:ab:44:54:b2:4f:c5:f0: c0:5c:42:22:4f:1e:2e:5a:8a:e5:56:a1:e7:c8:e1:b8:1f:30: b0:c9:49:77:56:ef:0a:c8:98:28:4d:cc:3a:0e:f0:76:71:97: e0:bf:ad:fa:cd:5c:b2:0a:ec:70:d8:b1:08:fc:88:49:d2:36: 47:b6:ff:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4QC7iqp6zlLD6tEEqc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzk1Mzc2NzhlY2IzMzg1N2VhMDcyYjU5MmRlMGVjZWZjMDZkNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n8A5pv+Q4PWRF1WsRMVwUXB91u5 yl1ngsgMFB18eqc1ToHRJo82DT8aCSifuO/YyC3BqHE2q4q3iIhvrwRN3UqyYLzN h6ymKEAiZc0F3urqEF0mcKmkVcS/KCxtvGuwfrCREbOTP+bSzen4ENKrVjxNttRI OR1sdGCRG0+Xb2ZirP7iJ6fmYraDW2fCGqDJaLvQt+MMS889bu9JXuQJ0VsKqbJH QMmyxlZbNeLeFDJnWfe0f6l8d2bKFHtJDi4y/AAdTxZ962GnwINFTnCon6sL9b4f b0ITVCzD8N833nl37BUWsaPPqhhM8+BiyRLQ3pCMluXqDr/8MF0WqwM6NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMyVN2eOyzOFfqBytZLeDs78BtSzMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvekpVM1o0N0xNNFYtb0hLMWt0NE96dndHMUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsNN8MA0G CSqGSIb3DQEBCwUAA4IBAQCKvawR79k6iPeB9sLFJ5mbKgoLx5aUGe6MKsHVxDKE FncE2uJhQK1NAMtWxgN5HD/yRv0OlC+ZmBNqOLLMTwjolHDqPz96BF+QR0+8zj84 G7AmXZ2y6gKqiwZxh7Co83d92Kr6xliy6R4oUkoOie0xTLw3l/Zco/ihR1FBEd41 7a5azOrIbEEMMwiyYck/Xfx8lRvdCTL2FYEKLhcai/SDezhKxjl3zG1fj89X98bK Zeyvw8JtFezTQgTs44LEJatEVLJPxfDAXEIiTx4uWorlVqHnyOG4HzCwyUl3Vu8K yJgoTcw6DvB2cZfgv636zVyyCuxw2LEI/IhJ0jZHtv91 -----END CERTIFICATE-----Generated at Mon Jan 26 10:15:00 2026 by rpki-client