This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Z_CiSK55gizRlmUBAQqWDkAsjSA.roa File: Z_CiSK55gizRlmUBAQqWDkAsjSA.roa (raw, json) Hash identifier: ZtijwttgCm0QiPAlfL22m300Zqs50WEunsAW/5Jt8Fg= Subject key identifier: 67:F0:A2:48:AE:79:82:2C:D1:96:65:01:01:0A:96:0E:40:2C:8D:20 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019B7F15811C1A984ED39E0F5A332C35822F Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Z_CiSK55gizRlmUBAQqWDkAsjSA.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42947 IP address blocks: 176.57.98.0/23 maxlen: 23 213.181.78.0/23 maxlen: 23 213.181.78.0/24 maxlen: 24 213.181.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:81:1c:1a:98:4e:d3:9e:0f:5a:33:2c:35:82:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67f0a248ae79822cd1966501010a960e402c8d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:83:ab:d4:fa:38:6c:e9:cd:d3:d1:ed:d6: 30:f0:38:1c:78:d6:cc:9b:97:dc:7d:bf:2a:6c:e5: 56:ca:a0:41:19:ef:b6:56:cf:17:1e:74:f0:21:5c: 2b:74:00:f2:81:d5:6f:a3:41:32:a6:db:88:49:3f: 2a:3a:c3:07:ce:6f:4e:83:86:b2:d4:8f:42:42:20: 58:ff:02:1c:01:84:90:bf:73:3e:35:4d:e4:c1:1e: 40:27:5a:d3:24:2f:d1:e8:90:4d:72:d2:7c:e9:f3: 6e:bd:d0:8e:3f:70:cf:7a:7d:ba:6c:2d:16:df:15: 5d:65:9e:d8:ad:dd:ae:eb:60:95:04:9f:96:b5:90: 4f:3d:1c:e7:0a:00:bd:c6:4a:52:aa:db:8c:3c:0c: 0d:e3:fd:dc:f0:9f:f5:1a:82:8a:ff:92:0d:03:61: 97:1b:91:09:7a:7c:6a:b9:b3:c3:68:93:75:cd:6b: 4f:04:8b:a9:11:e4:49:19:a8:34:80:ff:6d:75:ed: e4:3c:78:a3:ef:51:2c:34:90:0b:c3:bd:7c:76:f3: 6d:03:cc:58:42:7a:68:79:5d:e4:ab:c2:9b:29:4e: 3f:03:de:20:17:ac:4b:82:6f:c9:4a:24:a1:b4:0b: a3:33:17:33:ea:50:15:53:e6:e3:d7:06:5b:d9:54: c1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F0:A2:48:AE:79:82:2C:D1:96:65:01:01:0A:96:0E:40:2C:8D:20 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Z_CiSK55gizRlmUBAQqWDkAsjSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.98.0/23 213.181.78.0/23 Signature Algorithm: sha256WithRSAEncryption 82:c4:bb:f7:20:1c:f8:41:93:b2:4e:0a:b4:86:8f:09:d6:2d: cd:ae:8f:6b:3c:de:76:b3:50:bc:a1:e8:b8:d6:34:14:7b:3f: e4:a0:f7:f7:f2:cf:a1:48:50:00:3e:0a:c6:4a:15:99:54:4e: fd:7f:96:4e:63:69:bc:2f:f1:96:e6:cc:ed:e0:6c:2b:44:58: 96:f8:8a:e1:a4:24:e7:32:f6:ae:3a:eb:c5:71:c5:b0:ad:62: ca:27:25:a0:81:34:a4:ea:7b:21:fb:2c:4a:43:41:c6:94:07: 80:41:e0:2a:66:aa:1d:a7:59:0d:83:50:b1:c7:bd:5e:2f:5c: f1:06:9c:54:87:c5:14:0a:6f:62:2c:0b:5a:da:ce:3d:d9:46: e0:54:68:f3:aa:fd:1b:e7:b0:f5:68:9b:90:86:e7:6d:71:95: 32:75:56:5b:46:f3:ec:5b:0c:5b:6f:eb:11:fb:bb:f7:fc:96: e5:82:e9:d2:c3:7b:58:0f:05:36:f0:d0:fa:67:25:cc:0e:1c: 66:01:ac:da:46:5b:1c:db:ac:e1:06:bd:99:dc:77:9e:69:5d: a8:0f:da:5c:76:bd:3a:4d:01:9d:89:f9:07:10:21:2a:30:80: 53:78:d6:ce:35:47:8a:03:cd:e7:cc:4a:b3:f9:f7:69:13:12: b5:6b:11:1a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FYEcGphO054PWjMsNYIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2YwYTI0OGFlNzk4MjJjZDE5NjY1MDEwMTBhOTYwZTQwMmM4ZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPGDq9T6OGzpzdPR7dYw8DgceNbM m5fcfb8qbOVWyqBBGe+2Vs8XHnTwIVwrdADygdVvo0EyptuIST8qOsMHzm9Og4ay 1I9CQiBY/wIcAYSQv3M+NU3kwR5AJ1rTJC/R6JBNctJ86fNuvdCOP3DPen26bC0W 3xVdZZ7Yrd2u62CVBJ+WtZBPPRznCgC9xkpSqtuMPAwN4/3c8J/1GoKK/5INA2GX G5EJenxqubPDaJN1zWtPBIupEeRJGag0gP9tde3kPHij71EsNJALw718dvNtA8xY QnpoeV3kq8KbKU4/A94gF6xLgm/JSiShtAujMxcz6lAVU+bj1wZb2VTBDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGfwokiueYIs0ZZlAQEKlg5ALI0gMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvWl9DaVNLNTVnaXpSbG1VQkFRcVdEa0FzalNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsDliAwQB 1bVOMA0GCSqGSIb3DQEBCwUAA4IBAQCCxLv3IBz4QZOyTgq0ho8J1i3Nro9rPN52 s1C8oei41jQUez/koPf38s+hSFAAPgrGShWZVE79f5ZOY2m8L/GW5szt4GwrRFiW +IrhpCTnMvauOuvFccWwrWLKJyWggTSk6nsh+yxKQ0HGlAeAQeAqZqodp1kNg1Cx x71eL1zxBpxUh8UUCm9iLAta2s492UbgVGjzqv0b57D1aJuQhudtcZUydVZbRvPs Wwxbb+sR+7v3/JblgunSw3tYDwU28ND6ZyXMDhxmAazaRlsc26zhBr2Z3HeeaV2o D9pcdr06TQGdifkHECEqMIBTeNbONUeKA83nzEqz+fdpExK1axEa -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:47 2026 by rpki-client