This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZFbwBaf9BDf39LhQzcf6SiLo3jo.roa File: ZFbwBaf9BDf39LhQzcf6SiLo3jo.roa (raw, json) Hash identifier: LBKk83xu8X4fKDITFvkoCz0NS3brBZvHizFc+gZac9E= Subject key identifier: 64:56:F0:05:A7:FD:04:37:F7:F4:B8:50:CD:C7:FA:4A:22:E8:DE:3A Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C805E4B785D3072A321C843579FB376 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZFbwBaf9BDf39LhQzcf6SiLo3jo.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55286 IP address blocks: 93.92.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5e:4b:78:5d:30:72:a3:21:c8:43:57:9f:b3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6456f005a7fd0437f7f4b850cdc7fa4a22e8de3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:24:39:fc:e7:35:af:c0:26:aa:1d:f4:34: 46:3c:20:7f:e3:bc:2e:f3:95:a3:a0:7d:e1:64:b8: bb:33:6f:ef:b2:37:8a:86:6f:6f:fd:7d:95:17:52: 79:83:9b:3b:e3:fa:2b:70:a7:d5:b7:56:5b:6f:3a: ca:36:21:33:51:85:6f:49:50:e1:52:ec:94:ea:ae: 99:59:aa:cc:fe:fd:3f:7b:da:c8:c7:74:dd:3b:c3: 67:0e:e5:20:12:fa:83:a3:ee:aa:88:6f:94:92:2f: 52:77:86:a0:4a:72:83:68:20:02:60:ad:79:a4:77: db:c2:02:ac:95:39:fa:06:d6:05:cc:1e:a2:5c:31: 71:bd:62:6c:81:d0:0b:90:4f:ea:ea:ae:7f:a8:b5: 1a:04:78:58:37:7b:ed:f5:30:a7:ab:5e:85:89:0f: fb:6d:bc:e4:c0:38:4d:cd:59:e5:0e:1c:c4:68:f9: f7:f8:60:b7:f5:60:b3:d1:c9:0b:3a:d1:01:06:ca: 9e:e0:77:d0:46:90:19:0b:72:cf:87:c1:c8:9b:ab: ad:37:93:32:f9:68:c8:42:23:2f:a8:ac:cf:14:13: d8:7b:a6:66:7f:95:5c:c7:2f:d0:93:0c:4d:cc:be: ba:55:fe:26:d2:46:87:ad:d6:4d:db:6f:f5:60:71: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:56:F0:05:A7:FD:04:37:F7:F4:B8:50:CD:C7:FA:4A:22:E8:DE:3A X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZFbwBaf9BDf39LhQzcf6SiLo3jo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.92.112.0/24 Signature Algorithm: sha256WithRSAEncryption 90:ee:ea:db:22:32:96:d1:66:06:87:c1:14:cd:c5:34:d6:c4: 15:09:9a:e8:41:4e:65:6d:8c:a9:44:80:6b:85:f3:88:49:88: e1:16:57:22:c0:d8:d8:71:ab:4b:af:fe:50:02:d9:81:26:68: 77:0d:7b:b3:07:5a:a0:62:d6:78:99:de:03:2f:91:d6:eb:e9: e2:c2:e8:41:8a:a1:30:a4:4f:6b:ea:bc:9a:45:95:95:aa:d6: 2a:a8:5c:28:9e:6d:b6:ca:a8:df:49:e7:24:3e:c8:ba:98:0a: 7c:5d:e8:71:12:a5:f2:e8:0a:42:0b:51:b8:2b:ae:54:9d:64: 65:80:26:b0:7f:38:1b:82:89:ad:0d:8a:94:f3:f8:1a:a2:62: 85:36:b7:be:7e:67:30:e2:94:00:de:5d:1f:a5:e7:b0:a8:3b: 3a:c9:ca:9b:fc:b2:bb:57:a1:b0:59:6a:66:34:7b:54:e6:85: a8:e6:7a:23:ec:ce:bb:65:c5:86:97:1f:13:1c:c3:4b:61:7b: 2b:0c:db:77:53:73:9f:50:89:49:57:30:2b:aa:80:88:a6:bb: ac:f6:ea:ca:5e:75:bb:0e:0d:70:c3:c0:8e:d6:c0:41:6c:86: 04:2b:9d:e8:63:3c:39:eb:98:3d:ce:64:5e:96:b5:6d:8f:3f: d9:7f:9a:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gF5LeF0wcqMhyENXn7N2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDU2ZjAwNWE3ZmQwNDM3ZjdmNGI4NTBjZGM3ZmE0YTIyZThkZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh4kOfznNa/AJqod9DRGPCB/47wu 85WjoH3hZLi7M2/vsjeKhm9v/X2VF1J5g5s74/orcKfVt1ZbbzrKNiEzUYVvSVDh UuyU6q6ZWarM/v0/e9rIx3TdO8NnDuUgEvqDo+6qiG+Uki9Sd4agSnKDaCACYK15 pHfbwgKslTn6BtYFzB6iXDFxvWJsgdALkE/q6q5/qLUaBHhYN3vt9TCnq16FiQ/7 bbzkwDhNzVnlDhzEaPn3+GC39WCz0ckLOtEBBsqe4HfQRpAZC3LPh8HIm6utN5My +WjIQiMvqKzPFBPYe6Zmf5Vcxy/QkwxNzL66Vf4m0kaHrdZN22/1YHEZkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGRW8AWn/QQ39/S4UM3H+koi6N46MB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvWkZid0JhZjlCRGYzOUxoUXpjZjZTaUxvM2pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVxwMA0G CSqGSIb3DQEBCwUAA4IBAQCQ7urbIjKW0WYGh8EUzcU01sQVCZroQU5lbYypRIBr hfOISYjhFlciwNjYcatLr/5QAtmBJmh3DXuzB1qgYtZ4md4DL5HW6+niwuhBiqEw pE9r6ryaRZWVqtYqqFwonm22yqjfSeckPsi6mAp8XehxEqXy6ApCC1G4K65UnWRl gCawfzgbgomtDYqU8/gaomKFNre+fmcw4pQA3l0fpeewqDs6ycqb/LK7V6GwWWpm NHtU5oWo5noj7M67ZcWGlx8THMNLYXsrDNt3U3OfUIlJVzArqoCIprus9urKXnW7 Dg1ww8CO1sBBbIYEK53oYzw565g9zmRelrVtjz/Zf5rv -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:18 2026 by rpki-client