This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ZJn7G6eupzsYI6Qb_3PZRyUP64A.roa File: ZJn7G6eupzsYI6Qb_3PZRyUP64A.roa (raw, json) Hash identifier: MBZe37MzhPFgcFvelUunWWfavB0OARuzaKp7z8aRi3s= Subject key identifier: 64:99:FB:1B:A7:AE:A7:3B:18:23:A4:1B:FF:73:D9:47:25:0F:EB:80 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B77597BC66442B26F9B9CD3A2F328FCB5 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ZJn7G6eupzsYI6Qb_3PZRyUP64A.roa Signing time: Thu 01 Jan 2026 02:18:31 +0000 ROA not before: Thu 01 Jan 2026 02:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212043 IP address blocks: 193.38.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:7b:c6:64:42:b2:6f:9b:9c:d3:a2:f3:28:fc:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6499fb1ba7aea73b1823a41bff73d947250feb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:23:3c:09:ec:67:f2:85:cb:4d:41:38:ca:a6: 3e:45:ad:1d:fe:2b:32:a6:be:a6:c3:f4:70:c0:af: c5:af:52:b9:de:20:7c:b9:79:65:85:21:34:66:99: 56:cc:d7:de:d3:b8:ae:69:fb:99:d7:4a:48:51:97: c6:73:bb:34:b2:34:f3:ba:8c:5c:72:8a:ee:90:c6: aa:4a:4f:90:ef:25:d3:07:eb:4d:52:3c:aa:af:54: 15:11:55:69:c1:bf:15:68:7d:82:75:9d:24:fb:99: 1f:9d:39:f1:0a:38:4d:eb:84:19:56:d7:f2:88:f0: fd:6b:2d:eb:bb:36:e3:54:69:bf:2f:46:0f:9b:97: 59:0e:20:73:94:7b:e9:71:59:99:b0:b9:a4:7d:71: 56:ee:90:f2:53:15:ae:83:00:9c:8d:21:0b:bb:0a: 5d:99:a8:5f:48:76:2a:30:31:de:60:cc:1e:54:3b: 07:3f:9c:e2:9d:20:c1:5b:23:de:63:36:17:22:3a: 35:79:d5:ef:f0:53:bb:f3:30:d7:d3:2c:32:75:20: f9:1e:5c:ca:20:c8:e4:a5:5e:02:56:8d:ef:20:d3: e1:d7:a0:17:ec:fd:dc:c9:96:f6:5f:56:e8:bd:89: 4d:a7:ad:17:32:5d:04:fe:3b:e1:11:cb:ef:fe:42: 48:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:99:FB:1B:A7:AE:A7:3B:18:23:A4:1B:FF:73:D9:47:25:0F:EB:80 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ZJn7G6eupzsYI6Qb_3PZRyUP64A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.254.0/24 Signature Algorithm: sha256WithRSAEncryption 62:8a:e1:52:a0:fd:98:a3:51:c2:12:5f:11:38:fb:12:fd:a8: 2e:39:b0:7d:49:95:d0:46:8d:68:6e:0a:62:21:7a:42:7c:ad: 21:09:c8:21:2d:e7:48:08:68:0e:c1:e5:4d:dd:a1:94:64:14: 53:dc:4b:b4:a6:dd:25:75:8d:b7:02:2e:2d:3d:85:f8:9f:80: 76:97:09:d5:8d:5e:db:b2:03:47:f1:b3:d2:93:18:65:6a:f3: 95:48:09:ec:47:cf:92:cf:dc:4a:84:3f:94:e7:7d:5d:a3:79: 9a:cd:76:d4:27:68:fd:8e:e5:da:49:2f:df:1b:2f:e5:2f:3b: 2b:1c:c1:10:aa:2d:12:5e:c5:33:6c:0b:60:22:e8:b9:19:ac: d4:85:c0:aa:fa:3f:3c:e4:5f:c6:b8:e3:73:f3:68:00:9e:ec: c9:aa:e7:da:c8:71:a3:07:1f:ff:80:b1:64:88:74:9e:f5:02: 54:2e:96:a6:df:ce:0f:ee:63:85:df:35:22:f9:54:5f:f2:da: 01:9c:e1:7e:b0:79:e1:7c:58:0d:c9:d9:47:78:b4:d9:eb:2a: f8:51:93:dc:a3:2c:18:77:c2:2b:cd:8e:19:a4:ce:a8:75:a8: cf:69:5b:c0:17:b1:14:cb:2e:fe:21:22:e2:60:49:22:9a:b8: a8:27:cb:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXvGZEKyb5uc06LzKPy1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDk5ZmIxYmE3YWVhNzNiMTgyM2E0MWJmZjczZDk0NzI1MGZlYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSM8Cexn8oXLTUE4yqY+Ra0d/isy pr6mw/RwwK/Fr1K53iB8uXllhSE0ZplWzNfe07iuafuZ10pIUZfGc7s0sjTzuoxc corukMaqSk+Q7yXTB+tNUjyqr1QVEVVpwb8VaH2CdZ0k+5kfnTnxCjhN64QZVtfy iPD9ay3ruzbjVGm/L0YPm5dZDiBzlHvpcVmZsLmkfXFW7pDyUxWugwCcjSELuwpd mahfSHYqMDHeYMweVDsHP5zinSDBWyPeYzYXIjo1edXv8FO78zDX0ywydSD5HlzK IMjkpV4CVo3vINPh16AX7P3cyZb2X1bovYlNp60XMl0E/jvhEcvv/kJIzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGSZ+xunrqc7GCOkG/9z2UclD+uAMB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvWkpuN0c2ZXVwenNZSTZRYl8zUFpSeVVQNjRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSb+MA0G CSqGSIb3DQEBCwUAA4IBAQBiiuFSoP2Yo1HCEl8ROPsS/aguObB9SZXQRo1obgpi IXpCfK0hCcghLedICGgOweVN3aGUZBRT3Eu0pt0ldY23Ai4tPYX4n4B2lwnVjV7b sgNH8bPSkxhlavOVSAnsR8+Sz9xKhD+U531do3mazXbUJ2j9juXaSS/fGy/lLzsr HMEQqi0SXsUzbAtgIui5GazUhcCq+j885F/GuONz82gAnuzJqufayHGjBx//gLFk iHSe9QJULpam384P7mOF3zUi+VRf8toBnOF+sHnhfFgNydlHeLTZ6yr4UZPcoywY d8IrzY4ZpM6odajPaVvAF7EUyy7+ISLiYEkimrioJ8s6 -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:54 2026 by rpki-client