This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa File: ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa (raw, json) Hash identifier: 7v4wpy52S1nKFjEkeyyEFDHr8mGfzkP5V5Zp0vSSsfc= Subject key identifier: 64:D1:40:00:E5:4E:03:F4:D4:1E:B8:CD:48:CE:2E:2A:C6:60:A9:C7 Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Certificate serial: 019B7EA69EE7A7976CA3C2F848EF43659664 Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa Signing time: Fri 02 Jan 2026 12:20:07 +0000 ROA not before: Fri 02 Jan 2026 12:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49871 IP address blocks: 193.104.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9e:e7:a7:97:6c:a3:c2:f8:48:ef:43:65:96:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Validity Not Before: Jan 2 12:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64d14000e54e03f4d41eb8cd48ce2e2ac660a9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:8a:f8:f3:d4:9e:dc:80:4e:9a:d9:89:30: fe:a2:dc:68:16:36:67:3a:e7:72:99:67:c1:9d:12: 7c:4d:42:e1:06:ae:91:13:99:63:b3:1c:27:4b:17: 06:1d:2d:fb:71:8a:72:82:0b:a4:aa:89:3f:70:9c: 1c:d1:46:a7:60:0d:4e:68:6d:86:65:28:c1:0c:f7: a3:cb:0e:2b:e2:29:68:2d:b3:33:d1:21:a0:49:1c: f0:ce:7a:62:6a:66:0c:b4:ec:0b:7c:3c:ee:9a:ed: 68:ce:c3:03:e5:2a:1c:28:2e:02:15:36:ad:ef:d4: f4:55:1c:1f:f8:4b:bd:53:22:54:2e:d3:52:0d:23: 97:48:4c:4e:49:c4:13:be:b3:e6:6f:ac:db:ed:20: 4b:34:f1:86:6b:33:ac:56:09:4e:dd:ce:94:00:47: c7:ea:92:73:62:44:3e:e9:76:de:c2:e2:97:9a:d0: 9c:91:fe:08:a5:10:26:3c:b8:ad:c2:d5:e7:81:58: b5:d4:b4:8e:e2:50:64:54:8b:58:a5:2c:92:e1:25: f2:32:d3:c9:d6:fd:6d:5a:b0:eb:cd:64:18:b9:63: 38:44:21:66:c3:ff:78:d8:c6:b1:30:0b:81:df:d7: c0:fc:f3:3b:cf:fa:ed:01:63:07:a7:40:14:6a:b6: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D1:40:00:E5:4E:03:F4:D4:1E:B8:CD:48:CE:2E:2A:C6:60:A9:C7 X509v3 Authority Key Identifier: keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.9.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:c8:1f:72:b6:11:7c:3f:67:af:9f:05:d9:1e:bd:2b:97:44: 08:63:a1:44:db:5b:21:ea:35:86:bc:48:6d:b0:ba:71:66:3d: 0d:be:ec:7c:c2:50:fb:71:ea:a5:97:45:b7:f7:e8:20:98:1f: 8b:b9:a2:f9:59:8f:a9:b4:c6:6c:bf:af:31:33:6e:84:8c:18: 2b:a5:59:5e:f1:bc:44:6c:47:ba:a4:7b:1a:03:f7:fc:f6:22: 98:9e:d7:e8:3f:32:18:c9:91:56:3c:58:26:03:86:da:80:b9: bd:84:43:29:4c:04:e9:79:1e:94:d3:29:d4:1b:ff:50:cc:a8: e2:06:14:21:b0:4a:88:ff:5d:7b:05:c7:33:cc:ee:fb:f3:97: 3e:c1:63:81:d7:5f:e3:9b:ae:14:e0:1d:d2:b3:ee:4c:9d:da: c4:81:0b:df:be:a5:5c:14:e0:56:2c:86:52:a8:13:c0:9b:78: cd:0b:54:9e:ee:05:bb:cc:9b:3a:0a:1f:62:42:18:10:50:28: 11:f4:b8:03:75:15:25:fb:d5:93:3b:e2:39:2c:77:85:10:1a: e5:ba:30:2e:e5:21:32:25:dc:9f:a9:13:74:31:21:38:cc:f3: 18:21:7f:01:00:7f:bc:52:34:d3:82:d9:2a:71:3f:1b:51:c6: 94:70:d6:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pp7np5dso8L4SO9DZZZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5 ZjJmNjEwHhcNMjYwMTAyMTIyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGQxNDAwMGU1NGUwM2Y0ZDQxZWI4Y2Q0OGNlMmUyYWM2NjBhOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqOK+PPUntyATprZiTD+otxoFjZn OudymWfBnRJ8TULhBq6RE5ljsxwnSxcGHS37cYpyggukqok/cJwc0UanYA1OaG2G ZSjBDPejyw4r4iloLbMz0SGgSRzwznpiamYMtOwLfDzumu1ozsMD5SocKC4CFTat 79T0VRwf+Eu9UyJULtNSDSOXSExOScQTvrPmb6zb7SBLNPGGazOsVglO3c6UAEfH 6pJzYkQ+6XbewuKXmtCckf4IpRAmPLitwtXngVi11LSO4lBkVItYpSyS4SXyMtPJ 1v1tWrDrzWQYuWM4RCFmw/942MaxMAuB39fA/PM7z/rtAWMHp0AUara44wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGTRQADlTgP01B64zUjOLirGYKnHMB8GA1UdIwQY MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt MDYzNjc1MzY3OWI2LzEvWk5GQUFPVk9BX1RVSHJqTlNNNHVLc1pncWNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2 LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWgJMA0G CSqGSIb3DQEBCwUAA4IBAQCayB9ythF8P2evnwXZHr0rl0QIY6FE21sh6jWGvEht sLpxZj0Nvux8wlD7ceqll0W39+ggmB+LuaL5WY+ptMZsv68xM26EjBgrpVle8bxE bEe6pHsaA/f89iKYntfoPzIYyZFWPFgmA4bagLm9hEMpTATpeR6U0ynUG/9QzKji BhQhsEqI/117BcczzO7785c+wWOB11/jm64U4B3Ss+5MndrEgQvfvqVcFOBWLIZS qBPAm3jNC1Se7gW7zJs6Ch9iQhgQUCgR9LgDdRUl+9WTO+I5LHeFEBrlujAu5SEy JdyfqRN0MSE4zPMYIX8BAH+8UjTTgtkqcT8bUcaUcNYL -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:58 2026 by rpki-client