This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/nzuqF07FEJEwrQsi7bO5TmAKTgs.roa File: nzuqF07FEJEwrQsi7bO5TmAKTgs.roa (raw, json) Hash identifier: Rb8+fjExMETfqr5QiklAN6QZmGeP8LvBEiZ6DU19auk= Subject key identifier: 9F:3B:AA:17:4E:C5:10:91:30:AD:0B:22:ED:B3:B9:4E:60:0A:4E:0B Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019B7C13534D91F451B450F3DF96BD7756A4 Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/nzuqF07FEJEwrQsi7bO5TmAKTgs.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10753 IP address blocks: 217.22.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:53:4d:91:f4:51:b4:50:f3:df:96:bd:77:56:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f3baa174ec5109130ad0b22edb3b94e600a4e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:ae:a3:01:e6:1c:70:23:fa:a7:09:62:2f: 92:cc:12:64:61:b4:c2:e9:6c:92:dd:eb:1c:0e:2d: f5:1c:65:f3:f7:c4:54:6f:25:1c:74:81:fc:23:3b: b6:be:91:7b:ad:f7:eb:f2:78:ba:09:b8:42:a2:25: b3:51:94:6b:5a:23:41:11:8d:95:b5:b9:65:1c:65: a1:1f:1c:aa:85:96:e6:4e:c7:4b:c7:80:eb:1d:ce: 49:84:3c:3b:29:a8:cf:85:59:29:e8:7e:d8:19:2d: bb:1b:3e:17:94:44:e6:21:ae:8e:f1:08:84:f3:47: 93:66:ff:4a:4f:53:a1:88:b4:1b:af:7e:9c:4b:bc: 66:15:c9:74:d2:ab:1a:6c:fa:4a:98:6c:88:43:0e: af:94:d4:23:06:65:54:23:28:b1:45:96:09:33:d7: 7f:0e:47:2c:de:c0:33:78:35:86:bc:df:d2:73:d3: 03:0f:7c:07:1b:7a:b7:90:65:a5:03:38:4f:b6:f4: 84:ab:1c:af:93:df:09:43:7a:e0:12:86:4b:8d:bf: 4c:b9:9a:52:43:2f:bf:c1:ff:36:05:92:75:2d:80: bf:0f:32:17:9a:6c:c0:d3:f9:43:56:cd:9a:26:95: e2:aa:e4:aa:55:02:1c:db:00:e1:fd:97:1d:1c:61: cd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3B:AA:17:4E:C5:10:91:30:AD:0B:22:ED:B3:B9:4E:60:0A:4E:0B X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/nzuqF07FEJEwrQsi7bO5TmAKTgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.22.244.0/23 Signature Algorithm: sha256WithRSAEncryption 05:9f:2f:03:e1:30:c5:1b:25:4d:b4:f4:b2:db:b6:c5:b3:8e: 67:33:0a:8f:01:99:ce:b9:59:45:93:da:8d:45:34:c6:41:4b: d4:74:19:45:44:81:1c:29:42:3a:70:6c:c4:18:e8:6d:b9:a7: 63:32:3c:57:10:bc:81:59:9c:0c:f9:9e:b3:e9:39:06:d7:1f: 67:8e:b7:0d:05:76:99:68:2a:b3:e5:ec:b6:ff:f7:6c:9b:2e: 1f:d8:96:77:a5:a9:be:60:02:1b:d4:5f:25:3e:0a:96:52:c5: 1e:5e:81:e3:d3:4b:45:3b:03:0d:43:d6:e3:bd:5d:a6:76:df: 0f:ad:3b:0e:5c:b1:81:b7:a2:54:5c:32:47:85:dd:72:c3:42: a6:5e:01:af:39:13:52:e6:f1:65:55:6a:2e:2a:0c:e2:36:fd: ee:59:b3:14:75:65:d0:2a:6a:08:20:5a:8c:2d:64:05:42:2d: 21:2b:18:f7:fb:df:cc:5b:57:fd:bd:00:71:cc:11:9f:b2:f8: 57:bb:4d:e1:55:77:3e:14:ce:31:ab:03:56:e8:c4:fa:a4:71: 69:b6:b1:af:83:db:ec:6b:1c:4a:38:d5:85:6f:35:33:b3:27: 26:7f:74:f7:b8:fb:1d:a1:3e:87:1e:f0:ea:1d:f8:d3:c3:07: b8:2c:a6:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1NNkfRRtFDz35a9d1akMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjNiYWExNzRlYzUxMDkxMzBhZDBiMjJlZGIzYjk0ZTYwMGE0ZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTSuowHmHHAj+qcJYi+SzBJkYbTC 6WyS3escDi31HGXz98RUbyUcdIH8Izu2vpF7rffr8ni6CbhCoiWzUZRrWiNBEY2V tbllHGWhHxyqhZbmTsdLx4DrHc5JhDw7KajPhVkp6H7YGS27Gz4XlETmIa6O8QiE 80eTZv9KT1OhiLQbr36cS7xmFcl00qsabPpKmGyIQw6vlNQjBmVUIyixRZYJM9d/ Dkcs3sAzeDWGvN/Sc9MDD3wHG3q3kGWlAzhPtvSEqxyvk98JQ3rgEoZLjb9MuZpS Qy+/wf82BZJ1LYC/DzIXmmzA0/lDVs2aJpXiquSqVQIc2wDh/ZcdHGHNywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ87qhdOxRCRMK0LIu2zuU5gCk4LMB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEvbnp1cUYwN0ZFSkV3clFzaTdiTzVUbUFLVGdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Rb0MA0G CSqGSIb3DQEBCwUAA4IBAQAFny8D4TDFGyVNtPSy27bFs45nMwqPAZnOuVlFk9qN RTTGQUvUdBlFRIEcKUI6cGzEGOhtuadjMjxXELyBWZwM+Z6z6TkG1x9njrcNBXaZ aCqz5ey2//dsmy4f2JZ3pam+YAIb1F8lPgqWUsUeXoHj00tFOwMNQ9bjvV2mdt8P rTsOXLGBt6JUXDJHhd1yw0KmXgGvORNS5vFlVWouKgziNv3uWbMUdWXQKmoIIFqM LWQFQi0hKxj3+9/MW1f9vQBxzBGfsvhXu03hVXc+FM4xqwNW6MT6pHFptrGvg9vs axxKONWFbzUzsycmf3T3uPsdoT6HHvDqHfjTwwe4LKYj -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:11 2026 by rpki-client