This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/A0z7IQh1Pr8fvyL5I4TT_hj-k0Q.roa File: A0z7IQh1Pr8fvyL5I4TT_hj-k0Q.roa (raw, json) Hash identifier: z/I+DSZiJhEoYfti3DU2Ke90Z0Knyu3rdi+RgDuTITU= Subject key identifier: 03:4C:FB:21:08:75:3E:BF:1F:BF:22:F9:23:84:D3:FE:18:FE:93:44 Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0 Certificate serial: 019B7DC9F991959311BEE5C87508A87DBAF2 Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/A0z7IQh1Pr8fvyL5I4TT_hj-k0Q.roa Signing time: Fri 02 Jan 2026 08:19:07 +0000 ROA not before: Fri 02 Jan 2026 08:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21396 IP address blocks: 193.223.78.0/24 maxlen: 24 194.180.187.0/24 maxlen: 24 2a13:f040::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f9:91:95:93:11:be:e5:c8:75:08:a8:7d:ba:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0 Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=034cfb2108753ebf1fbf22f92384d3fe18fe9344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:63:f3:5c:fe:b9:93:ce:6a:bd:70:52:56:41: d2:b4:4f:d1:e8:9b:16:ed:58:a1:52:37:42:3b:09: 6d:22:3a:54:49:ce:f8:51:43:08:4b:c0:69:e4:34: 60:15:83:c5:33:30:f1:21:05:92:4c:c4:e2:9e:65: 4f:ce:ed:98:70:33:d0:f4:de:0d:8e:64:5e:6f:be: de:23:25:9d:c6:74:f0:87:c0:9b:37:2d:a8:38:64: f6:3b:12:02:ae:67:67:d1:a9:78:5b:f0:f9:6b:21: 34:02:84:8e:a0:3a:25:b1:0b:53:4b:78:e0:c9:e7: 2c:7e:b3:9e:8b:d3:52:3d:6a:19:5e:63:41:ef:da: 77:19:68:ee:54:d3:bd:ef:0e:c5:22:98:70:45:1f: b3:d7:20:22:a7:6c:51:4d:0b:06:6f:c6:89:05:57: b1:1a:3a:1e:3a:6b:f5:5f:7d:6f:2a:96:f3:0c:4c: 6b:9f:b6:30:22:9a:45:ab:4c:d1:c9:07:98:1b:9c: fe:ca:c6:02:ad:0c:92:93:ec:3a:9c:bf:e2:2e:4d: f4:8e:b1:94:2e:43:20:c8:86:1e:cf:d2:b8:df:5e: e7:bb:70:da:fe:8e:5b:b2:30:e6:62:66:c2:ba:6f: 42:a2:b9:37:4b:c7:c3:a0:40:1c:7b:67:8e:56:43: ed:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4C:FB:21:08:75:3E:BF:1F:BF:22:F9:23:84:D3:FE:18:FE:93:44 X509v3 Authority Key Identifier: keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/A0z7IQh1Pr8fvyL5I4TT_hj-k0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.223.78.0/24 194.180.187.0/24 IPv6: 2a13:f040::/29 Signature Algorithm: sha256WithRSAEncryption 6b:a7:14:f7:17:09:50:74:e0:56:80:46:07:15:7b:4d:07:82: 89:9f:a4:53:40:c2:67:23:d0:f1:08:19:b4:32:c5:86:30:fe: 41:f7:88:da:25:f2:2a:fd:5f:a7:06:09:dc:ac:b0:62:c4:67: 7f:ab:b4:75:0a:12:ca:49:b3:81:60:22:8f:12:8c:25:bc:13: ed:7c:af:ec:dc:6d:a8:d9:2b:a7:04:26:37:92:93:5f:1a:d0: 4b:1c:de:8c:17:de:94:ea:e6:4a:4f:e4:a0:7a:1b:5c:89:4d: 2c:b7:64:ca:65:69:0e:08:78:71:76:11:e5:5f:a9:d2:b1:74: 5b:85:44:ba:44:59:aa:b8:41:9b:f7:dd:77:f4:02:29:e2:11: 9c:f5:bb:87:3d:c6:eb:11:89:bd:56:5b:78:13:b2:32:b6:b6: 2e:f1:43:50:62:99:3e:3a:eb:19:2b:d3:10:87:84:1b:18:78: b8:6a:59:3a:64:b5:10:26:d3:80:14:81:67:80:43:b9:dc:28: 32:f0:b0:39:67:2b:d5:12:31:b9:bc:95:5e:9f:45:49:28:aa: bf:f1:fd:b4:9f:05:f4:3c:a4:fe:5c:2a:10:ed:fd:2f:f0:85: b0:1e:4e:a3:9e:57:97:1e:b8:0d:96:14:8b:c1:74:e1:b7:bc: d8:b7:0d:a0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yfmRlZMRvuXIdQiofbryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZTM2MjIyY2NiYzZjNzIyMTM2MDU0MGJhYjNhOWRiYTlm MjM3YTAwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzRjZmIyMTA4NzUzZWJmMWZiZjIyZjkyMzg0ZDNmZTE4ZmU5MzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2PzXP65k85qvXBSVkHStE/R6JsW 7VihUjdCOwltIjpUSc74UUMIS8Bp5DRgFYPFMzDxIQWSTMTinmVPzu2YcDPQ9N4N jmReb77eIyWdxnTwh8CbNy2oOGT2OxICrmdn0al4W/D5ayE0AoSOoDolsQtTS3jg yecsfrOei9NSPWoZXmNB79p3GWjuVNO97w7FIphwRR+z1yAip2xRTQsGb8aJBVex GjoeOmv1X31vKpbzDExrn7YwIppFq0zRyQeYG5z+ysYCrQySk+w6nL/iLk30jrGU LkMgyIYez9K4317nu3Da/o5bsjDmYmbCum9Cork3S8fDoEAce2eOVkPtKQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFANM+yEIdT6/H78i+SOE0/4Y/pNEMB8GA1UdIwQY MBaAFPPjYiLMvGxyITYFQLqzqdup8jegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYt ODcyNGVkNWU5MDNhLzEvQTB6N0lRaDFQcjhmdnlMNUk0VFRfaGotazBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYtODcyNGVkNWU5MDNh LzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwd9OAwQA wrS7MA0EAgACMAcDBQMqE/BAMA0GCSqGSIb3DQEBCwUAA4IBAQBrpxT3FwlQdOBW gEYHFXtNB4KJn6RTQMJnI9DxCBm0MsWGMP5B94jaJfIq/V+nBgncrLBixGd/q7R1 ChLKSbOBYCKPEowlvBPtfK/s3G2o2SunBCY3kpNfGtBLHN6MF96U6uZKT+Sgehtc iU0st2TKZWkOCHhxdhHlX6nSsXRbhUS6RFmquEGb99139AIp4hGc9buHPcbrEYm9 Vlt4E7IytrYu8UNQYpk+OusZK9MQh4QbGHi4alk6ZLUQJtOAFIFngEO53Cgy8LA5 ZyvVEjG5vJVen0VJKKq/8f20nwX0PKT+XCoQ7f0v8IWwHk6jnleXHrgNlhSLwXTh t7zYtw2g -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:44 2026 by rpki-client