This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/zv18D0mO7IuCZndfA4WUPLS_px8.roa File: zv18D0mO7IuCZndfA4WUPLS_px8.roa (raw, json) Hash identifier: 46tMX/vfuANszaQSN3qYycvaNUn1YiRt0qffk7Ey6c8= Subject key identifier: CE:FD:7C:0F:49:8E:EC:8B:82:66:77:5F:03:85:94:3C:B4:BF:A7:1F Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F62CC6E10E60354D58E95F720A936 Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/zv18D0mO7IuCZndfA4WUPLS_px8.roa Signing time: Fri 02 Jan 2026 02:18:01 +0000 ROA not before: Fri 02 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205419 IP address blocks: 195.167.153.0/24 maxlen: 24 206.252.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:62:cc:6e:10:e6:03:54:d5:8e:95:f7:20:a9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cefd7c0f498eec8b8266775f0385943cb4bfa71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:48:09:76:1c:74:0a:20:df:8c:71:ea:37: 1f:35:e2:39:4a:75:75:d1:4f:fa:cf:22:1c:6b:a1: db:fd:83:69:03:75:7f:f1:19:d9:d3:fb:01:c2:1d: 64:5c:1f:4a:4f:66:78:76:4a:d3:46:d1:45:6a:3d: 2a:50:b7:ac:d4:d4:9c:7c:dc:b2:cb:9d:a0:b1:b4: 29:5b:bc:d2:3d:55:4f:c1:49:2c:7f:e1:a2:2a:e9: fb:b1:36:78:12:2f:1f:58:25:a2:b8:c0:c9:35:37: cb:3c:8b:6b:ce:fd:87:1c:1c:80:72:30:24:99:1e: 33:bf:53:2e:35:e9:f4:47:c4:86:0e:e7:21:08:51: 29:46:c8:e4:ea:f3:0a:9d:b7:77:85:a9:8a:09:43: f4:19:84:93:29:6f:a6:e2:44:14:39:b8:18:b9:36: a6:b3:bf:b2:4c:4b:71:80:b9:69:ac:f6:f6:50:25: 13:9c:df:7c:9c:fa:b4:2a:ea:35:7a:ed:fd:a2:2c: 2e:7c:1c:d0:c5:ac:b6:95:91:83:66:5e:7c:ed:77: 62:66:c7:d0:bc:4d:38:1b:f6:9b:56:d0:c6:6a:d8: 3b:cc:12:c1:1b:74:0d:3c:9d:23:2f:77:57:d1:f0: 2b:28:15:e8:e7:7c:24:89:bf:24:d8:8f:25:54:89: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FD:7C:0F:49:8E:EC:8B:82:66:77:5F:03:85:94:3C:B4:BF:A7:1F X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/zv18D0mO7IuCZndfA4WUPLS_px8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.167.153.0/24 206.252.242.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:a4:59:17:fc:b8:34:3a:ca:64:88:20:f1:0d:64:61:8f:f4: 37:53:e9:05:89:d7:d1:b6:82:44:95:9f:b8:cf:69:60:4d:f4: 0b:b1:14:b1:b0:c0:b2:02:d0:24:33:6d:aa:0c:23:32:39:0f: 1a:c9:3b:d2:c8:0f:53:26:71:21:0d:a7:2e:85:85:de:cd:c8: 9c:f0:8c:f7:67:0b:65:1d:81:c0:73:63:88:2d:4b:c8:e1:2c: 9a:44:e1:49:4d:bb:80:04:09:8e:74:6c:c0:89:63:16:7e:55: a2:b9:ba:88:c9:99:ed:ae:1f:a1:9f:0b:26:19:3e:d1:2d:7e: 85:a5:be:6f:38:37:41:a0:8c:fd:b1:0d:82:da:4c:48:70:25: c3:c2:ff:3f:60:86:7d:c3:05:e9:92:02:c1:22:2d:de:8f:59: b3:c9:05:81:df:1f:9e:a8:e0:eb:6b:a2:3f:70:0f:86:f8:31: 6e:2a:44:96:14:b6:61:79:bc:2c:19:5a:62:3e:f8:57:db:7e: de:90:43:8c:a7:bd:ad:0c:8a:96:d8:86:20:43:9c:66:3c:77: 0f:d8:71:d2:a6:57:42:c1:cc:be:75:5f:ac:07:1d:8c:74:ec: 2c:4d:63:f5:c3:44:66:05:d1:9f:48:e8:8a:80:19:ab:27:de: 77:38:06:c7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f2LMbhDmA1TVjpX3IKk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWZkN2MwZjQ5OGVlYzhiODI2Njc3NWYwMzg1OTQzY2I0YmZhNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQtICXYcdAog34xx6jcfNeI5SnV1 0U/6zyIca6Hb/YNpA3V/8RnZ0/sBwh1kXB9KT2Z4dkrTRtFFaj0qULes1NScfNyy y52gsbQpW7zSPVVPwUksf+GiKun7sTZ4Ei8fWCWiuMDJNTfLPItrzv2HHByAcjAk mR4zv1MuNen0R8SGDuchCFEpRsjk6vMKnbd3hamKCUP0GYSTKW+m4kQUObgYuTam s7+yTEtxgLlprPb2UCUTnN98nPq0Kuo1eu39oiwufBzQxay2lZGDZl587XdiZsfQ vE04G/abVtDGatg7zBLBG3QNPJ0jL3dX0fArKBXo53wkib8k2I8lVImQpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM79fA9JjuyLgmZ3XwOFlDy0v6cfMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvenYxOEQwbU83SXVDWm5kZkE0V1VQTFNfcHg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw6eZAwQA zvzyMA0GCSqGSIb3DQEBCwUAA4IBAQCOpFkX/Lg0OspkiCDxDWRhj/Q3U+kFidfR toJElZ+4z2lgTfQLsRSxsMCyAtAkM22qDCMyOQ8ayTvSyA9TJnEhDacuhYXezcic 8Iz3ZwtlHYHAc2OILUvI4SyaROFJTbuABAmOdGzAiWMWflWiubqIyZntrh+hnwsm GT7RLX6Fpb5vODdBoIz9sQ2C2kxIcCXDwv8/YIZ9wwXpkgLBIi3ej1mzyQWB3x+e qODra6I/cA+G+DFuKkSWFLZhebwsGVpiPvhX237ekEOMp72tDIqW2IYgQ5xmPHcP 2HHSpldCwcy+dV+sBx2MdOwsTWP1w0RmBdGfSOiKgBmrJ953OAbH -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:09 2026 by rpki-client