This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/zAxyQBHOCPqeciZdGoRFMMg8ONA.roa File: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (raw, json) Hash identifier: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q= Subject key identifier: CC:0C:72:40:11:CE:08:FA:9E:72:26:5D:1A:84:45:30:C8:3C:38:D0 Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e Certificate serial: 019B7DCAF914BE14B365ABEAD1646159C9DC Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/zAxyQBHOCPqeciZdGoRFMMg8ONA.roa Signing time: Fri 02 Jan 2026 08:20:12 +0000 ROA not before: Fri 02 Jan 2026 08:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198394 IP address blocks: 195.94.27.0/24 maxlen: 24 195.94.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f9:14:be:14:b3:65:ab:ea:d1:64:61:59:c9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e Validity Not Before: Jan 2 08:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc0c724011ce08fa9e72265d1a844530c83c38d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:4a:fc:46:a0:10:00:8f:dd:29:9e:c3:58: 92:6a:27:49:1c:85:a0:da:8c:f9:a3:a4:0e:fd:80: aa:a3:1d:c7:0a:f9:f1:f9:a8:76:b7:09:43:ff:03: ec:57:4c:60:2b:5f:fb:49:08:dc:f4:63:08:11:a9: 2f:f3:66:02:cf:7e:f3:60:74:72:a3:72:bf:31:3e: 0e:74:37:81:3f:33:af:55:46:ac:26:75:ce:ed:9d: c9:98:0f:d5:04:7f:50:09:44:89:f7:76:08:4f:ca: 04:d0:dc:7d:39:8b:3b:21:30:fb:a7:c8:a4:86:52: b0:77:39:07:16:70:cb:d1:1a:e6:28:92:5e:ea:53: 93:12:c7:1c:27:45:6f:b6:55:83:e9:10:b2:a1:15: 28:b3:d6:4e:39:36:9d:05:ca:d7:2a:26:e3:14:78: 8f:d9:8a:95:8f:08:ac:b3:c3:ab:5a:9c:cb:54:07: 4e:37:c1:89:7d:4d:74:8e:83:c8:be:7d:df:a1:24: 73:ba:25:1e:54:56:4e:1c:11:8f:14:60:d7:9f:cc: ff:e0:8d:a1:7f:b7:13:88:c2:19:b8:d6:ef:e4:fc: 4e:f8:6f:a2:47:e2:46:55:7a:67:0c:7f:d1:76:88: e2:8d:61:e3:f5:b6:aa:91:57:00:8d:e7:82:08:dd: 74:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0C:72:40:11:CE:08:FA:9E:72:26:5D:1A:84:45:30:C8:3C:38:D0 X509v3 Authority Key Identifier: keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/zAxyQBHOCPqeciZdGoRFMMg8ONA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.94.27.0/24 195.94.29.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:8d:77:a0:a5:de:63:f0:45:39:95:06:35:c6:ea:4a:ab:84: 27:22:9f:c6:ca:48:10:2c:18:1e:cd:c0:a5:f7:f6:77:3d:6d: 53:e1:2e:5d:48:76:a6:44:3b:7b:35:f3:a2:2a:c1:f7:ba:76: 66:f0:e5:5a:13:33:87:09:eb:24:62:21:45:ba:8a:cd:ca:18: e6:68:9a:1f:df:62:6a:42:0d:97:91:25:b9:15:9e:39:24:ed: e4:ff:20:b5:93:60:1f:1f:9a:ad:f2:bf:8e:02:22:d5:cd:bc: 4e:49:db:46:2b:c7:e6:91:21:98:fe:a2:6a:5f:da:fe:83:20: d0:24:0c:d9:0e:69:62:27:46:83:73:66:17:d8:03:78:2f:6d: c7:e4:8a:6f:5d:43:33:c1:f4:08:94:dc:6b:d6:f0:bb:15:1f: a1:fb:ed:7f:c8:a2:25:7d:0f:eb:03:2b:cb:6a:e4:b7:e8:b6: 53:9d:ec:05:7a:ea:5f:87:27:5e:08:fd:36:67:80:4c:07:b6: 41:6f:7c:e1:c8:0d:79:2e:ea:f9:f0:15:97:26:0d:97:c6:c0: 62:05:95:94:4f:8b:30:c8:56:7d:e6:58:28:27:1f:26:db:99: 12:2a:05:f1:ff:78:f6:63:39:f2:7b:cc:fa:ea:8a:e7:d0:5a: da:b9:03:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yvkUvhSzZavq0WRhWcncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw NDU2OGUwHhcNMjYwMTAyMDgyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzBjNzI0MDExY2UwOGZhOWU3MjI2NWQxYTg0NDUzMGM4M2MzOGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIVK/EagEACP3Smew1iSaidJHIWg 2oz5o6QO/YCqox3HCvnx+ah2twlD/wPsV0xgK1/7SQjc9GMIEakv82YCz37zYHRy o3K/MT4OdDeBPzOvVUasJnXO7Z3JmA/VBH9QCUSJ93YIT8oE0Nx9OYs7ITD7p8ik hlKwdzkHFnDL0RrmKJJe6lOTEsccJ0VvtlWD6RCyoRUos9ZOOTadBcrXKibjFHiP 2YqVjwiss8OrWpzLVAdON8GJfU10joPIvn3foSRzuiUeVFZOHBGPFGDXn8z/4I2h f7cTiMIZuNbv5PxO+G+iR+JGVXpnDH/RdojijWHj9baqkVcAjeeCCN10nQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMwMckARzgj6nnImXRqERTDIPDjQMB8GA1UdIwQY MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt ZTk1YTI0OTYxNTdlLzEvekF4eVFCSE9DUHFlY2laZEdvUkZNTWc4T05BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw14bAwQA w14dMA0GCSqGSIb3DQEBCwUAA4IBAQALjXegpd5j8EU5lQY1xupKq4QnIp/GykgQ LBgezcCl9/Z3PW1T4S5dSHamRDt7NfOiKsH3unZm8OVaEzOHCeskYiFFuorNyhjm aJof32JqQg2XkSW5FZ45JO3k/yC1k2AfH5qt8r+OAiLVzbxOSdtGK8fmkSGY/qJq X9r+gyDQJAzZDmliJ0aDc2YX2AN4L23H5IpvXUMzwfQIlNxr1vC7FR+h++1/yKIl fQ/rAyvLauS36LZTnewFeupfhydeCP02Z4BMB7ZBb3zhyA15Lur58BWXJg2XxsBi BZWUT4swyFZ95lgoJx8m25kSKgXx/3j2Yznye8z66orn0FrauQNY -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:36 2026 by rpki-client