This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/ZdY9JbmuGwJjZBrSsybFrZALNak.roa File: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (raw, json) Hash identifier: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0= Subject key identifier: 65:D6:3D:25:B9:AE:1B:02:63:64:1A:D2:B3:26:C5:AD:90:0B:35:A9 Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004 Certificate serial: 019B78351CD02E70DBB7C5BD8B8DC8481C80 Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/ZdY9JbmuGwJjZBrSsybFrZALNak.roa Signing time: Thu 01 Jan 2026 06:18:25 +0000 ROA not before: Thu 01 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204444 IP address blocks: 194.76.41.0/24 maxlen: 24 194.76.44.0/24 maxlen: 24 194.76.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1c:d0:2e:70:db:b7:c5:bd:8b:8d:c8:48:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004 Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65d63d25b9ae1b0263641ad2b326c5ad900b35a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:93:09:89:17:7a:a0:18:6f:0b:59:bc:64: 87:ae:96:60:dc:72:de:57:ff:a4:bf:03:fe:da:f8: 2e:e9:7c:aa:b2:8d:83:5c:01:a9:42:0a:2b:5c:e4: bc:3a:03:78:ef:52:c9:af:9e:02:51:b8:4b:ad:8b: 01:18:e4:71:92:a8:63:9e:b1:2b:ab:e0:71:7c:87: ab:da:8b:62:57:1b:93:d7:ab:d0:11:99:4f:8b:8d: 34:8d:6c:2c:d4:4b:d1:37:65:9e:7e:51:69:33:5d: 1d:28:2f:c0:e7:9a:4c:fa:5d:c3:6b:f4:f7:cd:15: 61:ac:14:f3:7e:f2:f7:5d:43:26:16:4d:6e:be:1d: a8:7b:23:fa:fb:15:cd:ea:6e:e4:36:ad:55:d5:61: aa:fe:b6:d6:2a:1d:86:eb:43:60:86:2d:43:26:26: 68:8c:bd:ce:62:9e:a5:76:fe:65:1c:71:11:71:36: 89:6a:44:8a:58:97:6b:8e:6a:6a:66:dd:de:7b:9a: cd:ad:ab:66:dd:f8:ed:78:8e:70:b9:ab:60:22:24: 6a:63:b2:a3:6e:4f:aa:99:ba:98:29:0c:fc:f4:9c: 72:b5:e7:b7:ad:38:18:a4:94:c1:ec:4f:fc:5d:f4: a3:ae:e8:81:72:7e:32:e1:95:7a:b9:f9:5b:83:34: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D6:3D:25:B9:AE:1B:02:63:64:1A:D2:B3:26:C5:AD:90:0B:35:A9 X509v3 Authority Key Identifier: keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/ZdY9JbmuGwJjZBrSsybFrZALNak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.41.0/24 194.76.44.0/24 194.76.53.0/24 Signature Algorithm: sha256WithRSAEncryption 35:28:db:cb:1a:96:af:d0:25:b9:e1:1f:47:eb:c7:e7:7a:ee: 5c:82:ac:30:42:b1:5d:3a:eb:33:16:33:9d:68:be:ca:b6:a0: 21:48:62:8d:2f:09:89:fe:81:a7:04:b7:04:41:71:97:f9:e6: 45:3a:a1:43:a8:a1:36:8e:f3:c4:4f:2f:8f:a9:3c:d0:c1:9d: eb:39:18:98:4a:30:5f:6a:f9:56:ba:3f:53:bc:27:c4:f7:22: 43:cb:ef:aa:01:d9:62:3e:e7:06:be:19:3e:c7:53:9d:95:5f: 5b:33:74:e6:fe:76:2d:ab:ab:17:95:1b:d4:ad:96:df:66:9c: 51:0c:4b:6e:d4:6d:69:68:cc:f5:4e:19:9c:d4:60:2a:94:77: 4f:c3:6f:9c:fe:fe:8b:3e:ce:76:ea:b4:96:da:b4:bd:dc:13: db:16:b6:c2:5d:1d:e6:fe:90:60:d0:cf:45:d2:fa:89:87:13: 28:31:20:09:df:05:0f:84:79:ac:dc:fd:b3:c4:80:06:d0:62: dd:4e:f4:7d:98:ce:15:fb:4f:eb:5f:e3:f7:52:74:a5:e3:21: f9:61:29:2b:45:c4:d7:ec:8d:01:be:58:b0:8e:d5:ef:64:14: 75:8a:e3:e7:d9:68:05:78:fd:73:95:98:7b:ad:25:18:ce:fd: b1:84:06:66 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NRzQLnDbt8W9i43ISByAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Y2VhYTYyNmNiZDg5MDUyZjM1NDUzMzVkZmRiMzFhMTMz ODMwMDQwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWQ2M2QyNWI5YWUxYjAyNjM2NDFhZDJiMzI2YzVhZDkwMGIzNWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0yTCYkXeqAYbwtZvGSHrpZg3HLe V/+kvwP+2vgu6Xyqso2DXAGpQgorXOS8OgN471LJr54CUbhLrYsBGORxkqhjnrEr q+BxfIer2otiVxuT16vQEZlPi400jWws1EvRN2WeflFpM10dKC/A55pM+l3Da/T3 zRVhrBTzfvL3XUMmFk1uvh2oeyP6+xXN6m7kNq1V1WGq/rbWKh2G60Nghi1DJiZo jL3OYp6ldv5lHHERcTaJakSKWJdrjmpqZt3ee5rNratm3fjteI5wuatgIiRqY7Kj bk+qmbqYKQz89Jxytee3rTgYpJTB7E/8XfSjruiBcn4y4ZV6uflbgzQCxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGXWPSW5rhsCY2Qa0rMmxa2QCzWpMB8GA1UdIwQY MBaAFDfOqmJsvYkFLzVFM139sxoTODAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAt ZTE1YThiNzBlOGQyLzEvWmRZOUpibXVHd0pqWkJyU3N5YkZyWkFMTmFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAtZTE1YThiNzBlOGQy LzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwkwpAwQA wkwsAwQAwkw1MA0GCSqGSIb3DQEBCwUAA4IBAQA1KNvLGpav0CW54R9H68fneu5c gqwwQrFdOuszFjOdaL7KtqAhSGKNLwmJ/oGnBLcEQXGX+eZFOqFDqKE2jvPETy+P qTzQwZ3rORiYSjBfavlWuj9TvCfE9yJDy++qAdliPucGvhk+x1OdlV9bM3Tm/nYt q6sXlRvUrZbfZpxRDEtu1G1paMz1Thmc1GAqlHdPw2+c/v6LPs526rSW2rS93BPb FrbCXR3m/pBg0M9F0vqJhxMoMSAJ3wUPhHms3P2zxIAG0GLdTvR9mM4V+0/rX+P3 UnSl4yH5YSkrRcTX7I0BvliwjtXvZBR1iuPn2WgFeP1zlZh7rSUYzv2xhAZm -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:18 2026 by rpki-client