This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/ZF23aY-CislUcGs4sF1_a5gGqFM.roa File: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (raw, json) Hash identifier: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec= Subject key identifier: 64:5D:B7:69:8F:82:8A:C9:54:70:6B:38:B0:5D:7F:6B:98:06:A8:53 Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14 Certificate serial: 019B7B367202382AB9B93AA6A40620A18BD7 Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/ZF23aY-CislUcGs4sF1_a5gGqFM.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12306 IP address blocks: 193.202.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:72:02:38:2a:b9:b9:3a:a6:a4:06:20:a1:8b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=645db7698f828ac954706b38b05d7f6b9806a853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:db:9e:bb:af:a9:65:24:55:5e:95:30:6b: bd:31:ba:45:d6:29:3e:58:62:3c:74:4a:a7:7c:67: 4d:cd:a6:cb:5a:54:6d:8a:00:3d:b2:de:f4:9b:e2: a3:a3:7b:9b:10:92:1f:dc:91:38:77:af:1d:02:77: 6a:49:b7:99:36:f8:de:26:f6:0d:68:24:49:3e:be: 97:ce:06:ce:50:89:da:bc:1d:57:05:85:68:5d:48: 07:ee:21:bb:f4:d0:76:03:3d:ae:f4:0c:4b:74:51: 49:68:7b:9c:31:64:b5:70:df:b8:ea:07:d2:72:36: 3f:a3:b4:8e:5d:5a:03:67:ac:8a:34:f6:fe:72:2d: cc:4c:76:93:ae:e6:3a:98:3c:22:0e:16:81:b8:d6: 7d:28:e8:07:a6:9c:1d:42:b4:46:57:2d:69:3e:50: 1b:0a:ec:f8:e4:e5:8b:af:15:c6:5e:05:25:cf:ed: 15:ba:fc:88:61:52:52:59:93:9f:f9:04:6d:97:65: dd:0e:cc:a3:03:33:95:33:64:d2:b9:11:32:79:83: 65:64:9a:b3:91:57:e5:a5:b0:f2:7a:48:81:df:fe: 69:61:96:09:95:69:8d:90:fe:84:07:82:28:61:04: 50:05:48:f2:ea:34:0c:01:92:d1:2b:0b:0b:23:f3: da:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5D:B7:69:8F:82:8A:C9:54:70:6B:38:B0:5D:7F:6B:98:06:A8:53 X509v3 Authority Key Identifier: keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/ZF23aY-CislUcGs4sF1_a5gGqFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.119.0/24 Signature Algorithm: sha256WithRSAEncryption c8:10:b7:3b:3a:71:b5:8e:04:2c:c6:38:d5:2d:4a:ca:0b:cd: 14:d4:32:ed:b8:55:ff:41:7f:d3:20:de:86:6c:6b:78:4e:77: 3c:ae:57:3d:88:2b:40:12:6f:79:53:b5:ba:eb:c5:69:4d:d7: 05:89:11:53:15:61:06:9e:54:82:aa:be:d6:84:cb:8e:ac:7f: 31:d1:66:b2:45:ab:70:b0:75:47:5c:06:7b:58:21:c2:6d:87: 8a:8c:84:db:cd:63:d2:b3:10:0e:ea:d7:0a:70:c4:f2:82:28: b3:d5:1d:7e:db:72:34:50:f2:d3:d5:1a:e2:df:7a:28:1f:8a: 9c:0a:bb:26:a0:48:6e:5a:02:aa:fb:2d:c4:12:51:70:1d:8d: 8e:81:41:df:9a:0f:25:55:49:fe:b9:72:d1:d1:b1:e3:64:b3: 9e:dd:cc:5e:9d:ce:15:34:9f:a4:e1:a5:b3:ed:29:bb:18:1f: 10:32:b3:64:23:72:c9:bc:ce:89:81:ce:5d:34:a7:fa:be:75: c2:2a:13:62:15:e5:20:48:d2:68:29:a6:24:90:de:cc:9f:d0: 83:04:63:27:4c:e8:8a:38:4b:4f:55:64:9c:e6:dc:1d:3c:07: 34:eb:b4:70:e9:e3:d4:ed:b4:a9:af:ee:ee:f3:18:43:27:76: c9:0b:82:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnICOCq5uTqmpAYgoYvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk OTdmMTQwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDVkYjc2OThmODI4YWM5NTQ3MDZiMzhiMDVkN2Y2Yjk4MDZhODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuePbnruvqWUkVV6VMGu9MbpF1ik+ WGI8dEqnfGdNzabLWlRtigA9st70m+Kjo3ubEJIf3JE4d68dAndqSbeZNvjeJvYN aCRJPr6XzgbOUInavB1XBYVoXUgH7iG79NB2Az2u9AxLdFFJaHucMWS1cN+46gfS cjY/o7SOXVoDZ6yKNPb+ci3MTHaTruY6mDwiDhaBuNZ9KOgHppwdQrRGVy1pPlAb Cuz45OWLrxXGXgUlz+0VuvyIYVJSWZOf+QRtl2XdDsyjAzOVM2TSuREyeYNlZJqz kVflpbDyekiB3/5pYZYJlWmNkP6EB4IoYQRQBUjy6jQMAZLRKwsLI/PapQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGRdt2mPgorJVHBrOLBdf2uYBqhTMB8GA1UdIwQY MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt NDEwMDYxZTM1NzZhLzEvWkYyM2FZLUNpc2xVY0dzNHNGMV9hNWdHcUZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcp3MA0G CSqGSIb3DQEBCwUAA4IBAQDIELc7OnG1jgQsxjjVLUrKC80U1DLtuFX/QX/TIN6G bGt4Tnc8rlc9iCtAEm95U7W668VpTdcFiRFTFWEGnlSCqr7WhMuOrH8x0WayRatw sHVHXAZ7WCHCbYeKjITbzWPSsxAO6tcKcMTygiiz1R1+23I0UPLT1Rri33ooH4qc CrsmoEhuWgKq+y3EElFwHY2OgUHfmg8lVUn+uXLR0bHjZLOe3cxenc4VNJ+k4aWz 7Sm7GB8QMrNkI3LJvM6Jgc5dNKf6vnXCKhNiFeUgSNJoKaYkkN7Mn9CDBGMnTOiK OEtPVWSc5twdPAc067Rw6ePU7bSpr+7u8xhDJ3bJC4Lg -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:41 2026 by rpki-client