This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/CZE_g7CTnWQwuLgfARyK7VrfrcM.roa File: CZE_g7CTnWQwuLgfARyK7VrfrcM.roa (raw, json) Hash identifier: NCH7iHC491FBxKBQHP4zGK7QkdjaCMzIgnuDC/MR4Vk= Subject key identifier: 09:91:3F:83:B0:93:9D:64:30:B8:B8:1F:01:1C:8A:ED:5A:DF:AD:C3 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14C8AF8EBB6C4E28D3E1FFC85D750A Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/CZE_g7CTnWQwuLgfARyK7VrfrcM.roa Signing time: Fri 02 Jan 2026 14:20:26 +0000 ROA not before: Fri 02 Jan 2026 14:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401476 IP address blocks: 194.231.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c8:af:8e:bb:6c:4e:28:d3:e1:ff:c8:5d:75:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09913f83b0939d6430b8b81f011c8aed5adfadc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:cd:60:da:f1:18:37:fb:25:9f:e1:87:2f: 51:b4:99:3f:c0:df:bb:5d:03:7e:f2:02:74:35:b9: e4:b0:f9:46:02:e1:5a:2f:9e:27:62:75:de:3d:52: 29:8b:8b:96:7f:13:d7:89:51:6d:d9:a4:09:82:fb: 16:c9:23:b5:31:77:b4:13:d7:84:f2:7a:3f:79:f3: f0:04:af:69:69:46:a7:87:5c:ee:ce:80:e9:f8:03: 7c:1a:7a:a5:d0:6a:f4:75:21:bf:84:84:8a:54:c7: d7:4d:95:1a:bc:20:b2:91:e1:4a:de:8a:64:fe:c6: 5c:6a:3f:ae:8e:54:f4:a2:07:5c:07:96:ad:1c:ba: 14:34:d2:fa:cf:e2:e9:b3:13:c1:ed:be:6a:6e:f5: 26:49:07:20:51:45:d6:e0:8f:91:f6:f7:f8:49:10: 99:db:99:67:e4:29:6d:0f:c8:fe:bc:f4:5c:cc:2e: f3:b8:66:80:aa:1f:83:d6:09:8d:85:35:42:3d:71: f3:f9:cc:ff:25:28:f6:bb:6c:40:65:91:d7:8a:fc: d7:0e:1c:91:6d:03:a3:69:67:50:82:0f:3a:a8:9d: 10:53:62:3a:7b:3d:76:87:fc:90:c1:87:67:52:76: ce:a8:94:72:24:ef:8a:5c:d6:81:b1:6c:c7:5e:5b: b7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:91:3F:83:B0:93:9D:64:30:B8:B8:1F:01:1C:8A:ED:5A:DF:AD:C3 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/CZE_g7CTnWQwuLgfARyK7VrfrcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.215.0/24 Signature Algorithm: sha256WithRSAEncryption 15:f4:eb:6a:b7:c2:c2:05:9b:f2:17:e3:96:56:c0:c8:6f:f9: 75:91:79:f3:9f:e9:ad:a2:2c:8c:69:e2:8f:eb:46:f7:a0:a0: 85:82:87:8c:22:10:18:36:4d:76:10:c5:d5:da:30:55:ba:97: 0c:db:0e:60:a4:e8:2b:1f:76:ef:fb:fc:48:05:87:a5:93:9a: a2:ed:b0:66:d9:42:e3:82:45:9c:c2:eb:f7:79:96:58:a3:32: 3d:73:fa:76:d9:19:52:99:d3:db:1b:2a:a1:51:9f:3a:be:87: b4:f5:58:fb:bd:87:64:83:e1:da:56:ff:1b:f5:71:53:e1:37: 43:39:a9:a3:3e:85:90:9b:03:0b:e6:21:1d:fd:dd:72:33:d6: f4:b1:dc:73:30:89:ff:c2:ae:62:82:d4:d4:4b:01:f6:ce:01: 74:6d:88:bd:58:56:1a:2e:e8:02:2d:6e:fb:68:9c:94:86:76: a6:30:56:41:7e:99:86:5a:57:89:e3:f8:3b:8f:53:97:51:ed: ed:05:57:5c:c3:78:e3:29:97:16:4c:64:14:c1:9c:64:bd:15: 59:77:e1:d0:68:f2:71:b3:25:cb:97:57:bb:c1:84:43:e5:c8: ef:c3:db:04:b9:96:09:23:56:a3:99:51:a2:e2:99:ca:87:8a: 9d:8a:62:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FMivjrtsTijT4f/IXXUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTkxM2Y4M2IwOTM5ZDY0MzBiOGI4MWYwMTFjOGFlZDVhZGZhZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQLNYNrxGDf7JZ/hhy9RtJk/wN+7 XQN+8gJ0NbnksPlGAuFaL54nYnXePVIpi4uWfxPXiVFt2aQJgvsWySO1MXe0E9eE 8no/efPwBK9paUanh1zuzoDp+AN8Gnql0Gr0dSG/hISKVMfXTZUavCCykeFK3opk /sZcaj+ujlT0ogdcB5atHLoUNNL6z+LpsxPB7b5qbvUmSQcgUUXW4I+R9vf4SRCZ 25ln5CltD8j+vPRczC7zuGaAqh+D1gmNhTVCPXHz+cz/JSj2u2xAZZHXivzXDhyR bQOjaWdQgg86qJ0QU2I6ez12h/yQwYdnUnbOqJRyJO+KXNaBsWzHXlu32QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmRP4Owk51kMLi4HwEciu1a363DMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvQ1pFX2c3Q1RuV1F3dUxnZkFSeUs3VnJmcmNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwufXMA0G CSqGSIb3DQEBCwUAA4IBAQAV9Otqt8LCBZvyF+OWVsDIb/l1kXnzn+mtoiyMaeKP 60b3oKCFgoeMIhAYNk12EMXV2jBVupcM2w5gpOgrH3bv+/xIBYelk5qi7bBm2ULj gkWcwuv3eZZYozI9c/p22RlSmdPbGyqhUZ86voe09Vj7vYdkg+HaVv8b9XFT4TdD OamjPoWQmwML5iEd/d1yM9b0sdxzMIn/wq5igtTUSwH2zgF0bYi9WFYaLugCLW77 aJyUhnamMFZBfpmGWleJ4/g7j1OXUe3tBVdcw3jjKZcWTGQUwZxkvRVZd+HQaPJx syXLl1e7wYRD5cjvw9sEuZYJI1ajmVGi4pnKh4qdimLj -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:33 2026 by rpki-client