This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/z4IbaEaHrtkCVX64ajUmo_S5hG8.roa File: z4IbaEaHrtkCVX64ajUmo_S5hG8.roa (raw, json) Hash identifier: rh2p8twE4sOySMaCgOoYVYx25y55yR46yd2rgRAd/98= Subject key identifier: CF:82:1B:68:46:87:AE:D9:02:55:7E:B8:6A:35:26:A3:F4:B9:84:6F Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A9CA6D04395BB4EF80448C2A030E Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/z4IbaEaHrtkCVX64ajUmo_S5hG8.roa Signing time: Fri 02 Jan 2026 14:20:19 +0000 ROA not before: Fri 02 Jan 2026 14:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 194.231.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a9:ca:6d:04:39:5b:b4:ef:80:44:8c:2a:03:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf821b684687aed902557eb86a3526a3f4b9846f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6a:70:09:b7:dd:bd:68:0b:1a:47:43:6e:94: 3d:dc:35:f0:b9:dc:d5:99:5b:23:f5:c0:2e:85:53: ab:73:fb:8e:25:9e:f6:04:71:82:b2:45:ae:3a:b6: ce:dc:65:da:25:f9:bd:50:45:f0:18:29:8e:c2:48: 78:a6:b4:3a:c7:0f:e0:e5:32:70:f3:2b:3f:ce:de: 72:23:bc:35:01:ad:5d:39:06:b2:e2:e6:aa:99:7c: 74:1f:16:d1:98:fc:d9:6f:98:05:5d:bd:d2:c5:83: 55:4a:a6:b2:73:f7:40:2d:01:45:e0:9c:ce:34:3f: a8:d8:d2:e6:fc:f8:31:2e:ff:42:c5:4e:a4:92:eb: 7f:37:ca:6b:d9:40:67:db:13:b4:89:00:8b:30:73: 7b:8c:a9:a4:b0:75:a7:13:56:75:7d:b1:73:b2:1a: d8:60:e6:ea:9d:9e:86:a5:b6:65:28:32:fa:9b:fb: a7:93:b9:83:5d:46:79:0c:a1:f9:70:a2:a5:19:0f: d3:64:f5:cf:75:05:57:f3:4c:27:c1:61:90:c1:0c: e4:b9:4d:fe:b3:00:f6:b3:4a:d1:21:34:14:b8:36: 84:e8:8d:25:09:8d:56:b0:8b:26:ee:7a:ea:33:78: d4:b3:f0:96:0f:9d:b6:69:b0:30:bf:96:ee:31:1c: 8e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:82:1B:68:46:87:AE:D9:02:55:7E:B8:6A:35:26:A3:F4:B9:84:6F X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/z4IbaEaHrtkCVX64ajUmo_S5hG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.194.0/24 Signature Algorithm: sha256WithRSAEncryption 27:b4:91:96:56:48:43:61:34:ee:ae:69:9b:70:39:d0:59:4a: 83:1d:ae:f5:2a:3b:49:2b:20:11:07:f5:cc:dc:32:e4:a4:c4: 5f:81:02:8c:a0:ea:25:9b:3b:67:1e:54:b5:df:96:17:0d:09: 0d:7e:f2:10:8a:dd:bf:fa:b0:5b:88:b0:ee:8e:65:da:dd:1b: 32:c6:a8:c8:da:5d:fe:4b:78:55:4a:5b:94:77:59:d8:8a:8c: 1a:ff:8b:37:e4:a2:68:fd:e7:8a:c5:b0:9d:77:40:28:c8:9a: 70:8c:86:a0:ab:14:02:63:c1:67:95:f4:a6:3a:bc:03:b9:34: 41:0a:08:75:38:0a:ad:d1:90:43:cb:c9:85:0f:b9:b4:20:67: 1a:c4:81:99:93:71:53:03:3d:23:94:3a:63:87:88:38:bc:ad: f0:f3:9d:4c:8f:6d:b6:70:99:11:f3:2e:27:45:c9:fd:39:66: 1e:ce:ac:3d:11:67:b3:9d:61:01:f5:e1:51:58:f9:bb:4e:72: ec:00:6b:2a:3a:70:25:bb:e3:c1:bd:cb:b9:05:b5:4b:d6:93: 57:d1:4b:96:1b:90:aa:a5:16:6e:41:8d:96:5e:a3:9b:cc:55: 7e:6a:cb:95:02:27:a1:ce:58:6c:fb:d8:ef:92:0d:c9:1a:b5: 2d:21:d6:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FKnKbQQ5W7TvgESMKgMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjgyMWI2ODQ2ODdhZWQ5MDI1NTdlYjg2YTM1MjZhM2Y0Yjk4NDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WpwCbfdvWgLGkdDbpQ93DXwudzV mVsj9cAuhVOrc/uOJZ72BHGCskWuOrbO3GXaJfm9UEXwGCmOwkh4prQ6xw/g5TJw 8ys/zt5yI7w1Aa1dOQay4uaqmXx0HxbRmPzZb5gFXb3SxYNVSqayc/dALQFF4JzO ND+o2NLm/PgxLv9CxU6kkut/N8pr2UBn2xO0iQCLMHN7jKmksHWnE1Z1fbFzshrY YObqnZ6GpbZlKDL6m/unk7mDXUZ5DKH5cKKlGQ/TZPXPdQVX80wnwWGQwQzkuU3+ swD2s0rRITQUuDaE6I0lCY1WsIsm7nrqM3jUs/CWD522abAwv5buMRyOywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM+CG2hGh67ZAlV+uGo1JqP0uYRvMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvejRJYmFFYUhydGtDVlg2NGFqVW1vX1M1aEc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwufCMA0G CSqGSIb3DQEBCwUAA4IBAQAntJGWVkhDYTTurmmbcDnQWUqDHa71KjtJKyARB/XM 3DLkpMRfgQKMoOolmztnHlS135YXDQkNfvIQit2/+rBbiLDujmXa3RsyxqjI2l3+ S3hVSluUd1nYiowa/4s35KJo/eeKxbCdd0AoyJpwjIagqxQCY8FnlfSmOrwDuTRB Cgh1OAqt0ZBDy8mFD7m0IGcaxIGZk3FTAz0jlDpjh4g4vK3w851Mj222cJkR8y4n Rcn9OWYezqw9EWeznWEB9eFRWPm7TnLsAGsqOnAlu+PBvcu5BbVL1pNX0UuWG5Cq pRZuQY2WXqObzFV+asuVAiehzlhs+9jvkg3JGrUtIdaS -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:06 2026 by rpki-client