This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/czj_PZMJsKJEUcCpGuFemJRiVXc.roa File: czj_PZMJsKJEUcCpGuFemJRiVXc.roa (raw, json) Hash identifier: XIy6OGhmtMXoCJdKfW1aLecDFbIhje3cjpXyY92Ca30= Subject key identifier: 73:38:FF:3D:93:09:B0:A2:44:51:C0:A9:1A:E1:5E:98:94:62:55:77 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019B7BA324EECA588484AB5A67737C067391 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/czj_PZMJsKJEUcCpGuFemJRiVXc.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209693 IP address blocks: 77.91.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:24:ee:ca:58:84:84:ab:5a:67:73:7c:06:73:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7338ff3d9309b0a24451c0a91ae15e9894625577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:e3:ef:fc:62:5d:9f:b8:f8:d3:b2:2e:9a: 6f:d3:43:be:0c:6c:56:9d:14:4d:ef:1d:52:0e:cb: 6f:42:75:f9:4e:66:e2:a6:16:3b:13:d0:4e:c1:06: f7:23:d0:dc:ec:53:43:7f:c5:a9:8c:db:1b:a0:d0: ac:8e:64:33:12:ba:7b:4c:d8:8e:5c:b7:6b:19:3d: 82:d3:ea:df:18:21:11:9e:d3:49:52:ba:9e:96:29: 67:56:a7:e0:83:4a:06:2c:10:0c:4e:e1:8f:cb:11: a0:ae:51:2e:2e:e6:67:8e:26:63:c2:dd:00:4e:b0: f6:11:4f:33:2d:57:05:cd:53:82:57:d8:8c:33:d5: a7:52:86:cf:ce:a5:b0:f8:12:6e:6a:c1:f4:ff:a4: e1:a4:32:9b:34:28:68:7b:d3:5a:f5:b5:f2:f8:8e: df:da:1b:ba:51:82:53:86:92:99:b6:79:f5:dd:de: ae:dd:a7:7f:97:06:b4:32:76:e5:28:41:5b:61:41: a9:5c:cf:12:db:b2:1e:c7:21:bd:82:12:0d:ff:e5: 99:da:b7:43:89:95:f4:68:84:b6:3f:1c:b2:0f:96: 53:c3:55:ba:c2:39:7d:99:8d:be:8f:5b:b5:d2:e4: b3:16:18:d0:7f:28:01:5a:6f:d6:6d:b8:6c:0c:8e: 2d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:38:FF:3D:93:09:B0:A2:44:51:C0:A9:1A:E1:5E:98:94:62:55:77 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/czj_PZMJsKJEUcCpGuFemJRiVXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.66.0/24 Signature Algorithm: sha256WithRSAEncryption 22:7a:f7:31:74:3e:43:b0:53:13:58:07:0c:7d:55:eb:59:6b: 22:03:3b:e3:af:98:54:ae:5d:b5:f6:ff:f5:14:85:75:89:41: a8:a5:49:a6:9f:df:10:4a:a6:f9:f3:50:54:7a:27:8b:33:1e: 3b:17:3f:1c:27:2d:74:94:79:2d:5f:48:da:57:66:fe:63:67: 60:b6:bc:dd:03:f2:6d:18:81:38:a3:f6:ed:8f:61:f3:df:96: 93:88:9a:3d:14:d2:a2:47:19:5f:90:14:51:7c:61:7a:a4:f6: 5e:fc:bf:e2:f4:68:5d:1d:f8:6a:97:ac:5b:43:8c:25:cb:61: f5:b3:c4:08:11:49:b1:d8:61:a8:9b:0c:c0:b7:14:fd:54:b5: f9:d8:2c:d9:32:ec:4a:af:dd:c9:00:c6:a8:74:d6:7b:6b:29: 55:4c:6e:cc:c4:2a:17:38:35:03:dd:75:85:d1:41:ed:f1:23: 18:ee:d5:e6:f9:55:1d:dd:41:3b:24:0f:46:02:cc:ff:00:6c: c7:a6:a9:47:13:4e:d0:40:fd:c9:be:52:8f:2a:41:f4:bc:0b: 7d:a6:28:03:54:4e:e6:a5:cb:c2:e9:62:f8:2d:1f:4c:89:8d: 84:a4:0d:4a:3a:62:7f:33:0d:f6:16:40:69:1a:5c:13:ef:34: 8a:0f:1d:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyTuyliEhKtaZ3N8BnORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzM4ZmYzZDkzMDliMGEyNDQ1MWMwYTkxYWUxNWU5ODk0NjI1NTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA247j7/xiXZ+4+NOyLppv00O+DGxW nRRN7x1SDstvQnX5TmbiphY7E9BOwQb3I9Dc7FNDf8WpjNsboNCsjmQzErp7TNiO XLdrGT2C0+rfGCERntNJUrqelilnVqfgg0oGLBAMTuGPyxGgrlEuLuZnjiZjwt0A TrD2EU8zLVcFzVOCV9iMM9WnUobPzqWw+BJuasH0/6ThpDKbNChoe9Na9bXy+I7f 2hu6UYJThpKZtnn13d6u3ad/lwa0MnblKEFbYUGpXM8S27IexyG9ghIN/+WZ2rdD iZX0aIS2PxyyD5ZTw1W6wjl9mY2+j1u10uSzFhjQfygBWm/WbbhsDI4tnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHM4/z2TCbCiRFHAqRrhXpiUYlV3MB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvY3pqX1BaTUpzS0pFVWNDcEd1RmVtSlJpVlhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVtCMA0G CSqGSIb3DQEBCwUAA4IBAQAievcxdD5DsFMTWAcMfVXrWWsiAzvjr5hUrl219v/1 FIV1iUGopUmmn98QSqb581BUeieLMx47Fz8cJy10lHktX0jaV2b+Y2dgtrzdA/Jt GIE4o/btj2Hz35aTiJo9FNKiRxlfkBRRfGF6pPZe/L/i9GhdHfhql6xbQ4wly2H1 s8QIEUmx2GGomwzAtxT9VLX52CzZMuxKr93JAMaodNZ7aylVTG7MxCoXODUD3XWF 0UHt8SMY7tXm+VUd3UE7JA9GAsz/AGzHpqlHE07QQP3JvlKPKkH0vAt9pigDVE7m pcvC6WL4LR9MiY2EpA1KOmJ/Mw32FkBpGlwT7zSKDx3g -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:45 2026 by rpki-client