This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/zl8R-189TzEnYGCKXzH4pqn-lWw.roa File: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (raw, json) Hash identifier: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo= Subject key identifier: CE:5F:11:FB:5F:3D:4F:31:27:60:60:8A:5F:31:F8:A6:A9:FE:95:6C Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3 Certificate serial: 019B7910E00EDC2EEADD7A2AFA4B88BB5920 Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/zl8R-189TzEnYGCKXzH4pqn-lWw.roa Signing time: Thu 01 Jan 2026 10:18:27 +0000 ROA not before: Thu 01 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48847 IP address blocks: 193.84.114.0/23 maxlen: 23 193.84.114.0/24 maxlen: 24 193.84.114.224/27 maxlen: 27 193.84.115.0/24 maxlen: 24 193.84.115.0/26 maxlen: 26 193.84.118.0/24 maxlen: 24 193.84.118.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e0:0e:dc:2e:ea:dd:7a:2a:fa:4b:88:bb:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3 Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce5f11fb5f3d4f312760608a5f31f8a6a9fe956c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7e:25:a6:e5:be:47:46:de:53:d1:01:ee:59: 56:a6:3e:a3:4f:48:08:c4:a2:af:e0:d6:17:16:7f: e9:4e:44:19:eb:70:5c:d6:c5:ba:b1:28:5e:71:11: f4:1f:23:9f:4d:48:f9:ed:7a:0e:ec:10:f5:fd:e4: 12:91:9e:4a:39:9d:16:68:42:28:85:86:43:56:ad: ae:21:c7:b9:d1:cb:d4:5b:b2:27:36:62:f8:35:2d: af:cd:06:4b:ca:07:ba:db:65:fd:82:4e:01:6e:66: 42:c6:dc:db:5f:00:6b:80:fc:64:9f:b1:90:ec:ec: 48:31:cd:0d:91:56:9a:7e:98:6e:1f:5e:77:eb:d5: 01:2b:f0:02:05:ee:8a:b0:8a:e7:2b:8f:89:60:33: 38:1b:ef:ed:13:d7:a4:56:f1:f2:d8:46:b5:e2:a2: 0c:59:33:bd:6a:60:ef:de:a0:64:36:1a:9b:f3:3d: 07:c7:2b:55:ca:e4:a0:d6:49:8b:24:3a:a9:88:95: 94:d5:27:37:c1:04:35:11:00:88:90:7a:fb:15:c1: 68:f9:0f:e2:c5:87:07:eb:47:fe:5c:c1:db:39:8a: 34:2a:f6:d4:f8:50:e8:2f:8a:b8:c8:89:ee:a5:a2: 9d:ce:77:55:90:a9:23:65:cc:89:9f:4d:3e:52:51: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5F:11:FB:5F:3D:4F:31:27:60:60:8A:5F:31:F8:A6:A9:FE:95:6C X509v3 Authority Key Identifier: keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/zl8R-189TzEnYGCKXzH4pqn-lWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.114.0/23 193.84.118.0/24 Signature Algorithm: sha256WithRSAEncryption 66:07:3d:f5:5a:5c:aa:a6:00:6d:a9:cc:21:c6:c9:01:d1:6a: 9d:8a:e4:59:4a:7f:2a:76:23:7b:6d:9b:41:b9:98:60:15:57: bf:08:cc:2d:77:37:0e:b3:b8:74:62:40:a0:ed:fe:6e:83:a8: cf:db:b9:01:74:05:0d:41:0b:f0:83:41:67:92:89:7e:c3:3a: 44:b9:5d:6c:14:2b:e7:8b:72:e8:8d:31:13:0c:1f:db:69:52: 30:f3:5d:ca:75:f7:4c:20:00:ed:6e:00:2a:45:99:0a:b2:82: d2:2d:a5:35:d4:9e:76:15:7a:08:d3:9e:0e:f4:2d:5c:ff:34: 48:9a:7f:75:dd:54:ca:02:97:2b:01:9f:1c:a0:92:c7:c4:05: 37:2b:ec:a5:0a:38:04:78:19:87:04:63:74:42:f3:5f:db:1d: 9e:90:f0:f8:ed:45:36:bc:3e:31:90:c0:24:3c:8f:49:f7:9f: ec:08:56:8f:30:b2:a3:db:8c:4e:d4:d5:a3:56:49:b8:21:1e: c5:4e:6a:70:23:63:69:50:1c:0a:8a:ff:a7:10:6a:c4:a3:99: 24:61:4c:dc:d0:e5:e9:78:ea:e2:b6:06:08:63:93:1b:37:17: 3a:9a:56:c9:c5:b3:39:2e:e8:91:13:3b:95:21:be:bd:31:ef: c7:ae:1a:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EOAO3C7q3Xoq+kuIu1kgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl MzZlZDMwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTVmMTFmYjVmM2Q0ZjMxMjc2MDYwOGE1ZjMxZjhhNmE5ZmU5NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+H4lpuW+R0beU9EB7llWpj6jT0gI xKKv4NYXFn/pTkQZ63Bc1sW6sShecRH0HyOfTUj57XoO7BD1/eQSkZ5KOZ0WaEIo hYZDVq2uIce50cvUW7InNmL4NS2vzQZLyge622X9gk4BbmZCxtzbXwBrgPxkn7GQ 7OxIMc0NkVaafphuH15369UBK/ACBe6KsIrnK4+JYDM4G+/tE9ekVvHy2Ea14qIM WTO9amDv3qBkNhqb8z0HxytVyuSg1kmLJDqpiJWU1Sc3wQQ1EQCIkHr7FcFo+Q/i xYcH60f+XMHbOYo0KvbU+FDoL4q4yInupaKdzndVkKkjZcyJn00+UlF/+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM5fEftfPU8xJ2Bgil8x+Kap/pVsMB8GA1UdIwQY MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt ZjRmMDU2MWI3YTU3LzEvemw4Ui0xODlUekVuWUdDS1h6SDRwcW4tbFd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3 LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwVRyAwQA wVR2MA0GCSqGSIb3DQEBCwUAA4IBAQBmBz31WlyqpgBtqcwhxskB0WqdiuRZSn8q diN7bZtBuZhgFVe/CMwtdzcOs7h0YkCg7f5ug6jP27kBdAUNQQvwg0Fnkol+wzpE uV1sFCvni3LojTETDB/baVIw813KdfdMIADtbgAqRZkKsoLSLaU11J52FXoI054O 9C1c/zRImn913VTKApcrAZ8coJLHxAU3K+ylCjgEeBmHBGN0QvNf2x2ekPD47UU2 vD4xkMAkPI9J95/sCFaPMLKj24xO1NWjVkm4IR7FTmpwI2NpUBwKiv+nEGrEo5kk YUzc0OXpeOritgYIY5MbNxc6mlbJxbM5LuiREzuVIb69Me/HrhpH -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:30 2026 by rpki-client