This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/z1DkqtK6bhv2xKbEFbpfSZsh_Yg.roa File: z1DkqtK6bhv2xKbEFbpfSZsh_Yg.roa (raw, json) Hash identifier: x3T0qFMVxxd2FdR3A4LaLQ4+c2t85rP2XyfqD4Q6wxc= Subject key identifier: CF:50:E4:AA:D2:BA:6E:1B:F6:C4:A6:C4:15:BA:5F:49:9B:21:FD:88 Certificate issuer: /CN=3a839936aeeff288678e772633020fa259bd9cf2 Certificate serial: 019B7F155CEDAC16899393B91255F768BF45 Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/z1DkqtK6bhv2xKbEFbpfSZsh_Yg.roa Signing time: Fri 02 Jan 2026 14:21:04 +0000 ROA not before: Fri 02 Jan 2026 14:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47753 IP address blocks: 146.19.210.0/24 maxlen: 24 185.66.213.0/24 maxlen: 24 212.52.22.0/24 maxlen: 24 2001:678:dd0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:5c:ed:ac:16:89:93:93:b9:12:55:f7:68:bf:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2 Validity Not Before: Jan 2 14:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf50e4aad2ba6e1bf6c4a6c415ba5f499b21fd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:5f:78:04:eb:c7:da:2e:18:b9:9b:c2:37: 71:30:36:d5:45:3b:8f:96:7d:88:30:42:42:29:93: 4e:93:fa:9a:ec:76:a3:2a:6b:90:fa:0d:06:25:17: 80:18:8c:82:e0:d2:f0:03:65:36:33:23:d4:54:1a: 2a:b5:4d:5e:f0:16:5f:d4:5a:b1:ca:73:60:19:98: d3:7f:13:95:07:20:45:a1:19:57:cf:49:62:0f:8e: bb:c1:88:14:ba:8a:2d:b8:81:76:04:bb:ff:a8:05: 18:ac:a0:06:1a:f3:41:6e:83:3f:0d:08:6d:87:aa: df:aa:98:5c:af:ce:42:55:d1:dc:1b:e8:25:2a:39: ab:af:82:af:a0:49:1d:82:cf:a9:30:78:2d:3d:d3: d3:41:56:0e:74:64:c9:e5:0b:ea:df:b6:d3:cf:16: 1f:81:1c:ee:57:64:2e:9d:d1:81:b8:e6:55:ea:b4: 99:d2:1b:3a:72:fb:eb:3b:3e:aa:56:e1:7c:8a:b4: 9d:62:3d:98:c4:d0:a8:6b:1c:85:e7:7e:8b:5b:5a: 41:68:0d:ea:64:82:6e:f9:d4:8b:ef:76:d5:a0:c2: 34:37:76:01:dd:65:3a:a6:80:8b:1a:24:81:be:f9: 7a:fc:96:30:4c:da:b7:8a:af:79:52:85:32:50:cb: 17:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:50:E4:AA:D2:BA:6E:1B:F6:C4:A6:C4:15:BA:5F:49:9B:21:FD:88 X509v3 Authority Key Identifier: keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/z1DkqtK6bhv2xKbEFbpfSZsh_Yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.210.0/24 185.66.213.0/24 212.52.22.0/24 IPv6: 2001:678:dd0::/48 Signature Algorithm: sha256WithRSAEncryption 38:c4:54:eb:26:8f:97:f3:fd:8c:22:60:3a:2c:d7:ee:18:00: e5:30:05:c3:c2:a8:ef:65:8e:8a:38:d0:53:e0:e2:54:63:3f: d6:a9:ae:fd:fb:f9:52:cb:09:88:95:19:2b:58:a8:7d:55:18: 78:15:c9:29:36:27:b6:09:fe:5b:47:19:60:76:96:48:6a:89: f8:ad:da:b9:9c:c5:ee:3a:c6:76:38:9e:b7:a0:1f:b8:cd:54: b4:de:89:f0:18:9f:07:8f:a2:e8:63:07:ae:a6:38:22:62:09: 1d:8d:df:cd:71:e9:a5:a2:a2:e7:b3:83:65:f5:a9:2a:63:6e: f4:9b:ab:e5:7e:26:88:37:f1:9b:49:5a:0a:f0:73:8d:1e:b5: 7d:fc:fb:68:4e:f0:8e:d9:4f:7d:49:43:03:8b:a5:01:12:61: b8:ab:66:7f:0c:86:6f:db:93:a2:dc:68:a3:65:6f:e3:43:fd: 89:69:eb:0d:c7:c2:77:f8:80:d0:e7:4c:05:d4:0c:c8:1f:14: 9c:f3:aa:89:0e:27:07:34:85:ad:95:9c:61:bd:72:58:44:b8: a3:c3:d3:ce:0c:e8:db:5c:7c:c8:3e:65:e4:66:53:42:4c:2d: 78:fb:4c:0d:24:4f:a8:34:b9:e6:fb:86:5f:54:a1:3f:73:17: 75:c9:65:f9 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/FVztrBaJk5O5ElX3aL9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhODM5OTM2YWVlZmYyODg2NzhlNzcyNjMzMDIwZmEyNTli ZDljZjIwHhcNMjYwMTAyMTQyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjUwZTRhYWQyYmE2ZTFiZjZjNGE2YzQxNWJhNWY0OTliMjFmZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIhfeATrx9ouGLmbwjdxMDbVRTuP ln2IMEJCKZNOk/qa7HajKmuQ+g0GJReAGIyC4NLwA2U2MyPUVBoqtU1e8BZf1Fqx ynNgGZjTfxOVByBFoRlXz0liD467wYgUuootuIF2BLv/qAUYrKAGGvNBboM/DQht h6rfqphcr85CVdHcG+glKjmrr4KvoEkdgs+pMHgtPdPTQVYOdGTJ5Qvq37bTzxYf gRzuV2QundGBuOZV6rSZ0hs6cvvrOz6qVuF8irSdYj2YxNCoaxyF536LW1pBaA3q ZIJu+dSL73bVoMI0N3YB3WU6poCLGiSBvvl6/JYwTNq3iq95UoUyUMsXvwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFM9Q5KrSum4b9sSmxBW6X0mbIf2IMB8GA1UdIwQY MBaAFDqDmTau7/KIZ453JjMCD6JZvZzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT29PWk5xN3Y4b2huam5jbU13SVBvbG05blBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81YzY3NDUtNzY4ZS00ZDYxLWI2MDQt ODM1ZjRlMzcyODNjLzEvejFEa3F0SzZiaHYyeEtiRUZicGZTWnNoX1lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81YzY3NDUtNzY4ZS00ZDYxLWI2MDQtODM1ZjRlMzcyODNj LzEvT29PWk5xN3Y4b2huam5jbU13SVBvbG05blBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAkhPSAwQA uULVAwQA1DQWMA8EAgACMAkDBwAgAQZ4DdAwDQYJKoZIhvcNAQELBQADggEBADjE VOsmj5fz/YwiYDos1+4YAOUwBcPCqO9ljoo40FPg4lRjP9aprv37+VLLCYiVGStY qH1VGHgVySk2J7YJ/ltHGWB2lkhqifit2rmcxe46xnY4nregH7jNVLTeifAYnweP ouhjB66mOCJiCR2N381x6aWiouezg2X1qSpjbvSbq+V+Jog38ZtJWgrwc40etX38 +2hO8I7ZT31JQwOLpQESYbirZn8Mhm/bk6LcaKNlb+ND/Ylp6w3Hwnf4gNDnTAXU DMgfFJzzqokOJwc0ha2VnGG9clhEuKPD084M6NtcfMg+ZeRmU0JMLXj7TA0kT6g0 ueb7hl9UoT9zF3XJZfk= -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:22 2026 by rpki-client