This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/Z3nS0nqVZ-vslxx54klnYbz02l8.roa File: Z3nS0nqVZ-vslxx54klnYbz02l8.roa (raw, json) Hash identifier: dO6OHSX+aPL7qnM4VP6WsbVvNbzWQqrh27kk5gBnp4w= Subject key identifier: 67:79:D2:D2:7A:95:67:EB:EC:97:1C:79:E2:49:67:61:BC:F4:DA:5F Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B7AC7E727583892E691F4872F4DA451C3 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/Z3nS0nqVZ-vslxx54klnYbz02l8.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42233 IP address blocks: 81.19.134.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e7:27:58:38:92:e6:91:f4:87:2f:4d:a4:51:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6779d2d27a9567ebec971c79e2496761bcf4da5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:c3:3e:2c:26:1a:c4:ee:51:68:36:b5:76: 20:21:11:a4:ae:37:a5:69:80:cc:81:cd:70:f2:55: cc:a0:29:9c:3a:58:19:13:5a:7d:fa:16:c4:80:e9: c5:9a:e8:71:a6:d1:4f:b3:07:c1:07:57:35:3b:7a: a8:c5:6a:12:7e:52:c5:5f:74:1c:db:17:12:9b:40: 32:c3:8f:23:79:78:ba:6f:0f:ed:ac:c3:b6:3b:24: fc:80:93:55:a8:49:cc:46:be:00:a6:79:7e:b9:9c: b9:4d:5e:5d:df:f6:de:2e:e4:d5:03:fb:75:cf:20: cc:28:66:30:87:8b:87:5c:d9:65:70:5d:7b:56:44: de:9b:12:c1:23:7d:ff:0e:e7:ce:15:3d:d0:52:f9: fe:a3:0f:5e:35:ba:cf:4c:51:ca:d6:8e:7e:3f:a3: a3:5d:47:59:69:1a:54:32:e6:c6:48:f3:87:8e:d8: 54:7d:01:56:9e:6e:f3:c3:ca:fb:33:44:0d:89:12: f3:f5:1e:3e:42:4d:79:c6:85:60:09:c5:d0:9a:65: 95:7b:c7:87:14:33:d7:12:1a:41:26:a7:4f:80:bb: 01:52:5b:87:ed:e5:91:fd:e6:26:8a:43:48:8b:99: a6:26:41:03:c7:2d:6d:c7:26:d4:02:3b:ea:eb:b2: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:79:D2:D2:7A:95:67:EB:EC:97:1C:79:E2:49:67:61:BC:F4:DA:5F X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/Z3nS0nqVZ-vslxx54klnYbz02l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.134.0/24 Signature Algorithm: sha256WithRSAEncryption 30:17:29:c0:3d:c5:9a:ce:8d:57:8d:27:89:76:86:16:c8:f1: 01:f8:11:b8:94:a7:3a:f1:33:58:79:2b:2a:87:2e:92:ad:e9: 85:5e:0f:38:3d:64:15:6c:f0:f5:87:3a:8b:21:17:c8:da:b8: 9a:2f:a4:5b:4e:61:a7:53:06:07:a3:cf:8d:17:cd:c5:d5:35: ec:fc:b3:31:b0:42:e5:94:f1:96:b7:51:2c:b0:9e:f5:bd:c0: f0:26:4e:84:6c:84:3c:a7:93:82:29:00:df:00:0c:95:17:8a: 35:8b:53:74:76:ea:0f:6d:92:fd:cb:dc:d7:b5:4b:7e:69:67: 5a:cd:fe:97:b1:a0:20:a5:55:bf:fa:fc:8c:8f:2f:c9:63:3b: 7a:50:ad:41:12:56:9b:e5:9e:c3:ae:ba:3c:cc:2e:42:5b:92: 14:d4:a1:89:eb:4a:54:9c:0e:71:26:3e:69:29:89:f7:35:de: 54:04:06:44:e2:00:01:2d:bb:86:35:3a:1c:f2:6d:34:b7:2c: e8:fa:9b:5d:21:4a:df:b3:6b:07:d7:a8:60:68:a0:80:42:6d: df:87:5c:55:45:f7:6d:47:be:1e:04:67:da:01:9c:5e:1a:32: aa:fc:87:c9:03:12:27:94:21:23:fc:db:a4:7f:14:9b:c6:34: 34:e0:eb:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+cnWDiS5pH0hy9NpFHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Nzc5ZDJkMjdhOTU2N2ViZWM5NzFjNzllMjQ5Njc2MWJjZjRkYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHbDPiwmGsTuUWg2tXYgIRGkrjel aYDMgc1w8lXMoCmcOlgZE1p9+hbEgOnFmuhxptFPswfBB1c1O3qoxWoSflLFX3Qc 2xcSm0Ayw48jeXi6bw/trMO2OyT8gJNVqEnMRr4Apnl+uZy5TV5d3/beLuTVA/t1 zyDMKGYwh4uHXNllcF17VkTemxLBI33/DufOFT3QUvn+ow9eNbrPTFHK1o5+P6Oj XUdZaRpUMubGSPOHjthUfQFWnm7zw8r7M0QNiRLz9R4+Qk15xoVgCcXQmmWVe8eH FDPXEhpBJqdPgLsBUluH7eWR/eYmikNIi5mmJkEDxy1txybUAjvq67IzFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGd50tJ6lWfr7JcceeJJZ2G89NpfMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvWjNuUzBucVZaLXZzbHh4NTRrbG5ZYnowMmw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUROGMA0G CSqGSIb3DQEBCwUAA4IBAQAwFynAPcWazo1XjSeJdoYWyPEB+BG4lKc68TNYeSsq hy6SremFXg84PWQVbPD1hzqLIRfI2riaL6RbTmGnUwYHo8+NF83F1TXs/LMxsELl lPGWt1EssJ71vcDwJk6EbIQ8p5OCKQDfAAyVF4o1i1N0duoPbZL9y9zXtUt+aWda zf6XsaAgpVW/+vyMjy/JYzt6UK1BElab5Z7Drro8zC5CW5IU1KGJ60pUnA5xJj5p KYn3Nd5UBAZE4gABLbuGNToc8m00tyzo+ptdIUrfs2sH16hgaKCAQm3fh1xVRfdt R74eBGfaAZxeGjKq/IfJAxInlCEj/NukfxSbxjQ04Ous -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:35 2026 by rpki-client