This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa
File: z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa (raw, json)
Hash identifier: Bw/EG1OV5fOeDsNlaq4pIbVENapXiEYMLsr9/Cjedk0=
Subject key identifier: CF:6C:9A:D0:EF:99:B7:51:E4:48:59:D1:16:93:61:CD:48:84:A4:AC
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 019B7B35E3F7914CC5E702D7710F6C9F8396
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa
Signing time: Thu 01 Jan 2026 20:18:07 +0000
ROA not before: Thu 01 Jan 2026 20:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33911
IP address blocks: 193.202.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:e3:f7:91:4c:c5:e7:02:d7:71:0f:6c:9f:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Jan 1 20:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf6c9ad0ef99b751e44859d1169361cd4884a4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:87:e7:64:51:17:50:a2:db:36:a3:86:95:fe:
18:55:f2:4e:62:1e:95:40:ad:1e:16:90:24:6c:b9:
fa:2a:22:0b:0c:51:85:3e:cf:10:20:77:0a:54:3c:
ec:2c:8b:07:19:69:e5:3e:73:63:cd:09:7c:84:ed:
4b:fb:8c:2a:80:c0:c0:3e:f4:78:ba:72:10:75:60:
a5:df:8b:4e:f5:ce:6e:55:0f:13:d2:5a:09:e9:1c:
e9:a2:c1:bc:bd:fa:d2:91:a7:18:9c:bb:dd:b0:a6:
88:57:46:0c:ef:3b:a6:fd:ef:b0:74:e9:f8:73:ec:
9e:e0:a7:16:3e:30:14:0e:8b:01:cc:bd:89:84:7e:
50:7a:de:fc:3f:91:92:1d:a9:38:74:b9:8a:b7:c1:
04:c2:45:38:27:66:1e:ed:23:8a:76:1a:96:c3:6a:
3f:f9:5d:8a:bf:8b:ff:b0:f5:8d:b6:eb:8e:73:8a:
3f:e1:10:f6:87:7b:67:45:bc:50:72:ca:12:f9:93:
72:fd:49:ed:1a:0d:be:da:51:4b:69:18:a7:d7:d5:
80:e6:97:ec:c5:d1:e8:9e:85:bf:21:16:94:dd:72:
cf:7c:b7:6f:fc:5a:4f:c9:64:13:c7:c8:51:14:2e:
86:f9:45:64:b3:b4:3c:74:7f:fd:bd:1d:f5:04:62:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:9A:D0:EF:99:B7:51:E4:48:59:D1:16:93:61:CD:48:84:A4:AC
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.126.0/24
Signature Algorithm: sha256WithRSAEncryption
10:82:8c:23:17:1d:99:22:06:06:c5:26:25:9d:8c:f8:5d:60:
48:b7:00:55:f4:b0:5e:33:09:24:e5:13:ff:96:b1:90:65:e0:
6c:1f:70:f6:0d:1c:e5:54:00:b1:a7:ea:53:0e:26:8f:11:56:
b2:5f:5e:75:f2:02:c4:4d:82:23:1b:a9:c0:ee:ff:b1:45:e2:
63:02:a8:40:e2:39:99:9f:6a:01:9e:29:ba:17:9f:fc:2c:bb:
b0:f5:51:c0:c5:fb:13:c0:2b:3b:32:2b:e6:08:de:52:56:78:
69:55:21:11:9e:a0:b4:44:7e:5a:4a:50:47:8b:b6:59:e6:2a:
fd:6b:7f:44:1a:a6:6a:e8:aa:88:12:8e:8d:ea:2b:5e:a0:e4:
7b:8a:b3:5a:eb:13:77:14:23:b0:d0:64:eb:79:d4:29:91:ce:
f1:3c:80:ce:52:78:dc:73:5a:ce:43:5b:a1:ec:2d:08:7e:75:
6c:0e:6f:a1:3a:a9:ee:db:49:dc:d1:79:ea:ec:34:2f:4c:5a:
12:e8:3e:a5:18:bc:31:b3:01:62:aa:57:6f:3b:c1:d2:59:c7:
8b:22:f0:36:8b:7b:d7:06:13:5d:d6:88:13:01:53:80:e7:bd:
03:d0:46:aa:76:e4:96:6a:85:b3:52:70:7a:2c:f9:85:31:17:
a9:e3:e9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:07:35 2026 by rpki-client