This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/08zs1vez5T3OxmoffP4v4xK9YRM.roa File: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (raw, json) Hash identifier: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM= Subject key identifier: D3:CC:EC:D6:F7:B3:E5:3D:CE:C6:6A:1F:7C:FE:2F:E3:12:BD:61:13 Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342 Certificate serial: 019B7F85368CE9C6E9E980ED029876452A86 Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/08zs1vez5T3OxmoffP4v4xK9YRM.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201107 IP address blocks: 193.30.96.0/24 maxlen: 24 193.30.97.0/24 maxlen: 24 193.30.98.0/24 maxlen: 24 193.30.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:36:8c:e9:c6:e9:e9:80:ed:02:98:76:45:2a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3ccecd6f7b3e53dcec66a1f7cfe2fe312bd6113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:35:81:70:af:05:13:ef:30:d1:9c:fb:9e: ca:04:87:1c:d9:82:3c:5f:84:4f:30:cb:f7:37:45: d3:9f:f4:17:97:17:3e:d9:90:e4:12:3c:e9:c8:41: f1:2c:37:51:bd:c8:6b:fb:ec:e0:bf:97:dd:f3:2f: a6:0f:67:9d:66:1e:dc:58:a6:1e:c1:1c:a5:00:ab: e0:bd:65:8b:84:2f:56:f6:32:5f:4c:bc:2c:2c:2f: 3b:ba:db:72:64:a1:59:20:74:ae:a4:f2:58:5c:af: 2b:89:a7:ce:de:36:2d:3a:60:e4:a1:7c:23:1c:fc: fd:cb:8c:12:bf:f5:30:4a:84:90:99:c9:69:64:dd: af:7e:da:df:40:cf:c9:d7:3c:43:41:cc:de:d8:4c: 9f:3e:0e:82:aa:fe:37:28:b3:26:0f:b1:2e:ca:83: e2:d7:a8:4a:30:70:a5:c4:d6:6b:2f:4f:47:2c:98: 51:d6:21:42:fa:69:ec:e5:64:3c:16:06:6b:87:ef: fe:36:43:56:01:92:eb:f8:d1:a9:9a:e1:31:c5:06: de:0e:cb:bf:b2:96:42:72:53:a1:ea:ab:87:7e:2f: 55:76:ec:4e:6b:50:e8:22:cd:8d:0f:6c:e3:f3:da: a5:cc:39:2b:02:13:c8:bf:72:b1:9e:84:79:9a:15: ba:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CC:EC:D6:F7:B3:E5:3D:CE:C6:6A:1F:7C:FE:2F:E3:12:BD:61:13 X509v3 Authority Key Identifier: keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/08zs1vez5T3OxmoffP4v4xK9YRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.96.0/22 Signature Algorithm: sha256WithRSAEncryption 81:6b:ec:8a:f2:b6:be:cf:a4:67:af:dc:64:a0:7f:ce:c3:1a: dc:13:98:f1:1e:f6:55:d6:de:ef:e4:98:86:b6:be:52:75:07: c4:8e:b5:4e:1d:cf:ed:8d:f9:bd:3b:1d:8f:37:3c:5f:78:25: 88:63:0e:b0:75:2e:f4:76:13:54:60:91:68:d2:b8:50:37:8f: d5:37:0c:71:da:86:71:b7:73:84:86:98:a7:a3:99:2a:64:e0: fb:dc:ea:27:07:d0:f9:1f:8e:c6:99:6c:19:41:c6:87:f3:c2: 44:8d:84:c2:c0:4e:ae:79:fc:da:af:48:94:6d:b6:14:7c:88: f8:3d:34:da:91:0a:f8:3a:f2:78:96:0e:48:ab:b3:7a:f3:01: 8e:8e:78:c1:a8:65:ef:56:ad:e0:92:8d:df:ef:de:e4:54:9a: 4e:58:47:62:de:a7:c4:68:19:86:ce:24:3b:73:d5:ca:c3:49: 0d:5c:90:3a:4d:a0:af:a0:66:b9:cd:85:3e:bc:d8:66:43:c7: 41:41:01:9e:a8:22:cf:08:98:3e:c0:cc:cb:76:30:59:d2:01: b1:76:69:35:90:c5:3e:de:f5:2a:d0:9e:6a:b7:14:67:0a:19: 29:dc:c7:99:6d:bf:7d:d7:77:bb:68:c6:9c:43:67:ef:20:ec: 94:96:7b:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hTaM6cbp6YDtAph2RSqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw YzEzNDIwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2NjZWNkNmY3YjNlNTNkY2VjNjZhMWY3Y2ZlMmZlMzEyYmQ2MTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlc1gXCvBRPvMNGc+57KBIcc2YI8 X4RPMMv3N0XTn/QXlxc+2ZDkEjzpyEHxLDdRvchr++zgv5fd8y+mD2edZh7cWKYe wRylAKvgvWWLhC9W9jJfTLwsLC87uttyZKFZIHSupPJYXK8riafO3jYtOmDkoXwj HPz9y4wSv/UwSoSQmclpZN2vftrfQM/J1zxDQcze2EyfPg6Cqv43KLMmD7EuyoPi 16hKMHClxNZrL09HLJhR1iFC+mns5WQ8FgZrh+/+NkNWAZLr+NGpmuExxQbeDsu/ spZCclOh6quHfi9VduxOa1DoIs2ND2zj89qlzDkrAhPIv3KxnoR5mhW65QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPM7Nb3s+U9zsZqH3z+L+MSvWETMB8GA1UdIwQY MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt ODQ2YWFmMGViMWFkLzEvMDh6czF2ZXo1VDNPeG1vZmZQNHY0eEs5WVJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwR5gMA0G CSqGSIb3DQEBCwUAA4IBAQCBa+yK8ra+z6Rnr9xkoH/OwxrcE5jxHvZV1t7v5JiG tr5SdQfEjrVOHc/tjfm9Ox2PNzxfeCWIYw6wdS70dhNUYJFo0rhQN4/VNwxx2oZx t3OEhpino5kqZOD73OonB9D5H47GmWwZQcaH88JEjYTCwE6uefzar0iUbbYUfIj4 PTTakQr4OvJ4lg5Iq7N68wGOjnjBqGXvVq3gko3f797kVJpOWEdi3qfEaBmGziQ7 c9XKw0kNXJA6TaCvoGa5zYU+vNhmQ8dBQQGeqCLPCJg+wMzLdjBZ0gGxdmk1kMU+ 3vUq0J5qtxRnChkp3MeZbb9913e7aMacQ2fvIOyUlnvw -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:40 2026 by rpki-client