This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/ZT3zt4JjQMvNJMoraIK7n0XBLRQ.roa File: ZT3zt4JjQMvNJMoraIK7n0XBLRQ.roa (raw, json) Hash identifier: panNpFZp6bpYl4EtuEneCVUYvSbhDT4PYxL2xEkmKNA= Subject key identifier: 65:3D:F3:B7:82:63:40:CB:CD:24:CA:2B:68:82:BB:9F:45:C1:2D:14 Certificate issuer: /CN=f0a9005423147453909366c6b4d09c31958acc1c Certificate serial: 019B7C12CFD2A8AF2CDC28962CBB5C905791 Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/ZT3zt4JjQMvNJMoraIK7n0XBLRQ.roa Signing time: Fri 02 Jan 2026 00:19:26 +0000 ROA not before: Fri 02 Jan 2026 00:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5430 IP address blocks: 89.58.120.0/21 maxlen: 21 194.97.0.0/19 maxlen: 19 195.4.92.0/23 maxlen: 23 2001:748::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cf:d2:a8:af:2c:dc:28:96:2c:bb:5c:90:57:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=653df3b7826340cbcd24ca2b6882bb9f45c12d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:48:f6:35:be:1c:88:1b:78:2c:20:b7:fe: 25:7b:46:99:56:cf:b9:76:2d:42:1c:5a:28:c7:44: 1d:a1:77:57:b7:31:47:84:5d:7c:19:98:0c:ef:92: 77:54:a9:6b:13:93:11:32:8d:b8:80:b9:9c:a0:14: 90:86:b8:55:65:e5:7c:ad:28:1a:23:e0:26:b1:a2: 67:ce:72:71:63:a4:69:5b:4f:77:49:0a:fa:e9:e5: 3a:9a:86:eb:3d:58:de:5e:d0:f3:c9:04:28:e0:a5: 2a:89:76:5b:2c:66:3f:af:60:7f:84:a5:b7:02:4f: 5e:2a:ed:74:8b:8e:d6:57:0a:4c:9c:c1:e8:92:90: fe:b9:38:50:d2:c9:0a:33:73:d5:79:ce:aa:d4:d7: 45:21:cf:3d:ef:5f:59:fe:d4:1c:1d:6c:27:17:36: 56:32:d7:d8:eb:18:d8:d5:ff:32:1b:d1:dc:10:94: 6a:a1:6b:84:bd:bd:31:93:51:86:a5:8e:0f:23:cc: 65:02:4e:77:91:20:6f:f9:c0:40:fc:53:4d:e0:30: 6f:57:b7:b4:ea:0f:cf:f2:06:e2:21:c6:43:15:92: 4b:5f:3a:11:e7:7f:8f:08:da:cc:97:c8:e9:49:d6: 5d:81:f8:3a:29:aa:12:b1:5b:30:6d:1a:1e:24:2f: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3D:F3:B7:82:63:40:CB:CD:24:CA:2B:68:82:BB:9F:45:C1:2D:14 X509v3 Authority Key Identifier: keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/ZT3zt4JjQMvNJMoraIK7n0XBLRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.58.120.0/21 194.97.0.0/19 195.4.92.0/23 IPv6: 2001:748::/32 Signature Algorithm: sha256WithRSAEncryption c2:9d:76:56:88:49:8b:41:41:0f:e2:e1:39:77:dd:d3:2a:4b: 20:76:c8:8f:41:97:72:b3:f9:58:de:c2:96:ad:8c:10:15:6f: 63:af:d7:d1:ed:62:62:36:5c:f9:71:10:0c:99:95:c5:6e:e9: 00:67:3b:5b:78:ab:67:73:0f:30:ae:49:ca:66:e2:20:a5:5b: a1:db:48:cb:09:ea:60:2c:f9:e8:72:b6:f5:6e:32:5e:42:a7: c5:d6:ba:c8:7f:48:71:52:cd:2e:93:c1:e2:50:38:15:54:81: 85:3a:e6:a8:c7:cc:3a:f5:48:df:6f:a3:40:ad:33:dc:b3:b2: 5c:bd:9a:9e:4a:47:30:c7:7d:93:81:09:11:a8:b5:7a:10:a5: 97:87:fd:eb:33:46:f9:17:cc:4a:d5:3a:58:df:79:4b:80:de: d7:3a:ce:77:1d:e5:34:f0:ac:64:14:0b:ab:c0:f7:85:5f:48: 7d:81:60:b4:52:ad:0f:27:60:ce:08:56:b7:eb:d4:e3:75:e3: fc:bd:c9:3c:62:6b:a0:2d:05:79:66:38:d4:6b:a2:13:34:1e: 4a:4b:02:37:65:d5:fb:ce:b2:f1:a6:4e:d5:d8:cc:00:75:9d: e0:81:30:2e:45:6c:af:a0:b1:3d:ed:d7:49:6e:5a:8e:dc:2b: a7:b7:c5:69 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8Es/SqK8s3CiWLLtckFeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTkwMDU0MjMxNDc0NTM5MDkzNjZjNmI0ZDA5YzMxOTU4 YWNjMWMwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTNkZjNiNzgyNjM0MGNiY2QyNGNhMmI2ODgyYmI5ZjQ1YzEyZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/JI9jW+HIgbeCwgt/4le0aZVs+5 di1CHFoox0QdoXdXtzFHhF18GZgM75J3VKlrE5MRMo24gLmcoBSQhrhVZeV8rSga I+AmsaJnznJxY6RpW093SQr66eU6mobrPVjeXtDzyQQo4KUqiXZbLGY/r2B/hKW3 Ak9eKu10i47WVwpMnMHokpD+uThQ0skKM3PVec6q1NdFIc89719Z/tQcHWwnFzZW MtfY6xjY1f8yG9HcEJRqoWuEvb0xk1GGpY4PI8xlAk53kSBv+cBA/FNN4DBvV7e0 6g/P8gbiIcZDFZJLXzoR53+PCNrMl8jpSdZdgfg6KaoSsVswbRoeJC9LpwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGU987eCY0DLzSTKK2iCu59FwS0UMB8GA1UdIwQY MBaAFPCpAFQjFHRTkJNmxrTQnDGViswcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtrQVZDTVVkRk9RazJiR3ROQ2NNWldLekJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xNTdhZjYtY2NlMi00ZTZkLWJjMjMt MzBkNzlmOWFhODc3LzEvWlQzenQ0SmpRTXZOSk1vcmFJSzduMFhCTFJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xNTdhZjYtY2NlMi00ZTZkLWJjMjMtMzBkNzlmOWFhODc3 LzEvOEtrQVZDTVVkRk9RazJiR3ROQ2NNWldLekJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDWTp4AwQF wmEAAwQBwwRcMA0EAgACMAcDBQAgAQdIMA0GCSqGSIb3DQEBCwUAA4IBAQDCnXZW iEmLQUEP4uE5d93TKksgdsiPQZdys/lY3sKWrYwQFW9jr9fR7WJiNlz5cRAMmZXF bukAZztbeKtncw8wrknKZuIgpVuh20jLCepgLPnocrb1bjJeQqfF1rrIf0hxUs0u k8HiUDgVVIGFOuaox8w69Ujfb6NArTPcs7JcvZqeSkcwx32TgQkRqLV6EKWXh/3r M0b5F8xK1TpY33lLgN7XOs53HeU08KxkFAurwPeFX0h9gWC0Uq0PJ2DOCFa369Tj deP8vck8YmugLQV5ZjjUa6ITNB5KSwI3ZdX7zrLxpk7V2MwAdZ3ggTAuRWyvoLE9 7ddJblqO3Cunt8Vp -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:38 2026 by rpki-client