This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/z0RxzKUmGvdiXVqo5YVLQIA15ao.roa File: z0RxzKUmGvdiXVqo5YVLQIA15ao.roa (raw, json) Hash identifier: +26ezE/PG8fzSDohvHnBiXyXfPXqiwQfhlM6I+79ozE= Subject key identifier: CF:44:71:CC:A5:26:1A:F7:62:5D:5A:A8:E5:85:4B:40:80:35:E5:AA Certificate issuer: /CN=07a19f46a17b9d4869df66493cfb05d7d82894a6 Certificate serial: 019B7F14EA0230BD404C1C1461A6B6367EE9 Authority key identifier: 07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/z0RxzKUmGvdiXVqo5YVLQIA15ao.roa Signing time: Fri 02 Jan 2026 14:20:35 +0000 ROA not before: Fri 02 Jan 2026 14:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44065 IP address blocks: 79.98.152.0/21 maxlen: 21 217.29.0.0/20 maxlen: 20 2a02:3c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:ea:02:30:bd:40:4c:1c:14:61:a6:b6:36:7e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07a19f46a17b9d4869df66493cfb05d7d82894a6 Validity Not Before: Jan 2 14:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf4471cca5261af7625d5aa8e5854b408035e5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:b7:54:df:f0:51:16:44:00:f9:80:d6:b7: 2c:0b:19:16:f3:30:9e:90:f6:e2:51:11:0f:13:a8: 3d:08:3a:e2:9f:0f:4a:41:7b:ed:e4:7a:d6:df:1d: a6:06:9b:cb:a9:89:97:32:24:9c:cf:0f:a9:ca:68: ba:72:68:f6:f0:8f:65:fb:fb:99:e3:c3:98:a0:2a: aa:cb:f1:7c:03:03:6e:f1:d1:45:df:22:2c:ce:97: bc:e0:bc:e2:71:43:80:41:3f:83:54:a1:c0:5d:90: d0:dc:f5:40:32:0f:c2:1a:53:6e:f3:74:0c:34:32: 17:00:b2:61:73:3c:d1:be:40:0b:c6:fc:de:ee:41: 0f:45:23:72:7a:b1:b3:e2:3e:5e:60:02:1f:26:f2: c9:f3:99:ce:f2:d9:72:d8:fa:fc:20:1d:a6:2d:d3: dc:ce:80:73:5e:9b:5b:f8:ce:89:82:34:d8:09:13: e5:35:cb:e2:45:87:99:77:6a:4e:f5:1d:96:59:12: 26:dd:18:9c:93:a2:34:b8:87:e5:47:f0:6c:b9:cb: 9b:d0:f0:bc:12:2c:81:e9:11:b0:4e:25:d0:a4:5c: af:2a:af:c7:a4:2c:1a:2b:43:49:48:07:8a:fb:c3: 02:6e:9a:1a:96:72:8a:c3:99:77:61:23:40:7a:26: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:44:71:CC:A5:26:1A:F7:62:5D:5A:A8:E5:85:4B:40:80:35:E5:AA X509v3 Authority Key Identifier: keyid:07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/z0RxzKUmGvdiXVqo5YVLQIA15ao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.152.0/21 217.29.0.0/20 IPv6: 2a02:3c0::/29 Signature Algorithm: sha256WithRSAEncryption 80:f9:0a:80:36:4d:42:99:fa:97:9a:9a:69:6d:9a:fb:cc:f6: 8a:37:d6:5e:63:2a:25:43:0b:e2:ba:9b:54:99:60:0a:2c:a4: de:8a:48:c9:74:8a:e3:50:6e:34:c7:21:3c:c9:4a:e7:d8:f2: a4:d3:c0:b4:55:06:5d:25:5e:dc:b0:fe:5a:1d:22:de:6a:87: e4:42:3c:59:ca:73:1d:2f:f8:8e:21:e6:c6:d1:60:93:e1:71: 5a:3f:5f:18:82:d8:a8:44:35:cc:0d:e2:fe:47:0a:98:69:51: 06:c4:f9:b7:e5:29:21:ed:5b:16:2c:23:b2:90:90:d5:e7:3b: 65:b3:d4:72:28:1c:4a:7d:16:06:ce:38:3f:e6:82:87:c7:55: 0e:ce:ec:5a:2c:a5:76:6f:81:c5:bc:69:53:10:86:08:66:10: a1:05:b8:9f:3a:1a:62:c4:54:8d:5b:0b:2c:ca:18:3d:c3:e7: 8a:1f:6a:e7:93:9c:1b:62:d2:d4:e0:a1:ab:61:2c:e8:2a:3c: 93:02:23:d8:1a:66:7e:90:8f:e0:7b:40:35:12:32:1b:56:94: 5e:39:a8:d9:d6:b5:11:09:19:06:e5:f9:7c:e0:e4:00:04:8f: 94:9e:34:31:aa:fd:1c:cb:0d:46:9f:6e:9b:38:ac:0f:10:78: 82:be:55:d9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FOoCML1ATBwUYaa2Nn7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YTE5ZjQ2YTE3YjlkNDg2OWRmNjY0OTNjZmIwNWQ3ZDgy ODk0YTYwHhcNMjYwMTAyMTQyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjQ0NzFjY2E1MjYxYWY3NjI1ZDVhYThlNTg1NGI0MDgwMzVlNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5C3VN/wURZEAPmA1rcsCxkW8zCe kPbiUREPE6g9CDrinw9KQXvt5HrW3x2mBpvLqYmXMiSczw+pymi6cmj28I9l+/uZ 48OYoCqqy/F8AwNu8dFF3yIszpe84LzicUOAQT+DVKHAXZDQ3PVAMg/CGlNu83QM NDIXALJhczzRvkALxvze7kEPRSNyerGz4j5eYAIfJvLJ85nO8tly2Pr8IB2mLdPc zoBzXptb+M6JgjTYCRPlNcviRYeZd2pO9R2WWRIm3Rick6I0uIflR/Bsucub0PC8 EiyB6RGwTiXQpFyvKq/HpCwaK0NJSAeK+8MCbpoalnKKw5l3YSNAeiYiKQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFM9EccylJhr3Yl1aqOWFS0CANeWqMB8GA1UdIwQY MBaAFAehn0ahe51Iad9mSTz7BdfYKJSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZHZlJxRjduVWhwMzJaSlBQc0YxOWdvbEtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hMGI2MDUtNTZmYi00Y2JhLThkZGMt YjU4NTQxNzkxMGViLzEvejBSeHpLVW1HdmRpWFZxbzVZVkxRSUExNWFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9hMGI2MDUtNTZmYi00Y2JhLThkZGMtYjU4NTQxNzkxMGVi LzEvQjZHZlJxRjduVWhwMzJaSlBQc0YxOWdvbEtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDT2KYAwQE 2R0AMA0EAgACMAcDBQMqAgPAMA0GCSqGSIb3DQEBCwUAA4IBAQCA+QqANk1CmfqX mpppbZr7zPaKN9ZeYyolQwviuptUmWAKLKTeikjJdIrjUG40xyE8yUrn2PKk08C0 VQZdJV7csP5aHSLeaofkQjxZynMdL/iOIebG0WCT4XFaP18YgtioRDXMDeL+RwqY aVEGxPm35Skh7VsWLCOykJDV5ztls9RyKBxKfRYGzjg/5oKHx1UOzuxaLKV2b4HF vGlTEIYIZhChBbifOhpixFSNWwssyhg9w+eKH2rnk5wbYtLU4KGrYSzoKjyTAiPY GmZ+kI/ge0A1EjIbVpReOajZ1rURCRkG5fl84OQABI+UnjQxqv0cyw1Gn26bOKwP EHiCvlXZ -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:58 2026 by rpki-client