This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/zBxBTpibLrslxHWch5H0k9kNNd0.roa File: zBxBTpibLrslxHWch5H0k9kNNd0.roa (raw, json) Hash identifier: kLIKoJKwnkX2C7p3Y1VY7at5dd/MwDeXCZmhRXuoHg4= Subject key identifier: CC:1C:41:4E:98:9B:2E:BB:25:C4:75:9C:87:91:F4:93:D9:0D:35:DD Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0 Certificate serial: 019B7CEE038D563BCF4459C620C8488437B9 Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/zBxBTpibLrslxHWch5H0k9kNNd0.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34380 IP address blocks: 193.43.244.0/22 maxlen: 24 193.43.244.0/24 maxlen: 24 193.43.245.0/24 maxlen: 24 193.43.246.0/24 maxlen: 24 193.43.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:03:8d:56:3b:cf:44:59:c6:20:c8:48:84:37:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc1c414e989b2ebb25c4759c8791f493d90d35dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:7a:fe:08:e2:a4:8b:95:c6:99:13:bb:08: 05:a3:70:b5:ed:9e:3e:f7:4e:f9:82:af:02:7a:46: 1e:b9:0a:f1:38:b7:0f:60:34:b9:c1:74:0a:f2:00: 22:62:49:6a:10:e5:25:89:a1:5f:bd:a2:8b:62:0f: 91:0a:19:c4:53:67:24:55:39:6c:97:1a:bc:37:73: 48:e3:8d:1f:db:2c:83:85:dc:de:a9:88:35:6c:81: 5f:80:44:69:e2:d1:7f:c2:e7:17:d3:29:50:02:29: a5:14:0e:b4:7a:11:56:63:58:0f:34:5b:e2:b2:06: fa:44:1f:f6:13:99:6f:77:9c:ad:d7:38:7f:b8:81: a8:81:0d:ba:97:59:5e:e3:0b:68:c4:f4:d5:c4:24: 96:26:38:95:e1:b3:04:8a:f0:5d:47:0a:cf:48:c9: ff:99:f5:85:43:c0:c2:c6:30:24:8d:68:1d:6b:f8: 71:58:52:80:77:2e:fb:84:90:53:9c:50:2e:2c:df: bd:00:89:36:71:72:04:f6:d2:48:1d:0d:19:1b:2a: 2a:e3:dd:09:2f:87:30:f0:34:fe:da:35:8e:6c:a3: eb:3b:fc:91:f6:d7:86:77:a6:99:1f:d4:b2:3d:91: c4:81:ec:f1:ff:9c:76:24:3c:73:84:5f:9c:69:51: 2c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1C:41:4E:98:9B:2E:BB:25:C4:75:9C:87:91:F4:93:D9:0D:35:DD X509v3 Authority Key Identifier: keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/zBxBTpibLrslxHWch5H0k9kNNd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.244.0/22 Signature Algorithm: sha256WithRSAEncryption 55:93:a7:eb:fe:f2:5f:96:69:3b:67:94:1b:80:79:93:43:3a: 0c:2e:32:5c:3d:dc:63:5b:52:5a:49:ac:4d:1e:09:4e:c6:07: 77:71:db:aa:fc:4e:ff:e3:9f:03:ca:a7:fb:a2:c5:d4:f0:d5: 3d:80:ba:14:1a:c8:9d:31:a0:88:df:29:aa:06:b0:f7:7c:af: d1:21:f4:31:95:6f:46:03:de:83:58:cb:ec:34:44:c4:15:30: 71:8d:6e:b8:b2:d7:e1:67:b0:18:c4:20:70:4a:2c:bd:0b:d5: c5:b8:35:48:51:71:fc:5e:da:f1:91:75:c9:ed:c8:b0:a4:0e: f2:8b:30:81:d5:74:e4:6c:b3:38:9d:db:e5:2a:92:50:50:70: 56:e5:b0:40:f3:0d:ec:3a:e2:d2:bc:a1:0e:9c:92:f6:29:da: f3:af:7f:36:9d:7a:2c:52:99:71:ca:b7:89:46:53:85:71:91: 84:f4:f5:be:ba:78:a0:55:25:bc:7d:ea:f1:a6:89:4b:ca:5d: 23:05:7c:9e:6c:19:8b:a2:6a:68:88:57:a0:78:64:29:2e:f3: 4e:b7:29:3d:9a:d9:0a:61:60:fb:43:93:84:61:ed:ca:43:24: 9b:85:ce:e3:ec:78:e3:e8:d7:41:6a:db:a8:11:97:7b:3f:bf: e0:3b:c3:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gONVjvPRFnGIMhIhDe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzNhY2Y5MjlhMjIzMzhmMmIzODAxODBjYzg1MmRiNDc3 OWFhZDAwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzFjNDE0ZTk4OWIyZWJiMjVjNDc1OWM4NzkxZjQ5M2Q5MGQzNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv316/gjipIuVxpkTuwgFo3C17Z4+ 9075gq8CekYeuQrxOLcPYDS5wXQK8gAiYklqEOUliaFfvaKLYg+RChnEU2ckVTls lxq8N3NI440f2yyDhdzeqYg1bIFfgERp4tF/wucX0ylQAimlFA60ehFWY1gPNFvi sgb6RB/2E5lvd5yt1zh/uIGogQ26l1le4wtoxPTVxCSWJjiV4bMEivBdRwrPSMn/ mfWFQ8DCxjAkjWgda/hxWFKAdy77hJBTnFAuLN+9AIk2cXIE9tJIHQ0ZGyoq490J L4cw8DT+2jWObKPrO/yR9teGd6aZH9SyPZHEgezx/5x2JDxzhF+caVEsCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMwcQU6Ymy67JcR1nIeR9JPZDTXdMB8GA1UdIwQY MBaAFGfDrPkpoiM48rOAGAzIUttHearQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUt Y2FjYThiODBjOTFjLzEvekJ4QlRwaWJMcnNseEhXY2g1SDBrOWtOTmQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUtY2FjYThiODBjOTFj LzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSv0MA0G CSqGSIb3DQEBCwUAA4IBAQBVk6fr/vJflmk7Z5QbgHmTQzoMLjJcPdxjW1JaSaxN HglOxgd3cduq/E7/458Dyqf7osXU8NU9gLoUGsidMaCI3ymqBrD3fK/RIfQxlW9G A96DWMvsNETEFTBxjW64stfhZ7AYxCBwSiy9C9XFuDVIUXH8XtrxkXXJ7ciwpA7y izCB1XTkbLM4ndvlKpJQUHBW5bBA8w3sOuLSvKEOnJL2Kdrzr382nXosUplxyreJ RlOFcZGE9PW+unigVSW8ferxpolLyl0jBXyebBmLompoiFegeGQpLvNOtyk9mtkK YWD7Q5OEYe3KQySbhc7j7Hjj6NdBatuoEZd7P7/gO8N4 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:20 2026 by rpki-client