This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa File: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (raw, json) Hash identifier: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g= Subject key identifier: CE:3D:28:18:BA:4F:1A:D5:89:E8:8A:47:C4:B1:10:7C:7D:83:A4:AA Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e Certificate serial: 019B77C6CBCBF0097F57E605E3AA1E088A85 Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa Signing time: Thu 01 Jan 2026 04:17:55 +0000 ROA not before: Thu 01 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51566 IP address blocks: 193.189.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cb:cb:f0:09:7f:57:e6:05:e3:aa:1e:08:8a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce3d2818ba4f1ad589e88a47c4b1107c7d83a4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:55:05:2d:cb:09:cc:41:35:c9:dd:c4:b3: ff:8f:b3:23:26:fb:83:ad:cf:f4:a8:70:44:1a:d8: f6:13:61:38:35:f2:90:44:0b:5a:b1:15:a6:bd:b5: c8:14:44:de:bb:f6:a5:8a:ef:30:eb:29:6f:b9:de: 56:a0:65:1e:06:87:04:f3:5a:85:78:06:f2:1b:3e: 81:09:a1:ce:04:1c:0e:53:a5:63:1b:d8:58:13:77: f7:77:3c:03:de:95:ee:63:75:19:0f:27:dd:ec:fc: 39:80:42:0b:aa:51:51:e0:9d:98:82:ad:c6:ea:eb: 47:33:dc:ee:83:12:68:b0:33:15:de:e2:75:fe:48: 48:fc:d5:3d:2d:b9:3e:16:30:80:44:f1:d0:8a:93: 69:be:32:cc:86:ff:12:b2:99:b9:20:63:42:31:00: 4a:6c:3b:0d:d2:53:be:0e:62:1e:e9:27:69:d3:00: ca:6f:dc:33:99:37:74:a6:61:27:b5:d8:13:74:38: ce:0d:c4:ba:b4:0d:fc:ff:e3:f7:94:6c:48:12:b4: e8:f5:6d:03:16:06:e9:1c:f4:74:95:e3:2d:b7:8e: e1:b3:82:bb:ba:8f:46:3a:15:52:1d:9d:c6:4d:87: 18:6b:24:6f:7d:ad:c2:fe:dc:78:26:8f:3c:43:70: 25:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3D:28:18:BA:4F:1A:D5:89:E8:8A:47:C4:B1:10:7C:7D:83:A4:AA X509v3 Authority Key Identifier: keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.142.0/24 Signature Algorithm: sha256WithRSAEncryption 72:9e:d7:a9:58:2d:7b:9b:dd:a6:75:5f:2d:f2:e4:91:48:6d: fb:ff:22:16:3e:a0:94:65:ea:d7:b7:40:ef:69:d7:ca:aa:86: 65:d8:e1:29:0a:5e:2e:be:44:73:0f:51:da:56:d1:6c:d2:cc: a6:90:95:d4:55:c1:65:f1:07:cf:04:39:d6:18:14:a3:6e:f3: 3f:a0:64:04:b6:f8:87:b2:04:9e:26:aa:71:b6:3c:1d:6c:ae: 39:52:e8:a9:04:85:3f:64:d6:ca:a8:c7:ba:06:dd:10:ba:a3: 88:81:de:73:2a:0d:63:2e:41:3e:b1:ee:fb:c8:e6:15:25:3a: 29:5d:ab:e4:17:99:87:00:a4:ea:35:0f:e2:26:6a:db:d8:d4: bc:f3:d0:26:15:62:f5:c0:97:27:e4:d3:d1:31:1b:8f:29:3d: 7b:07:5a:18:74:34:63:fe:6e:ee:0b:02:4b:f4:23:72:9b:24: 3b:5c:9b:8c:b4:7e:d6:9e:e8:7f:b9:ca:40:f7:fc:1d:48:3f: c9:9e:03:b0:fd:df:db:5e:11:d4:07:b9:8f:4e:38:44:e1:df: fd:b1:53:fb:e7:8e:50:fc:c6:47:88:da:a8:f6:f4:d7:7c:9d: 12:11:fd:21:5d:90:a7:80:62:c8:ca:89:83:5c:80:6c:08:3e: 7f:54:c9:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsvL8Al/V+YF46oeCIqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNTM5MTE3MDVhZTg2MGMyOTllNmExYTQxMmU1MGVkYTFj ODIyOGUwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTNkMjgxOGJhNGYxYWQ1ODllODhhNDdjNGIxMTA3YzdkODNhNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozlVBS3LCcxBNcndxLP/j7MjJvuD rc/0qHBEGtj2E2E4NfKQRAtasRWmvbXIFETeu/aliu8w6ylvud5WoGUeBocE81qF eAbyGz6BCaHOBBwOU6VjG9hYE3f3dzwD3pXuY3UZDyfd7Pw5gEILqlFR4J2Ygq3G 6utHM9zugxJosDMV3uJ1/khI/NU9Lbk+FjCARPHQipNpvjLMhv8Sspm5IGNCMQBK bDsN0lO+DmIe6Sdp0wDKb9wzmTd0pmEntdgTdDjODcS6tA38/+P3lGxIErTo9W0D FgbpHPR0leMtt47hs4K7uo9GOhVSHZ3GTYcYayRvfa3C/tx4Jo88Q3AlNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM49KBi6TxrVieiKR8SxEHx9g6SqMB8GA1UdIwQY MBaAFBxTkRcFroYMKZ5qGkEuUO2hyCKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEZPUkZ3V3VoZ3dwbm1vYVFTNVE3YUhJSW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hZDZlZjUtMzIxNi00NmNiLTk2NWUt M2U3ZjgzMDhjYzU1LzEvemowb0dMcFBHdFdKNklwSHhMRVFmSDJEcEtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hZDZlZjUtMzIxNi00NmNiLTk2NWUtM2U3ZjgzMDhjYzU1 LzEvSEZPUkZ3V3VoZ3dwbm1vYVFTNVE3YUhJSW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwb2OMA0G CSqGSIb3DQEBCwUAA4IBAQByntepWC17m92mdV8t8uSRSG37/yIWPqCUZerXt0Dv adfKqoZl2OEpCl4uvkRzD1HaVtFs0symkJXUVcFl8QfPBDnWGBSjbvM/oGQEtviH sgSeJqpxtjwdbK45UuipBIU/ZNbKqMe6Bt0QuqOIgd5zKg1jLkE+se77yOYVJTop XavkF5mHAKTqNQ/iJmrb2NS889AmFWL1wJcn5NPRMRuPKT17B1oYdDRj/m7uCwJL 9CNymyQ7XJuMtH7Wnuh/ucpA9/wdSD/JngOw/d/bXhHUB7mPTjhE4d/9sVP7545Q /MZHiNqo9vTXfJ0SEf0hXZCngGLIyomDXIBsCD5/VMkV -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:22 2026 by rpki-client