This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/zDlZfltCh1B48XocFSVPymegLck.roa File: zDlZfltCh1B48XocFSVPymegLck.roa (raw, json) Hash identifier: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo= Subject key identifier: CC:39:59:7E:5B:42:87:50:78:F1:7A:1C:15:25:4F:CA:67:A0:2D:C9 Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Certificate serial: 019B78A35630814E020903985AF60CD3841F Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/zDlZfltCh1B48XocFSVPymegLck.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39637 IP address blocks: 194.107.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:56:30:81:4e:02:09:03:98:5a:f6:0c:d3:84:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc39597e5b42875078f17a1c15254fca67a02dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:3a:47:9f:0e:a3:80:ba:dd:26:92:9c:63: d5:fb:27:fe:6f:25:37:cf:6d:35:3a:54:78:a5:91: 79:7d:10:44:fe:27:78:8e:7d:0b:08:4b:0e:af:5a: ac:e2:93:02:8b:c6:4f:21:53:a4:d7:22:25:38:41: f7:7f:4b:66:78:a7:d2:9b:95:e9:2b:22:79:34:43: 04:90:99:7e:98:1f:cf:f7:ee:a3:70:42:fc:14:73: d1:7a:b8:64:13:69:20:dd:40:09:ee:3c:a3:50:d8: 14:9f:60:d5:8c:b6:05:a9:a9:25:c9:f3:ec:6d:3c: 45:c4:fd:28:1e:af:51:43:41:de:ce:e6:11:0d:bd: 62:27:cb:ff:e1:91:0a:05:6d:64:13:aa:b6:6d:ce: 9e:e4:f3:1a:33:6e:82:14:d6:58:9b:c1:20:2a:bf: 53:38:09:ac:3e:df:8b:07:42:d7:86:d9:93:e8:a2: 92:58:91:fb:59:7b:a0:65:c7:39:fb:f4:d0:bb:bb: c5:10:88:92:8b:71:1f:c6:71:09:65:0e:7f:fd:ab: 9a:0f:ff:f2:e3:f1:dc:11:b5:c1:6c:0c:c0:56:a8: 63:2f:48:58:c1:0d:68:93:8e:9f:71:94:a5:cf:24: ff:0c:8b:fc:e6:49:4c:55:9a:98:55:6d:81:06:07: 9b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:39:59:7E:5B:42:87:50:78:F1:7A:1C:15:25:4F:CA:67:A0:2D:C9 X509v3 Authority Key Identifier: keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/zDlZfltCh1B48XocFSVPymegLck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.107.121.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:4d:8c:d1:53:e1:b4:73:26:ee:ac:9b:78:e0:45:3a:45:14: 1d:d3:0c:3e:60:66:60:fe:04:fa:58:1f:d7:5d:6b:e4:a1:74: 1b:8c:02:14:d8:93:ad:5c:fe:9a:7c:e5:73:12:96:16:67:e6: 7c:ac:5d:19:45:ba:d0:df:2a:a3:70:81:bf:b0:aa:70:ac:7d: 52:3d:2e:73:bb:97:1b:b1:82:b3:be:12:7d:c5:01:7c:1e:03: f6:72:df:de:4a:1a:7a:a9:36:ca:fe:ac:f9:e2:99:d2:9e:1a: 32:26:16:61:64:af:3b:1f:ec:20:03:14:df:87:d7:58:fb:3b: e4:51:4a:9a:ea:89:5c:27:74:58:13:57:92:a6:0f:4a:06:0f: 4f:e0:14:64:54:2d:c5:cb:13:9e:40:58:72:f8:90:ea:06:db: 91:ed:32:59:42:d6:f4:89:df:17:5c:4e:b5:ca:2a:07:e3:42: 1e:ed:08:a9:46:75:db:d0:e6:24:90:24:b4:0c:5f:0c:58:6b: 6c:be:52:0a:98:f0:84:bd:11:b2:9f:c4:c0:7c:34:89:a5:a6: d7:4f:af:eb:9a:ec:62:06:7e:63:4b:ef:58:8e:f2:dc:dc:1f: 25:53:a1:7e:62:9b:82:77:cd:e4:31:75:98:b6:df:78:45:94: 37:0c:b0:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1YwgU4CCQOYWvYM04QfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNjQxMmM1ZGRmMTI4ZWM3MTRhZmFlYTQ4M2U4N2IxYmM3 NGQ0MWYwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzM5NTk3ZTViNDI4NzUwNzhmMTdhMWMxNTI1NGZjYTY3YTAyZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S86R58Oo4C63SaSnGPV+yf+byU3 z201OlR4pZF5fRBE/id4jn0LCEsOr1qs4pMCi8ZPIVOk1yIlOEH3f0tmeKfSm5Xp KyJ5NEMEkJl+mB/P9+6jcEL8FHPRerhkE2kg3UAJ7jyjUNgUn2DVjLYFqaklyfPs bTxFxP0oHq9RQ0HezuYRDb1iJ8v/4ZEKBW1kE6q2bc6e5PMaM26CFNZYm8EgKr9T OAmsPt+LB0LXhtmT6KKSWJH7WXugZcc5+/TQu7vFEIiSi3EfxnEJZQ5//auaD//y 4/HcEbXBbAzAVqhjL0hYwQ1ok46fcZSlzyT/DIv85klMVZqYVW2BBgebtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMw5WX5bQodQePF6HBUlT8pnoC3JMB8GA1UdIwQY MBaAFN9kEsXd8SjscUr66kg+h7G8dNQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDct Zjk1MDQyMGI5ZTA2LzEvekRsWmZsdENoMUI0OFhvY0ZTVlB5bWVnTGNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDctZjk1MDQyMGI5ZTA2 LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmt5MA0G CSqGSIb3DQEBCwUAA4IBAQBfTYzRU+G0cyburJt44EU6RRQd0ww+YGZg/gT6WB/X XWvkoXQbjAIU2JOtXP6afOVzEpYWZ+Z8rF0ZRbrQ3yqjcIG/sKpwrH1SPS5zu5cb sYKzvhJ9xQF8HgP2ct/eShp6qTbK/qz54pnSnhoyJhZhZK87H+wgAxTfh9dY+zvk UUqa6olcJ3RYE1eSpg9KBg9P4BRkVC3FyxOeQFhy+JDqBtuR7TJZQtb0id8XXE61 yioH40Ie7QipRnXb0OYkkCS0DF8MWGtsvlIKmPCEvRGyn8TAfDSJpabXT6/rmuxi Bn5jS+9YjvLc3B8lU6F+YpuCd83kMXWYtt94RZQ3DLC4 -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:24 2026 by rpki-client