This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/Z8sIth2fuLtbZU5YZYofujl3N3Q.roa File: Z8sIth2fuLtbZU5YZYofujl3N3Q.roa (raw, json) Hash identifier: OuZ+DZI7vPFF2f+5cYLFAwbQ08o0C2E+Uzidod1oA7I= Subject key identifier: 67:CB:08:B6:1D:9F:B8:BB:5B:65:4E:58:65:8A:1F:BA:39:77:37:74 Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0 Certificate serial: 019B7AC8B1A14B8DD06A5AF7364361C0BB85 Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/Z8sIth2fuLtbZU5YZYofujl3N3Q.roa Signing time: Thu 01 Jan 2026 18:18:51 +0000 ROA not before: Thu 01 Jan 2026 18:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29522 IP address blocks: 193.143.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b1:a1:4b:8d:d0:6a:5a:f7:36:43:61:c0:bb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0 Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67cb08b61d9fb8bb5b654e58658a1fba39773774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:7d:0b:d4:5c:71:92:c7:b8:86:e8:b2:2c: 2c:f9:f4:50:44:8e:d4:ee:e3:73:2f:c7:72:42:f5: 12:8a:c6:2a:0d:d9:03:d0:1f:04:bb:c6:2f:3a:da: 3d:fb:3d:c0:a2:de:08:f6:39:cd:f7:ec:1b:a7:ad: 90:74:b1:7d:26:10:20:ac:09:33:37:de:25:2e:a8: 4c:6c:10:24:29:b5:ba:4b:90:87:e6:bf:c2:3f:96: 9b:9d:9e:13:88:da:73:71:1e:09:33:34:72:4b:2c: 8d:cc:67:ed:6c:48:fa:31:f9:7d:55:15:82:13:bf: 83:ef:8a:f6:24:50:d0:31:72:42:8c:37:be:88:82: e9:4f:7a:c3:fa:9c:d2:6c:97:d1:c6:8e:c8:db:6f: 2f:7f:69:4f:40:c2:ca:85:02:64:a6:88:4b:ff:de: 54:c9:21:c5:83:7d:b3:8d:1b:cf:4b:2f:91:71:65: 2d:53:08:04:c2:73:6f:a1:d8:f3:cc:a8:d3:69:28: 82:7e:5a:78:dd:ef:33:84:12:c6:c5:1c:74:54:e5: f5:98:7b:b3:d4:3e:87:04:73:03:5f:00:e1:e3:7a: d4:ca:99:75:53:76:2f:2b:e2:8b:6a:05:f3:f5:cd: 39:9d:03:3a:22:40:1b:a9:03:e9:68:f9:f2:e2:83: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CB:08:B6:1D:9F:B8:BB:5B:65:4E:58:65:8A:1F:BA:39:77:37:74 X509v3 Authority Key Identifier: keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/Z8sIth2fuLtbZU5YZYofujl3N3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.77.0/24 Signature Algorithm: sha256WithRSAEncryption 08:d7:16:a6:9e:0f:cf:4d:b5:46:e5:03:7a:ca:90:b2:ab:8b: 27:f6:50:ad:36:5d:c6:77:8a:4a:a5:b2:a8:36:0e:d5:90:e1: 58:6c:20:56:20:24:2c:31:34:e4:c8:be:c6:5b:29:48:88:d8: 72:d8:fe:eb:2b:44:70:85:f7:ad:8a:da:cc:98:55:95:d3:77: 85:29:f0:83:7f:4c:7f:11:bd:03:66:70:38:a9:ef:74:cf:6c: e6:38:af:e4:6d:8a:c6:7c:6d:c3:43:ac:d4:b3:b1:ca:d6:f1: fc:b1:0f:cb:b2:97:7e:98:ec:30:31:b4:8f:83:a2:d2:15:85: 01:47:2c:fa:97:f7:d3:f8:5a:1c:bf:b0:83:6f:fe:9d:8b:47: 2f:3b:03:f8:96:01:0b:23:c9:c8:9f:f9:6a:de:5d:a4:1f:0a: c1:68:44:92:9f:b7:ae:0d:03:af:08:68:1c:87:2c:6d:42:a8: 7a:37:fb:73:71:6b:be:20:d8:a2:41:24:be:11:82:f6:df:ff: d1:24:fb:29:c7:1d:f3:c1:03:5b:05:e4:35:d0:29:49:84:36: 13:4c:dc:41:e0:0a:ee:83:52:87:af:0e:e5:17:c7:9b:38:53: 1d:00:0b:31:13:34:06:a5:86:2d:88:f8:b3:7c:79:97:c9:b1: d8:17:43:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yLGhS43Qalr3NkNhwLuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MDhmYzkyNDYwNDI3NTExMTBkMmVjNTA2NWQwYzQ3ZDFk NDNjZDAwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2NiMDhiNjFkOWZiOGJiNWI2NTRlNTg2NThhMWZiYTM5NzczNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudx9C9RccZLHuIbosiws+fRQRI7U 7uNzL8dyQvUSisYqDdkD0B8Eu8YvOto9+z3Aot4I9jnN9+wbp62QdLF9JhAgrAkz N94lLqhMbBAkKbW6S5CH5r/CP5abnZ4TiNpzcR4JMzRySyyNzGftbEj6Mfl9VRWC E7+D74r2JFDQMXJCjDe+iILpT3rD+pzSbJfRxo7I228vf2lPQMLKhQJkpohL/95U ySHFg32zjRvPSy+RcWUtUwgEwnNvodjzzKjTaSiCflp43e8zhBLGxRx0VOX1mHuz 1D6HBHMDXwDh43rUypl1U3YvK+KLagXz9c05nQM6IkAbqQPpaPny4oM9dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfLCLYdn7i7W2VOWGWKH7o5dzd0MB8GA1UdIwQY MBaAFKQI/JJGBCdREQ0uxQZdDEfR1DzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2It ZDkyMjQ4YWFiZTJkLzEvWjhzSXRoMmZ1THRiWlU1WVpZb2Z1amwzTjNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2ItZDkyMjQ4YWFiZTJk LzEvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY9NMA0G CSqGSIb3DQEBCwUAA4IBAQAI1xamng/PTbVG5QN6ypCyq4sn9lCtNl3Gd4pKpbKo Ng7VkOFYbCBWICQsMTTkyL7GWylIiNhy2P7rK0RwhfetitrMmFWV03eFKfCDf0x/ Eb0DZnA4qe90z2zmOK/kbYrGfG3DQ6zUs7HK1vH8sQ/Lspd+mOwwMbSPg6LSFYUB Ryz6l/fT+Focv7CDb/6di0cvOwP4lgELI8nIn/lq3l2kHwrBaESSn7euDQOvCGgc hyxtQqh6N/tzcWu+INiiQSS+EYL23//RJPspxx3zwQNbBeQ10ClJhDYTTNxB4Aru g1KHrw7lF8ebOFMdAAsxEzQGpYYtiPizfHmXybHYF0O2 -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:46 2026 by rpki-client