This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/sZtX_TR_yFxgTOzYH4PEJ3Ql9XY.roa File: sZtX_TR_yFxgTOzYH4PEJ3Ql9XY.roa (raw, json) Hash identifier: W/MQGBKbXxcpb0fgJqS7ufdVgzl0yD0EsDfR255WBk0= Subject key identifier: B1:9B:57:FD:34:7F:C8:5C:60:4C:EC:D8:1F:83:C4:27:74:25:F5:76 Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019BB2B5BFDA3610D9B37D2904580500F6F4 Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/sZtX_TR_yFxgTOzYH4PEJ3Ql9XY.roa Signing time: Mon 12 Jan 2026 14:56:54 +0000 ROA not before: Mon 12 Jan 2026 14:56:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7361 IP address blocks: 195.72.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:b5:bf:da:36:10:d9:b3:7d:29:04:58:05:00:f6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Jan 12 14:56:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b19b57fd347fc85c604cecd81f83c4277425f576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:fa:e0:ae:fb:47:a4:5e:7f:dd:e2:54:ad: 4f:34:f9:6d:71:7e:83:94:37:40:2e:6c:d7:39:be: 34:41:6b:89:e2:64:d7:a1:8f:54:95:ed:11:ea:c5: ab:c6:54:bd:3c:3e:e3:30:ad:76:6a:85:71:6c:9a: 31:11:1b:1a:d7:94:7e:c8:8c:57:c9:36:01:e8:37: 26:f7:b2:ba:9a:ed:27:1c:1e:f2:03:96:ad:89:bf: 26:9e:06:bd:ad:11:81:e9:56:e6:b4:74:00:aa:01: ac:7f:41:f3:95:32:a7:37:bf:3d:b9:8f:66:64:df: 95:b5:a0:73:dd:03:e1:47:58:ed:73:a9:e9:9c:52: a4:0d:f4:ec:98:45:51:85:88:ae:3a:49:d4:a8:b7: 35:8a:70:fd:91:a2:43:21:69:18:aa:42:09:37:0a: e1:8b:70:eb:0f:cd:fb:27:bf:4c:61:8a:79:b4:a5: 8a:e8:60:05:49:77:12:5a:13:cc:ac:61:b6:c6:f8: 78:70:8a:9e:8a:45:86:0c:dd:bd:fc:98:51:42:ce: af:cd:70:21:d2:ac:59:9b:8b:db:4c:58:d3:9a:a1: 68:85:98:e7:7a:db:32:52:f1:29:be:91:21:e4:90: dd:b8:ae:b8:78:52:ce:fc:44:89:c0:fc:56:f5:06: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9B:57:FD:34:7F:C8:5C:60:4C:EC:D8:1F:83:C4:27:74:25:F5:76 X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/sZtX_TR_yFxgTOzYH4PEJ3Ql9XY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.72.32.0/24 Signature Algorithm: sha256WithRSAEncryption 59:ac:70:09:f7:89:f1:05:4b:a4:b3:a0:7d:d8:20:29:51:85: ed:dd:dc:f4:21:75:91:a4:56:18:df:b7:a2:c6:4e:6f:b0:06: e2:50:40:dc:00:40:b8:67:4e:3e:86:15:75:9e:ba:46:e6:8d: d8:29:bc:1d:35:c6:a8:71:21:cc:84:29:5b:c8:ac:2b:08:50: 84:0e:61:94:b7:7a:65:5b:e4:ef:2c:03:91:c2:b9:ea:18:69: fc:46:19:85:d8:12:d0:0d:34:6b:22:8b:4f:8c:94:8a:5c:96: ba:60:8a:5e:8e:66:9c:20:7e:03:13:40:e2:c7:c3:26:3e:f2: 7e:a9:40:af:21:ab:d5:89:c1:41:64:24:d8:7a:c7:ac:13:bb: be:8f:9a:4c:32:ca:9e:8b:9b:c3:09:76:a7:39:ec:e4:0d:c0: 2f:14:d5:d2:32:97:8f:4a:3b:05:a7:06:ad:10:d5:b2:d0:e1: 94:62:9f:8b:a3:05:0b:9f:1c:3f:6a:e9:6b:f4:3d:1f:92:c9: 87:32:4a:ca:8c:a1:af:c8:be:cf:43:91:06:a5:9f:5c:4b:60: 77:f8:c7:d5:f6:7d:9b:27:27:6d:a6:76:b6:7c:6d:2c:1a:97: d5:27:08:d4:7a:df:26:fc:e2:ba:cd:c7:eb:81:4e:12:53:d6: 48:f4:b9:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuytb/aNhDZs30pBFgFAPb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjYwMTEyMTQ1NjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTliNTdmZDM0N2ZjODVjNjA0Y2VjZDgxZjgzYzQyNzc0MjVmNTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzz64K77R6Ref93iVK1PNPltcX6D lDdALmzXOb40QWuJ4mTXoY9Ule0R6sWrxlS9PD7jMK12aoVxbJoxERsa15R+yIxX yTYB6Dcm97K6mu0nHB7yA5atib8mnga9rRGB6VbmtHQAqgGsf0HzlTKnN789uY9m ZN+VtaBz3QPhR1jtc6npnFKkDfTsmEVRhYiuOknUqLc1inD9kaJDIWkYqkIJNwrh i3DrD837J79MYYp5tKWK6GAFSXcSWhPMrGG2xvh4cIqeikWGDN29/JhRQs6vzXAh 0qxZm4vbTFjTmqFohZjnetsyUvEpvpEh5JDduK64eFLO/ESJwPxW9QaXEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGbV/00f8hcYEzs2B+DxCd0JfV2MB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvc1p0WF9UUl95RnhnVE96WUg0UEVKM1FsOVhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0ggMA0G CSqGSIb3DQEBCwUAA4IBAQBZrHAJ94nxBUuks6B92CApUYXt3dz0IXWRpFYY37ei xk5vsAbiUEDcAEC4Z04+hhV1nrpG5o3YKbwdNcaocSHMhClbyKwrCFCEDmGUt3pl W+TvLAORwrnqGGn8RhmF2BLQDTRrIotPjJSKXJa6YIpejmacIH4DE0Dix8MmPvJ+ qUCvIavVicFBZCTYesesE7u+j5pMMsqei5vDCXanOezkDcAvFNXSMpePSjsFpwat ENWy0OGUYp+LowULnxw/aulr9D0fksmHMkrKjKGvyL7PQ5EGpZ9cS2B3+MfV9n2b Jydtpna2fG0sGpfVJwjUet8m/OK6zcfrgU4SU9ZI9Lm/ -----END CERTIFICATE-----Generated at Sun Jan 25 10:53:08 2026 by rpki-client