This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/dZFOf_4rHWP0daflfl4Ux8b9Boc.roa File: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (raw, json) Hash identifier: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY= Subject key identifier: 75:91:4E:7F:FE:2B:1D:63:F4:75:A7:E5:7E:5E:14:C7:C6:FD:06:87 Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8 Certificate serial: 019B7DC9435AF68B76C265EA47C68E565DE0 Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/dZFOf_4rHWP0daflfl4Ux8b9Boc.roa Signing time: Fri 02 Jan 2026 08:18:20 +0000 ROA not before: Fri 02 Jan 2026 08:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211709 IP address blocks: 188.125.162.0/24 maxlen: 24 193.3.41.0/24 maxlen: 24 193.162.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:43:5a:f6:8b:76:c2:65:ea:47:c6:8e:56:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8 Validity Not Before: Jan 2 08:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75914e7ffe2b1d63f475a7e57e5e14c7c6fd0687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:2a:53:bc:a6:da:47:b6:6c:e9:80:9b:dd: 26:85:e0:30:f9:f5:2e:93:98:c5:8a:3f:ad:d7:61: 31:fb:63:b1:52:a9:09:d0:ae:b5:49:fd:f3:77:2b: 6f:e9:b9:81:3d:58:63:9a:d0:33:8b:00:da:4f:2e: bb:0b:7c:23:9f:a5:8c:1e:04:fd:df:b3:12:b2:89: 70:a5:3a:ed:3a:e3:ee:e5:38:18:30:77:09:b4:fe: 99:70:5f:ea:39:81:71:75:ec:26:8a:17:ef:fb:62: 9d:28:0a:a9:1a:73:0b:9f:02:45:13:11:4e:00:05: 45:d0:04:02:7b:d8:a6:9b:86:c9:72:ca:df:4f:d4: 15:05:16:49:28:e5:6f:be:38:50:f8:c9:13:43:1b: dc:fa:5c:28:b3:34:e2:f8:66:c5:79:68:1f:33:a9: c7:14:9d:0b:26:89:79:86:b7:6b:b4:c0:7b:10:a4: a0:22:22:17:31:d5:c8:a4:9a:86:31:12:76:ec:a2: ed:f7:ad:0a:1b:92:df:73:bd:a1:d3:f8:ff:16:b9: d0:c7:a6:b8:b7:e7:b9:e6:a0:09:91:9b:9e:a9:6e: 12:7c:b8:17:40:5b:b7:a6:2a:f7:8a:32:a6:ab:25: 7f:c6:d6:9b:f6:0e:55:b3:cd:f7:55:d9:ac:48:70: 96:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:91:4E:7F:FE:2B:1D:63:F4:75:A7:E5:7E:5E:14:C7:C6:FD:06:87 X509v3 Authority Key Identifier: keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/dZFOf_4rHWP0daflfl4Ux8b9Boc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.125.162.0/24 193.3.41.0/24 193.162.105.0/24 Signature Algorithm: sha256WithRSAEncryption 65:3f:16:87:27:f7:a1:79:88:bd:5d:47:ba:6a:c1:3d:d2:6c: 0d:38:c6:54:e1:ec:db:f8:82:72:f3:75:3a:3e:7e:11:21:3d: 62:68:18:f6:33:99:aa:e7:2e:5c:cd:46:b0:f3:2c:46:44:9a: 7f:87:9c:39:eb:37:16:c6:dc:b2:9e:07:83:f8:46:85:dd:5a: 81:10:f3:d0:af:c8:3a:91:a9:c8:43:ff:5d:1e:8b:55:76:d4: bf:4c:75:8a:ca:62:e6:e9:de:ef:82:c8:2a:6b:71:30:67:f0: bf:53:d4:8f:4d:37:e4:9d:0a:eb:44:fa:c9:c7:bb:31:ad:db: 69:67:62:e7:d9:9e:70:87:de:99:fb:70:84:ce:99:ee:5f:67: e0:b2:87:cf:53:20:95:90:6b:ce:c9:1b:3e:0c:8b:89:33:8e: 0b:cd:5f:1b:01:b7:00:3f:99:8b:51:06:59:cc:f2:aa:07:f7: db:20:fa:94:fa:53:9f:ee:d2:e7:74:d1:0c:7e:c0:8b:f6:7e: e6:0e:f9:96:5d:46:59:55:87:4a:17:26:dd:0d:7b:92:8d:b9: f7:fe:f3:3a:ce:ff:b1:5f:13:6f:b7:95:0d:e5:e3:e1:30:72: c0:cf:f6:24:fc:fc:19:b1:e6:33:30:2d:49:cf:b8:c9:74:38: d5:cb:6f:eb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yUNa9ot2wmXqR8aOVl3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz NGRiZTgwHhcNMjYwMTAyMDgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTkxNGU3ZmZlMmIxZDYzZjQ3NWE3ZTU3ZTVlMTRjN2M2ZmQwNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovMqU7ym2ke2bOmAm90mheAw+fUu k5jFij+t12Ex+2OxUqkJ0K61Sf3zdytv6bmBPVhjmtAziwDaTy67C3wjn6WMHgT9 37MSsolwpTrtOuPu5TgYMHcJtP6ZcF/qOYFxdewmihfv+2KdKAqpGnMLnwJFExFO AAVF0AQCe9imm4bJcsrfT9QVBRZJKOVvvjhQ+MkTQxvc+lwoszTi+GbFeWgfM6nH FJ0LJol5hrdrtMB7EKSgIiIXMdXIpJqGMRJ27KLt960KG5Lfc72h0/j/FrnQx6a4 t+e55qAJkZueqW4SfLgXQFu3pir3ijKmqyV/xtab9g5Vs833VdmsSHCWUQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHWRTn/+Kx1j9HWn5X5eFMfG/QaHMB8GA1UdIwQY MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt NmNiMmUwMmNhZWYyLzEvZFpGT2ZfNHJIV1AwZGFmbGZsNFV4OGI5Qm9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvH2iAwQA wQMpAwQAwaJpMA0GCSqGSIb3DQEBCwUAA4IBAQBlPxaHJ/eheYi9XUe6asE90mwN OMZU4ezb+IJy83U6Pn4RIT1iaBj2M5mq5y5czUaw8yxGRJp/h5w56zcWxtyyngeD +EaF3VqBEPPQr8g6kanIQ/9dHotVdtS/THWKymLm6d7vgsgqa3EwZ/C/U9SPTTfk nQrrRPrJx7sxrdtpZ2Ln2Z5wh96Z+3CEzpnuX2fgsofPUyCVkGvOyRs+DIuJM44L zV8bAbcAP5mLUQZZzPKqB/fbIPqU+lOf7tLndNEMfsCL9n7mDvmWXUZZVYdKFybd DXuSjbn3/vM6zv+xXxNvt5UN5ePhMHLAz/Yk/PwZseYzMC1Jz7jJdDjVy2/r -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:49 2026 by rpki-client