This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa File: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (raw, json) Hash identifier: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE= Subject key identifier: 64:6E:6B:B6:CD:99:93:23:89:49:09:92:79:EE:3C:BF:D1:73:AA:B8 Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Certificate serial: 019B77C6B8EB452236EC82E7C5FA86EBF462 Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5408 IP address blocks: 193.218.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b8:eb:45:22:36:ec:82:e7:c5:fa:86:eb:f4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=646e6bb6cd9993238949099279ee3cbfd173aab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:56:df:81:1e:ee:f8:d8:df:1c:26:2a:2d: 60:43:bd:00:67:79:e2:a4:e4:67:5a:b9:b1:f4:a4: cc:3d:64:b4:c6:8c:20:6a:6c:a3:86:98:66:5e:f2: 81:d4:16:6b:03:7b:17:a8:ef:44:d9:80:bb:2d:cf: 88:6e:0a:4d:12:c9:0d:ed:52:72:bb:c0:09:64:20: ca:e0:91:63:7c:4c:52:4b:d0:34:f6:a5:47:d2:8b: 18:9b:36:42:02:c5:1f:fd:60:c0:ee:16:8d:d6:c2: af:0e:a8:81:9e:4c:ea:ae:7c:c7:5c:b2:92:90:dc: f6:d6:de:52:b8:bd:0c:4d:76:71:5c:17:2f:2e:2f: 9e:60:05:61:ee:70:e0:9b:63:bc:ce:00:e4:fc:ab: 1f:67:0e:c7:80:87:b4:ff:0d:47:01:59:fb:db:91: e3:6b:d5:f2:9f:00:12:3c:36:16:e3:80:15:d5:ce: d8:4e:6f:2c:17:88:62:eb:01:72:76:11:34:98:f5: ef:50:db:fc:1d:61:89:f9:c9:3a:cf:38:e9:9c:89: 8f:24:9e:ef:23:39:71:c9:96:e1:2c:af:cf:a4:c3: 88:69:59:47:51:7a:b3:36:4a:27:19:e3:a9:74:8f: 68:8e:be:14:34:36:14:ca:8b:08:c2:d3:26:ff:60: a9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6E:6B:B6:CD:99:93:23:89:49:09:92:79:EE:3C:BF:D1:73:AA:B8 X509v3 Authority Key Identifier: keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.36.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:8e:96:68:86:1f:87:59:1a:c8:d4:26:91:31:cb:b6:63:e7: 28:4b:4d:3b:57:35:e7:c3:7d:cf:fd:6e:2f:ff:32:7a:56:19: b3:4b:65:1d:09:dd:a8:7b:6f:ec:58:b8:48:b5:2c:8e:05:3e: f3:ed:54:bb:21:b4:68:c4:b6:aa:be:e2:28:b1:32:59:98:71: 8f:f8:9b:64:7b:5b:8e:f5:3f:d3:90:1a:2a:26:fc:bc:5a:49: 24:8f:de:db:f0:b3:6b:25:02:52:fd:ee:e8:b9:c7:8f:0b:3b: 1b:8a:c7:11:78:31:89:78:5f:51:65:37:28:7f:99:2f:13:29: 5e:ce:b8:c6:4f:13:2e:69:d5:69:50:e0:23:f2:0d:bb:44:b5: a6:09:09:60:dd:ba:ed:d9:6f:f3:eb:9d:83:db:3a:e9:34:13: 36:b8:0e:6a:eb:84:3f:1a:b4:55:a9:ac:6f:89:03:17:c3:57: b0:ac:54:d6:e9:85:78:76:4d:f0:de:94:8b:1f:03:be:7f:56: 17:c4:56:c6:14:21:6e:ee:fe:a8:cb:69:5f:c2:78:fe:5a:a5: f1:89:51:01:e5:47:2a:ff:93:7f:a2:12:e2:ee:a9:cf:19:0b: 7c:67:1e:7e:10:de:97:9a:d3:a4:6e:47:ba:ca:c5:7e:1d:79: 52:84:1e:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrjrRSI27ILnxfqG6/RiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk YmNiYmMwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDZlNmJiNmNkOTk5MzIzODk0OTA5OTI3OWVlM2NiZmQxNzNhYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEpW34Ee7vjY3xwmKi1gQ70AZ3ni pORnWrmx9KTMPWS0xowgamyjhphmXvKB1BZrA3sXqO9E2YC7Lc+IbgpNEskN7VJy u8AJZCDK4JFjfExSS9A09qVH0osYmzZCAsUf/WDA7haN1sKvDqiBnkzqrnzHXLKS kNz21t5SuL0MTXZxXBcvLi+eYAVh7nDgm2O8zgDk/KsfZw7HgIe0/w1HAVn725Hj a9XynwASPDYW44AV1c7YTm8sF4hi6wFydhE0mPXvUNv8HWGJ+ck6zzjpnImPJJ7v IzlxyZbhLK/PpMOIaVlHUXqzNkonGeOpdI9ojr4UNDYUyosIwtMm/2CpjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGRua7bNmZMjiUkJknnuPL/Rc6q4MB8GA1UdIwQY MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt ZGQxNDJhMTMzNWYwLzEvWkc1cnRzMlpreU9KU1FtU2VlNDh2OUZ6cXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwdokMA0G CSqGSIb3DQEBCwUAA4IBAQCajpZohh+HWRrI1CaRMcu2Y+coS007VzXnw33P/W4v /zJ6VhmzS2UdCd2oe2/sWLhItSyOBT7z7VS7IbRoxLaqvuIosTJZmHGP+Jtke1uO 9T/TkBoqJvy8Wkkkj97b8LNrJQJS/e7oucePCzsbiscReDGJeF9RZTcof5kvEyle zrjGTxMuadVpUOAj8g27RLWmCQlg3brt2W/z652D2zrpNBM2uA5q64Q/GrRVqaxv iQMXw1ewrFTW6YV4dk3w3pSLHwO+f1YXxFbGFCFu7v6oy2lfwnj+WqXxiVEB5Ucq /5N/ohLi7qnPGQt8Zx5+EN6XmtOkbke6ysV+HXlShB7X -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:52 2026 by rpki-client