This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZJ7qyLf1uflJv0UE31f7DogP9kY.roa File: ZJ7qyLf1uflJv0UE31f7DogP9kY.roa (raw, json) Hash identifier: CHjJnDb5O+JB6HzDIm8z86a9jxNfN2t1h10rf75Njzw= Subject key identifier: 64:9E:EA:C8:B7:F5:B9:F9:49:BF:45:04:DF:57:FB:0E:88:0F:F6:46 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019BDB239A79D41ABC28B3E55D07369EEDC0 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZJ7qyLf1uflJv0UE31f7DogP9kY.roa Signing time: Tue 20 Jan 2026 11:21:41 +0000 ROA not before: Tue 20 Jan 2026 11:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 194.143.207.0/24 maxlen: 24 213.220.14.0/24 maxlen: 24 213.220.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:23:9a:79:d4:1a:bc:28:b3:e5:5d:07:36:9e:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 20 11:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=649eeac8b7f5b9f949bf4504df57fb0e880ff646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:bd:4c:b3:a8:0c:7d:eb:d5:df:39:ff:ef: f5:72:ed:ef:81:e1:ba:36:1a:b7:3d:4b:0c:45:c2: 94:8e:56:1f:51:f5:84:15:b5:a2:60:c4:65:97:1a: 04:f3:ac:44:c4:22:de:74:a7:68:aa:42:1d:ae:d8: be:70:74:fb:93:f8:d7:9e:4f:75:f2:ed:eb:74:8b: f3:39:ae:4a:ac:04:ad:ca:b6:ee:63:6c:2e:6a:5a: 0a:b1:e3:c8:d9:79:6b:5d:dc:27:ac:63:11:31:54: 2a:ca:61:45:f2:96:89:b2:73:17:4f:41:36:75:af: bc:13:fa:d3:5d:11:f2:93:15:77:8d:7e:6a:80:2f: 29:40:3c:ff:8a:c8:7f:d9:69:7c:46:ff:8c:56:ec: 8e:c7:09:74:28:40:60:a5:b4:bc:96:ba:3f:76:1c: 9e:93:a1:a2:e4:56:3d:0b:00:f0:0a:13:5f:68:b2: a8:b4:3c:41:8a:f7:50:3a:fa:9e:54:90:8e:65:17: f0:4c:d0:bd:a0:e5:95:0f:b8:d4:e4:dd:c7:19:ad: e6:02:98:fd:09:75:e0:76:e1:6c:5e:0b:e4:dd:fb: 64:14:b2:22:2b:e7:43:a1:9f:0e:6d:e4:f3:a3:23: 33:24:fe:67:8d:bd:db:7b:11:30:3f:91:5f:08:b1: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9E:EA:C8:B7:F5:B9:F9:49:BF:45:04:DF:57:FB:0E:88:0F:F6:46 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZJ7qyLf1uflJv0UE31f7DogP9kY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.143.207.0/24 213.220.14.0/24 213.220.18.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:df:75:bd:ee:ef:7f:dd:33:28:76:05:68:80:88:68:3d:20: 90:5a:aa:37:c1:a3:df:66:c0:4b:a2:e6:d9:d3:d9:51:4e:03: 12:0f:2d:65:80:2a:76:04:db:dc:f8:78:7d:f1:02:6f:90:40: d1:f0:bc:c8:4d:14:70:52:97:af:e8:58:0a:49:72:bd:d7:0c: 31:13:08:51:df:31:5d:4b:bc:26:f3:45:36:02:79:21:0b:80: ee:bb:1d:c4:ad:52:3c:7d:55:61:b1:15:d6:95:b6:81:c7:b6: 81:d8:44:8a:11:01:95:55:62:58:2d:0b:59:44:0a:3e:42:71: d9:32:e4:cc:8a:37:1b:64:04:a3:45:8f:b7:1a:cb:69:e5:a2: c3:26:44:63:a8:d2:db:e9:b4:5a:92:df:54:79:97:fe:2c:ae: 90:95:8b:e0:e0:a1:f6:3b:2c:96:e6:2c:80:b9:00:27:2c:6b: 47:ac:40:3a:26:fd:de:11:8e:bd:85:f0:c6:c2:1b:e6:f9:66: d9:6e:64:10:08:23:a1:90:d3:ad:2a:8b:5d:d6:96:a1:57:07: 3c:34:b0:b6:fa:9d:c0:29:b4:fd:9e:a0:62:37:df:bc:14:22: 46:6e:1e:b4:cc:57:96:de:95:6d:e9:4a:5b:52:d2:3e:61:ce: 53:01:0e:6b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvbI5p51Bq8KLPlXQc2nu3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTIwMTEyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDllZWFjOGI3ZjViOWY5NDliZjQ1MDRkZjU3ZmIwZTg4MGZmNjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwa9TLOoDH3r1d85/+/1cu3vgeG6 Nhq3PUsMRcKUjlYfUfWEFbWiYMRllxoE86xExCLedKdoqkIdrti+cHT7k/jXnk91 8u3rdIvzOa5KrAStyrbuY2wualoKsePI2XlrXdwnrGMRMVQqymFF8paJsnMXT0E2 da+8E/rTXRHykxV3jX5qgC8pQDz/ish/2Wl8Rv+MVuyOxwl0KEBgpbS8lro/dhye k6Gi5FY9CwDwChNfaLKotDxBivdQOvqeVJCOZRfwTNC9oOWVD7jU5N3HGa3mApj9 CXXgduFsXgvk3ftkFLIiK+dDoZ8ObeTzoyMzJP5njb3bexEwP5FfCLHYYQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGSe6si39bn5Sb9FBN9X+w6ID/ZGMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvWko3cXlMZjF1ZmxKdjBVRTMxZjdEb2dQOWtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwo/PAwQA 1dwOAwQA1dwSMA0GCSqGSIb3DQEBCwUAA4IBAQCc33W97u9/3TModgVogIhoPSCQ Wqo3waPfZsBLoubZ09lRTgMSDy1lgCp2BNvc+Hh98QJvkEDR8LzITRRwUpev6FgK SXK91wwxEwhR3zFdS7wm80U2AnkhC4Duux3ErVI8fVVhsRXWlbaBx7aB2ESKEQGV VWJYLQtZRAo+QnHZMuTMijcbZASjRY+3Gstp5aLDJkRjqNLb6bRakt9UeZf+LK6Q lYvg4KH2OyyW5iyAuQAnLGtHrEA6Jv3eEY69hfDGwhvm+WbZbmQQCCOhkNOtKotd 1pahVwc8NLC2+p3AKbT9nqBiN9+8FCJGbh60zFeW3pVt6UpbUtI+Yc5TAQ5r -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:36 2026 by rpki-client