This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa File: ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa (raw, json) Hash identifier: bAXAo9VS32osXOlNSknnXOi501Vm+Z7vmbwaL73CoDc= Subject key identifier: 64:95:A1:5F:FB:07:12:3B:3D:EE:AC:84:59:E0:B2:EC:92:D7:9E:AC Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51 Certificate serial: 019B7F14FD6BB20FD23A344B07EA9800299E Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa Signing time: Fri 02 Jan 2026 14:20:40 +0000 ROA not before: Fri 02 Jan 2026 14:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202637 IP address blocks: 193.239.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fd:6b:b2:0f:d2:3a:34:4b:07:ea:98:00:29:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51 Validity Not Before: Jan 2 14:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6495a15ffb07123b3deeac8459e0b2ec92d79eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:da:53:16:4d:9a:2a:ff:ca:48:7a:15:b5: 61:d1:cc:ed:50:0a:ee:a5:62:64:b7:4b:6e:30:bc: 7e:61:4a:24:03:47:2d:45:23:4d:10:c6:93:9b:4b: 59:dc:34:ad:87:27:a0:ee:97:1d:c7:4d:f8:97:5e: fa:0c:62:12:2b:37:a5:6c:1e:dd:a9:7f:16:90:3e: 31:de:0e:e6:6e:d1:f3:cc:34:2f:ea:ea:35:8c:a7: ab:9c:1d:9c:d1:09:0b:e2:a4:4f:1d:00:6f:6c:28: 21:22:f0:9a:94:83:f6:57:d9:1d:f4:40:8d:47:7b: cc:22:11:9d:43:93:ce:3b:d6:ae:82:60:dc:c8:80: b2:a8:eb:16:38:d0:a2:ed:26:5b:94:6e:f8:71:5b: 79:97:8a:ba:f6:94:5b:60:37:a4:dc:fd:9a:2c:82: 41:ad:6b:3c:55:95:bb:bd:a6:f2:ae:1a:1f:a0:52: 7a:71:a2:e8:95:38:53:ac:e0:2f:ba:37:8b:f7:ce: 8a:60:31:de:bc:a6:bd:0a:09:e7:c8:ea:8e:77:3f: eb:b9:a5:f5:3a:33:50:f8:58:05:93:05:a4:45:7b: 93:d8:d9:34:a1:92:2e:c6:44:bc:c8:75:66:c9:3e: 6f:5c:df:34:ed:6c:02:af:15:8a:82:00:c7:18:94: e4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:95:A1:5F:FB:07:12:3B:3D:EE:AC:84:59:E0:B2:EC:92:D7:9E:AC X509v3 Authority Key Identifier: keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.218.0/23 Signature Algorithm: sha256WithRSAEncryption a0:e2:aa:97:da:68:37:9b:50:02:e2:2e:b5:b3:91:f9:bc:ba: ee:d6:58:85:59:ed:2f:e0:98:c6:7d:96:65:c4:fb:74:2c:aa: 68:5d:fc:18:44:6e:67:f9:a7:82:93:b8:ca:76:fe:98:16:91: 08:ac:b0:b4:a4:77:76:9a:53:04:48:02:f6:fd:48:37:67:b0: 02:3a:8e:02:84:68:ea:83:bd:18:96:0d:cb:f1:f9:ea:40:40: 81:1f:a4:c8:b6:cd:c1:a2:a0:c3:d3:50:f9:71:04:19:5e:96: bc:c3:01:84:1c:bf:2e:d3:cf:b5:e7:f7:8d:a5:45:9d:a2:cb: 35:89:bc:de:d8:12:99:1b:74:89:b4:53:ac:55:22:e5:08:b8: 2d:97:fa:d4:45:b1:0b:4c:a3:c1:89:66:53:14:48:ac:36:6e: 5f:f8:1f:7d:09:9b:ea:38:36:44:b8:7d:86:2a:10:1c:82:2c: 95:f2:cd:c3:91:cb:b1:b3:53:0b:9d:f7:b5:79:2b:f8:18:f0: a9:5a:77:ea:bc:31:41:2d:d5:17:7d:5c:8c:25:5b:35:9d:ce: 36:f7:13:9f:22:f0:00:3b:15:ab:4f:47:51:ce:46:04:3f:df: 9e:c3:5f:a0:64:97:68:70:ad:ad:78:70:67:5f:7c:68:71:48: 29:73:c6:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FP1rsg/SOjRLB+qYACmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzUxMTNmZDRiZmJkMzhiMTA0Mzg0M2MzMDkyNmExMTBj YzBmNTEwHhcNMjYwMTAyMTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDk1YTE1ZmZiMDcxMjNiM2RlZWFjODQ1OWUwYjJlYzkyZDc5ZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ATaUxZNmir/ykh6FbVh0cztUAru pWJkt0tuMLx+YUokA0ctRSNNEMaTm0tZ3DSthyeg7pcdx034l176DGISKzelbB7d qX8WkD4x3g7mbtHzzDQv6uo1jKernB2c0QkL4qRPHQBvbCghIvCalIP2V9kd9ECN R3vMIhGdQ5POO9augmDcyICyqOsWONCi7SZblG74cVt5l4q69pRbYDek3P2aLIJB rWs8VZW7vabyrhofoFJ6caLolThTrOAvujeL986KYDHevKa9CgnnyOqOdz/ruaX1 OjNQ+FgFkwWkRXuT2Nk0oZIuxkS8yHVmyT5vXN807WwCrxWKggDHGJTkEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGSVoV/7BxI7Pe6shFngsuyS156sMB8GA1UdIwQY MBaAFMN1ET/Uv704sQQ4Q8MJJqEQzA9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNVUlA5U192VGl4QkRoRHd3a21vUkRNRDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjljNzgtNmVkZS00MGRmLTg5YzEt Nzk3MjVmYTJlMTMzLzEvWkpXaFhfc0hFanM5N3F5RVdlQ3k3SkxYbnF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZjljNzgtNmVkZS00MGRmLTg5YzEtNzk3MjVmYTJlMTMz LzEvdzNVUlA5U192VGl4QkRoRHd3a21vUkRNRDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe/aMA0G CSqGSIb3DQEBCwUAA4IBAQCg4qqX2mg3m1AC4i61s5H5vLru1liFWe0v4JjGfZZl xPt0LKpoXfwYRG5n+aeCk7jKdv6YFpEIrLC0pHd2mlMESAL2/Ug3Z7ACOo4ChGjq g70Ylg3L8fnqQECBH6TIts3BoqDD01D5cQQZXpa8wwGEHL8u08+15/eNpUWdoss1 ibze2BKZG3SJtFOsVSLlCLgtl/rURbELTKPBiWZTFEisNm5f+B99CZvqODZEuH2G KhAcgiyV8s3Dkcuxs1MLnfe1eSv4GPCpWnfqvDFBLdUXfVyMJVs1nc429xOfIvAA OxWrT0dRzkYEP9+ew1+gZJdocK2teHBnX3xocUgpc8b3 -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:06 2026 by rpki-client