This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/zAswHw6Vrickzre9V5b0_Oc5FMo.roa File: zAswHw6Vrickzre9V5b0_Oc5FMo.roa (raw, json) Hash identifier: XyOQN5GE0dkgUHsqcjfSrT6fM61Ysfdr8lB9FDFYYDs= Subject key identifier: CC:0B:30:1F:0E:95:AE:27:24:CE:B7:BD:57:96:F4:FC:E7:39:14:CA Certificate issuer: /CN=ca707e086640056bc271d5d2b3e24d01440baa04 Certificate serial: 019B7A5B96634F6EA89DF2CA16F860D4D206 Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/zAswHw6Vrickzre9V5b0_Oc5FMo.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400040 IP address blocks: 212.46.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:96:63:4f:6e:a8:9d:f2:ca:16:f8:60:d4:d2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc0b301f0e95ae2724ceb7bd5796f4fce73914ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:46:f6:f2:b2:0f:a4:27:8b:d2:ce:e6:ff:89: 61:33:03:65:e4:30:31:6a:4d:78:36:80:d2:4d:09: dd:7d:a7:d7:ae:36:17:d1:82:48:f5:60:b4:4c:3d: f4:7c:a1:b6:25:38:92:13:bc:00:14:d9:a7:e8:17: 16:da:a0:15:0f:f9:2c:95:97:9b:68:10:5c:6f:c7: 33:b8:55:64:d9:49:e3:4a:65:41:fc:bc:6e:f6:f2: e2:bf:18:90:37:f2:54:48:1d:d8:a6:07:a5:97:75: ab:aa:de:f8:98:84:01:da:2d:68:fa:77:81:dd:39: 33:66:70:ef:a8:d2:d8:14:e5:ab:1f:ff:97:87:c5: c3:70:14:43:bb:cd:22:e0:cf:50:3d:ca:d5:c3:5c: f9:19:51:75:13:c5:e6:ad:85:d4:af:17:8c:47:cd: 5a:e3:d1:28:82:c1:51:db:20:6e:65:67:3d:dd:c2: 23:1b:a3:64:65:fc:47:ee:c9:3d:2f:2b:b8:e0:65: 8b:cf:2e:72:c0:96:5c:59:95:9b:3e:0b:44:c0:61: 77:a8:cb:99:5a:99:e6:8d:a0:b4:08:7d:46:65:93: 1c:c1:4d:db:ba:5b:12:8f:5c:e9:d6:cf:51:d9:79: a5:ed:d4:5b:8d:60:61:d0:04:90:00:45:13:bc:79: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0B:30:1F:0E:95:AE:27:24:CE:B7:BD:57:96:F4:FC:E7:39:14:CA X509v3 Authority Key Identifier: keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/zAswHw6Vrickzre9V5b0_Oc5FMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.46.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:29:c8:28:7c:1e:93:a1:66:55:d4:bd:dc:7b:d2:e6:66:43: a9:79:ea:3f:b4:85:a3:4b:4c:1a:fa:5f:86:ec:8c:15:93:6b: 59:a1:13:3e:bf:52:4b:15:94:cc:9b:89:59:5d:0e:fa:46:3c: 0a:ac:41:92:f3:47:60:a9:a4:a1:bc:3f:f0:70:c9:8d:f0:91: d0:9f:88:8e:81:b6:e1:de:93:41:f2:51:24:d5:2d:94:1e:ab: a4:1f:3f:70:71:b9:fb:e0:6b:f0:d0:76:57:8f:b8:51:24:e3: 22:53:b4:86:be:c6:56:52:24:c1:0e:1b:33:09:01:bc:03:a5: e6:4f:fe:8a:97:10:72:96:5a:0c:3a:87:91:78:45:5c:c0:c6: f4:75:b2:67:57:25:3f:f9:f1:24:07:d1:02:27:88:77:b5:dc: 57:8b:b9:db:7f:a9:94:82:6e:15:38:a8:9e:81:fe:ff:7a:b4: ae:9f:81:37:4b:68:0f:5d:86:fe:44:60:e7:c7:5c:78:22:f9: b9:6c:ce:46:4a:cd:16:94:67:18:e5:d1:47:45:b0:1f:ea:2d: 85:1e:00:d2:93:c9:bd:68:f7:4d:6e:76:ef:fe:c4:2e:61:d5: 1d:34:2d:60:62:90:60:0b:8d:20:90:49:a2:7c:5d:22:06:f3: d2:d1:f3:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5ZjT26onfLKFvhg1NIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzA3ZTA4NjY0MDA1NmJjMjcxZDVkMmIzZTI0ZDAxNDQw YmFhMDQwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzBiMzAxZjBlOTVhZTI3MjRjZWI3YmQ1Nzk2ZjRmY2U3MzkxNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEb28rIPpCeL0s7m/4lhMwNl5DAx ak14NoDSTQndfafXrjYX0YJI9WC0TD30fKG2JTiSE7wAFNmn6BcW2qAVD/kslZeb aBBcb8czuFVk2UnjSmVB/Lxu9vLivxiQN/JUSB3Ypgell3Wrqt74mIQB2i1o+neB 3TkzZnDvqNLYFOWrH/+Xh8XDcBRDu80i4M9QPcrVw1z5GVF1E8XmrYXUrxeMR81a 49EogsFR2yBuZWc93cIjG6NkZfxH7sk9Lyu44GWLzy5ywJZcWZWbPgtEwGF3qMuZ WpnmjaC0CH1GZZMcwU3bulsSj1zp1s9R2Xml7dRbjWBh0ASQAEUTvHk+NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMwLMB8Ola4nJM63vVeW9PznORTKMB8GA1UdIwQY MBaAFMpwfghmQAVrwnHV0rPiTQFEC6oEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMt Yjk5Y2UzMGQ4MzlmLzEvekFzd0h3NlZyaWNrenJlOVY1YjBfT2M1Rk1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMtYjk5Y2UzMGQ4Mzlm LzEveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4uMA0G CSqGSIb3DQEBCwUAA4IBAQBPKcgofB6ToWZV1L3ce9LmZkOpeeo/tIWjS0wa+l+G 7IwVk2tZoRM+v1JLFZTMm4lZXQ76RjwKrEGS80dgqaShvD/wcMmN8JHQn4iOgbbh 3pNB8lEk1S2UHqukHz9wcbn74Gvw0HZXj7hRJOMiU7SGvsZWUiTBDhszCQG8A6Xm T/6KlxBylloMOoeReEVcwMb0dbJnVyU/+fEkB9ECJ4h3tdxXi7nbf6mUgm4VOKie gf7/erSun4E3S2gPXYb+RGDnx1x4Ivm5bM5GSs0WlGcY5dFHRbAf6i2FHgDSk8m9 aPdNbnbv/sQuYdUdNC1gYpBgC40gkEmifF0iBvPS0fMB -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:56 2026 by rpki-client