This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/CzTuxwOn5ZR7PD0MKoIgeLI9Kxk.roa File: CzTuxwOn5ZR7PD0MKoIgeLI9Kxk.roa (raw, json) Hash identifier: GUgx7yQOwCv4lIHsSDK6/r2AtTmNNw0/FHTRGFbwbcQ= Subject key identifier: 0B:34:EE:C7:03:A7:E5:94:7B:3C:3D:0C:2A:82:20:78:B2:3D:2B:19 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019BDC6A71C85991D1E523B598BDADDFB849 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/CzTuxwOn5ZR7PD0MKoIgeLI9Kxk.roa Signing time: Tue 20 Jan 2026 17:18:42 +0000 ROA not before: Tue 20 Jan 2026 17:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393942 IP address blocks: 213.145.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:6a:71:c8:59:91:d1:e5:23:b5:98:bd:ad:df:b8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Jan 20 17:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b34eec703a7e5947b3c3d0c2a822078b23d2b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ef:5b:de:a6:16:25:2d:e8:83:43:3f:a9:fa: 66:66:5e:66:8f:78:da:3a:1e:dc:67:6e:68:62:b4: 24:ee:95:ba:f9:b1:ac:75:c4:9a:5b:bc:88:d5:fd: df:24:22:ec:dd:a3:5d:43:30:45:54:86:ab:91:a7: 86:ae:1d:d8:b9:e7:e9:cf:c7:e7:af:3c:a9:ba:92: 66:40:07:ce:87:e8:68:b3:02:1c:6a:fa:c1:76:57: c5:b4:04:b6:9a:29:0b:f2:70:85:c5:37:ca:51:ab: 86:b1:95:c1:ad:0e:15:f0:4e:dc:43:b4:ff:d9:c6: 18:57:97:b6:8e:d4:4d:5b:d9:58:a8:1e:5b:09:44: 10:7a:37:ef:a7:27:83:bf:c0:18:72:ea:aa:5c:80: 03:6f:61:6b:ff:96:aa:3d:1c:49:0a:14:33:da:ca: c5:1a:e7:1e:75:2c:75:67:0e:f1:27:29:b4:51:07: ef:4c:f8:fa:34:2c:66:e7:1c:13:fe:30:c5:9b:be: 50:e7:02:11:14:1b:4a:39:82:bc:28:c5:ec:93:f0: 6b:53:89:12:fa:47:5f:aa:bc:12:6c:d6:41:b7:23: 9e:88:58:c5:ee:2b:e3:cb:3c:fb:7c:98:4a:06:f0: 0e:e5:6a:8e:b9:79:62:2e:14:c9:28:32:9b:9d:1f: 39:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:34:EE:C7:03:A7:E5:94:7B:3C:3D:0C:2A:82:20:78:B2:3D:2B:19 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/CzTuxwOn5ZR7PD0MKoIgeLI9Kxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.84.0/24 Signature Algorithm: sha256WithRSAEncryption e2:8c:86:6e:10:d6:04:4d:6d:3e:ad:dd:3a:a6:ee:47:28:cf: 58:93:d8:df:35:df:5a:2d:f5:f7:84:e8:8b:42:ac:fa:c4:05: af:c5:9b:e1:ad:9e:61:bc:db:6b:3c:97:26:08:9a:15:d1:21: bc:a4:e5:a9:28:19:09:1c:75:38:b8:38:7b:68:4e:53:c8:62: 85:2a:93:33:61:a8:d8:77:d8:b4:39:42:b8:a6:47:6f:55:ee: d2:fc:77:72:dc:9a:9b:79:a5:6f:db:7d:d8:c2:ff:1d:b3:b0: b9:f6:40:c6:31:bd:09:0b:32:fd:83:e1:a6:10:81:a3:73:a2: 76:32:64:0d:02:fd:cc:1d:b1:88:1a:46:33:24:09:af:03:73: dc:a8:f0:ea:81:c1:b8:7c:0a:82:0b:7e:f9:4f:82:da:b2:89: e9:32:42:f5:04:7b:7d:54:fe:f6:4d:75:fb:30:02:47:f2:69: 64:c3:16:7c:ee:62:e9:9c:7d:7a:32:b1:40:f2:a8:88:d4:25: e7:16:59:44:74:b2:34:0a:c8:c0:7b:69:49:d6:30:69:c0:6c: c0:63:36:ad:a3:2b:df:ee:ce:b5:b4:f3:17:d2:d2:d1:e1:ce: 3b:bd:34:41:12:30:1a:38:19:2a:d3:5f:bd:cc:08:83:f4:e6: cd:7c:64:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvcanHIWZHR5SO1mL2t37hJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjYwMTIwMTcxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjM0ZWVjNzAzYTdlNTk0N2IzYzNkMGMyYTgyMjA3OGIyM2QyYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke9b3qYWJS3og0M/qfpmZl5mj3ja Oh7cZ25oYrQk7pW6+bGsdcSaW7yI1f3fJCLs3aNdQzBFVIarkaeGrh3Yuefpz8fn rzypupJmQAfOh+hoswIcavrBdlfFtAS2mikL8nCFxTfKUauGsZXBrQ4V8E7cQ7T/ 2cYYV5e2jtRNW9lYqB5bCUQQejfvpyeDv8AYcuqqXIADb2Fr/5aqPRxJChQz2srF GucedSx1Zw7xJym0UQfvTPj6NCxm5xwT/jDFm75Q5wIRFBtKOYK8KMXsk/BrU4kS +kdfqrwSbNZBtyOeiFjF7ivjyzz7fJhKBvAO5WqOuXliLhTJKDKbnR85xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAs07scDp+WUezw9DCqCIHiyPSsZMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvQ3pUdXh3T241WlI3UEQwTUtvSWdlTEk5S3hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZFUMA0G CSqGSIb3DQEBCwUAA4IBAQDijIZuENYETW0+rd06pu5HKM9Yk9jfNd9aLfX3hOiL Qqz6xAWvxZvhrZ5hvNtrPJcmCJoV0SG8pOWpKBkJHHU4uDh7aE5TyGKFKpMzYajY d9i0OUK4pkdvVe7S/Hdy3JqbeaVv233Ywv8ds7C59kDGMb0JCzL9g+GmEIGjc6J2 MmQNAv3MHbGIGkYzJAmvA3PcqPDqgcG4fAqCC375T4LasonpMkL1BHt9VP72TXX7 MAJH8mlkwxZ87mLpnH16MrFA8qiI1CXnFllEdLI0CsjAe2lJ1jBpwGzAYzatoyvf 7s61tPMX0tLR4c47vTRBEjAaOBkq01+9zAiD9ObNfGQN -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:06 2026 by rpki-client