This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/ZbdB9v0wi7maC6iqAV3uavKZ2m8.roa File: ZbdB9v0wi7maC6iqAV3uavKZ2m8.roa (raw, json) Hash identifier: kJhScEgkG+FivFHNZ07pbUBYjTIVDHzDZu8J9JFGTrM= Subject key identifier: 65:B7:41:F6:FD:30:8B:B9:9A:0B:A8:AA:01:5D:EE:6A:F2:99:DA:6F Certificate issuer: /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d Certificate serial: 019B78354CFA9A422DBFC45B2E3DA95F3AEA Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/ZbdB9v0wi7maC6iqAV3uavKZ2m8.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 193.222.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4c:fa:9a:42:2d:bf:c4:5b:2e:3d:a9:5f:3a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65b741f6fd308bb99a0ba8aa015dee6af299da6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:ac:81:72:74:3c:88:cc:5c:4d:ee:bf:34: d9:d5:19:8a:6b:8c:4a:d0:44:3f:e9:09:bb:f0:04: 65:ef:64:2d:98:96:25:6e:64:fc:61:9b:c9:da:c9: 75:25:f0:8a:4e:91:19:5d:47:f9:d9:d1:53:f8:10: bc:50:63:40:0a:01:ff:e3:f5:c6:4b:3d:30:7e:67: 41:d0:74:8e:97:ef:7e:99:45:78:d0:5f:fe:7e:40: c9:c7:9a:00:01:23:0a:52:2e:10:d1:c0:06:28:07: d3:18:ad:a2:2d:d8:de:93:26:49:de:f3:1c:1a:96: df:0a:6b:04:8d:8e:07:a5:f0:fe:a4:6e:0f:b1:e9: 18:1a:9b:10:1d:69:d9:76:36:34:ec:93:c1:b5:0e: 76:05:34:e4:9e:8f:00:9f:f5:4a:45:ea:ca:ad:b3: 02:b0:23:37:8d:6c:02:74:c7:22:bc:db:11:55:4c: bb:ba:97:c2:6d:63:ab:fe:bb:17:58:29:fa:9c:a0: 71:ec:0c:f5:b2:e2:05:dd:10:3f:31:08:25:5a:f0: 19:58:e4:1c:43:fe:fc:02:17:82:f5:a8:3e:bd:44: bb:ad:c7:1f:a1:23:72:8a:b4:c9:d8:5e:b1:cb:c5: 86:3f:d5:08:9e:88:ec:4f:e1:96:36:2a:c8:19:82: f3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B7:41:F6:FD:30:8B:B9:9A:0B:A8:AA:01:5D:EE:6A:F2:99:DA:6F X509v3 Authority Key Identifier: keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/ZbdB9v0wi7maC6iqAV3uavKZ2m8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.222.106.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:9b:cd:12:d8:2c:5b:af:01:ea:00:e7:4d:20:bf:8f:2b:70: 58:6e:93:49:ba:8e:fc:bb:17:72:f7:60:fa:47:0a:61:e3:48: ba:c1:79:31:22:df:34:b5:e4:49:34:56:bc:ca:d6:3c:c4:1c: 38:f8:fa:01:03:0a:c2:18:3e:86:78:c2:69:0d:8e:94:9b:22: 68:63:e0:62:8e:63:f0:9e:09:70:8a:57:f0:8d:27:75:37:13: 51:b1:ad:07:a7:db:87:cf:3b:fe:2e:f9:88:dd:df:99:6b:6d: f4:1d:8f:69:db:c6:cb:c5:77:93:1b:61:c8:15:88:3c:a2:7b: f0:84:26:e6:2a:52:98:d4:39:b2:78:42:c7:c4:6a:89:c5:59: 43:36:fc:88:fe:39:9c:eb:7f:a1:45:ab:89:ad:f2:f6:10:58: 33:a9:5e:58:65:4c:af:9c:f0:d0:9b:93:b7:30:58:e4:94:e5: fc:ff:24:a9:fe:a4:53:69:f9:be:fa:9e:76:3f:25:62:29:dc: 3b:2c:28:04:14:5f:ba:04:9f:db:01:eb:c2:c0:0f:98:b9:c7: c3:b6:54:35:42:48:79:3d:f3:bd:2d:e7:6c:21:a4:e9:3b:ee: 95:a7:1c:d5:fe:3e:b7:3d:dc:da:76:e8:8c:19:1e:3d:11:c9: 50:c2:70:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUz6mkItv8RbLj2pXzrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNmQ5NWQ4ODM2YzFmMTE2YTcxZWUyMWRlYzBmZjY3MWUx ZTA3MGQwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWI3NDFmNmZkMzA4YmI5OWEwYmE4YWEwMTVkZWU2YWYyOTlkYTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySusgXJ0PIjMXE3uvzTZ1RmKa4xK 0EQ/6Qm78ARl72QtmJYlbmT8YZvJ2sl1JfCKTpEZXUf52dFT+BC8UGNACgH/4/XG Sz0wfmdB0HSOl+9+mUV40F/+fkDJx5oAASMKUi4Q0cAGKAfTGK2iLdjekyZJ3vMc GpbfCmsEjY4HpfD+pG4PsekYGpsQHWnZdjY07JPBtQ52BTTkno8An/VKRerKrbMC sCM3jWwCdMcivNsRVUy7upfCbWOr/rsXWCn6nKBx7Az1suIF3RA/MQglWvAZWOQc Q/78AheC9ag+vUS7rccfoSNyirTJ2F6xy8WGP9UInojsT+GWNirIGYLzuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGW3Qfb9MIu5mguoqgFd7mrymdpvMB8GA1UdIwQY MBaAFDFtldiDbB8RanHuId7A/2ceHgcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEt MTIzNzIwYmZlNzQ2LzEvWmJkQjl2MHdpN21hQzZpcUFWM3VhdktaMm04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEtMTIzNzIwYmZlNzQ2 LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwd5qMA0G CSqGSIb3DQEBCwUAA4IBAQA6m80S2CxbrwHqAOdNIL+PK3BYbpNJuo78uxdy92D6 Rwph40i6wXkxIt80teRJNFa8ytY8xBw4+PoBAwrCGD6GeMJpDY6UmyJoY+BijmPw nglwilfwjSd1NxNRsa0Hp9uHzzv+LvmI3d+Za230HY9p28bLxXeTG2HIFYg8onvw hCbmKlKY1DmyeELHxGqJxVlDNvyI/jmc63+hRauJrfL2EFgzqV5YZUyvnPDQm5O3 MFjklOX8/ySp/qRTafm++p52PyViKdw7LCgEFF+6BJ/bAevCwA+YucfDtlQ1Qkh5 PfO9LedsIaTpO+6VpxzV/j63PdzaduiMGR49EclQwnAq -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:47 2026 by rpki-client