This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Z111UjLnwgJb3LbHDJ7UAjwqf7M.roa File: Z111UjLnwgJb3LbHDJ7UAjwqf7M.roa (raw, json) Hash identifier: oAjU5QxrjsRQZUa6m4Qsajh/Teoh609vw8i9IlPtf6I= Subject key identifier: 67:5D:75:52:32:E7:C2:02:5B:DC:B6:C7:0C:9E:D4:02:3C:2A:7F:B3 Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099 Certificate serial: 019B7F84F8F248F33F6A5EFA29DC2F73C0C1 Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Z111UjLnwgJb3LbHDJ7UAjwqf7M.roa Signing time: Fri 02 Jan 2026 16:22:59 +0000 ROA not before: Fri 02 Jan 2026 16:22:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20724 IP address blocks: 193.104.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f8:f2:48:f3:3f:6a:5e:fa:29:dc:2f:73:c0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099 Validity Not Before: Jan 2 16:22:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=675d755232e7c2025bdcb6c70c9ed4023c2a7fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:38:8f:1d:b4:4d:12:8b:d6:bf:6c:c0:0b: 2d:4a:dd:c1:a8:ad:34:ff:d2:d7:57:67:3a:17:89: 6f:88:70:e0:fb:86:c1:07:26:96:f9:a1:a1:b4:ad: 9a:25:3f:f8:84:92:2a:26:ad:29:7d:f8:b3:58:a5: ed:ea:61:37:fd:2f:17:cc:7c:a0:fe:26:b9:12:4e: 2b:04:dc:34:9c:7d:b6:c7:6a:7c:e1:f2:4d:15:ff: ac:be:12:85:6a:31:29:d1:90:f0:6d:7e:10:74:47: 19:4f:63:03:b8:28:76:b8:61:e4:93:e0:2a:8a:fd: bc:10:99:8e:19:e9:0b:f9:a2:d8:b5:c5:92:0b:5d: dd:cb:3e:cf:65:f5:4a:a6:6e:df:ce:9e:d4:14:e6: 6f:83:6c:44:b1:99:0c:81:6b:38:04:36:5f:14:4c: c8:ae:ce:42:3f:16:e7:db:a6:88:83:c8:b2:8b:35: 7d:71:3c:e4:44:d1:6b:a7:78:d5:c6:5f:42:79:5a: 01:40:fd:e9:a2:ed:4e:65:6e:e1:89:21:36:27:a6: fc:85:32:b9:23:8d:fc:36:26:fc:0e:b2:41:e2:37: 44:95:cb:36:a2:d2:4d:46:b9:72:2c:47:1c:9b:5c: 8d:c8:1a:b1:c6:ac:f9:f3:20:11:62:e4:b2:4e:3d: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5D:75:52:32:E7:C2:02:5B:DC:B6:C7:0C:9E:D4:02:3C:2A:7F:B3 X509v3 Authority Key Identifier: keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Z111UjLnwgJb3LbHDJ7UAjwqf7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.245.0/24 Signature Algorithm: sha256WithRSAEncryption 49:eb:a7:0c:0a:d4:9c:fe:a5:b8:07:c4:c1:50:79:d3:04:b7: db:34:3c:d2:8d:56:a9:8d:24:16:fa:a1:46:8c:a8:9f:40:02: 4a:b8:ef:bf:32:08:11:16:2e:d4:36:ca:28:64:69:9a:12:16: dd:fa:f1:72:b4:1c:81:0c:99:14:a6:e7:f4:c2:0d:eb:71:20: 5b:d4:08:ce:b9:c6:83:e4:62:50:8c:92:11:21:26:29:40:25: 95:5c:5c:52:54:eb:ed:fc:0b:87:62:36:2f:15:34:15:eb:c5: 7d:29:53:1f:01:9e:e6:05:d5:fd:fe:ac:84:fb:74:d4:3b:20: 2a:8d:32:73:98:d5:f5:0e:46:98:a3:ef:87:2c:66:dd:54:ce: 86:a5:c6:5e:85:e0:b6:e6:4a:02:af:33:3f:c2:c3:55:b6:ab: d4:fe:ce:51:5d:0b:2c:c6:0e:49:81:f3:2f:f2:cd:62:a6:63: fe:7b:23:01:c0:3c:9c:63:d7:e1:42:bd:8e:f6:5c:e8:1d:f6: 30:dc:22:f9:05:5e:74:ef:ea:13:03:4b:16:46:91:d7:6f:ae: 21:16:fc:d8:47:9d:90:1c:9b:61:0d:2c:3c:3b:aa:9b:5f:5c: 76:c9:01:fa:64:e2:63:c7:3f:f7:2c:0e:ef:d1:54:4d:99:eb: d7:d3:1d:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPjySPM/al76Kdwvc8DBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MjRiMmUyNmRkM2FmY2M1YzFlYWMwMWY5MDI2M2QyMDFm YmUwOTkwHhcNMjYwMTAyMTYyMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzVkNzU1MjMyZTdjMjAyNWJkY2I2YzcwYzllZDQwMjNjMmE3ZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzok4jx20TRKL1r9swAstSt3BqK00 /9LXV2c6F4lviHDg+4bBByaW+aGhtK2aJT/4hJIqJq0pffizWKXt6mE3/S8XzHyg /ia5Ek4rBNw0nH22x2p84fJNFf+svhKFajEp0ZDwbX4QdEcZT2MDuCh2uGHkk+Aq iv28EJmOGekL+aLYtcWSC13dyz7PZfVKpm7fzp7UFOZvg2xEsZkMgWs4BDZfFEzI rs5CPxbn26aIg8iyizV9cTzkRNFrp3jVxl9CeVoBQP3pou1OZW7hiSE2J6b8hTK5 I438Nib8DrJB4jdElcs2otJNRrlyLEccm1yNyBqxxqz58yARYuSyTj1TEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGdddVIy58ICW9y2xwye1AI8Kn+zMB8GA1UdIwQY MBaAFFUksuJt06/MXB6sAfkCY9IB++CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMt M2FhMjIyN2JhZGZlLzEvWjExMVVqTG53Z0piM0xiSERKN1VBandxZjdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMtM2FhMjIyN2JhZGZl LzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWj1MA0G CSqGSIb3DQEBCwUAA4IBAQBJ66cMCtSc/qW4B8TBUHnTBLfbNDzSjVapjSQW+qFG jKifQAJKuO+/MggRFi7UNsooZGmaEhbd+vFytByBDJkUpuf0wg3rcSBb1AjOucaD 5GJQjJIRISYpQCWVXFxSVOvt/AuHYjYvFTQV68V9KVMfAZ7mBdX9/qyE+3TUOyAq jTJzmNX1DkaYo++HLGbdVM6GpcZeheC25koCrzM/wsNVtqvU/s5RXQssxg5JgfMv 8s1ipmP+eyMBwDycY9fhQr2O9lzoHfYw3CL5BV507+oTA0sWRpHXb64hFvzYR52Q HJthDSw8O6qbX1x2yQH6ZOJjxz/3LA7v0VRNmevX0x3C -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:34 2026 by rpki-client