This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/z3lXdGSjKPDwJS_9eOiM2U2dzYI.roa File: z3lXdGSjKPDwJS_9eOiM2U2dzYI.roa (raw, json) Hash identifier: HNTupTEuceZ5gELV1uOyvKnT6W4FN7qKEOgUBgkkmsM= Subject key identifier: CF:79:57:74:64:A3:28:F0:F0:25:2F:FD:78:E8:8C:D9:4D:9D:CD:82 Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8 Certificate serial: 019B7C12B59C287AFE54756D3FEEB1B0D7CE Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/z3lXdGSjKPDwJS_9eOiM2U2dzYI.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210568 IP address blocks: 193.111.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b5:9c:28:7a:fe:54:75:6d:3f:ee:b1:b0:d7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8 Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf79577464a328f0f0252ffd78e88cd94d9dcd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:0b:e9:4e:25:bc:de:24:c9:f7:8d:05:74: 4c:e1:60:7b:4e:82:1a:c5:68:ed:f5:48:68:de:12: 50:04:f7:09:04:64:30:04:8f:3f:78:f1:41:da:de: 55:50:44:a0:1f:e4:9a:36:d3:dd:f7:d4:90:e7:74: e0:82:ac:24:e6:92:fb:93:78:7a:fe:53:bc:ab:b2: a6:fb:30:cd:52:dc:9b:a2:d5:20:53:54:44:c6:f8: 08:28:0b:10:3f:78:a4:74:0b:69:25:0f:b9:47:22: ce:5b:5c:bb:d2:0b:93:2e:73:34:e3:dd:6c:84:48: 52:89:ca:94:57:e9:09:b2:6d:86:df:7e:c7:d6:c1: a1:2a:45:85:6e:b1:b7:ea:4d:1c:11:fb:b0:a0:f4: 29:11:ba:2b:04:8d:c8:eb:86:88:86:20:7a:4f:1b: 46:6b:ae:c4:29:63:ec:6c:d8:33:6b:3b:10:e6:dc: c4:62:a6:3e:65:5b:31:df:21:fa:f0:20:b7:07:cd: 51:dc:9b:4e:90:7b:2f:55:50:43:e4:10:42:47:a8: da:bf:5b:ed:3f:cb:c7:73:75:5e:c7:3f:c0:bc:3c: 55:6c:23:49:68:8b:5a:d9:f0:ed:3a:b6:d8:32:09: 3a:7c:4f:94:af:ef:c7:1b:eb:a7:ee:d2:16:5d:3c: 85:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:79:57:74:64:A3:28:F0:F0:25:2F:FD:78:E8:8C:D9:4D:9D:CD:82 X509v3 Authority Key Identifier: keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/z3lXdGSjKPDwJS_9eOiM2U2dzYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.28.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:45:2c:c3:a0:69:7c:48:95:c9:0c:56:3f:7c:29:2e:0e:5f: 0c:b2:c0:dd:a9:66:b2:02:b9:13:55:de:91:45:4c:ba:1f:61: 41:6e:7c:28:7f:ae:81:5e:d0:bf:66:e8:5b:7d:30:8b:aa:0d: 0a:cb:ab:0b:3f:3e:d9:96:b7:de:5e:db:7c:97:87:3b:ca:a6: 71:7e:0f:80:e2:1a:a6:a0:7b:52:21:93:ac:31:34:16:21:e7: 7a:bb:20:28:97:77:48:b7:32:94:f6:38:9e:d8:33:f5:d4:a6: 7b:b8:d6:78:2d:a3:94:cb:5e:4f:7b:7c:4a:45:55:63:11:42: 8d:fd:a8:dd:b4:f2:cb:7f:e7:f1:97:e7:89:56:99:ad:66:d7: fc:77:0f:9b:c6:75:1f:c0:b0:3f:b1:3b:79:30:db:92:09:48: f8:8a:8d:2d:12:29:e9:65:3c:43:1e:13:20:62:b9:0e:77:82: 7c:5f:6d:07:97:03:b8:bc:bf:83:ec:67:6b:34:39:29:5c:7c: 4f:b6:f8:e7:fd:f5:4b:0d:36:65:72:d6:47:64:83:89:3e:41: 80:aa:7a:b7:cc:d7:f0:e6:4c:85:8e:5f:3a:0b:8a:6c:c9:5d: 9a:12:da:e6:42:34:bb:31:24:f0:e7:cd:c4:8a:39:39:70:65: 9b:20:cd:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ErWcKHr+VHVtP+6xsNfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOTQ2ZjRhODI2ZDYyMmEzMzhlZDgzZTBhZmNkZjc4Yzg3 NjA0ZjgwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjc5NTc3NDY0YTMyOGYwZjAyNTJmZmQ3OGU4OGNkOTRkOWRjZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmML6U4lvN4kyfeNBXRM4WB7ToIa xWjt9Uho3hJQBPcJBGQwBI8/ePFB2t5VUESgH+SaNtPd99SQ53Tggqwk5pL7k3h6 /lO8q7Km+zDNUtybotUgU1RExvgIKAsQP3ikdAtpJQ+5RyLOW1y70guTLnM0491s hEhSicqUV+kJsm2G337H1sGhKkWFbrG36k0cEfuwoPQpEborBI3I64aIhiB6TxtG a67EKWPsbNgzazsQ5tzEYqY+ZVsx3yH68CC3B81R3JtOkHsvVVBD5BBCR6jav1vt P8vHc3Vexz/AvDxVbCNJaIta2fDtOrbYMgk6fE+Ur+/HG+un7tIWXTyF3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM95V3Rkoyjw8CUv/XjojNlNnc2CMB8GA1UdIwQY MBaAFBqUb0qCbWIqM47YPgr833jIdgT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3BSdlNvSnRZaW96anRnLUN2emZlTWgyQlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82YmE2YTMtMjVlMC00OTlhLWE3YTkt OTgzOThmZGJjOWZiLzEvejNsWGRHU2pLUER3SlNfOWVPaU0yVTJkellJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82YmE2YTMtMjVlMC00OTlhLWE3YTktOTgzOThmZGJjOWZi LzEvR3BSdlNvSnRZaW96anRnLUN2emZlTWgyQlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW8cMA0G CSqGSIb3DQEBCwUAA4IBAQBeRSzDoGl8SJXJDFY/fCkuDl8MssDdqWayArkTVd6R RUy6H2FBbnwof66BXtC/ZuhbfTCLqg0Ky6sLPz7ZlrfeXtt8l4c7yqZxfg+A4hqm oHtSIZOsMTQWIed6uyAol3dItzKU9jie2DP11KZ7uNZ4LaOUy15Pe3xKRVVjEUKN /ajdtPLLf+fxl+eJVpmtZtf8dw+bxnUfwLA/sTt5MNuSCUj4io0tEinpZTxDHhMg YrkOd4J8X20HlwO4vL+D7GdrNDkpXHxPtvjn/fVLDTZlctZHZIOJPkGAqnq3zNfw 5kyFjl86C4psyV2aEtrmQjS7MSTw583Eijk5cGWbIM2H -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:47 2026 by rpki-client