This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/zdHtSRxpJBMjN_Z0z26JXK0mycs.roa
File: zdHtSRxpJBMjN_Z0z26JXK0mycs.roa (raw, json)
Hash identifier: lc2L7OCAHky1r/MwYr4M0nrrYwYly2np0Be8FYu8I7k=
Subject key identifier: CD:D1:ED:49:1C:69:24:13:23:37:F6:74:CF:6E:89:5C:AD:26:C9:CB
Certificate issuer: /CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
Certificate serial: 019B7C12994863546BCDD7A05FEB943F53E2
Authority key identifier: 3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/zdHtSRxpJBMjN_Z0z26JXK0mycs.roa
Signing time: Fri 02 Jan 2026 00:19:12 +0000
ROA not before: Fri 02 Jan 2026 00:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57249
IP address blocks: 193.22.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:99:48:63:54:6b:cd:d7:a0:5f:eb:94:3f:53:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
Validity
Not Before: Jan 2 00:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdd1ed491c6924132337f674cf6e895cad26c9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:a2:b4:a0:90:a5:df:4f:8e:a9:ad:14:14:
b2:f9:d7:7b:f4:09:c8:c2:4a:55:d2:f8:7d:0f:b0:
86:4e:13:6a:3a:8b:6e:0e:d6:4f:b5:55:02:6c:d9:
86:14:28:02:29:59:bb:87:a2:6d:34:74:20:ba:89:
64:5c:65:ed:ca:50:01:02:af:8e:8d:93:5e:12:bd:
4e:10:d6:89:6d:00:23:62:d0:e0:b0:9c:21:82:0b:
87:a4:3b:72:f2:fc:31:c5:0f:a8:44:a7:96:b3:92:
57:94:1b:20:41:1f:ae:8c:e3:ed:27:e7:5d:87:92:
4e:09:b4:51:fb:52:c3:d7:8e:3b:91:ba:d3:41:c6:
ca:41:5d:2b:6f:02:1a:c2:6f:63:03:13:13:bb:4b:
71:0c:8b:96:3c:32:1d:6a:75:f5:b9:af:da:c1:c5:
86:30:00:dc:1a:5b:eb:50:ca:36:f1:e2:a1:b6:ac:
4c:62:b4:e7:91:33:65:1c:aa:a1:4c:9d:d2:1e:2b:
a6:f9:e1:1a:9b:d3:e3:d6:7c:cb:41:97:db:ea:3f:
ce:3b:71:dd:3d:5f:18:9d:e2:77:53:8e:5e:ba:13:
04:d6:db:ba:d7:52:d0:5d:0b:a3:96:72:d4:e3:b6:
c9:f6:ca:2c:5e:5d:df:dc:34:b6:6b:e0:65:50:f7:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D1:ED:49:1C:69:24:13:23:37:F6:74:CF:6E:89:5C:AD:26:C9:CB
X509v3 Authority Key Identifier:
keyid:3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/zdHtSRxpJBMjN_Z0z26JXK0mycs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.81.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:42:b5:dc:2e:9c:05:29:da:7a:25:68:39:5f:2f:73:ab:d9:
81:db:1d:78:b1:88:74:31:0a:06:b2:59:9b:8a:85:4d:72:a4:
64:2f:4c:06:b5:b0:db:2f:8b:a1:a3:f7:0c:8b:24:05:3e:0d:
30:5f:4d:7b:e0:60:c5:13:7d:74:cf:a0:bf:0d:0b:7f:3a:41:
89:38:46:9e:52:4a:fd:4a:c8:04:9e:5b:3c:f5:33:37:ef:63:
e5:c9:92:df:31:e7:83:b2:c5:f9:5e:0a:c0:6b:67:c3:06:3a:
16:dd:e7:48:30:2b:58:94:ae:68:a5:9a:a2:1c:8e:c6:29:7f:
79:d2:5f:34:d4:fa:2f:25:f9:c0:1d:d5:30:45:70:ac:a6:75:
3c:d0:d8:56:33:39:14:fd:ba:d6:da:78:fd:b3:47:2e:48:2f:
55:ab:d4:ec:50:b2:69:3b:36:50:e9:14:23:fe:d1:c1:03:c3:
31:ab:e3:9a:81:8b:01:39:24:55:0f:41:d8:d7:5f:de:74:bc:
0b:29:e2:c2:77:be:18:91:8c:ea:3e:74:7a:0d:87:be:bd:8b:
68:73:4b:66:de:18:98:a0:4b:c1:d7:58:8f:66:17:45:9a:49:
1a:93:8e:0a:a0:89:3a:b9:6c:2d:96:5f:1c:61:1c:26:15:c1:
a5:30:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:16 2026 by rpki-client