This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa File: ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa (raw, json) Hash identifier: duIN3E5E9I7c9rAgU9yjUM0YccPt4nRq25usPFTIyKo= Subject key identifier: 64:97:DD:D9:B3:37:CC:8D:DE:8F:FE:B5:4C:0C:07:F2:59:A1:1C:B7 Certificate issuer: /CN=d1bf176af8dba30fef325365ef3404812ce2d84a Certificate serial: 019B7B36B80935145970FAFAAC68DACE2444 Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197016 IP address blocks: 194.8.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b8:09:35:14:59:70:fa:fa:ac:68:da:ce:24:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6497ddd9b337cc8dde8ffeb54c0c07f259a11cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:22:02:36:1c:66:be:02:a6:99:bb:cc:08: 03:1d:b5:b7:c9:d1:57:a7:9a:d1:14:93:1b:51:ca: 92:64:9d:f7:e9:6e:ce:dc:4a:3d:7d:6a:44:96:79: 03:6f:05:4b:f3:74:4f:31:50:23:24:36:62:a3:83: a8:2b:c6:7e:48:b9:a5:a8:00:f1:a9:91:38:b0:11: 29:17:79:07:4c:a9:ab:fb:4f:02:2c:dd:68:fc:af: 13:90:87:f9:86:d5:47:cf:b5:47:33:4e:bf:d6:16: 5a:b1:dc:2d:5d:1f:a1:05:c3:71:8c:55:c3:bd:35: ee:00:fd:37:3c:00:01:18:3f:ab:ca:58:2a:95:3a: 1a:66:a8:c1:ee:86:8a:a9:3a:dc:a8:97:55:d9:02: ab:b3:f1:18:bb:3e:df:88:ba:ea:66:6f:31:10:71: ae:2c:3f:b9:34:00:45:fe:ec:93:7c:f8:f8:33:07: 96:cf:d2:55:ac:0d:fe:de:c9:fb:82:2b:b4:67:16: e5:8a:1c:0e:07:ff:80:ee:7c:99:f2:3e:82:76:0e: c0:dc:9f:1d:c9:fa:93:f2:9b:aa:c7:b4:d0:d5:18: b8:e2:6d:b3:4a:1a:f8:d0:d4:04:d2:21:b7:b1:d9: 8d:af:f7:5d:2f:10:78:45:c1:54:77:eb:cd:04:f2: c4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:97:DD:D9:B3:37:CC:8D:DE:8F:FE:B5:4C:0C:07:F2:59:A1:1C:B7 X509v3 Authority Key Identifier: keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.236.0/23 Signature Algorithm: sha256WithRSAEncryption cb:86:11:6f:12:2e:9a:c3:67:80:c2:c5:c6:bb:b5:cc:ef:fa: 1c:0a:32:74:b9:77:d0:ba:73:62:d6:af:cf:e5:af:d4:60:2c: 5f:a6:aa:57:99:86:22:65:1e:ce:05:bd:ae:5d:c6:0a:89:4e: 5f:78:a7:8c:75:f8:fd:60:9c:32:f7:ab:58:b2:26:48:6e:ce: 25:71:82:22:b8:4a:94:5f:64:2c:cc:2a:aa:f1:d7:79:2d:ea: 8f:20:ea:4d:fd:1f:9f:0e:d4:92:f9:13:cc:f6:33:57:af:f6: 44:32:1b:98:1a:df:69:39:4d:7f:14:a2:b7:2e:41:0d:4f:3b: 40:41:07:e0:cd:b5:1f:87:ca:86:0e:a2:42:ff:6b:17:89:45: 30:c5:be:89:a2:90:ad:15:46:c6:88:21:fb:f6:92:3b:d6:27: ff:14:80:a1:65:b0:17:a9:6d:e9:87:ec:07:7c:d8:a0:6d:e1: 73:af:2d:1a:73:4a:23:83:04:91:e0:37:57:46:49:ad:48:39: 2f:76:31:d4:4d:43:d8:24:8f:32:6b:4d:da:5b:16:c7:82:df: fc:aa:66:0f:8c:75:41:b6:a0:91:f0:0d:dd:84:6b:3f:86:90: 12:84:f4:aa:c6:0c:77:c3:7c:40:73:a6:f9:ff:dd:87:e2:47: 61:86:4c:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrgJNRRZcPr6rGjaziREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmYxNzZhZjhkYmEzMGZlZjMyNTM2NWVmMzQwNDgxMmNl MmQ4NGEwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDk3ZGRkOWIzMzdjYzhkZGU4ZmZlYjU0YzBjMDdmMjU5YTExY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdoiAjYcZr4Cppm7zAgDHbW3ydFX p5rRFJMbUcqSZJ336W7O3Eo9fWpElnkDbwVL83RPMVAjJDZio4OoK8Z+SLmlqADx qZE4sBEpF3kHTKmr+08CLN1o/K8TkIf5htVHz7VHM06/1hZasdwtXR+hBcNxjFXD vTXuAP03PAABGD+rylgqlToaZqjB7oaKqTrcqJdV2QKrs/EYuz7fiLrqZm8xEHGu LD+5NABF/uyTfPj4MweWz9JVrA3+3sn7giu0ZxblihwOB/+A7nyZ8j6Cdg7A3J8d yfqT8puqx7TQ1Ri44m2zShr40NQE0iG3sdmNr/ddLxB4RcFUd+vNBPLEkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGSX3dmzN8yN3o/+tUwMB/JZoRy3MB8GA1UdIwQY MBaAFNG/F2r426MP7zJTZe80BIEs4thKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMt ZmQ1NTkyNDJkNDcxLzEvWkpmZDJiTTN6STNlal82MVRBd0g4bG1oSExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMtZmQ1NTkyNDJkNDcx LzEvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwgjsMA0G CSqGSIb3DQEBCwUAA4IBAQDLhhFvEi6aw2eAwsXGu7XM7/ocCjJ0uXfQunNi1q/P 5a/UYCxfpqpXmYYiZR7OBb2uXcYKiU5feKeMdfj9YJwy96tYsiZIbs4lcYIiuEqU X2QszCqq8dd5LeqPIOpN/R+fDtSS+RPM9jNXr/ZEMhuYGt9pOU1/FKK3LkENTztA QQfgzbUfh8qGDqJC/2sXiUUwxb6JopCtFUbGiCH79pI71if/FIChZbAXqW3ph+wH fNigbeFzry0ac0ojgwSR4DdXRkmtSDkvdjHUTUPYJI8ya03aWxbHgt/8qmYPjHVB tqCR8A3dhGs/hpAShPSqxgx3w3xAc6b5/92H4kdhhkxO -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:27 2026 by rpki-client