This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nzt7Zk2-p3kXkR-zPW1hHKnrM2w.roa File: nzt7Zk2-p3kXkR-zPW1hHKnrM2w.roa (raw, json) Hash identifier: nSEVoLyEx53ujQivuZt6fEEoLj6J5RaEd3bmHswDEb0= Subject key identifier: 9F:3B:7B:66:4D:BE:A7:79:17:91:1F:B3:3D:6D:61:1C:A9:EB:33:6C Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ECCCFBBCBA9A65D43AF57754598F3 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nzt7Zk2-p3kXkR-zPW1hHKnrM2w.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198868 IP address blocks: 84.242.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cc:cf:bb:cb:a9:a6:5d:43:af:57:75:45:98:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f3b7b664dbea77917911fb33d6d611ca9eb336c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:87:27:0d:e9:a5:86:d6:7d:d5:f4:46:73: a5:33:e1:b6:1a:a6:2b:c6:0f:45:ac:c0:e8:81:36: 05:88:37:9c:b3:f0:ca:3e:83:4f:73:e4:d3:4d:d4: ad:a9:0a:e3:6e:ed:3f:6a:e4:08:07:93:20:f2:44: 87:f9:d7:4b:3c:ce:9b:db:33:52:55:fb:fe:e5:e2: 6a:6a:b7:75:0c:8c:b9:ce:bb:3f:1d:af:77:95:53: 5b:6a:af:cc:06:3b:f6:bc:96:94:78:23:4f:a5:bd: 76:44:fe:18:af:d0:6b:2d:ec:15:6a:52:50:a0:36: 4f:eb:10:c0:f2:3e:5f:db:32:d8:84:48:ae:b4:fd: 7b:b6:7a:f7:91:26:98:83:06:d8:96:7a:a7:cc:2c: 36:4b:a3:c7:77:d9:b4:cb:85:4c:bc:44:b0:d3:80: 84:3c:44:a4:6f:51:1e:cd:8c:a7:a1:68:72:15:40: b7:2c:54:18:3f:72:09:7e:79:f6:59:55:72:f3:68: 0e:9a:b7:45:4c:98:b9:ab:33:48:6d:43:be:b6:e6: 9b:8c:9e:95:e0:71:8a:1b:85:c6:6e:97:08:e1:b9: c5:da:4c:3d:20:19:87:57:ed:69:9c:04:ed:a6:06: 05:b4:4b:d5:a5:73:f7:2a:f8:43:28:a6:a8:f4:38: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3B:7B:66:4D:BE:A7:79:17:91:1F:B3:3D:6D:61:1C:A9:EB:33:6C X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nzt7Zk2-p3kXkR-zPW1hHKnrM2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.242.130.0/24 Signature Algorithm: sha256WithRSAEncryption 48:2e:d1:99:f1:20:92:14:28:ff:a9:0a:e7:39:98:b6:16:c2: 34:55:ee:84:93:63:e2:5f:39:7c:81:6d:b7:bf:6e:b9:7c:8d: 25:c5:eb:36:4c:49:20:35:13:28:50:9d:b9:cf:f5:4f:7a:a1: 5a:8f:95:ca:29:de:3f:f7:38:13:45:46:dd:69:12:83:42:8e: 3d:6e:5d:25:69:cc:49:8b:39:4a:c8:d2:e0:82:55:c1:72:bb: e8:68:43:6f:0e:4d:53:c7:a0:88:ed:d9:75:ce:77:1f:cd:c1: d1:e5:63:e4:c0:e0:82:5a:c7:b4:05:97:ea:af:31:69:c7:ac: 77:8e:1f:c1:ff:ab:98:45:72:0d:06:df:bb:01:4a:23:66:f7: e1:38:d5:d6:f0:08:17:29:41:69:df:a8:67:57:06:25:d9:21: cc:b5:3f:86:46:89:ec:1f:b6:0f:df:bc:65:f1:a4:e0:b0:dc: 03:84:f9:89:b3:c9:44:04:77:c0:15:74:6f:b4:6c:11:cb:78: a0:5c:0d:aa:b0:43:43:a7:64:6a:50:d6:ea:7e:f7:37:7e:56: a2:58:76:82:1a:e2:64:d6:87:ed:d3:8a:3b:29:42:9a:7c:44: 47:42:bc:df:45:06:eb:98:d3:db:32:8d:92:ac:97:ff:00:73: 85:66:c8:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fszPu8uppl1Dr1d1RZjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjNiN2I2NjRkYmVhNzc5MTc5MTFmYjMzZDZkNjExY2E5ZWIzMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDKHJw3ppYbWfdX0RnOlM+G2GqYr xg9FrMDogTYFiDecs/DKPoNPc+TTTdStqQrjbu0/auQIB5Mg8kSH+ddLPM6b2zNS Vfv+5eJqard1DIy5zrs/Ha93lVNbaq/MBjv2vJaUeCNPpb12RP4Yr9BrLewValJQ oDZP6xDA8j5f2zLYhEiutP17tnr3kSaYgwbYlnqnzCw2S6PHd9m0y4VMvESw04CE PESkb1EezYynoWhyFUC3LFQYP3IJfnn2WVVy82gOmrdFTJi5qzNIbUO+tuabjJ6V 4HGKG4XGbpcI4bnF2kw9IBmHV+1pnATtpgYFtEvVpXP3KvhDKKao9Dh6vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ87e2ZNvqd5F5Efsz1tYRyp6zNsMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvbnp0N1prMi1wM2tYa1ItelBXMWhIS25yTTJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPKCMA0G CSqGSIb3DQEBCwUAA4IBAQBILtGZ8SCSFCj/qQrnOZi2FsI0Ve6Ek2PiXzl8gW23 v265fI0lxes2TEkgNRMoUJ25z/VPeqFaj5XKKd4/9zgTRUbdaRKDQo49bl0lacxJ izlKyNLgglXBcrvoaENvDk1Tx6CI7dl1zncfzcHR5WPkwOCCWse0BZfqrzFpx6x3 jh/B/6uYRXINBt+7AUojZvfhONXW8AgXKUFp36hnVwYl2SHMtT+GRonsH7YP37xl 8aTgsNwDhPmJs8lEBHfAFXRvtGwRy3igXA2qsENDp2RqUNbqfvc3flaiWHaCGuJk 1oft04o7KUKafERHQrzfRQbrmNPbMo2SrJf/AHOFZsgU -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:46 2026 by rpki-client