This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/1zk3At_CW_6MtNUlvcs7PWL_MSY.roa File: 1zk3At_CW_6MtNUlvcs7PWL_MSY.roa (raw, json) Hash identifier: Wx50m0MeMkdSzmVTbDYeihjHelr2/WxDpsYDzzYan64= Subject key identifier: D7:39:37:02:DF:C2:5B:FE:8C:B4:D5:25:BD:CB:3B:3D:62:FF:31:26 Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd Certificate serial: 019B77C7676A01AEB7FC685BE81795D3DF8C Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/1zk3At_CW_6MtNUlvcs7PWL_MSY.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34711 IP address blocks: 195.64.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:67:6a:01:ae:b7:fc:68:5b:e8:17:95:d3:df:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7393702dfc25bfe8cb4d525bdcb3b3d62ff3126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:13:65:cb:d5:80:5e:1f:91:61:8b:5c:a0: e9:1c:60:62:0e:de:d5:6d:a1:0c:0b:84:19:e5:5f: f0:c3:65:82:50:6c:0e:37:22:a3:16:ac:05:f2:3c: 71:34:8b:c4:4c:9b:76:5a:d7:0a:d3:4f:8d:6f:00: 67:32:29:00:49:c7:d1:a4:c3:8a:1f:c2:a6:91:48: 7e:77:25:2a:10:ba:14:c2:c5:04:3e:ef:93:65:ad: 63:37:8c:8c:3d:50:fd:eb:18:98:85:66:a6:46:d5: f7:46:f0:28:f2:6c:7a:7a:53:29:5c:b7:97:ac:4d: 98:ec:bb:1a:58:be:19:13:e5:15:02:f6:65:62:25: bb:ed:c6:ea:55:c2:91:96:5c:9b:ed:b5:a6:ca:70: 4c:26:50:b3:e1:84:a9:4f:2d:5b:de:82:29:8d:1c: 4b:66:ab:d3:d7:a6:58:d0:fc:ec:7c:cb:40:89:c4: e4:59:3c:2a:64:ec:1a:66:4f:e5:9f:f5:4b:1c:9b: fe:ae:1e:e5:2f:8d:6a:ab:12:98:0d:63:d7:98:61: 06:66:a2:48:f0:e6:00:21:f9:fb:e4:d5:95:9a:51: 27:29:39:da:0f:96:f9:cc:fc:47:8d:88:d8:49:ec: a8:54:b2:67:0e:ec:d5:91:17:a3:53:b8:2d:ad:0e: 0c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:39:37:02:DF:C2:5B:FE:8C:B4:D5:25:BD:CB:3B:3D:62:FF:31:26 X509v3 Authority Key Identifier: keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/1zk3At_CW_6MtNUlvcs7PWL_MSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.64.178.0/23 Signature Algorithm: sha256WithRSAEncryption 27:53:0c:e8:c4:27:8a:bb:95:b3:c1:63:90:06:ee:1b:24:f9: 6e:aa:19:b1:d0:f9:3e:d0:f6:4d:8e:00:1f:e3:37:07:cd:f7: a2:ef:41:b9:c1:04:5a:71:4e:73:5f:b0:c1:4b:4b:30:f5:7f: 50:31:98:3d:9f:c1:d2:66:b4:f3:ac:90:05:a1:3c:39:86:79: 89:24:aa:07:3a:a8:48:8d:85:ad:05:da:e8:94:61:61:22:5b: 9d:5d:51:aa:fb:1b:e5:cd:d0:d1:fe:44:3f:dd:6d:4f:9c:73: 84:eb:16:18:38:17:a3:0f:1c:12:5f:cc:1f:54:cf:0e:ae:6e: 04:d2:3b:b4:c3:d0:fd:94:15:6c:b4:0c:15:02:2c:27:2f:e6: 36:c6:7a:3f:b5:3a:f0:d9:75:bf:d1:9e:14:41:fe:26:53:72: 4f:38:c2:04:34:be:79:ab:44:a1:c1:77:2d:cc:20:81:ca:f5: 98:b2:ae:49:34:d0:a4:52:95:b6:16:fa:9c:b1:05:c6:a4:2c: 82:ba:01:18:13:55:cb:41:6c:b2:45:49:42:c9:48:78:58:69: 31:83:8b:6b:d1:13:f0:fd:f1:d2:59:3e:06:41:26:74:b7:96: ca:61:75:5e:7f:bf:af:f7:6b:df:a6:87:36:4a:59:c1:60:2e: 4f:39:17:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2dqAa63/Ghb6BeV09+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWI4ZWY0NDE4M2Y4ZTNhOWM4ODdhN2JlMjZiM2YwNzEz YzEzYmQwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzM5MzcwMmRmYzI1YmZlOGNiNGQ1MjViZGNiM2IzZDYyZmYzMTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCMTZcvVgF4fkWGLXKDpHGBiDt7V baEMC4QZ5V/ww2WCUGwONyKjFqwF8jxxNIvETJt2WtcK00+NbwBnMikAScfRpMOK H8KmkUh+dyUqELoUwsUEPu+TZa1jN4yMPVD96xiYhWamRtX3RvAo8mx6elMpXLeX rE2Y7LsaWL4ZE+UVAvZlYiW77cbqVcKRllyb7bWmynBMJlCz4YSpTy1b3oIpjRxL ZqvT16ZY0PzsfMtAicTkWTwqZOwaZk/ln/VLHJv+rh7lL41qqxKYDWPXmGEGZqJI 8OYAIfn75NWVmlEnKTnaD5b5zPxHjYjYSeyoVLJnDuzVkRejU7gtrQ4M8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNc5NwLfwlv+jLTVJb3LOz1i/zEmMB8GA1UdIwQY MBaAFGXrjvRBg/jjqciHp74ms/BxPBO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEt YWQ5ZTFhMDUxMGI5LzEvMXprM0F0X0NXXzZNdE5VbHZjczdQV0xfTVNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEtYWQ5ZTFhMDUxMGI5 LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0CyMA0G CSqGSIb3DQEBCwUAA4IBAQAnUwzoxCeKu5WzwWOQBu4bJPluqhmx0Pk+0PZNjgAf 4zcHzfei70G5wQRacU5zX7DBS0sw9X9QMZg9n8HSZrTzrJAFoTw5hnmJJKoHOqhI jYWtBdrolGFhIludXVGq+xvlzdDR/kQ/3W1PnHOE6xYYOBejDxwSX8wfVM8Orm4E 0ju0w9D9lBVstAwVAiwnL+Y2xno/tTrw2XW/0Z4UQf4mU3JPOMIENL55q0ShwXct zCCByvWYsq5JNNCkUpW2FvqcsQXGpCyCugEYE1XLQWyyRUlCyUh4WGkxg4tr0RPw /fHSWT4GQSZ0t5bKYXVef7+v92vfpoc2SlnBYC5POReb -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:05 2026 by rpki-client