This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/Z3v-SAm3fw6NnIHtD6dU5VOCOP4.roa File: Z3v-SAm3fw6NnIHtD6dU5VOCOP4.roa (raw, json) Hash identifier: v7j7LyN9QjPmbnKNeQyhNxvVR/InX3nLJAUhm3ToZRw= Subject key identifier: 67:7B:FE:48:09:B7:7F:0E:8D:9C:81:ED:0F:A7:54:E5:53:82:38:FE Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Certificate serial: 019B7DF57CFD47695F9650CBB99792216386 Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/Z3v-SAm3fw6NnIHtD6dU5VOCOP4.roa Signing time: Fri 02 Jan 2026 09:06:38 +0000 ROA not before: Fri 02 Jan 2026 09:06:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58067 IP address blocks: 176.114.16.0/20 maxlen: 20 176.114.16.0/24 maxlen: 24 176.114.17.0/24 maxlen: 24 176.114.18.0/24 maxlen: 24 176.114.19.0/24 maxlen: 24 176.114.20.0/24 maxlen: 24 176.114.21.0/24 maxlen: 24 176.114.22.0/24 maxlen: 24 176.114.23.0/24 maxlen: 24 176.114.24.0/24 maxlen: 24 176.114.25.0/24 maxlen: 24 176.114.26.0/24 maxlen: 24 176.114.27.0/24 maxlen: 24 176.114.28.0/24 maxlen: 24 176.114.29.0/24 maxlen: 24 176.114.30.0/24 maxlen: 24 176.114.31.0/24 maxlen: 24 2a0b:97c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:f5:7c:fd:47:69:5f:96:50:cb:b9:97:92:21:63:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a Validity Not Before: Jan 2 09:06:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=677bfe4809b77f0e8d9c81ed0fa754e5538238fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:d1:48:bc:1f:86:b8:7d:00:1c:1e:e0:1e: 8c:fe:ce:90:c9:e6:38:22:b0:7d:76:97:1d:c6:e7: d9:0a:b6:e8:60:7c:09:d1:e0:b1:9b:b6:95:c8:d4: 37:18:6a:47:2e:a1:82:5a:87:48:d2:38:9c:9c:3a: c7:e7:1a:ad:d4:94:90:4a:27:4c:55:00:0e:71:c9: a7:21:a3:a3:e3:03:e8:af:38:cc:c8:c5:85:21:a5: a1:9d:8e:a7:f5:2e:ac:0b:41:66:ea:c6:b3:18:38: 48:39:6c:e3:d9:9e:5f:bc:1c:0c:b5:30:98:46:1f: 1a:60:fb:a5:1a:2e:66:df:7e:9c:fa:de:6a:81:f7: 5f:d2:62:39:6f:bc:2e:31:b4:79:24:5b:2d:4c:b3: b9:20:ef:3e:e8:61:d1:16:1e:8c:29:cc:7b:ff:73: 97:23:39:e3:a6:8b:16:a5:81:5d:dc:c3:3e:c1:97: da:13:da:11:87:5a:56:ff:f0:9e:5a:e9:e6:e0:80: 07:a9:7d:03:73:78:af:10:99:6c:ef:a5:47:c5:3b: e8:b2:13:a8:19:ea:41:73:6a:fb:ad:d6:75:bc:f2: be:24:0f:a5:06:ed:5b:bd:22:db:d6:1e:9f:19:81: 15:89:07:fe:12:94:b4:f3:e7:51:91:85:6c:c2:32: 2d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7B:FE:48:09:B7:7F:0E:8D:9C:81:ED:0F:A7:54:E5:53:82:38:FE X509v3 Authority Key Identifier: keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/Z3v-SAm3fw6NnIHtD6dU5VOCOP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.114.16.0/20 IPv6: 2a0b:97c0::/29 Signature Algorithm: sha256WithRSAEncryption 78:b1:ea:b7:32:c6:df:8b:fa:9a:f2:d9:43:a2:bc:d3:86:9f: 73:64:de:94:dd:eb:fd:03:b1:1c:3a:14:51:7c:f9:42:3f:7d: 85:91:4d:e5:f0:d4:d8:ea:6e:58:43:9a:3c:55:a8:0d:d5:4f: f5:6f:87:c0:aa:a3:0f:d3:c6:f1:e4:38:81:e1:9a:be:82:bf: 25:73:87:34:b0:2d:7c:4f:24:88:67:4a:2d:ba:67:35:a7:27: 21:82:14:d3:6e:cc:a8:91:25:41:6b:92:04:33:0f:fe:34:29: ca:dc:02:2a:46:05:67:8b:54:d0:84:c4:6d:20:cd:77:83:aa: 00:86:0d:29:2e:06:ef:47:1e:8a:e3:78:f9:9a:db:c1:cc:b6: 1c:e0:1d:6b:d1:4d:69:05:c6:fd:e7:e5:58:eb:71:55:51:3a: 3a:31:3d:8e:d2:ea:ac:34:8b:36:6c:af:13:ff:cb:92:3a:dd: b6:94:96:9d:28:aa:ea:57:6f:ef:fa:10:9f:99:dd:fe:db:cc: a7:b3:e4:e3:ff:3d:0e:c6:92:c8:52:f0:55:07:04:d2:f8:2d: 05:bc:ff:51:32:c8:fe:77:b4:7c:5e:ae:f4:b0:12:e1:a7:9d: aa:3f:17:e9:c4:18:fd:96:73:32:4c:62:b0:10:b5:96:e8:ec: be:2c:92:9d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt99Xz9R2lfllDLuZeSIWOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZDAyOWYyYzMyMWFkYjU5ZWNhNWZjYTU3YTFlYjliZGY1 MzFkNmEwHhcNMjYwMTAyMDkwNjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzdiZmU0ODA5Yjc3ZjBlOGQ5YzgxZWQwZmE3NTRlNTUzODIzOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVDRSLwfhrh9ABwe4B6M/s6QyeY4 IrB9dpcdxufZCrboYHwJ0eCxm7aVyNQ3GGpHLqGCWodI0jicnDrH5xqt1JSQSidM VQAOccmnIaOj4wPorzjMyMWFIaWhnY6n9S6sC0Fm6sazGDhIOWzj2Z5fvBwMtTCY Rh8aYPulGi5m336c+t5qgfdf0mI5b7wuMbR5JFstTLO5IO8+6GHRFh6MKcx7/3OX IznjposWpYFd3MM+wZfaE9oRh1pW//CeWunm4IAHqX0Dc3ivEJls76VHxTvoshOo GepBc2r7rdZ1vPK+JA+lBu1bvSLb1h6fGYEViQf+EpS08+dRkYVswjItjwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGd7/kgJt38OjZyB7Q+nVOVTgjj+MB8GA1UdIwQY MBaAFKTQKfLDIa21nspfyleh65vfUx1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDct OGFkNmZmYjI2MTdkLzEvWjN2LVNBbTNmdzZObklIdEQ2ZFU1Vk9DT1A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDctOGFkNmZmYjI2MTdk LzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEsHIQMA0E AgACMAcDBQMqC5fAMA0GCSqGSIb3DQEBCwUAA4IBAQB4seq3Msbfi/qa8tlDorzT hp9zZN6U3ev9A7EcOhRRfPlCP32FkU3l8NTY6m5YQ5o8VagN1U/1b4fAqqMP08bx 5DiB4Zq+gr8lc4c0sC18TySIZ0otumc1pychghTTbsyokSVBa5IEMw/+NCnK3AIq RgVni1TQhMRtIM13g6oAhg0pLgbvRx6K43j5mtvBzLYc4B1r0U1pBcb95+VY63FV UTo6MT2O0uqsNIs2bK8T/8uSOt22lJadKKrqV2/v+hCfmd3+28yns+Tj/z0OxpLI UvBVBwTS+C0FvP9RMsj+d7R8Xq70sBLhp52qPxfpxBj9lnMyTGKwELWW6Oy+LJKd -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:06 2026 by rpki-client