This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/zzKsh9pw-5I0Wtraro_Jbyag46U.roa File: zzKsh9pw-5I0Wtraro_Jbyag46U.roa (raw, json) Hash identifier: 1/pA4cGlQSm0p3tJIaxxCBV/qv8OQVF+Ep2WkGyW9mM= Subject key identifier: CF:32:AC:87:DA:70:FB:92:34:5A:DA:DA:AE:8F:C9:6F:26:A0:E3:A5 Certificate issuer: /CN=bc075a22749762ecaaff9cbc217b82f17269e362 Certificate serial: 019B7DCB5AB412DC36F3D9A5012318C2C428 Authority key identifier: BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/zzKsh9pw-5I0Wtraro_Jbyag46U.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210728 IP address blocks: 213.173.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.crl rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.mft rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5a:b4:12:dc:36:f3:d9:a5:01:23:18:c2:c4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc075a22749762ecaaff9cbc217b82f17269e362 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf32ac87da70fb92345adadaae8fc96f26a0e3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:90:11:cd:86:45:64:85:89:d8:2e:f5:5d:84: 29:6c:55:59:4e:d5:b6:96:c2:fc:ae:05:c2:c0:c1: e2:eb:5c:1e:52:9e:d4:36:57:0d:1f:29:00:e3:d1: b0:d1:48:03:85:e8:37:c8:68:74:e4:75:4b:bd:02: ed:47:a1:9e:60:5f:bd:a2:54:f5:da:ee:6c:cb:9d: 4b:a1:64:8d:e4:83:af:81:01:ce:d5:75:d9:7d:f3: b5:94:d5:8a:eb:3a:c1:99:ae:18:2b:c9:27:97:2f: e8:73:86:15:9f:96:65:60:34:14:32:23:a6:ca:9c: 06:d0:2c:c2:c1:e7:e3:a9:10:32:94:82:c6:2a:13: c2:73:01:2e:72:9d:96:c9:3e:65:5c:40:2a:bc:35: 0d:16:0e:7a:a6:a0:a1:97:9a:22:9d:a9:a8:55:1a: 69:b7:ad:cd:fa:89:47:fd:9d:a9:7c:13:a1:77:7d: e1:bf:ee:1f:f9:19:5e:6f:aa:ba:63:73:1c:ce:2b: 17:74:0f:c1:c3:84:5f:80:a7:40:70:17:54:1b:39: f4:67:5b:80:54:53:bf:26:46:f8:a8:bc:a0:bd:4c: f4:63:c2:59:bd:a2:95:ad:ec:e7:08:f7:81:6b:2a: ef:fc:62:23:50:cc:18:66:46:e1:2f:b9:dc:7d:9d: b4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:32:AC:87:DA:70:FB:92:34:5A:DA:DA:AE:8F:C9:6F:26:A0:E3:A5 X509v3 Authority Key Identifier: keyid:BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/zzKsh9pw-5I0Wtraro_Jbyag46U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.173.39.0/24 Signature Algorithm: sha256WithRSAEncryption 63:0c:e3:94:a7:0f:fa:0f:1c:c0:69:15:f2:42:42:46:43:0c: 6d:f1:2e:2d:2c:1e:09:5b:28:5c:78:de:e2:ad:a7:5b:00:f0: e4:62:36:f2:d6:34:c1:e5:5f:bf:6c:99:7d:f6:cc:fc:7e:74: f9:ff:3e:7b:5b:06:cc:8e:89:4a:84:15:2c:87:2f:16:42:26: e5:f8:57:0b:fd:a2:bb:bb:44:ef:d8:f2:42:8e:75:88:85:4b: 07:af:5d:09:2e:96:48:35:3e:f5:cb:2b:a0:44:b8:a9:b8:21: 32:63:31:cb:4f:ae:a7:ad:34:39:c7:0f:b6:56:ac:59:15:6d: 45:6c:fb:ad:3b:bb:be:3a:5d:0e:e7:fb:2b:96:da:96:45:96: 32:55:a3:09:1d:75:f7:1d:e2:73:03:98:e2:0d:a5:2a:86:64: 85:b3:4a:54:14:c9:a0:cc:98:dd:d8:1d:e8:66:75:b3:e3:02: 0c:9b:71:0c:0d:cb:23:f2:bc:a0:8f:a3:12:51:29:b2:24:ab: d2:46:c2:80:87:cb:74:2a:32:e6:1a:30:b1:17:7a:e7:a3:28: 93:75:13:b5:96:11:46:b0:6c:c7:b9:7c:21:25:8d:b9:1a:98: 84:de:fb:ec:03:ac:ba:40:73:86:6f:f4:11:15:05:11:a4:6d: ed:3e:33:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1q0Etw289mlASMYwsQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMDc1YTIyNzQ5NzYyZWNhYWZmOWNiYzIxN2I4MmYxNzI2 OWUzNjIwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjMyYWM4N2RhNzBmYjkyMzQ1YWRhZGFhZThmYzk2ZjI2YTBlM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZARzYZFZIWJ2C71XYQpbFVZTtW2 lsL8rgXCwMHi61weUp7UNlcNHykA49Gw0UgDheg3yGh05HVLvQLtR6GeYF+9olT1 2u5sy51LoWSN5IOvgQHO1XXZffO1lNWK6zrBma4YK8knly/oc4YVn5ZlYDQUMiOm ypwG0CzCwefjqRAylILGKhPCcwEucp2WyT5lXEAqvDUNFg56pqChl5oinamoVRpp t63N+olH/Z2pfBOhd33hv+4f+Rleb6q6Y3MczisXdA/Bw4RfgKdAcBdUGzn0Z1uA VFO/Jkb4qLygvUz0Y8JZvaKVreznCPeBayrv/GIjUMwYZkbhL7ncfZ209QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM8yrIfacPuSNFra2q6PyW8moOOlMB8GA1UdIwQY MBaAFLwHWiJ0l2Lsqv+cvCF7gvFyaeNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkFkYUluU1hZdXlxXzV5OElYdUM4WEpwNDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80OTJjOGQtNjFhOS00ODA0LTliMDUt YzM5YzJjZGM4MzYyLzEvenpLc2g5cHctNUkwV3RyYXJvX0pieWFnNDZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80OTJjOGQtNjFhOS00ODA0LTliMDUtYzM5YzJjZGM4MzYy LzEvdkFkYUluU1hZdXlxXzV5OElYdUM4WEpwNDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a0nMA0G CSqGSIb3DQEBCwUAA4IBAQBjDOOUpw/6DxzAaRXyQkJGQwxt8S4tLB4JWyhceN7i radbAPDkYjby1jTB5V+/bJl99sz8fnT5/z57WwbMjolKhBUshy8WQibl+FcL/aK7 u0Tv2PJCjnWIhUsHr10JLpZINT71yyugRLipuCEyYzHLT66nrTQ5xw+2VqxZFW1F bPutO7u+Ol0O5/srltqWRZYyVaMJHXX3HeJzA5jiDaUqhmSFs0pUFMmgzJjd2B3o ZnWz4wIMm3EMDcsj8rygj6MSUSmyJKvSRsKAh8t0KjLmGjCxF3rnoyiTdRO1lhFG sGzHuXwhJY25GpiE3vvsA6y6QHOGb/QRFQURpG3tPjMx -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:27 2026 by rpki-client