This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa File: Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa (raw, json) Hash identifier: OG2fkvNtGY/HMomh9VL9hQ1Vbd5noSl5aNza/Xw2mXc= Subject key identifier: 47:3B:36:1D:74:33:4C:BA:C3:A8:38:FD:2C:FD:68:58:06:CA:30:6C Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48 Certificate serial: 019B7CECD4C7D2406810EF42694958395312 Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa Signing time: Fri 02 Jan 2026 04:17:34 +0000 ROA not before: Fri 02 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9145 IP address blocks: 194.31.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d4:c7:d2:40:68:10:ef:42:69:49:58:39:53:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48 Validity Not Before: Jan 2 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=473b361d74334cbac3a838fd2cfd685806ca306c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:d1:85:d1:c5:52:c0:16:3a:ef:2b:a1:05: eb:46:c8:d4:19:99:1f:c8:bf:20:76:e7:46:5a:45: 2e:8b:6d:43:59:a5:f3:02:3b:f8:78:a8:10:28:54: 6b:19:11:42:30:bb:72:89:68:29:da:7d:e1:88:4a: 42:81:f8:fc:76:e7:59:17:15:a5:08:71:7a:b7:3f: f9:9c:b1:dd:4d:28:4e:4d:36:c0:de:32:eb:b0:25: 0d:b0:be:71:97:f3:05:18:f7:b5:61:29:31:43:5c: 93:ea:23:05:d1:5f:73:da:58:e8:1d:6c:06:fa:ae: b6:b6:5b:64:9e:63:50:7a:50:5d:ab:dd:b8:3a:90: 7f:d7:e6:05:7b:66:fd:a3:48:8c:0c:40:60:30:7d: be:6c:a6:82:65:39:cd:0e:c5:94:81:34:4f:5c:ff: 29:1a:cf:47:1d:6b:d9:58:95:78:a6:22:cf:36:b8: 79:19:3f:a7:85:ed:5a:af:ef:f8:f7:17:de:7b:24: c4:85:b0:e0:b0:bd:fc:96:47:53:22:65:17:44:c4: 73:f9:b1:5a:f0:f1:fd:73:5c:d4:bb:1a:bb:3f:c9: de:4e:4e:e5:6a:d0:36:30:cf:c3:d8:e2:09:b1:e4: c1:c5:1e:dc:32:07:1c:de:74:af:c9:4d:e7:4c:06: 63:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3B:36:1D:74:33:4C:BA:C3:A8:38:FD:2C:FD:68:58:06:CA:30:6C X509v3 Authority Key Identifier: keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.94.0/23 Signature Algorithm: sha256WithRSAEncryption 64:96:e2:53:95:c6:47:78:3f:cf:a7:84:3f:e5:02:20:94:16: 70:94:5c:69:0d:a4:b1:dc:49:86:a2:cc:b1:b7:9a:c4:2c:6a: 68:13:28:41:38:2d:8f:68:19:ba:8e:bd:ee:14:b9:ec:03:41: c1:7b:4b:22:12:31:c0:76:1b:ca:8c:99:d8:9f:84:dc:ba:fe: 1d:99:05:51:56:3e:60:04:bb:dd:cd:d9:ec:02:20:68:70:9e: 3e:c8:46:e3:54:d3:43:98:98:01:c8:56:e6:8f:b6:c8:9a:f4: 57:20:c4:f0:bf:71:44:85:a0:e0:7a:54:3a:17:8b:d5:a0:71: 92:74:2d:39:f1:11:c7:27:6f:12:05:29:71:cf:13:76:2a:c8: d4:18:2e:46:a2:f1:98:c6:d1:a1:09:26:a9:1e:9e:5b:f0:ff: 37:2f:2e:10:a7:a3:f9:da:f1:c6:48:26:9c:43:5b:b6:25:e8: ae:66:d6:32:63:11:75:ef:e1:b7:45:74:74:11:bf:aa:ee:ef: 32:b6:24:8b:58:f5:6a:82:3d:00:7d:23:80:47:8f:65:86:d9: 8f:6b:69:10:93:1c:b6:3d:e6:67:b9:41:3f:72:c4:86:f8:d7: 81:36:c5:6d:2b:84:a5:84:f7:ca:89:ae:40:a9:2d:1b:32:6e: 6a:06:ac:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87NTH0kBoEO9CaUlYOVMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YWFkMTdiMTA2Nzc1ZTQ4NGY2MWViYjVlYzEwNGMyN2Mx ODdlNDgwHhcNMjYwMTAyMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzNiMzYxZDc0MzM0Y2JhYzNhODM4ZmQyY2ZkNjg1ODA2Y2EzMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+fRhdHFUsAWOu8roQXrRsjUGZkf yL8gdudGWkUui21DWaXzAjv4eKgQKFRrGRFCMLtyiWgp2n3hiEpCgfj8dudZFxWl CHF6tz/5nLHdTShOTTbA3jLrsCUNsL5xl/MFGPe1YSkxQ1yT6iMF0V9z2ljoHWwG +q62tltknmNQelBdq924OpB/1+YFe2b9o0iMDEBgMH2+bKaCZTnNDsWUgTRPXP8p Gs9HHWvZWJV4piLPNrh5GT+nhe1ar+/49xfeeyTEhbDgsL38lkdTImUXRMRz+bFa 8PH9c1zUuxq7P8neTk7latA2MM/D2OIJseTBxR7cMgcc3nSvyU3nTAZjTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEc7Nh10M0y6w6g4/Sz9aFgGyjBsMB8GA1UdIwQY MBaAFAmq0XsQZ3XkhPYeu17BBMJ8GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMt YjRhMTcwMGYyMTcyLzEvUnpzMkhYUXpUTHJEcURqOUxQMW9XQWJLTUd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMtYjRhMTcwMGYyMTcy LzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwh9eMA0G CSqGSIb3DQEBCwUAA4IBAQBkluJTlcZHeD/Pp4Q/5QIglBZwlFxpDaSx3EmGosyx t5rELGpoEyhBOC2PaBm6jr3uFLnsA0HBe0siEjHAdhvKjJnYn4Tcuv4dmQVRVj5g BLvdzdnsAiBocJ4+yEbjVNNDmJgByFbmj7bImvRXIMTwv3FEhaDgelQ6F4vVoHGS dC058RHHJ28SBSlxzxN2KsjUGC5GovGYxtGhCSapHp5b8P83Ly4Qp6P52vHGSCac Q1u2JeiuZtYyYxF17+G3RXR0Eb+q7u8ytiSLWPVqgj0AfSOAR49lhtmPa2kQkxy2 PeZnuUE/csSG+NeBNsVtK4SlhPfKia5AqS0bMm5qBqyv -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:53 2026 by rpki-client