This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/ZsafJkeU2d25ljSpLy_TemriX90.roa File: ZsafJkeU2d25ljSpLy_TemriX90.roa (raw, json) Hash identifier: IVTCj8e85875t2DlkKQvBEjaDXUkRlUkp5L1m5Z/Zpg= Subject key identifier: 66:C6:9F:26:47:94:D9:DD:B9:96:34:A9:2F:2F:D3:7A:6A:E2:5F:DD Certificate issuer: /CN=3951f184d4df885604ca47c5397e025a2db2fcfa Certificate serial: 019B94925DEB6AE9C1F26760C45B934328E9 Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/ZsafJkeU2d25ljSpLy_TemriX90.roa Signing time: Tue 06 Jan 2026 18:29:38 +0000 ROA not before: Tue 06 Jan 2026 18:29:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31187 IP address blocks: 193.24.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:92:5d:eb:6a:e9:c1:f2:67:60:c4:5b:93:43:28:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa Validity Not Before: Jan 6 18:29:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66c69f264794d9ddb99634a92f2fd37a6ae25fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:80:76:cb:ce:05:e3:75:47:3c:65:2e:77: 24:56:f1:0e:90:2f:0d:31:cb:2c:26:65:58:3c:95: ff:ab:46:56:c0:71:98:5a:47:20:01:1d:16:f8:52: 33:59:24:4c:08:5f:cb:90:5b:33:b0:01:6a:54:33: 7e:e8:11:f9:62:7b:78:66:4d:d2:cb:9c:f3:ba:c2: 53:c6:76:08:61:23:fc:5c:1b:fc:80:d8:ad:ad:a9: de:79:b2:b6:c9:60:a8:1a:b8:2c:2c:a5:c7:26:f3: d2:2b:5f:5e:5e:46:2f:2b:42:ae:69:a3:ec:3b:a1: cf:0d:1f:62:3b:38:8c:9b:89:1f:b6:6a:01:1c:ca: d9:22:1e:f1:e3:7d:f8:02:4e:a6:37:f7:15:b4:dc: a8:8a:4c:7f:71:c9:29:cc:d9:fa:25:24:6a:7e:38: 01:0c:2e:09:64:c6:20:d5:83:f3:95:4e:06:47:e0: 7a:1f:b9:c8:ce:12:31:12:8e:80:19:95:6f:d8:3c: a2:8c:a8:dd:15:b0:15:84:8e:a8:b6:fa:94:19:3e: df:40:c4:f1:9e:91:2d:c9:32:52:52:01:fa:74:51: 6f:ce:53:2c:46:c3:1d:2a:ad:73:e4:93:aa:f1:aa: dc:98:a9:9b:d0:f9:fb:b3:87:b4:84:ee:75:3f:3e: 97:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C6:9F:26:47:94:D9:DD:B9:96:34:A9:2F:2F:D3:7A:6A:E2:5F:DD X509v3 Authority Key Identifier: keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/ZsafJkeU2d25ljSpLy_TemriX90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.30.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:3e:e5:09:cb:7c:09:c5:25:33:07:2d:29:8b:1d:ef:7b:bf: b3:93:63:26:ba:91:b7:ab:41:59:f9:e5:10:e3:a1:6b:08:54: 1b:af:c7:9d:05:1d:3d:c6:d3:33:36:03:ad:f4:fe:6d:93:3f: e7:49:02:a2:77:76:38:53:64:44:d3:56:79:23:9c:79:6b:87: 73:12:29:b2:1f:4d:a0:84:31:6d:6e:b6:79:c4:86:6a:8b:72: c3:57:7a:57:d7:d6:7a:0e:c6:ea:4c:dd:fb:d7:1f:b8:b2:ba: 2d:47:89:45:ec:ee:42:1c:59:f3:c4:d4:e4:6f:1d:9d:a7:ed: 97:0a:4b:6f:1f:c3:94:9d:94:3a:04:72:c7:f0:8b:e8:d0:77: 95:e3:47:5d:35:cf:38:ca:68:49:f6:45:8c:77:ac:36:41:9b: 4f:39:9f:b7:14:bc:51:93:d9:cf:ec:f4:79:43:4a:9d:60:14: 6c:c0:ca:8a:71:e8:ad:f8:3e:79:49:7f:97:ed:25:ed:be:57: f0:9c:5e:f6:b1:13:4f:26:d0:33:d4:6e:14:f7:01:ef:60:f1: a6:48:99:7b:7c:6a:55:4e:ba:98:ec:4a:9a:1c:cd:db:b1:99: 5e:93:d8:6c:f2:64:61:c8:55:f4:25:e8:97:78:76:49:a4:08: b3:26:31:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuUkl3raunB8mdgxFuTQyjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NTFmMTg0ZDRkZjg4NTYwNGNhNDdjNTM5N2UwMjVhMmRi MmZjZmEwHhcNMjYwMTA2MTgyOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmM2OWYyNjQ3OTRkOWRkYjk5NjM0YTkyZjJmZDM3YTZhZTI1ZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/eAdsvOBeN1RzxlLnckVvEOkC8N McssJmVYPJX/q0ZWwHGYWkcgAR0W+FIzWSRMCF/LkFszsAFqVDN+6BH5Ynt4Zk3S y5zzusJTxnYIYSP8XBv8gNitraneebK2yWCoGrgsLKXHJvPSK19eXkYvK0KuaaPs O6HPDR9iOziMm4kftmoBHMrZIh7x4334Ak6mN/cVtNyoikx/cckpzNn6JSRqfjgB DC4JZMYg1YPzlU4GR+B6H7nIzhIxEo6AGZVv2DyijKjdFbAVhI6otvqUGT7fQMTx npEtyTJSUgH6dFFvzlMsRsMdKq1z5JOq8arcmKmb0Pn7s4e0hO51Pz6XZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbGnyZHlNnduZY0qS8v03pq4l/dMB8GA1UdIwQY MBaAFDlR8YTU34hWBMpHxTl+Alotsvz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTct NjhjNDU2NzIwOGRhLzEvWnNhZkprZVUyZDI1bGpTcEx5X1RlbXJpWDkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTctNjhjNDU2NzIwOGRh LzEvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRgeMA0G CSqGSIb3DQEBCwUAA4IBAQBdPuUJy3wJxSUzBy0pix3ve7+zk2MmupG3q0FZ+eUQ 46FrCFQbr8edBR09xtMzNgOt9P5tkz/nSQKid3Y4U2RE01Z5I5x5a4dzEimyH02g hDFtbrZ5xIZqi3LDV3pX19Z6DsbqTN371x+4srotR4lF7O5CHFnzxNTkbx2dp+2X CktvH8OUnZQ6BHLH8Ivo0HeV40ddNc84ymhJ9kWMd6w2QZtPOZ+3FLxRk9nP7PR5 Q0qdYBRswMqKceit+D55SX+X7SXtvlfwnF72sRNPJtAz1G4U9wHvYPGmSJl7fGpV TrqY7EqaHM3bsZlek9hs8mRhyFX0JeiXeHZJpAizJjFu -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:05 2026 by rpki-client