This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Z_dhLOch6TYTV9CL8O4Hm4DfmCk.roa File: Z_dhLOch6TYTV9CL8O4Hm4DfmCk.roa (raw, json) Hash identifier: DcqTrnDilb8Z9To81j5+j4/Q2r+QSmdq/GQFcIQwzfg= Subject key identifier: 67:F7:61:2C:E7:21:E9:36:13:57:D0:8B:F0:EE:07:9B:80:DF:98:29 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA2204ABCDF03E101B15832D74A635 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Z_dhLOch6TYTV9CL8O4Hm4DfmCk.roa Signing time: Fri 02 Jan 2026 08:19:17 +0000 ROA not before: Fri 02 Jan 2026 08:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19844 IP address blocks: 31.40.193.0/24 maxlen: 24 45.141.13.0/24 maxlen: 24 83.136.48.0/24 maxlen: 24 93.177.111.0/24 maxlen: 24 185.240.86.0/24 maxlen: 24 194.62.164.0/24 maxlen: 24 194.62.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:22:04:ab:cd:f0:3e:10:1b:15:83:2d:74:a6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67f7612ce721e9361357d08bf0ee079b80df9829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:80:29:95:82:5f:79:80:c7:2d:7a:20:4f:00: 9d:a4:a7:2b:02:28:d8:56:a5:8b:dc:a0:a1:cb:d5: ce:3c:e0:61:f1:64:9f:b4:6b:09:2e:35:13:4d:76: 18:c2:b9:97:3c:7e:5d:46:80:45:6a:b6:ee:76:b0: c3:00:00:29:60:2a:43:2c:96:19:9d:1b:fc:4d:93: e8:71:d0:b6:a7:28:25:f0:3f:d6:2c:16:71:2f:f7: 19:c4:7e:b5:ad:28:ac:d8:1d:8a:85:e3:c9:54:c7: 40:df:80:60:c4:15:1e:5e:c7:e9:22:5a:f2:8f:80: 2b:47:af:c1:3b:6e:3b:26:af:fa:48:42:aa:ce:f0: a8:af:63:c5:af:89:87:55:ef:18:87:a9:2d:28:b1: d3:1e:60:3c:b8:4c:0e:93:e9:db:8f:1e:f2:89:d0: d7:fc:31:a7:07:c7:d3:40:52:96:10:c9:4e:6d:82: c3:ac:07:b4:6e:6f:37:d9:ad:ab:cd:e4:56:1d:43: 2e:c9:2b:26:3e:4f:a7:9b:e6:76:cf:e5:85:7a:67: ec:e2:5f:88:31:1c:d6:7e:70:0f:93:1b:0f:27:c4: fd:6b:f4:b7:6d:6a:60:ae:50:62:84:05:ca:e5:da: 7f:80:b2:b3:04:69:16:b8:8e:fa:84:4b:bf:b3:ce: 83:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F7:61:2C:E7:21:E9:36:13:57:D0:8B:F0:EE:07:9B:80:DF:98:29 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Z_dhLOch6TYTV9CL8O4Hm4DfmCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.193.0/24 45.141.13.0/24 83.136.48.0/24 93.177.111.0/24 185.240.86.0/24 194.62.164.0/24 194.62.167.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:11:ab:3b:6b:14:ff:1e:e2:25:c4:78:bb:3c:ed:67:d2:6e: f3:cb:0c:19:0c:b0:ae:b1:ce:8c:a4:04:7e:1c:22:f5:02:d1: a7:d9:1c:1e:c6:25:ca:cc:77:22:38:5f:78:69:0e:2d:0c:0a: 64:06:ae:37:61:68:bf:9d:47:2c:a0:6f:43:84:d0:7b:cb:74: 39:5c:c1:31:cd:00:04:46:2c:8a:1f:32:0b:60:78:23:5d:d9: ca:7c:7d:56:d9:83:ec:bb:6f:5e:77:11:a0:40:cf:32:e4:a0: 80:b4:46:bb:3a:47:16:00:7d:de:17:ce:2a:50:52:90:c3:e0: 9b:88:83:73:48:10:e8:6e:ed:9f:c6:df:70:85:d6:9a:c8:1f: 1a:3d:bc:cd:cb:27:b8:5f:36:b2:60:82:75:02:7f:21:ea:f9: cd:83:2b:07:6d:c1:b7:df:c1:0d:53:e7:5f:00:21:9c:03:67: dc:c8:fa:8b:7b:71:0d:fd:15:e8:c6:01:69:4b:a2:f7:a7:5f: 2d:1f:5b:3b:05:04:f6:a2:98:b5:87:23:a1:6a:f9:6a:b4:12: 3a:22:3c:d8:7a:fb:9d:2e:b8:05:d9:6e:73:c4:ef:6b:32:93: 0c:d0:09:7b:63:9e:fc:4c:81:ef:8f:a1:f0:4b:3c:a0:5e:67: b2:fb:8d:cd -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt9yiIEq83wPhAbFYMtdKY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2Y3NjEyY2U3MjFlOTM2MTM1N2QwOGJmMGVlMDc5YjgwZGY5ODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04AplYJfeYDHLXogTwCdpKcrAijY VqWL3KChy9XOPOBh8WSftGsJLjUTTXYYwrmXPH5dRoBFarbudrDDAAApYCpDLJYZ nRv8TZPocdC2pygl8D/WLBZxL/cZxH61rSis2B2KhePJVMdA34BgxBUeXsfpIlry j4ArR6/BO247Jq/6SEKqzvCor2PFr4mHVe8Yh6ktKLHTHmA8uEwOk+nbjx7yidDX /DGnB8fTQFKWEMlObYLDrAe0bm832a2rzeRWHUMuySsmPk+nm+Z2z+WFemfs4l+I MRzWfnAPkxsPJ8T9a/S3bWpgrlBihAXK5dp/gLKzBGkWuI76hEu/s86DhQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFGf3YSznIek2E1fQi/DuB5uA35gpMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvWl9kaExPY2g2VFlUVjlDTDhPNEhtNERmbUNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAHyjBAwQA LY0NAwQAU4gwAwQAXbFvAwQAufBWAwQAwj6kAwQAwj6nMA0GCSqGSIb3DQEBCwUA A4IBAQCcEas7axT/HuIlxHi7PO1n0m7zywwZDLCusc6MpAR+HCL1AtGn2RwexiXK zHciOF94aQ4tDApkBq43YWi/nUcsoG9DhNB7y3Q5XMExzQAERiyKHzILYHgjXdnK fH1W2YPsu29edxGgQM8y5KCAtEa7OkcWAH3eF84qUFKQw+CbiINzSBDobu2fxt9w hdaayB8aPbzNyye4XzayYIJ1An8h6vnNgysHbcG338ENU+dfACGcA2fcyPqLe3EN /RXoxgFpS6L3p18tH1s7BQT2opi1hyOhavlqtBI6IjzYevudLrgF2W5zxO9rMpMM 0Al7Y578TIHvj6HwSzygXmey+43N -----END CERTIFICATE-----Generated at Mon Jan 19 21:22:45 2026 by rpki-client