This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Zrsa450bIKbfMqfbbE0wrvaBwFw.roa File: Zrsa450bIKbfMqfbbE0wrvaBwFw.roa (raw, json) Hash identifier: gV8XetexIxC9mhduNSQKWVKTs+c7DiemkcjGYNaBiRo= Subject key identifier: 66:BB:1A:E3:9D:1B:20:A6:DF:32:A7:DB:6C:4D:30:AE:F6:81:C0:5C Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA2242356EF96F531D9A345B914A65 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Zrsa450bIKbfMqfbbE0wrvaBwFw.roa Signing time: Fri 02 Jan 2026 08:19:17 +0000 ROA not before: Fri 02 Jan 2026 08:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23033 IP address blocks: 193.42.244.0/24 maxlen: 24 194.62.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:22:42:35:6e:f9:6f:53:1d:9a:34:5b:91:4a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66bb1ae39d1b20a6df32a7db6c4d30aef681c05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:ba:6c:bd:16:38:15:73:b1:8b:34:a7:87: 93:05:b4:1b:9f:0b:80:ad:75:9a:18:d0:c3:81:5f: 32:f0:c2:92:ae:c6:76:6f:cf:e5:fa:cf:d6:d0:88: a4:f9:94:8a:79:d6:8a:8a:24:44:2e:59:72:65:b4: 3b:aa:ec:18:0d:20:dd:a1:81:2c:32:1c:64:09:b2: 41:a5:d0:d7:63:85:c3:c3:3d:03:3a:73:68:9a:64: 89:56:c3:3a:6c:62:c8:06:66:da:a9:b2:8a:ec:32: 98:3d:6b:b3:0b:73:f4:46:f3:d3:00:21:50:68:4d: e4:66:c4:ad:a6:11:a5:bf:07:f7:f2:36:ed:2e:ec: 58:c9:04:59:cb:c9:7b:d0:df:68:2a:3a:11:fe:c4: db:2f:21:9d:93:61:c2:5e:ec:a8:1c:8a:43:00:8c: 38:cf:d8:36:09:1e:42:e0:45:48:03:84:f2:fc:3d: 3f:48:15:3e:9a:4a:cb:6d:47:d8:fe:5f:d3:25:05: c4:78:6f:1e:fb:86:e6:20:0c:42:8c:74:4d:5a:74: ef:64:3d:50:e6:d2:1b:7a:a4:ae:a6:c0:a2:61:b4: d9:a6:5d:81:64:8c:7c:8d:5a:4b:d9:16:5e:40:ec: 5e:b7:c6:66:79:86:70:2e:6f:aa:bf:05:19:c5:9c: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BB:1A:E3:9D:1B:20:A6:DF:32:A7:DB:6C:4D:30:AE:F6:81:C0:5C X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Zrsa450bIKbfMqfbbE0wrvaBwFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.244.0/24 194.62.166.0/24 Signature Algorithm: sha256WithRSAEncryption 03:32:95:23:e4:60:27:cf:96:c2:e8:01:f0:82:bd:55:8d:8c: 01:3c:5b:6d:7b:ba:34:43:db:c8:37:05:37:c1:d7:08:00:8c: c8:27:9f:09:71:07:00:9b:3e:22:59:40:35:fc:6e:6c:93:3b: dc:ed:a1:20:27:c8:16:4b:53:09:2b:9a:37:fe:f9:e1:cb:a1: 45:62:f3:b2:d0:5b:f6:7e:3f:58:b7:77:b2:d1:35:5e:dc:c3: c8:1c:46:f6:5e:92:dd:30:ee:c9:ff:60:1b:d9:c1:fb:3b:02: 23:64:49:8d:60:16:91:35:0b:ac:de:f9:24:98:1a:14:34:be: 9c:5e:19:1e:97:2f:85:29:4a:43:41:fb:ea:e1:10:34:a2:76: 1a:25:76:07:57:c3:0c:b6:f0:84:ae:50:61:ee:e8:30:cd:f3: ab:cc:a0:fb:8b:83:2d:74:1b:71:c1:38:b1:b6:d7:1b:4e:af: 1a:bc:20:2a:9e:06:6d:e0:24:9a:c8:79:b0:de:25:1e:4b:00: a9:10:37:ca:eb:be:4e:75:08:74:29:72:24:2e:35:0b:5d:e9: 5e:0e:9d:74:41:71:99:61:ac:8a:d7:40:6d:16:24:93:0b:5f: 33:82:f0:78:f8:3c:9c:be:dc:7b:23:73:24:c4:96:f0:1d:98: 81:59:bd:b5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yiJCNW75b1MdmjRbkUplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmJiMWFlMzlkMWIyMGE2ZGYzMmE3ZGI2YzRkMzBhZWY2ODFjMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGa6bL0WOBVzsYs0p4eTBbQbnwuA rXWaGNDDgV8y8MKSrsZ2b8/l+s/W0Iik+ZSKedaKiiRELllyZbQ7quwYDSDdoYEs MhxkCbJBpdDXY4XDwz0DOnNommSJVsM6bGLIBmbaqbKK7DKYPWuzC3P0RvPTACFQ aE3kZsStphGlvwf38jbtLuxYyQRZy8l70N9oKjoR/sTbLyGdk2HCXuyoHIpDAIw4 z9g2CR5C4EVIA4Ty/D0/SBU+mkrLbUfY/l/TJQXEeG8e+4bmIAxCjHRNWnTvZD1Q 5tIbeqSupsCiYbTZpl2BZIx8jVpL2RZeQOxet8ZmeYZwLm+qvwUZxZy1EwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGa7GuOdGyCm3zKn22xNMK72gcBcMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvWnJzYTQ1MGJJS2JmTXFmYmJFMHdydmFCd0Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSr0AwQA wj6mMA0GCSqGSIb3DQEBCwUAA4IBAQADMpUj5GAnz5bC6AHwgr1VjYwBPFtte7o0 Q9vINwU3wdcIAIzIJ58JcQcAmz4iWUA1/G5skzvc7aEgJ8gWS1MJK5o3/vnhy6FF YvOy0Fv2fj9Yt3ey0TVe3MPIHEb2XpLdMO7J/2Ab2cH7OwIjZEmNYBaRNQus3vkk mBoUNL6cXhkely+FKUpDQfvq4RA0onYaJXYHV8MMtvCErlBh7ugwzfOrzKD7i4Mt dBtxwTixttcbTq8avCAqngZt4CSayHmw3iUeSwCpEDfK675OdQh0KXIkLjULXele Dp10QXGZYayK10BtFiSTC18zgvB4+Dycvtx7I3MkxJbwHZiBWb21 -----END CERTIFICATE-----Generated at Mon Jan 19 21:22:45 2026 by rpki-client