This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/Z8LVBFcg0z0aAMYhWrQLHZb_nn8.roa File: Z8LVBFcg0z0aAMYhWrQLHZb_nn8.roa (raw, json) Hash identifier: V2MLHL/okJ/3o6MZQXWdDGTI8xzQQww1eNzhJoWdwk8= Subject key identifier: 67:C2:D5:04:57:20:D3:3D:1A:00:C6:21:5A:B4:0B:1D:96:FF:9E:7F Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4 Certificate serial: 019B7B35D041BED57EB84B81ED3F27C0B148 Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/Z8LVBFcg0z0aAMYhWrQLHZb_nn8.roa Signing time: Thu 01 Jan 2026 20:18:02 +0000 ROA not before: Thu 01 Jan 2026 20:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211465 IP address blocks: 194.42.126.0/23 maxlen: 23 2001:678:1078::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d0:41:be:d5:7e:b8:4b:81:ed:3f:27:c0:b1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4 Validity Not Before: Jan 1 20:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67c2d5045720d33d1a00c6215ab40b1d96ff9e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:20:f6:be:a0:d4:f5:09:7d:d5:da:e1:3e: 4d:37:c5:05:69:4b:8e:c1:f5:d8:8c:9e:33:7f:02: ab:7c:2c:11:27:28:43:3a:4f:e0:9f:f3:1a:16:3b: b4:eb:d0:a1:30:e8:90:98:4f:f5:bb:12:df:af:8c: c3:b6:e1:38:80:5d:07:d9:86:ae:36:b2:5b:87:36: 00:08:74:20:1a:4b:36:62:95:1d:35:a1:4c:b2:05: 4d:b8:11:57:9a:53:f2:62:e2:f6:2b:cf:0c:f4:c6: bb:7c:6f:c7:24:00:96:90:ff:bb:42:15:dd:b8:a9: 93:49:f7:b6:dd:17:f4:85:01:c8:8c:c1:21:74:bb: fe:84:48:62:90:05:ba:15:43:92:04:ed:b0:18:71: f5:c4:ee:34:99:46:8d:bb:9a:ae:d0:c2:f0:8a:b4: f2:4e:90:81:58:1b:80:d0:0e:c4:05:b1:ed:39:9d: 87:f7:5c:c3:0c:2b:be:e1:0d:a6:b6:e4:74:09:63: 56:aa:5a:0f:c1:5d:9f:0d:af:a6:6e:fa:6d:dc:a9: 63:6f:5c:ea:7e:94:49:4e:c4:3b:fe:c4:d7:14:02: 39:c8:04:ce:79:7a:ae:37:ff:59:5a:11:82:36:1d: 0a:6b:3b:2e:14:32:a0:fe:2b:00:e9:f0:78:8e:3a: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C2:D5:04:57:20:D3:3D:1A:00:C6:21:5A:B4:0B:1D:96:FF:9E:7F X509v3 Authority Key Identifier: keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/Z8LVBFcg0z0aAMYhWrQLHZb_nn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.42.126.0/23 IPv6: 2001:678:1078::/48 Signature Algorithm: sha256WithRSAEncryption 47:46:f2:92:98:fa:1a:8e:5a:3a:b7:49:5c:59:48:95:20:1f: ca:53:a4:73:1b:0f:8a:b5:f6:cd:cf:2a:fb:a6:3b:4a:f7:11: 3e:f1:e0:10:50:1b:4f:84:26:cc:23:be:97:66:a5:52:46:44: d3:d9:0c:76:30:19:23:bf:d8:bf:f4:f3:07:23:1d:e6:1e:8e: e3:2e:32:68:f0:a8:86:80:09:63:2c:41:db:12:c3:1a:ce:eb: 64:2b:f3:3b:3c:ec:9a:b8:b8:4f:82:19:f1:a3:0b:de:b3:4a: b1:f5:2a:0b:ad:64:06:fc:c6:a1:4d:1b:1a:30:e2:41:9b:83: a0:85:47:af:f9:ec:51:1a:27:94:d2:be:99:6a:f8:8b:d5:65: 7d:61:a0:9e:1e:d7:1c:78:60:4c:6d:4c:56:01:ea:0d:f8:13: d4:2b:b2:36:81:f5:cc:79:24:33:b6:fe:cd:62:f0:9b:cf:ba: b7:9e:21:3b:b7:7a:af:d2:67:ab:d3:3c:d4:fd:1a:43:d7:c7: 64:bf:18:e1:bd:c4:ea:98:e9:bb:94:9c:6e:01:8b:eb:73:60: 38:02:c9:13:59:d3:79:39:38:da:38:60:8e:c4:bb:f0:7f:4c: a3:d9:30:81:4c:28:4e:33:19:fc:6d:e5:27:78:54:34:80:89: 04:ee:62:c9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NdBBvtV+uEuB7T8nwLFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YzVmZDFkYzBjNDU3ZDllYzExM2QyM2JkNDkzNWM3MjNl OWVjZjQwHhcNMjYwMTAxMjAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2MyZDUwNDU3MjBkMzNkMWEwMGM2MjE1YWI0MGIxZDk2ZmY5ZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L4g9r6g1PUJfdXa4T5NN8UFaUuO wfXYjJ4zfwKrfCwRJyhDOk/gn/MaFju069ChMOiQmE/1uxLfr4zDtuE4gF0H2Yau NrJbhzYACHQgGks2YpUdNaFMsgVNuBFXmlPyYuL2K88M9Ma7fG/HJACWkP+7QhXd uKmTSfe23Rf0hQHIjMEhdLv+hEhikAW6FUOSBO2wGHH1xO40mUaNu5qu0MLwirTy TpCBWBuA0A7EBbHtOZ2H91zDDCu+4Q2mtuR0CWNWqloPwV2fDa+mbvpt3Kljb1zq fpRJTsQ7/sTXFAI5yATOeXquN/9ZWhGCNh0KazsuFDKg/isA6fB4jjrRNwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGfC1QRXINM9GgDGIVq0Cx2W/55/MB8GA1UdIwQY MBaAFGTF/R3AxFfZ7BE9I71JNccj6ez0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDY0MGMtZTY5YS00MzM3LWIxYWEt NGNiMDY3OWFjZTdmLzEvWjhMVkJGY2cwejBhQU1ZaFdyUUxIWmJfbm44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9hNDY0MGMtZTY5YS00MzM3LWIxYWEtNGNiMDY3OWFjZTdm LzEvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwip+MA8E AgACMAkDBwAgAQZ4EHgwDQYJKoZIhvcNAQELBQADggEBAEdG8pKY+hqOWjq3SVxZ SJUgH8pTpHMbD4q19s3PKvumO0r3ET7x4BBQG0+EJswjvpdmpVJGRNPZDHYwGSO/ 2L/08wcjHeYejuMuMmjwqIaACWMsQdsSwxrO62Qr8zs87Jq4uE+CGfGjC96zSrH1 KgutZAb8xqFNGxow4kGbg6CFR6/57FEaJ5TSvplq+IvVZX1hoJ4e1xx4YExtTFYB 6g34E9QrsjaB9cx5JDO2/s1i8JvPureeITu3eq/SZ6vTPNT9GkPXx2S/GOG9xOqY 6buUnG4Bi+tzYDgCyRNZ03k5ONo4YI7Eu/B/TKPZMIFMKE4zGfxt5Sd4VDSAiQTu Ysk= -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:51 2026 by rpki-client