This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa File: 1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa (raw, json) Hash identifier: RnN32d6e4MWESaRTbw2K0CLbZb59w+5PKP+DYaK/k9o= Subject key identifier: F9:BC:C0:F8:B0:BD:1C:00:09:18:81:CD:67:25:A1:FF:93:28:53:E8 Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd Certificate serial: 019B7758954F46832E8305B4AEB871BD3FE7 Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa Signing time: Thu 01 Jan 2026 02:17:32 +0000 ROA not before: Thu 01 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 193.53.174.0/24 maxlen: 24 193.53.185.0/24 maxlen: 24 193.53.186.0/24 maxlen: 24 193.53.188.0/24 maxlen: 24 193.53.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:95:4f:46:83:2e:83:05:b4:ae:b8:71:bd:3f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9bcc0f8b0bd1c00091881cd6725a1ff932853e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:23:73:d8:01:bb:47:97:53:71:4d:d8:25: aa:80:43:8e:64:d9:f6:d3:46:10:1f:92:66:75:a4: b7:2b:10:29:3e:5e:c5:f8:c3:59:f4:8b:5f:05:f6: 8a:c0:19:83:a0:60:43:44:c1:62:5a:fb:36:c2:43: ca:21:a4:b3:f0:d1:dd:a5:89:7c:3b:5f:bf:3e:a1: d1:69:44:d8:d6:36:61:c5:82:f5:db:71:bc:5e:48: 90:ae:22:a4:b1:15:38:a8:be:73:35:22:b8:79:c0: 2d:a2:d9:80:df:aa:86:3d:cf:ca:e4:18:da:19:41: fc:be:65:78:d9:15:f8:45:1a:fc:4f:8c:2e:f0:92: 4b:d3:38:91:c7:63:8e:cf:cf:4e:96:a7:bb:db:c6: 38:99:74:6f:6a:ba:a5:be:5f:f9:c4:c9:2d:38:91: d0:ba:61:29:84:c7:91:a5:d9:32:ba:2b:19:46:c4: 4c:0e:21:5f:03:81:48:c6:50:ba:21:fc:33:a0:c9: c5:4c:89:91:bc:49:fe:7a:38:dc:78:c0:97:e9:e7: 48:f9:40:0f:e7:bd:2b:2f:c4:2f:a1:9e:cc:2a:6a: 78:1b:6d:8c:f0:3e:fa:38:59:44:9e:ab:0d:1f:85: 84:6a:d0:e1:19:e2:72:b3:18:20:b3:62:c3:e4:89: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BC:C0:F8:B0:BD:1C:00:09:18:81:CD:67:25:A1:FF:93:28:53:E8 X509v3 Authority Key Identifier: keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.174.0/24 193.53.185.0-193.53.186.255 193.53.188.0/24 193.53.190.0/24 Signature Algorithm: sha256WithRSAEncryption b7:dd:fb:cd:c3:7c:85:fc:36:ad:b3:ef:cd:ce:c1:3f:fc:5f: af:b9:fd:20:cc:34:33:fb:7e:8f:cb:57:06:49:56:82:7a:57: 0e:ba:b1:18:3d:1e:54:6b:c2:4c:86:13:a3:8f:d4:ed:8d:82: df:c0:81:84:64:ad:28:21:2d:38:17:28:2d:c7:32:4c:61:cc: 7a:a7:24:9c:c9:7b:f0:f6:c7:c4:01:a9:c3:d0:a5:9e:5c:78: e3:f8:c2:88:47:9e:e1:cd:c9:d2:bf:7f:7d:3b:d5:8b:34:34: 15:fb:04:53:47:c7:bb:53:0d:a5:18:d6:10:59:cf:da:c8:28: d3:d1:1f:15:1a:20:b8:18:e2:1d:de:95:d7:91:26:0b:ea:3d: 24:bf:8e:36:49:cf:35:cf:ad:0f:5e:05:17:30:67:9b:a3:95: 2d:c5:01:d4:c9:2c:3c:3b:e3:5a:40:69:b7:76:02:cc:8b:55: 2c:db:ab:bf:03:bd:9c:93:73:a5:43:bd:5c:6b:c5:0e:4f:41: 6d:39:2a:6d:76:91:7d:b8:7c:03:dd:bc:43:40:7a:05:9f:3c: 45:37:5d:4e:54:49:af:9d:15:29:75:10:d6:e8:1b:9f:5d:de: 53:cc:37:1b:ea:34:d7:4d:39:bc:22:6f:5b:fd:9e:e4:d1:29: 80:a6:de:6a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3WJVPRoMugwW0rrhxvT/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1 YmJjZGQwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWJjYzBmOGIwYmQxYzAwMDkxODgxY2Q2NzI1YTFmZjkzMjg1M2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0Ejc9gBu0eXU3FN2CWqgEOOZNn2 00YQH5JmdaS3KxApPl7F+MNZ9ItfBfaKwBmDoGBDRMFiWvs2wkPKIaSz8NHdpYl8 O1+/PqHRaUTY1jZhxYL123G8XkiQriKksRU4qL5zNSK4ecAtotmA36qGPc/K5Bja GUH8vmV42RX4RRr8T4wu8JJL0ziRx2OOz89Olqe728Y4mXRvarqlvl/5xMktOJHQ umEphMeRpdkyuisZRsRMDiFfA4FIxlC6IfwzoMnFTImRvEn+ejjceMCX6edI+UAP 570rL8QvoZ7MKmp4G22M8D76OFlEnqsNH4WEatDhGeJysxggs2LD5InBPwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPm8wPiwvRwACRiBzWclof+TKFPoMB8GA1UdIwQY MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt YmM1YWI4MTk4N2YwLzEvMS1iekEtTEM5SEFBSkdJSE5aeVdoXzVNb1UtZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2MvNTgwNzY5LWE5YzQtNDk5YS1iOWRiLWJjNWFiODE5ODdm MC8xLzB2bDRuaHRaLWk4c1VNNGVqaExybDJWYnZOMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAME1rjAM AwQAwTW5AwQAwTW6AwQAwTW8AwQAwTW+MA0GCSqGSIb3DQEBCwUAA4IBAQC33fvN w3yF/Dats+/NzsE//F+vuf0gzDQz+36Py1cGSVaCelcOurEYPR5Ua8JMhhOjj9Tt jYLfwIGEZK0oIS04FygtxzJMYcx6pyScyXvw9sfEAanD0KWeXHjj+MKIR57hzcnS v399O9WLNDQV+wRTR8e7Uw2lGNYQWc/ayCjT0R8VGiC4GOId3pXXkSYL6j0kv442 Sc81z60PXgUXMGebo5UtxQHUySw8O+NaQGm3dgLMi1Us26u/A72ck3OlQ71ca8UO T0FtOSptdpF9uHwD3bxDQHoFnzxFN11OVEmvnRUpdRDW6BufXd5TzDcb6jTXTTm8 Im9b/Z7k0SmApt5q -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:59 2026 by rpki-client