This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/ZlTEmYMpffAOZqhQ8mdN5HhC8JU.roa File: ZlTEmYMpffAOZqhQ8mdN5HhC8JU.roa (raw, json) Hash identifier: AqWjrA8SVcF0FHIW5EIMMdA7ZJxrbLWslrcFVwHu7Ko= Subject key identifier: 66:54:C4:99:83:29:7D:F0:0E:66:A8:50:F2:67:4D:E4:78:42:F0:95 Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb Certificate serial: 019B7C8018EF47E64988D6903DC683FDC8E7 Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/ZlTEmYMpffAOZqhQ8mdN5HhC8JU.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25394 IP address blocks: 194.30.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:18:ef:47:e6:49:88:d6:90:3d:c6:83:fd:c8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6654c49983297df00e66a850f2674de47842f095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:b7:1e:72:72:f2:75:89:d6:76:55:69:5d: 34:f2:3b:ea:f1:29:65:76:01:e3:9d:77:60:89:3c: 09:c7:7b:8e:7b:50:1e:82:70:da:ff:22:4f:39:47: cd:a8:e6:e7:9c:63:83:96:f5:e3:2b:61:04:c0:38: 70:b9:0b:88:20:02:85:29:d3:44:82:29:64:0c:55: d3:47:80:80:b6:75:ed:90:42:2e:09:e3:f7:b1:2c: 00:30:db:83:b0:98:48:a5:5d:90:d2:8f:07:0e:ef: f7:c0:79:f4:42:1f:bf:dd:70:bf:56:c0:11:69:81: 82:5b:f9:77:c0:5d:56:80:8b:73:68:8e:0c:12:4a: 7a:75:7f:6f:2b:ab:db:52:e9:94:32:28:0a:91:e5: 45:a1:5d:f9:28:d8:f3:e6:11:7e:73:75:bb:1e:92: 0e:41:e2:b0:db:df:75:d5:52:11:43:49:e4:22:bf: ce:a0:de:b3:60:57:72:e6:88:61:31:ed:93:a4:ff: 83:2e:73:bb:fe:9d:74:94:c5:94:b8:0c:2c:d0:19: 23:ff:29:c0:8a:1f:c7:99:a0:8b:c8:48:10:77:36: fe:fc:2b:75:5e:87:8a:0a:b0:03:0a:92:f6:4c:c8: 6e:7f:5a:b1:e9:54:23:20:60:9d:db:63:f0:10:b2: 1f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:54:C4:99:83:29:7D:F0:0E:66:A8:50:F2:67:4D:E4:78:42:F0:95 X509v3 Authority Key Identifier: keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/ZlTEmYMpffAOZqhQ8mdN5HhC8JU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.30.167.0/24 Signature Algorithm: sha256WithRSAEncryption 71:a1:ca:8c:86:5c:7a:27:95:61:0f:8c:db:5e:8f:e6:c7:98: e3:2e:1a:ee:f2:ec:dc:33:48:0d:1a:56:55:5a:9f:3f:ef:80: e0:c9:89:b5:5b:0f:39:cf:84:41:fa:06:93:fe:f0:a0:c8:46: 57:26:d8:43:69:d0:ce:26:01:08:cc:d5:f0:fb:1a:7a:0b:f4: a9:22:7d:75:0d:c9:23:44:b3:40:fe:07:5c:ef:7a:91:3b:3b: d9:2d:f9:a7:9a:0c:cb:3f:40:90:2e:91:68:80:9a:81:91:f1: 16:4b:c6:03:81:cb:9e:13:d8:05:04:01:c8:b4:54:73:07:7e: 9c:76:b0:00:30:24:9d:8d:b1:b2:9e:2e:37:2d:32:8d:5c:45: 5b:d7:81:64:b2:95:84:f1:8d:0f:0b:4f:42:f1:9a:c2:19:0f: 55:aa:44:b0:a3:b6:4c:da:04:bf:7f:c7:0d:7b:45:dd:25:03: 72:90:d6:62:6f:6f:a9:b9:f9:49:3b:1c:b4:2d:65:48:9d:cf: 55:a1:04:2a:42:bf:4c:63:c3:8d:dc:92:d2:59:fa:6e:70:5b: e8:36:dd:a4:5c:19:39:d3:f8:73:33:f5:1f:60:3d:0d:62:ee: 42:d0:08:da:34:eb:2d:5f:69:15:55:5e:fb:9a:87:85:df:7a: 1b:38:f4:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBjvR+ZJiNaQPcaD/cjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YmEzMjAyNGUyY2I2MTQyMjk1MTEyZmU2MWY2YjFiYzM0 NTdiY2IwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjU0YzQ5OTgzMjk3ZGYwMGU2NmE4NTBmMjY3NGRlNDc4NDJmMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5a3HnJy8nWJ1nZVaV008jvq8Sll dgHjnXdgiTwJx3uOe1AegnDa/yJPOUfNqObnnGODlvXjK2EEwDhwuQuIIAKFKdNE gilkDFXTR4CAtnXtkEIuCeP3sSwAMNuDsJhIpV2Q0o8HDu/3wHn0Qh+/3XC/VsAR aYGCW/l3wF1WgItzaI4MEkp6dX9vK6vbUumUMigKkeVFoV35KNjz5hF+c3W7HpIO QeKw29911VIRQ0nkIr/OoN6zYFdy5ohhMe2TpP+DLnO7/p10lMWUuAws0Bkj/ynA ih/HmaCLyEgQdzb+/Ct1XoeKCrADCpL2TMhuf1qx6VQjIGCd22PwELIfaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGZUxJmDKX3wDmaoUPJnTeR4QvCVMB8GA1UdIwQY MBaAFNm6MgJOLLYUIpURL+YfaxvDRXvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYt N2RmOWU0YTIzOGNjLzEvWmxURW1ZTXBmZkFPWnFoUThtZE41SGhDOEpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYtN2RmOWU0YTIzOGNj LzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh6nMA0G CSqGSIb3DQEBCwUAA4IBAQBxocqMhlx6J5VhD4zbXo/mx5jjLhru8uzcM0gNGlZV Wp8/74DgyYm1Ww85z4RB+gaT/vCgyEZXJthDadDOJgEIzNXw+xp6C/SpIn11Dckj RLNA/gdc73qROzvZLfmnmgzLP0CQLpFogJqBkfEWS8YDgcueE9gFBAHItFRzB36c drAAMCSdjbGyni43LTKNXEVb14FkspWE8Y0PC09C8ZrCGQ9VqkSwo7ZM2gS/f8cN e0XdJQNykNZib2+puflJOxy0LWVInc9VoQQqQr9MY8ON3JLSWfpucFvoNt2kXBk5 0/hzM/UfYD0NYu5C0AjaNOstX2kVVV77moeF33obOPS5 -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:07 2026 by rpki-client