This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/Z9r0mo-cvy5UdKpZcBAx03n3nPo.roa File: Z9r0mo-cvy5UdKpZcBAx03n3nPo.roa (raw, json) Hash identifier: Aqw8lxJKzRJWghSFPMzx3T1KZ7+I/RcC+00vjuoBl7w= Subject key identifier: 67:DA:F4:9A:8F:9C:BF:2E:54:74:AA:59:70:10:31:D3:79:F7:9C:FA Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62 Certificate serial: 019B77C7413BAA0C1D510A81AB4D0BC4EF24 Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/Z9r0mo-cvy5UdKpZcBAx03n3nPo.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206492 IP address blocks: 194.191.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:41:3b:aa:0c:1d:51:0a:81:ab:4d:0b:c4:ef:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67daf49a8f9cbf2e5474aa59701031d379f79cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:94:01:ce:ca:54:96:c0:f4:e8:a3:12:9e: 58:e1:e1:2c:91:f7:ac:59:c8:2b:7f:22:f1:a2:09: 66:5f:a5:9a:03:ca:d4:86:cb:a9:ff:8b:f9:a7:77: 3e:b6:38:a4:0d:eb:1f:a8:3b:ec:57:f5:eb:ac:9d: bd:4b:40:9d:89:48:9f:fe:9d:1e:f4:45:ff:f7:4c: 86:ef:00:5e:fe:ac:7e:ac:c2:f6:c5:a6:3e:d1:fa: 28:f0:b5:48:be:d5:5a:61:b4:73:b6:a7:51:8f:4c: 46:14:a0:28:2d:c5:8f:16:d5:8b:87:52:ef:0c:29: a5:29:f4:35:a0:86:24:bd:6f:67:48:67:d1:6d:ec: 7d:a8:17:62:95:51:28:ba:b4:76:f7:6d:32:29:f5: 3b:51:7a:7f:14:30:57:18:48:2e:7b:85:73:dc:9c: 2d:66:b4:8f:0a:b3:21:6e:be:d8:c2:d1:42:f0:33: 7c:0e:34:36:a4:a6:59:d4:02:cd:a7:49:f5:cb:d8: 69:8c:34:8b:26:4d:0d:ae:cf:9f:8c:9e:cd:61:0a: a6:8a:5d:4f:f9:e0:ba:05:39:e9:5c:cb:ca:af:fe: b7:e8:bc:c0:97:40:4b:6b:a7:ac:0a:cd:cb:d4:3c: 02:9a:69:ef:73:8e:31:39:f5:96:c6:a4:fb:1f:f1: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DA:F4:9A:8F:9C:BF:2E:54:74:AA:59:70:10:31:D3:79:F7:9C:FA X509v3 Authority Key Identifier: keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/Z9r0mo-cvy5UdKpZcBAx03n3nPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.191.112.0/22 Signature Algorithm: sha256WithRSAEncryption 28:6d:97:86:0a:f6:8c:77:5c:5d:a3:e4:de:46:9b:b9:a4:e7: 2d:a3:9a:65:56:7c:de:0d:1f:42:d8:73:8a:92:8d:73:7d:42: 70:ae:68:de:3b:4a:21:78:5a:95:a9:5d:68:15:3e:2e:1f:26: 41:5d:b4:33:43:1e:3c:bf:2f:4f:1e:f2:12:df:ad:f2:10:73: 4b:2b:7d:77:a6:a7:59:e9:7b:18:5c:46:2b:f5:67:86:7b:46: 59:7a:3d:fc:26:c7:90:8b:de:29:f9:38:fb:75:93:84:8d:1a: 22:02:99:27:73:d4:f7:ed:bd:3b:bd:c8:2a:fe:2e:94:aa:67: 02:0d:13:b6:a8:54:18:2b:1c:f6:5a:6b:fe:0e:d4:bc:08:de: 18:6b:5f:0f:38:9b:e2:79:fe:84:e1:3c:6c:2b:60:6c:35:ca: 65:94:7e:ae:25:36:98:0e:5b:54:f5:cb:95:d3:05:b4:d0:6c: 49:0a:aa:29:59:5a:1b:34:0b:fc:5e:71:bf:f1:44:7b:a3:4f: d5:f6:10:b9:a7:1b:8e:70:27:ee:e9:1f:69:cb:a1:ad:cd:08: 93:85:30:27:cb:5a:50:d2:57:56:d4:93:54:9c:1c:ce:6a:ee: 14:c5:e9:46:8d:99:fb:65:77:a3:cb:a8:ce:1d:17:9a:98:9f: fe:87:4e:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0E7qgwdUQqBq00LxO8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NGM2NzA2ZTNmYmViZGZmMTQ2YThhMTRlYzJhMzI4NGE5 MmJhNjIwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2RhZjQ5YThmOWNiZjJlNTQ3NGFhNTk3MDEwMzFkMzc5Zjc5Y2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0+UAc7KVJbA9OijEp5Y4eEskfes WcgrfyLxoglmX6WaA8rUhsup/4v5p3c+tjikDesfqDvsV/XrrJ29S0CdiUif/p0e 9EX/90yG7wBe/qx+rML2xaY+0foo8LVIvtVaYbRztqdRj0xGFKAoLcWPFtWLh1Lv DCmlKfQ1oIYkvW9nSGfRbex9qBdilVEourR2920yKfU7UXp/FDBXGEgue4Vz3Jwt ZrSPCrMhbr7YwtFC8DN8DjQ2pKZZ1ALNp0n1y9hpjDSLJk0Nrs+fjJ7NYQqmil1P +eC6BTnpXMvKr/636LzAl0BLa6esCs3L1DwCmmnvc44xOfWWxqT7H/EMWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfa9JqPnL8uVHSqWXAQMdN595z6MB8GA1UdIwQY MBaAFKdMZwbj++vf8UaooU7CoyhKkrpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjIt YWE3ODhhNDIwYWVjLzEvWjlyMG1vLWN2eTVVZEtwWmNCQXgwM24zblBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjItYWE3ODhhNDIwYWVj LzEvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwr9wMA0G CSqGSIb3DQEBCwUAA4IBAQAobZeGCvaMd1xdo+TeRpu5pOcto5plVnzeDR9C2HOK ko1zfUJwrmjeO0oheFqVqV1oFT4uHyZBXbQzQx48vy9PHvIS363yEHNLK313pqdZ 6XsYXEYr9WeGe0ZZej38JseQi94p+Tj7dZOEjRoiApknc9T37b07vcgq/i6UqmcC DRO2qFQYKxz2Wmv+DtS8CN4Ya18POJvief6E4TxsK2BsNcpllH6uJTaYDltU9cuV 0wW00GxJCqopWVobNAv8XnG/8UR7o0/V9hC5pxuOcCfu6R9py6GtzQiThTAny1pQ 0ldW1JNUnBzOau4UxelGjZn7ZXejy6jOHReamJ/+h04a -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:00 2026 by rpki-client