This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/zIBznsYExuvGAYxMF0vlek62MTA.roa File: zIBznsYExuvGAYxMF0vlek62MTA.roa (raw, json) Hash identifier: HZnWy7k6mRkdORmyH/fBqEuQQJtdSt6XxYg73qEplO0= Subject key identifier: CC:80:73:9E:C6:04:C6:EB:C6:01:8C:4C:17:4B:E5:7A:4E:B6:31:30 Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2 Certificate serial: 019B797E1EC4E8DCF1A595DD72634D350F98 Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/zIBznsYExuvGAYxMF0vlek62MTA.roa Signing time: Thu 01 Jan 2026 12:17:46 +0000 ROA not before: Thu 01 Jan 2026 12:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47220 IP address blocks: 194.152.42.0/24 maxlen: 24 194.152.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:1e:c4:e8:dc:f1:a5:95:dd:72:63:4d:35:0f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2 Validity Not Before: Jan 1 12:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc80739ec604c6ebc6018c4c174be57a4eb63130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:09:95:4d:5d:6b:8d:84:46:8d:1c:53:05: 0f:30:5e:b2:b8:40:d6:57:c3:5d:72:81:1f:0a:19: 2a:f1:64:d8:62:e3:8b:87:2d:d6:75:5c:9a:e6:95: 07:c1:60:a8:8a:c5:16:f5:a3:93:8c:7c:99:08:31: 6b:07:13:a3:b1:ce:c2:60:22:15:d2:75:76:97:1e: 08:80:0f:5b:7b:32:24:dc:45:26:7c:ad:ff:71:de: 5c:cc:80:53:e2:4a:37:9d:4e:2e:56:00:28:6f:2a: 8c:9b:12:ce:95:96:c4:d4:a8:e6:cb:94:7d:74:22: df:3c:c7:2e:5a:a5:99:2e:76:5a:a8:c6:57:73:45: 1e:41:34:16:3e:5f:d0:5f:14:c8:5a:97:50:bf:a4: fc:88:4f:7c:3b:54:72:90:e8:a9:dd:a1:6f:bc:18: 9f:73:a9:a1:5b:65:0d:c1:fa:08:45:3d:a6:8c:f0: 67:21:a8:67:13:d5:de:04:54:61:d9:3e:aa:56:f6: 3f:07:5a:17:69:cf:2d:b0:e5:39:7a:c7:dd:4e:4b: 81:07:68:0d:38:51:7d:46:f2:e4:11:f6:6e:d9:3c: 92:fe:30:5a:82:6d:e2:6e:67:61:d0:d8:cb:de:11: 75:f8:65:e1:66:eb:b9:a9:33:28:c7:5d:09:a9:f8: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:80:73:9E:C6:04:C6:EB:C6:01:8C:4C:17:4B:E5:7A:4E:B6:31:30 X509v3 Authority Key Identifier: keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/zIBznsYExuvGAYxMF0vlek62MTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.152.42.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:31:4a:ba:61:cf:ce:af:aa:79:0a:00:47:31:bd:d4:13:e2: fe:65:06:3f:12:66:e0:25:e0:d6:fb:af:19:71:87:bb:d9:43: 12:ba:42:e0:46:3a:04:a4:31:37:2c:ff:a9:a2:86:19:b7:a2: 55:dc:cc:30:5b:37:e8:63:ad:4e:4b:15:d5:04:35:80:59:82: 92:a2:92:f2:e1:6c:9f:d7:13:35:00:a3:6a:28:7b:51:63:45: 35:83:e8:66:99:44:72:44:f2:4d:2a:c6:ef:88:80:ae:ee:3b: ee:da:c1:9d:0a:4e:4d:3f:d7:8b:c6:71:c9:63:aa:4d:3b:be: 81:61:51:d7:9c:78:8c:f6:c9:bc:a4:9f:4d:65:1c:73:3d:95: f7:9a:17:4a:4a:58:48:81:00:80:b1:75:90:f4:f5:e8:50:91: 7e:42:35:02:bd:7f:aa:41:b5:09:62:1a:f7:ec:e0:d9:d5:8f: 40:b5:e1:82:d0:1c:5b:38:14:21:32:92:fd:95:17:47:fe:7e: fd:21:0c:88:54:cb:95:48:67:af:cb:68:74:ad:9b:a9:da:1e: 41:36:a8:67:55:05:ca:a2:90:bd:14:a6:93:15:d3:a5:7a:ac: 92:55:64:25:1e:1c:9e:b6:26:cf:25:27:72:39:aa:e4:40:cd: d8:ac:23:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fh7E6NzxpZXdcmNNNQ+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZjYyOTE2MTk3Zjc3OTZjZWM1NzhlYTQzNTJmYWU0ZWY4 OWFlYzIwHhcNMjYwMTAxMTIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzgwNzM5ZWM2MDRjNmViYzYwMThjNGMxNzRiZTU3YTRlYjYzMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2wJlU1da42ERo0cUwUPMF6yuEDW V8NdcoEfChkq8WTYYuOLhy3WdVya5pUHwWCoisUW9aOTjHyZCDFrBxOjsc7CYCIV 0nV2lx4IgA9bezIk3EUmfK3/cd5czIBT4ko3nU4uVgAobyqMmxLOlZbE1Kjmy5R9 dCLfPMcuWqWZLnZaqMZXc0UeQTQWPl/QXxTIWpdQv6T8iE98O1RykOip3aFvvBif c6mhW2UNwfoIRT2mjPBnIahnE9XeBFRh2T6qVvY/B1oXac8tsOU5esfdTkuBB2gN OFF9RvLkEfZu2TyS/jBagm3ibmdh0NjL3hF1+GXhZuu5qTMox10JqfidjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMyAc57GBMbrxgGMTBdL5XpOtjEwMB8GA1UdIwQY MBaAFKf2KRYZf3eWzsV46kNS+uTvia7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9ZcEZobF9kNWJPeFhqcVExTDY1Ty1KcnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNzFjYTctNTA3MC00YmNjLWEwMGQt ZWM5N2YxOGE3OTRhLzEveklCem5zWUV4dXZHQVl4TUYwdmxlazYyTVRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNzFjYTctNTA3MC00YmNjLWEwMGQtZWM5N2YxOGE3OTRh LzEvcF9ZcEZobF9kNWJPeFhqcVExTDY1Ty1KcnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpgqMA0G CSqGSIb3DQEBCwUAA4IBAQA+MUq6Yc/Or6p5CgBHMb3UE+L+ZQY/EmbgJeDW+68Z cYe72UMSukLgRjoEpDE3LP+pooYZt6JV3MwwWzfoY61OSxXVBDWAWYKSopLy4Wyf 1xM1AKNqKHtRY0U1g+hmmURyRPJNKsbviICu7jvu2sGdCk5NP9eLxnHJY6pNO76B YVHXnHiM9sm8pJ9NZRxzPZX3mhdKSlhIgQCAsXWQ9PXoUJF+QjUCvX+qQbUJYhr3 7ODZ1Y9AteGC0BxbOBQhMpL9lRdH/n79IQyIVMuVSGevy2h0rZup2h5BNqhnVQXK opC9FKaTFdOleqySVWQlHhyetibPJSdyOarkQM3YrCPU -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:37 2026 by rpki-client