This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZTCamupZAJDTClJXxJ03LEgJFsA.roa File: ZTCamupZAJDTClJXxJ03LEgJFsA.roa (raw, json) Hash identifier: /5Dxu0/OG7OinvsNdC5c6H7Gyq4OMluqArvHjJKqr80= Subject key identifier: 65:30:9A:9A:EA:59:00:90:D3:0A:52:57:C4:9D:37:2C:48:09:16:C0 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB727C7D58668A828841532833CA36 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZTCamupZAJDTClJXxJ03LEgJFsA.roa Signing time: Fri 02 Jan 2026 08:20:43 +0000 ROA not before: Fri 02 Jan 2026 08:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60840 IP address blocks: 185.201.31.0/24 maxlen: 24 193.228.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:72:7c:7d:58:66:8a:82:88:41:53:28:33:ca:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65309a9aea590090d30a5257c49d372c480916c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:a7:a7:94:9c:96:a5:32:46:02:eb:20:fb: f0:68:68:93:ae:5d:0f:35:56:16:36:f8:7c:9f:9a: d8:ac:f5:6d:5f:fe:b2:88:86:5f:6a:a4:d5:99:44: e2:88:bb:d8:11:65:65:f8:ca:51:45:91:5d:91:c9: e9:5e:fc:6c:2e:fd:23:90:14:e1:c5:27:6e:cf:4d: e1:93:de:29:05:9a:72:c6:d8:ce:6e:2d:71:af:4a: 09:5b:3f:3c:25:e6:ab:44:d2:00:29:4d:ab:dd:66: 6b:bc:7d:7f:1f:d9:48:ce:1d:6e:79:28:7f:3d:ae: db:5b:96:c5:f4:d7:c1:a7:0e:b3:5b:1d:09:d8:de: 87:be:b8:a7:7e:2a:35:77:f2:d8:82:4c:40:1f:72: 46:0c:f5:c6:b8:53:6c:8b:5d:55:d0:16:22:09:b2: c0:46:51:32:d0:af:51:90:19:b2:5f:c8:0f:cb:70: ce:41:aa:16:10:30:31:fc:b0:d6:2d:69:f0:0b:52: af:95:11:8f:27:95:ee:3a:9a:24:6c:0e:37:a1:68: ad:08:8a:e3:b6:66:9d:1b:58:db:9e:d5:4b:e0:6f: db:a3:4f:74:0f:87:2f:ce:2e:67:5b:5b:a9:43:3c: bc:a2:c6:33:6f:69:86:91:10:58:d2:0c:e4:34:78: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:30:9A:9A:EA:59:00:90:D3:0A:52:57:C4:9D:37:2C:48:09:16:C0 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ZTCamupZAJDTClJXxJ03LEgJFsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.201.31.0/24 193.228.130.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:f7:d9:04:93:d2:22:db:70:65:d7:21:68:1b:4b:4e:ea:d1: 59:90:bb:d9:dd:d6:33:af:51:0b:9c:d5:60:13:86:8c:3c:ff: 6c:40:75:e0:ad:13:f3:8d:b2:00:4a:0b:ab:e9:40:8b:c4:87: 2a:c9:58:18:3b:8e:20:f6:c2:2f:49:fc:e9:ee:f0:fe:ea:3c: cd:ab:b1:fd:47:f6:b6:da:1f:3f:eb:e5:dc:4a:70:14:f2:ef: 70:d8:0a:6c:d6:79:39:0e:ba:9a:d4:d7:5d:28:49:fb:06:e3: 97:5d:9c:e7:93:d8:f3:40:15:66:19:c8:c7:e5:72:0a:ff:ac: 92:68:d6:9b:0e:ca:ab:e3:69:78:53:3e:2d:5a:f4:2b:95:ad: be:ca:f9:24:01:ce:f3:4b:5e:6b:27:ab:43:4d:5e:a3:72:29: ca:4f:18:0e:5e:b7:17:42:1a:50:c3:ab:ab:cd:0d:31:00:03: 77:2f:d3:5f:fa:65:43:ac:fa:97:f3:11:20:2c:ca:5f:3a:74: d8:80:69:29:7f:aa:d7:9a:09:e2:92:e1:67:ca:44:42:4e:16: 17:d1:7b:4d:0f:24:b6:ec:0f:a7:df:a4:30:80:31:4d:f8:7b: cf:65:a9:64:66:72:79:68:28:3e:35:e2:75:50:c0:fd:81:33: 14:32:df:f9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y3J8fVhmioKIQVMoM8o2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTMwOWE5YWVhNTkwMDkwZDMwYTUyNTdjNDlkMzcyYzQ4MDkxNmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdKnp5SclqUyRgLrIPvwaGiTrl0P NVYWNvh8n5rYrPVtX/6yiIZfaqTVmUTiiLvYEWVl+MpRRZFdkcnpXvxsLv0jkBTh xSduz03hk94pBZpyxtjObi1xr0oJWz88JearRNIAKU2r3WZrvH1/H9lIzh1ueSh/ Pa7bW5bF9NfBpw6zWx0J2N6Hvrinfio1d/LYgkxAH3JGDPXGuFNsi11V0BYiCbLA RlEy0K9RkBmyX8gPy3DOQaoWEDAx/LDWLWnwC1KvlRGPJ5XuOpokbA43oWitCIrj tmadG1jbntVL4G/bo090D4cvzi5nW1upQzy8osYzb2mGkRBY0gzkNHgqzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGUwmprqWQCQ0wpSV8SdNyxICRbAMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvWlRDYW11cFpBSkRUQ2xKWHhKMDNMRWdKRnNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuckfAwQA weSCMA0GCSqGSIb3DQEBCwUAA4IBAQCa99kEk9Ii23Bl1yFoG0tO6tFZkLvZ3dYz r1ELnNVgE4aMPP9sQHXgrRPzjbIASgur6UCLxIcqyVgYO44g9sIvSfzp7vD+6jzN q7H9R/a22h8/6+XcSnAU8u9w2Aps1nk5Drqa1NddKEn7BuOXXZznk9jzQBVmGcjH 5XIK/6ySaNabDsqr42l4Uz4tWvQrla2+yvkkAc7zS15rJ6tDTV6jcinKTxgOXrcX QhpQw6urzQ0xAAN3L9Nf+mVDrPqX8xEgLMpfOnTYgGkpf6rXmgnikuFnykRCThYX 0XtNDyS27A+n36QwgDFN+HvPZalkZnJ5aCg+NeJ1UMD9gTMUMt/5 -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:22 2026 by rpki-client