This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/KzJ38YtTVUpyFa7KO6sOTmdjUMI.roa File: KzJ38YtTVUpyFa7KO6sOTmdjUMI.roa (raw, json) Hash identifier: ua65+1lYMoMHdnVY3brws3FwYpdS0rpL21WtR4XZr7U= Subject key identifier: 2B:32:77:F1:8B:53:55:4A:72:15:AE:CA:3B:AB:0E:4E:67:63:50:C2 Certificate issuer: /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132 Certificate serial: 019B7D5CED3259CEF4EA163459A3FA4CF455 Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/KzJ38YtTVUpyFa7KO6sOTmdjUMI.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30962 IP address blocks: 193.200.128.0/24 maxlen: 24 2001:67c:208::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ed:32:59:ce:f4:ea:16:34:59:a3:fa:4c:f4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b3277f18b53554a7215aeca3bab0e4e676350c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:aa:1b:77:1c:c5:54:6e:41:4b:cf:d2:19: 81:ce:9a:34:a0:c2:2b:ba:5e:98:94:b1:51:35:d3: bc:72:30:2c:2e:de:54:c1:8c:e4:4a:60:bb:ed:82: 30:b8:4d:ed:2e:5f:8c:d4:b5:67:2e:a3:2c:83:df: 9b:68:f4:d0:bc:fb:4c:76:66:c2:e2:2a:15:06:3d: e1:28:42:03:bb:b2:36:34:d1:97:a8:23:98:00:82: e4:f3:6d:8d:5c:12:51:70:48:02:d3:5b:89:c7:98: 8a:57:30:cd:80:17:50:7c:15:a5:1a:f5:4f:7c:99: db:45:c7:e7:cb:56:fc:ee:2b:dc:5a:66:8e:83:f2: c7:ca:9d:af:2d:59:d2:47:1a:80:bd:0e:59:b0:cb: 12:57:f7:c8:db:a1:6a:06:b8:10:fb:8b:e2:7a:8e: 26:c4:49:a0:a9:85:fd:75:c9:73:3e:75:c0:35:0c: bf:d1:3c:d7:1e:b0:b1:9e:26:9f:3b:2a:1d:cc:bd: ab:5b:5d:d1:1d:f5:94:e1:3b:36:f8:44:c6:34:7b: 4f:54:97:7e:77:68:93:92:b3:fb:03:0f:72:52:cd: ab:95:75:2b:5e:62:37:4f:d5:5a:a0:f1:26:6e:26: 73:46:f1:53:bf:eb:51:c7:66:ca:e0:11:cb:29:95: ee:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:32:77:F1:8B:53:55:4A:72:15:AE:CA:3B:AB:0E:4E:67:63:50:C2 X509v3 Authority Key Identifier: keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/KzJ38YtTVUpyFa7KO6sOTmdjUMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.128.0/24 IPv6: 2001:67c:208::/48 Signature Algorithm: sha256WithRSAEncryption 77:3f:06:3a:b9:4b:c2:c1:45:fd:2a:60:5c:e5:4e:f8:94:84: ec:62:1e:07:d6:41:12:7c:1c:4c:ae:ff:31:4a:dc:0e:14:21: 85:91:2a:e2:74:f3:0f:f8:17:d0:3c:aa:6c:2f:b1:87:f3:67: e5:de:d6:8b:7e:0c:05:03:02:34:6c:ba:22:a7:e2:f3:89:0f: c2:4e:6f:d4:55:f7:c8:d4:7e:12:cc:e6:91:99:bc:99:a4:40: 92:33:29:19:bb:ab:2f:33:3b:f8:ce:0b:83:a0:54:58:e5:89: 69:13:be:5f:5c:6a:e0:4d:35:27:69:10:d2:4b:ac:98:5f:bc: c0:81:6e:70:1d:34:70:1d:da:ae:77:37:cb:2a:ba:98:3f:42: 3c:6d:bc:97:fe:a5:be:7f:05:da:6e:51:29:c8:3b:b0:b9:90: bc:45:73:a6:6c:78:fa:0d:7a:d2:11:aa:21:0e:f8:d9:a3:f2: 14:d6:32:9c:8a:4f:a9:f2:ee:88:f9:9c:23:2b:65:63:a4:9b: eb:22:24:88:a4:6d:b3:3a:8c:d7:6c:7d:70:43:1c:c7:45:fc: eb:29:c4:01:a9:39:86:ef:28:b0:1b:be:c7:e5:7e:b4:d5:82: 5a:ca:28:aa:f7:91:50:2e:0d:2b:bc:f6:4d:09:e5:95:a1:3c: fc:51:6d:49 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XO0yWc706hY0WaP6TPRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTFkM2E0MjVlZGJkOWQ4YWRhZDA0MTA2YWIxMmQ3Yzc2 YWMxMzIwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjMyNzdmMThiNTM1NTRhNzIxNWFlY2EzYmFiMGU0ZTY3NjM1MGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswiqG3ccxVRuQUvP0hmBzpo0oMIr ul6YlLFRNdO8cjAsLt5UwYzkSmC77YIwuE3tLl+M1LVnLqMsg9+baPTQvPtMdmbC 4ioVBj3hKEIDu7I2NNGXqCOYAILk822NXBJRcEgC01uJx5iKVzDNgBdQfBWlGvVP fJnbRcfny1b87ivcWmaOg/LHyp2vLVnSRxqAvQ5ZsMsSV/fI26FqBrgQ+4vieo4m xEmgqYX9dclzPnXANQy/0TzXHrCxniafOyodzL2rW13RHfWU4Ts2+ETGNHtPVJd+ d2iTkrP7Aw9yUs2rlXUrXmI3T9VaoPEmbiZzRvFTv+tRx2bK4BHLKZXuuQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCsyd/GLU1VKchWuyjurDk5nY1DCMB8GA1UdIwQY MBaAFK7h06Ql7b2ditrQQQarEtfHasEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVIVHBDWHR2WjJLMnRCQkJxc1MxOGRxd1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hY2E0YWQtMWRmMC00Nzk3LTlhOTAt ZmJlNWZkY2YwZWQzLzEvS3pKMzhZdFRWVXB5RmE3S082c09UbWRqVU1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hY2E0YWQtMWRmMC00Nzk3LTlhOTAtZmJlNWZkY2YwZWQz LzEvcnVIVHBDWHR2WjJLMnRCQkJxc1MxOGRxd1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwciAMA8E AgACMAkDBwAgAQZ8AggwDQYJKoZIhvcNAQELBQADggEBAHc/Bjq5S8LBRf0qYFzl TviUhOxiHgfWQRJ8HEyu/zFK3A4UIYWRKuJ08w/4F9A8qmwvsYfzZ+Xe1ot+DAUD AjRsuiKn4vOJD8JOb9RV98jUfhLM5pGZvJmkQJIzKRm7qy8zO/jOC4OgVFjliWkT vl9cauBNNSdpENJLrJhfvMCBbnAdNHAd2q53N8squpg/QjxtvJf+pb5/BdpuUSnI O7C5kLxFc6ZsePoNetIRqiEO+Nmj8hTWMpyKT6ny7oj5nCMrZWOkm+siJIikbbM6 jNdsfXBDHMdF/OspxAGpOYbvKLAbvsflfrTVglrKKKr3kVAuDSu89k0J5ZWhPPxR bUk= -----END CERTIFICATE-----Generated at Mon Jan 26 22:32:46 2026 by rpki-client