This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/ZgEA5wGHKIZhbV_oLVrM-OofTLU.roa File: ZgEA5wGHKIZhbV_oLVrM-OofTLU.roa (raw, json) Hash identifier: CNNglVQfV0p+V6A8LfYI8FGlBdH7rmBxTJD4Vn5Agcw= Subject key identifier: 66:01:00:E7:01:87:28:86:61:6D:5F:E8:2D:5A:CC:F8:EA:1F:4C:B5 Certificate issuer: /CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6 Certificate serial: 019B7FF2A3B6B9072164018F0CB92DB8795B Authority key identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/ZgEA5wGHKIZhbV_oLVrM-OofTLU.roa Signing time: Fri 02 Jan 2026 18:22:46 +0000 ROA not before: Fri 02 Jan 2026 18:22:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41191 IP address blocks: 193.203.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a3:b6:b9:07:21:64:01:8f:0c:b9:2d:b8:79:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6 Validity Not Before: Jan 2 18:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=660100e701872886616d5fe82d5accf8ea1f4cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:36:01:d1:91:84:0a:3d:32:17:4d:63:0c: a1:ad:c4:69:4a:4c:3d:b5:5f:54:1a:9b:34:e2:52: 17:14:2e:34:47:14:a6:4f:83:72:f7:82:ba:0f:d2: d4:ab:29:16:ce:0e:f8:e7:e2:6d:91:0e:4b:89:3a: 97:a9:19:e5:0d:cd:2d:7e:6b:0e:5e:e9:ee:59:da: 73:75:d5:be:94:9b:2f:b1:14:fe:8f:63:13:84:71: 47:59:a6:46:6a:e4:7f:87:7c:89:97:22:72:95:9d: 43:08:f6:0d:4f:44:97:43:e8:a2:f8:7f:fa:e4:1b: 12:bd:d1:4b:ef:3c:2d:14:5b:cc:0b:9c:5b:5a:01: 2f:10:5e:93:37:d3:27:0c:c4:8b:52:bb:60:56:09: 28:0d:2b:fa:7f:58:a3:bd:bd:e1:3e:f9:9e:1b:6d: a0:96:1c:82:de:44:8a:29:45:6e:40:f2:7b:1f:eb: 9e:1c:58:17:3b:e9:4d:d8:1c:c4:97:da:f0:03:e9: 50:6e:02:96:5a:ab:90:dd:06:ff:7f:ea:9e:27:8f: be:10:79:a5:00:3e:9d:b5:a3:1d:2f:bf:21:92:3d: aa:c0:cd:41:5c:c5:16:1f:c0:38:f8:c6:58:73:e4: 27:ad:e9:fc:21:0d:a6:9e:6d:88:4f:79:85:9b:4f: 53:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:01:00:E7:01:87:28:86:61:6D:5F:E8:2D:5A:CC:F8:EA:1F:4C:B5 X509v3 Authority Key Identifier: keyid:A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/ZgEA5wGHKIZhbV_oLVrM-OofTLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.32.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:7f:f3:cd:24:8e:59:f7:49:4c:d4:25:36:32:66:8c:f4:6c: 20:37:4b:0d:49:d7:34:b4:46:8d:62:cb:a2:33:d5:56:37:20: bb:0a:63:1f:c2:64:b6:2b:48:ac:0a:74:1c:70:c2:b7:7f:5b: c1:42:d4:56:71:ee:2e:1d:de:a7:17:65:f4:fc:97:54:19:38: 66:3b:ac:de:c2:5f:4b:08:1c:1d:b5:e0:de:1f:e4:5e:5f:cb: 10:14:a3:c0:19:b1:01:32:c5:31:9c:ea:47:8a:cc:49:3a:3d: 12:95:d8:64:6c:90:20:1e:ba:2b:e7:00:5a:a4:eb:91:00:2c: 28:90:42:8e:d5:d5:c9:35:8a:79:8e:8c:f9:8a:0e:5c:1d:d8: 14:7a:23:a4:b1:d1:34:c8:f9:f1:a0:7e:1f:5a:67:b4:2e:b4: 26:b8:f5:0a:bd:f5:c4:91:c4:00:d1:8e:d6:8b:2d:27:72:dc: ea:f0:9c:92:60:36:52:95:f7:25:be:b9:21:12:1a:b0:72:a2: 79:a0:b4:83:91:46:51:47:33:fe:79:45:c2:55:9c:b9:9c:f9: 1b:25:a4:e2:e2:61:14:dd:13:f6:3e:f5:d0:05:81:8d:1e:40: 96:bd:a1:6d:31:85:e9:48:ed:a2:a4:ad:12:ba:11:b7:5d:53: 03:12:7e:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8qO2uQchZAGPDLktuHlbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTgzYWQ0M2M4OGI0Y2U0NGU4MjBlMTE1ZGU5YzUzN2Uy YTU0YTYwHhcNMjYwMTAyMTgyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjAxMDBlNzAxODcyODg2NjE2ZDVmZTgyZDVhY2NmOGVhMWY0Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbE2AdGRhAo9MhdNYwyhrcRpSkw9 tV9UGps04lIXFC40RxSmT4Ny94K6D9LUqykWzg745+JtkQ5LiTqXqRnlDc0tfmsO XunuWdpzddW+lJsvsRT+j2MThHFHWaZGauR/h3yJlyJylZ1DCPYNT0SXQ+ii+H/6 5BsSvdFL7zwtFFvMC5xbWgEvEF6TN9MnDMSLUrtgVgkoDSv6f1ijvb3hPvmeG22g lhyC3kSKKUVuQPJ7H+ueHFgXO+lN2BzEl9rwA+lQbgKWWquQ3Qb/f+qeJ4++EHml AD6dtaMdL78hkj2qwM1BXMUWH8A4+MZYc+Qnren8IQ2mnm2IT3mFm09TiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGYBAOcBhyiGYW1f6C1azPjqH0y1MB8GA1UdIwQY MBaAFKmoOtQ8iLTOROgg4RXenFN+KlSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFnNjFEeUl0TTVFNkNEaEZkNmNVMzRxVktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9lYWY0M2EtMWYxMS00OGM4LTljODAt MThiZTVmNDY0ZWQ2LzEvWmdFQTV3R0hLSVpoYlZfb0xWck0tT29mVExVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9lYWY0M2EtMWYxMS00OGM4LTljODAtMThiZTVmNDY0ZWQ2 LzEvcWFnNjFEeUl0TTVFNkNEaEZkNmNVMzRxVktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwcsgMA0G CSqGSIb3DQEBCwUAA4IBAQBMf/PNJI5Z90lM1CU2MmaM9GwgN0sNSdc0tEaNYsui M9VWNyC7CmMfwmS2K0isCnQccMK3f1vBQtRWce4uHd6nF2X0/JdUGThmO6zewl9L CBwdteDeH+ReX8sQFKPAGbEBMsUxnOpHisxJOj0SldhkbJAgHror5wBapOuRACwo kEKO1dXJNYp5joz5ig5cHdgUeiOksdE0yPnxoH4fWme0LrQmuPUKvfXEkcQA0Y7W iy0nctzq8JySYDZSlfclvrkhEhqwcqJ5oLSDkUZRRzP+eUXCVZy5nPkbJaTi4mEU 3RP2PvXQBYGNHkCWvaFtMYXpSO2ipK0SuhG3XVMDEn4F -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:47 2026 by rpki-client