This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/_ZmWi_4A68mliCVRNTlWAPhsl0g.roa File: _ZmWi_4A68mliCVRNTlWAPhsl0g.roa (raw, json) Hash identifier: 2jnimjwEDqLE8neS9dfpFX+zSMTp/IcCZCBA5fy0w8g= Subject key identifier: FD:99:96:8B:FE:00:EB:C9:A5:88:25:51:35:39:56:00:F8:6C:97:48 Certificate issuer: /CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3 Certificate serial: 019B7AC83B40C0531BBB271008A866DE11E1 Authority key identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/_ZmWi_4A68mliCVRNTlWAPhsl0g.roa Signing time: Thu 01 Jan 2026 18:18:21 +0000 ROA not before: Thu 01 Jan 2026 18:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 176.120.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3b:40:c0:53:1b:bb:27:10:08:a8:66:de:11:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3 Validity Not Before: Jan 1 18:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd99968bfe00ebc9a588255135395600f86c9748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8f:31:22:ea:4b:38:e8:42:43:8b:ac:3b:f3: c3:56:70:a8:8c:99:43:21:ab:e2:c1:2b:4b:7e:88: c0:79:1f:67:b5:f3:6c:28:ef:c0:de:ab:a2:a2:13: 0a:9a:c8:76:e2:62:39:f4:f4:0e:12:4b:05:15:47: a4:23:26:d7:45:65:88:e6:6f:51:5f:4e:80:f4:90: d1:29:64:af:a5:7d:ea:ab:c9:50:41:5b:de:d6:11: fc:3f:d4:9e:c9:77:5a:12:48:97:42:02:f9:c7:41: a3:50:69:5a:08:4e:d3:1a:bf:35:04:04:9e:bc:b9: b6:88:22:0b:29:ed:4c:07:f8:02:b9:ce:2a:3c:fa: f5:39:04:39:87:e2:1a:5c:8d:b3:15:ce:d8:4e:f7: 40:0a:82:c6:6e:50:4f:f6:79:1b:af:15:51:3d:9a: 6b:c8:3f:1e:bd:42:0c:ee:b5:d1:78:8b:6f:89:da: df:fc:bd:d6:b8:6b:73:ed:c8:91:95:ec:18:00:d2: e4:61:05:42:1d:2a:cc:30:49:e5:0c:e0:56:3e:86: cb:01:26:9b:2d:24:e8:cc:50:b0:50:f7:9f:f7:58: e8:e6:ac:86:52:af:ef:f1:92:60:12:d1:03:1a:a4: a5:36:8e:09:1b:69:85:45:e0:6d:6a:94:09:37:33: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:99:96:8B:FE:00:EB:C9:A5:88:25:51:35:39:56:00:F8:6C:97:48 X509v3 Authority Key Identifier: keyid:23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/_ZmWi_4A68mliCVRNTlWAPhsl0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.120.19.0/24 Signature Algorithm: sha256WithRSAEncryption 16:89:02:b7:75:b7:34:d3:42:7f:36:7d:dd:3b:8c:4f:a5:e0: 35:e2:4e:dc:45:c4:f2:54:76:9a:fe:c8:e3:ff:7b:7d:b4:f4: 0e:38:7a:56:63:da:42:72:4a:87:9c:7e:69:8b:eb:ce:0c:3e: fa:2c:69:0f:27:06:60:8b:58:61:70:1a:25:35:ee:08:4d:5d: 31:ce:44:11:8e:1e:36:17:89:fe:b4:2a:bb:77:ea:ae:05:65: 09:14:d4:25:f7:32:07:1a:33:92:ee:a4:4a:68:25:2f:ac:a0: be:4c:c5:d4:eb:a3:23:00:75:c2:8a:47:58:5c:ba:fe:de:42: 6e:68:f5:85:5a:e9:d8:cb:97:33:75:50:e1:b9:f2:90:92:15: 01:3b:2e:79:93:08:96:3c:67:a9:e7:6d:bb:05:f8:f2:32:cc: 05:a9:64:ff:8a:e9:14:c1:cf:ce:23:50:af:cf:22:2e:9d:37: 27:94:1b:ff:46:6e:05:34:37:be:53:42:6c:1f:21:d0:09:e6: 70:78:33:bb:6f:d8:a5:fc:46:35:42:d3:ac:e7:ea:49:d5:2b: ae:f8:9b:a0:9f:7e:5c:35:70:23:ca:3c:d0:d0:d8:17:68:3c: 54:33:83:92:4c:07:6a:8e:93:88:a8:0e:3e:6f:67:b4:48:15: 36:16:51:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDtAwFMbuycQCKhm3hHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDZjYjZjY2NkMDllNzVlZDE5ZmMwNmZiNTkyNGNmMjdh Mzk4YzMwHhcNMjYwMTAxMTgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDk5OTY4YmZlMDBlYmM5YTU4ODI1NTEzNTM5NTYwMGY4NmM5NzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA048xIupLOOhCQ4usO/PDVnCojJlD IaviwStLfojAeR9ntfNsKO/A3quiohMKmsh24mI59PQOEksFFUekIybXRWWI5m9R X06A9JDRKWSvpX3qq8lQQVve1hH8P9SeyXdaEkiXQgL5x0GjUGlaCE7TGr81BASe vLm2iCILKe1MB/gCuc4qPPr1OQQ5h+IaXI2zFc7YTvdACoLGblBP9nkbrxVRPZpr yD8evUIM7rXReItvidrf/L3WuGtz7ciRlewYANLkYQVCHSrMMEnlDOBWPobLASab LSTozFCwUPef91jo5qyGUq/v8ZJgEtEDGqSlNo4JG2mFReBtapQJNzPvJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP2Zlov+AOvJpYglUTU5VgD4bJdIMB8GA1UdIwQY MBaAFCMGy2zM0J517Rn8BvtZJM8no5jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdiTGJNelFublh0R2Z3Ry0xa2t6eWVqbU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kOWRkODItOWJiOS00ODRjLTgxY2It ODNiZGNhZDAyMDQ3LzEvX1ptV2lfNEE2OG1saUNWUk5UbFdBUGhzbDBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9kOWRkODItOWJiOS00ODRjLTgxY2ItODNiZGNhZDAyMDQ3 LzEvSXdiTGJNelFublh0R2Z3Ry0xa2t6eWVqbU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHgTMA0G CSqGSIb3DQEBCwUAA4IBAQAWiQK3dbc000J/Nn3dO4xPpeA14k7cRcTyVHaa/sjj /3t9tPQOOHpWY9pCckqHnH5pi+vODD76LGkPJwZgi1hhcBolNe4ITV0xzkQRjh42 F4n+tCq7d+quBWUJFNQl9zIHGjOS7qRKaCUvrKC+TMXU66MjAHXCikdYXLr+3kJu aPWFWunYy5czdVDhufKQkhUBOy55kwiWPGep5227BfjyMswFqWT/iukUwc/OI1Cv zyIunTcnlBv/Rm4FNDe+U0JsHyHQCeZweDO7b9il/EY1QtOs5+pJ1Suu+Jugn35c NXAjyjzQ0NgXaDxUM4OSTAdqjpOIqA4+b2e0SBU2FlEv -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:37 2026 by rpki-client