This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/0ZGTFrZyUevTua2zs9Lh9hQNybY.roa File: 0ZGTFrZyUevTua2zs9Lh9hQNybY.roa (raw, json) Hash identifier: zKYr5PtkQA7YlTYVOh/meKgufXnFJ/zrbKe55i+T7vI= Subject key identifier: D1:91:93:16:B6:72:51:EB:D3:B9:AD:B3:B3:D2:E1:F6:14:0D:C9:B6 Certificate issuer: /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf Certificate serial: 019B7AC7A1B723A028105F9E1644DBE91CC3 Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/0ZGTFrZyUevTua2zs9Lh9hQNybY.roa Signing time: Thu 01 Jan 2026 18:17:41 +0000 ROA not before: Thu 01 Jan 2026 18:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12586 IP address blocks: 193.238.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a1:b7:23:a0:28:10:5f:9e:16:44:db:e9:1c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1919316b67251ebd3b9adb3b3d2e1f6140dc9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9a:ad:3b:d9:12:58:ff:17:56:7d:28:bb:d4: 6f:ee:72:46:08:5f:e4:f9:15:a5:c7:6d:0b:2a:46: 14:ed:ae:a6:fb:64:34:ad:d6:fe:38:cb:1b:f8:46: c1:5b:d0:ca:ef:5d:01:30:5d:0d:30:13:cc:9e:91: a8:88:80:d0:6d:35:91:ba:b1:b0:ad:ad:0a:49:b3: 73:ef:97:71:a5:84:2c:1f:9c:23:66:8f:22:a7:c3: d8:cb:02:d8:59:1c:41:a0:07:ff:6f:c9:12:5a:d9: 10:64:d0:5c:2a:1f:16:84:c1:b7:43:6c:c8:bc:aa: da:68:f0:63:96:c7:b1:f6:d1:19:a5:b5:1c:43:56: 2a:e7:b0:3b:6b:d6:c1:36:45:85:55:f3:f0:30:77: 4a:86:62:0e:74:5e:02:10:c2:70:fd:23:67:c1:5f: 45:4f:0c:b5:73:53:5a:4a:1f:23:8a:95:72:85:93: 7e:b9:c7:37:35:06:b8:4d:3c:ca:84:a8:7b:cd:ef: c6:ba:c8:95:74:4a:0b:16:f1:7d:ab:88:b1:cb:02: d5:5e:7c:59:49:87:18:20:2b:50:77:a4:4d:bc:bd: 35:f8:43:22:96:c8:c4:cc:6a:1c:72:79:d4:99:7d: 78:5c:c2:45:97:1f:fe:e1:aa:aa:0f:7f:35:34:68: 77:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:91:93:16:B6:72:51:EB:D3:B9:AD:B3:B3:D2:E1:F6:14:0D:C9:B6 X509v3 Authority Key Identifier: keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/0ZGTFrZyUevTua2zs9Lh9hQNybY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.238.124.0/22 Signature Algorithm: sha256WithRSAEncryption 01:77:c5:e0:a3:07:20:ea:44:b8:79:be:d3:eb:92:46:55:ce: 84:2c:9a:e6:9a:ab:98:76:46:18:68:17:c8:d2:e5:a8:c1:92: 28:2f:70:c0:07:ca:9b:88:2c:02:45:f9:cc:6f:ef:b9:fb:b8: 40:e6:72:50:d2:7b:33:58:9b:7b:3e:f6:9b:13:21:bc:89:64: f7:e4:b4:ed:bf:31:b4:db:f4:17:da:5a:8a:1e:26:62:81:51: 51:11:6a:25:43:88:f9:8e:66:29:36:e5:6f:cc:10:43:05:55: 17:5b:e6:ae:fc:4a:f5:e1:0e:6d:8a:a4:ba:92:5d:4c:35:bb: 2e:fc:90:2f:8a:40:f4:63:09:14:c9:17:2e:76:df:a2:51:ea: d2:86:af:cb:06:26:09:c5:34:44:e5:16:6a:3c:90:48:de:37: da:d8:7c:17:6a:d6:a3:81:f8:79:f6:73:7f:e0:57:00:6f:bb: 8d:15:17:ec:fb:9a:be:3c:fe:d2:d3:8f:5b:8f:2d:43:d4:cc: 83:da:85:86:26:04:83:51:b2:d4:21:a2:b3:18:ac:d3:ff:a4: 1c:1c:0f:b2:b1:75:f5:a4:65:c7:e0:fe:84:59:c0:d4:f1:d0: d5:4d:40:51:34:85:1a:eb:ca:b7:97:14:fe:25:9a:5d:dd:35: 5e:0c:61:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6G3I6AoEF+eFkTb6RzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTIyOGQ3MTNiZWM2ZDRjOWFiY2VjMmYwMGEyOGU4MjFm YzI3YmYwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTkxOTMxNmI2NzI1MWViZDNiOWFkYjNiM2QyZTFmNjE0MGRjOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pqtO9kSWP8XVn0ou9Rv7nJGCF/k +RWlx20LKkYU7a6m+2Q0rdb+OMsb+EbBW9DK710BMF0NMBPMnpGoiIDQbTWRurGw ra0KSbNz75dxpYQsH5wjZo8ip8PYywLYWRxBoAf/b8kSWtkQZNBcKh8WhMG3Q2zI vKraaPBjlsex9tEZpbUcQ1Yq57A7a9bBNkWFVfPwMHdKhmIOdF4CEMJw/SNnwV9F Twy1c1NaSh8jipVyhZN+ucc3NQa4TTzKhKh7ze/GusiVdEoLFvF9q4ixywLVXnxZ SYcYICtQd6RNvL01+EMilsjEzGoccnnUmX14XMJFlx/+4aqqD381NGh3RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGRkxa2clHr07mts7PS4fYUDcm2MB8GA1UdIwQY MBaAFJviKNcTvsbUyavOwvAKKOgh/Ce/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83OWYxNWEtNWNiYS00ZDQwLWIzMGIt ZTM1YTIyM2I0OWM3LzEvMFpHVEZyWnlVZXZUdWEyenM5TGg5aFFOeWJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83OWYxNWEtNWNiYS00ZDQwLWIzMGItZTM1YTIyM2I0OWM3 LzEvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwe58MA0G CSqGSIb3DQEBCwUAA4IBAQABd8Xgowcg6kS4eb7T65JGVc6ELJrmmquYdkYYaBfI 0uWowZIoL3DAB8qbiCwCRfnMb++5+7hA5nJQ0nszWJt7PvabEyG8iWT35LTtvzG0 2/QX2lqKHiZigVFREWolQ4j5jmYpNuVvzBBDBVUXW+au/Er14Q5tiqS6kl1MNbsu /JAvikD0YwkUyRcudt+iUerShq/LBiYJxTRE5RZqPJBI3jfa2HwXatajgfh59nN/ 4FcAb7uNFRfs+5q+PP7S049bjy1D1MyD2oWGJgSDUbLUIaKzGKzT/6QcHA+ysXX1 pGXH4P6EWcDU8dDVTUBRNIUa68q3lxT+JZpd3TVeDGH4 -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:06 2026 by rpki-client