This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZAXIV2Z_Ei9Viw4rSwou73UnqRY.roa File: ZAXIV2Z_Ei9Viw4rSwou73UnqRY.roa (raw, json) Hash identifier: nDW0u7Pq2NRZUa4Ac/azwUVVVbK98kbpti3zTYegI9s= Subject key identifier: 64:05:C8:57:66:7F:12:2F:55:8B:0E:2B:4B:0A:2E:EF:75:27:A9:16 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BBB993BB1B68584D9F99ABE0A3AC77105 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZAXIV2Z_Ei9Viw4rSwou73UnqRY.roa Signing time: Wed 14 Jan 2026 08:22:20 +0000 ROA not before: Wed 14 Jan 2026 08:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137517 IP address blocks: 82.152.12.0/24 maxlen: 24 213.218.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:99:3b:b1:b6:85:84:d9:f9:9a:be:0a:3a:c7:71:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 14 08:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6405c857667f122f558b0e2b4b0a2eef7527a916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:98:2f:2d:3a:6d:6d:26:20:46:86:8b:78: fc:01:e0:4b:19:1c:11:ee:0a:99:1c:45:d2:d3:1b: 13:e8:38:32:4b:e7:34:22:b5:88:80:2f:d0:ba:54: 23:39:3c:09:12:60:51:0e:15:72:88:4b:d7:56:34: a2:70:ec:c0:f1:53:23:eb:52:4d:df:91:cc:fb:d1: d2:e1:f6:db:a8:7e:25:ff:65:02:9b:7d:18:83:01: b3:99:ab:48:64:66:05:4f:7c:49:32:c6:6e:b2:c7: 26:0a:5b:69:c3:01:ec:6d:2a:ae:ba:1b:7f:43:2b: cc:c7:7a:93:27:6b:ed:f2:ef:d8:e8:c5:be:be:d1: 76:0d:e6:d3:66:4f:2e:74:71:75:ce:a1:07:ae:92: 56:36:27:31:6b:b9:45:15:75:f4:b5:84:52:b9:41: 97:62:6f:a7:5a:87:06:36:ec:ec:ff:e8:fd:72:78: 0b:a0:12:63:ab:48:f4:a4:51:a9:c2:7c:42:6d:b0: dc:a7:41:11:f7:d3:69:f4:83:f6:a4:92:a1:60:81: 0b:0c:13:a9:2b:96:8e:9c:e5:9d:e1:0a:3c:c2:ca: 0e:5d:a0:c3:30:d8:76:47:c8:59:28:d0:7e:34:32: 9f:06:ec:fc:9a:f1:8e:6b:68:2b:3d:ac:6d:92:13: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:05:C8:57:66:7F:12:2F:55:8B:0E:2B:4B:0A:2E:EF:75:27:A9:16 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZAXIV2Z_Ei9Viw4rSwou73UnqRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.12.0/24 213.218.227.0/24 Signature Algorithm: sha256WithRSAEncryption 23:b9:fb:2c:fb:b7:8b:f3:fc:9f:32:1d:59:b5:d4:c9:e1:69: 4f:f3:80:43:c3:c7:0f:bb:94:b4:56:08:63:43:1c:a5:8f:e3: 7b:f2:af:a2:bf:b0:49:5e:fd:7b:8a:52:c5:23:7e:01:4f:94: 43:5a:02:15:3c:1d:72:83:65:e4:28:36:47:f4:dd:33:94:fb: 2f:45:9c:aa:99:f1:41:83:97:f4:2f:73:8c:03:15:d1:ce:04: 7c:0d:09:55:1b:b0:f1:bd:b7:ee:e8:de:d1:d1:09:f0:6b:c8: 35:b5:5d:26:26:39:44:9d:9b:85:c0:c0:4f:60:d8:af:0b:58: 4c:17:5b:34:4b:93:42:47:ef:19:91:96:6c:62:0d:c0:38:fa: 2f:56:66:83:3f:b9:18:3e:fd:61:87:5b:7c:4f:9a:8b:52:d1: 57:71:0b:37:26:64:d2:bb:92:fc:2e:5e:db:e5:47:6a:6d:bf: ed:55:f0:bf:9b:e0:63:81:b8:1a:b2:46:8b:56:94:c3:c6:93: 8a:4d:80:3e:00:8e:c5:83:66:56:dd:75:70:f3:48:45:67:bd: 46:eb:b7:54:cf:cd:12:fc:4f:6e:36:24:c2:1d:92:46:59:20: 12:8a:6c:35:aa:59:eb:ca:f3:84:32:38:f5:b3:a1:c8:0a:4a: dd:04:2c:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZu7mTuxtoWE2fmavgo6x3EFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTE0MDgyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDA1Yzg1NzY2N2YxMjJmNTU4YjBlMmI0YjBhMmVlZjc1MjdhOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS2YLy06bW0mIEaGi3j8AeBLGRwR 7gqZHEXS0xsT6DgyS+c0IrWIgC/QulQjOTwJEmBRDhVyiEvXVjSicOzA8VMj61JN 35HM+9HS4fbbqH4l/2UCm30YgwGzmatIZGYFT3xJMsZusscmCltpwwHsbSquuht/ QyvMx3qTJ2vt8u/Y6MW+vtF2DebTZk8udHF1zqEHrpJWNicxa7lFFXX0tYRSuUGX Ym+nWocGNuzs/+j9cngLoBJjq0j0pFGpwnxCbbDcp0ER99Np9IP2pJKhYIELDBOp K5aOnOWd4Qo8wsoOXaDDMNh2R8hZKNB+NDKfBuz8mvGOa2grPaxtkhPx1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGQFyFdmfxIvVYsOK0sKLu91J6kWMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWkFYSVYyWl9FaTlWaXc0clN3b3U3M1VucVJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpgMAwQA 1drjMA0GCSqGSIb3DQEBCwUAA4IBAQAjufss+7eL8/yfMh1ZtdTJ4WlP84BDw8cP u5S0VghjQxylj+N78q+iv7BJXv17ilLFI34BT5RDWgIVPB1yg2XkKDZH9N0zlPsv RZyqmfFBg5f0L3OMAxXRzgR8DQlVG7Dxvbfu6N7R0Qnwa8g1tV0mJjlEnZuFwMBP YNivC1hMF1s0S5NCR+8ZkZZsYg3AOPovVmaDP7kYPv1hh1t8T5qLUtFXcQs3JmTS u5L8Ll7b5Udqbb/tVfC/m+BjgbgaskaLVpTDxpOKTYA+AI7Fg2ZW3XVw80hFZ71G 67dUz80S/E9uNiTCHZJGWSASimw1qlnryvOEMjj1s6HICkrdBCxJ -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:42 2026 by rpki-client