This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/czO6xgkAci50_TFJzcGjRe13r4g.roa File: czO6xgkAci50_TFJzcGjRe13r4g.roa (raw, json) Hash identifier: 4KOFcwWGmxy1wY3JZJawBiYSYLZnY9/QXxxiekf9mYM= Subject key identifier: 73:33:BA:C6:09:00:72:2E:74:FD:31:49:CD:C1:A3:45:ED:77:AF:88 Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6 Certificate serial: 019B7B368241295383B7F399E8D6E4D3C0A5 Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/czO6xgkAci50_TFJzcGjRe13r4g.roa Signing time: Thu 01 Jan 2026 20:18:48 +0000 ROA not before: Thu 01 Jan 2026 20:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49234 IP address blocks: 193.17.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:82:41:29:53:83:b7:f3:99:e8:d6:e4:d3:c0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6 Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7333bac60900722e74fd3149cdc1a345ed77af88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:51:db:3e:b5:d4:93:b0:f3:92:f5:de:fc: a1:04:a7:62:20:df:cb:d5:e4:06:0a:e5:7c:17:c4: 33:d0:76:f1:76:1b:50:f9:13:2a:d8:4e:0d:92:27: c5:28:ce:67:ef:13:71:74:08:ae:e7:8d:da:ff:ec: 8b:17:6b:45:30:51:5c:1c:54:35:87:9d:69:9e:fb: ed:6b:b6:02:eb:5a:fb:e7:83:e9:dd:d5:a3:32:ca: 4f:29:ff:92:0a:58:88:ba:93:54:03:77:2e:52:9e: c8:43:be:6f:7f:df:13:9a:8e:6f:bf:6c:44:6a:ed: 8c:e1:cf:56:b0:49:2f:7e:ab:23:01:15:db:7b:5a: 3f:19:84:f9:fd:ce:44:70:42:cd:d7:90:1b:ed:be: 02:b4:38:fe:87:dd:aa:54:8d:b2:15:a1:90:97:cf: 5a:14:90:ba:fc:96:e0:ba:8e:2f:ab:db:44:d8:0b: 5f:86:ec:43:c3:20:96:50:41:1d:87:d7:ca:60:72: bc:a5:eb:95:d7:70:44:6a:28:a1:6e:aa:2a:42:cf: 7c:d7:65:bf:04:ab:62:39:a5:cc:8a:9c:e8:fd:24: 3e:e6:90:fa:db:f9:ca:bc:1e:69:0a:65:55:6d:89: 57:e5:6d:d9:53:5c:2d:ff:b9:3c:7b:dd:3a:1e:b2: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:33:BA:C6:09:00:72:2E:74:FD:31:49:CD:C1:A3:45:ED:77:AF:88 X509v3 Authority Key Identifier: keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/czO6xgkAci50_TFJzcGjRe13r4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.240.0/21 Signature Algorithm: sha256WithRSAEncryption 75:e9:4b:07:79:4a:d8:54:d8:b8:7d:0b:92:e4:68:1a:71:b0: 6d:f5:9b:4f:bf:e0:c2:90:c6:9f:85:fa:02:03:0e:ba:fa:f1: 30:40:10:c6:c7:38:cf:22:42:2e:7c:20:ef:0a:38:54:79:0d: a0:b4:6b:84:85:da:7e:e1:c3:f0:e2:e1:9f:28:53:7f:4d:9d: 95:fc:0f:53:f0:33:38:4c:b4:ad:ba:3a:f5:00:42:a1:6f:57: a5:b1:ba:e9:98:5f:08:a8:a5:35:5f:84:50:19:1b:10:0b:4b: c2:6d:d9:ad:df:25:61:9e:23:1d:e5:1b:6d:c8:f1:a8:9e:2a: 75:c9:6c:36:4b:50:f6:f0:ac:e9:4a:67:a1:b5:c9:e1:98:2a: a9:53:73:3b:84:3a:0f:b9:72:c6:bf:b4:34:65:2c:f4:ec:1f: 97:48:ab:f9:5e:85:f8:96:24:a1:48:6c:bb:ec:eb:9b:dd:d7: 92:01:13:f8:33:f9:59:d7:99:ae:a9:7b:87:6c:3b:ba:bd:1e: d5:59:4a:ce:3d:73:e2:ec:be:80:01:ee:48:91:50:2e:34:4f: 63:6d:f2:79:3e:f6:5c:1d:44:3b:67:3f:b8:47:10:28:58:c1: b6:5f:22:97:90:ea:65:4e:2b:e0:9d:b4:af:98:a0:c8:9b:93: 03:bb:a5:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NoJBKVODt/OZ6Nbk08ClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MjMyZDE5ZGQ4MWQ0NWMyNTkyM2FlYjRkOWE5Njg1ODc5 YWVmYTYwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzMzYmFjNjA5MDA3MjJlNzRmZDMxNDljZGMxYTM0NWVkNzdhZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rFR2z611JOw85L13vyhBKdiIN/L 1eQGCuV8F8Qz0HbxdhtQ+RMq2E4NkifFKM5n7xNxdAiu543a/+yLF2tFMFFcHFQ1 h51pnvvta7YC61r754Pp3dWjMspPKf+SCliIupNUA3cuUp7IQ75vf98Tmo5vv2xE au2M4c9WsEkvfqsjARXbe1o/GYT5/c5EcELN15Ab7b4CtDj+h92qVI2yFaGQl89a FJC6/Jbguo4vq9tE2AtfhuxDwyCWUEEdh9fKYHK8peuV13BEaiihbqoqQs9812W/ BKtiOaXMipzo/SQ+5pD62/nKvB5pCmVVbYlX5W3ZU1wt/7k8e906HrIy+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHMzusYJAHIudP0xSc3Bo0Xtd6+IMB8GA1UdIwQY MBaAFLgjLRndgdRcJZI6602aloWHmu+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYt MWRmMDllNzAxNDM0LzEvY3pPNnhna0FjaTUwX1RGSnpjR2pSZTEzcjRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYtMWRmMDllNzAxNDM0 LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwRHwMA0G CSqGSIb3DQEBCwUAA4IBAQB16UsHeUrYVNi4fQuS5GgacbBt9ZtPv+DCkMafhfoC Aw66+vEwQBDGxzjPIkIufCDvCjhUeQ2gtGuEhdp+4cPw4uGfKFN/TZ2V/A9T8DM4 TLStujr1AEKhb1elsbrpmF8IqKU1X4RQGRsQC0vCbdmt3yVhniMd5RttyPGonip1 yWw2S1D28KzpSmehtcnhmCqpU3M7hDoPuXLGv7Q0ZSz07B+XSKv5XoX4liShSGy7 7Oub3deSARP4M/lZ15muqXuHbDu6vR7VWUrOPXPi7L6AAe5IkVAuNE9jbfJ5PvZc HUQ7Zz+4RxAoWMG2XyKXkOplTivgnbSvmKDIm5MDu6WA -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:46 2026 by rpki-client