This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/zaGrkqbu8Gll08VVFhOdNAVBodQ.roa File: zaGrkqbu8Gll08VVFhOdNAVBodQ.roa (raw, json) Hash identifier: 5RXV1x3djGzhsIabpdBba1lsONVKoOFtpXCmtC7NEnM= Subject key identifier: CD:A1:AB:92:A6:EE:F0:69:65:D3:C5:55:16:13:9D:34:05:41:A1:D4 Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a Certificate serial: 019B7C11DACECEC145C76294002166C7EEC0 Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/zaGrkqbu8Gll08VVFhOdNAVBodQ.roa Signing time: Fri 02 Jan 2026 00:18:23 +0000 ROA not before: Fri 02 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51465 IP address blocks: 84.38.16.0/21 maxlen: 21 84.38.24.0/21 maxlen: 21 193.91.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:da:ce:ce:c1:45:c7:62:94:00:21:66:c7:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a Validity Not Before: Jan 2 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cda1ab92a6eef06965d3c55516139d340541a1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:90:1b:4c:d2:07:9b:d1:4b:ff:68:81:e5: 53:68:d7:e2:52:a1:d8:38:d8:92:3b:48:25:03:7b: 2b:3e:3c:8d:b2:2c:fb:9b:95:de:38:18:75:8a:78: 20:a0:1c:4d:db:6e:db:87:62:1d:95:0c:6b:d7:bd: e1:eb:40:44:fc:72:e5:fc:1e:2a:3f:6d:2e:cb:a3: ed:9f:99:48:41:9a:10:50:b4:8a:40:6d:75:16:c0: a1:d1:72:8d:4f:14:10:7e:2a:cc:1f:4f:16:6f:a7: 82:94:d2:8b:84:ee:63:2f:8a:cf:a3:37:be:97:02: 3c:d7:20:85:dc:93:bd:4f:b8:a7:e0:8e:79:16:b0: 76:19:08:4d:a9:15:5b:f6:cd:9a:5a:5a:55:36:b8: 98:86:10:d2:ff:d2:d9:56:cb:f1:1a:36:00:71:fd: 26:ee:a0:7f:37:6f:de:60:4a:a9:2c:7f:13:25:85: 85:bd:ad:a9:4c:0f:e5:a9:52:21:c8:95:3d:1b:a9: 6a:a8:ec:0a:49:de:2d:fc:7d:7e:9d:6b:26:94:a7: 55:a8:56:9c:73:19:87:ba:b5:6a:f9:7d:40:eb:22: b7:b2:11:dc:52:26:cd:0d:96:11:14:bd:42:ab:d4: 9f:50:d5:10:ac:d0:bf:9f:b3:22:a1:a3:70:65:19: d4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A1:AB:92:A6:EE:F0:69:65:D3:C5:55:16:13:9D:34:05:41:A1:D4 X509v3 Authority Key Identifier: keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/zaGrkqbu8Gll08VVFhOdNAVBodQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.16.0/20 193.91.5.0/24 Signature Algorithm: sha256WithRSAEncryption 66:5a:6b:4a:82:c3:04:03:51:30:23:6d:3c:82:f1:07:bb:a3: bf:5e:9f:3b:51:66:ba:15:3e:bd:d0:54:27:73:d2:59:7a:b6: 02:cf:36:bb:a5:d8:c5:bf:69:2c:0e:38:58:2a:1b:9e:8f:3a: 84:66:c4:80:86:08:8c:17:56:93:39:8a:75:93:2f:c5:37:d6: f9:97:4c:2d:05:df:b6:1d:76:56:3b:03:fb:4c:6a:83:50:d5: 5a:cb:40:15:53:14:88:c8:82:1d:c6:39:f1:63:14:0a:88:dc: 75:db:2c:f2:ca:2a:48:76:d5:27:44:01:21:22:b5:49:da:e3: c2:36:13:9e:bb:45:1b:13:20:c3:0b:35:24:a5:a4:61:11:c5: 82:ae:5d:5b:51:f7:23:90:d7:16:d4:3d:34:4c:5e:dd:b9:30: 5f:8a:1a:b3:c5:6b:c1:81:6e:80:c8:3b:12:9b:e6:60:64:42: ea:7a:9c:5c:d5:15:a1:a6:64:c8:dc:06:25:d0:fd:63:d0:d1: 1b:8f:47:ca:18:5e:0a:5e:3e:6f:33:11:bd:0e:4a:b8:63:24: c7:f7:f0:27:d2:5e:90:e3:32:d5:90:b3:50:49:57:b9:45:b4: e6:a6:d3:2e:27:e1:4b:f5:9b:71:98:eb:04:38:8d:fd:d6:7f: f6:db:02:9f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EdrOzsFFx2KUACFmx+7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ODI0MzA4YmM4M2I0ZWU1NmYxYzBjMWI5ZmJmYzMxMWIw Y2Q0NGEwHhcNMjYwMTAyMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGExYWI5MmE2ZWVmMDY5NjVkM2M1NTUxNjEzOWQzNDA1NDFhMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAqQG0zSB5vRS/9ogeVTaNfiUqHY ONiSO0glA3srPjyNsiz7m5XeOBh1inggoBxN227bh2IdlQxr173h60BE/HLl/B4q P20uy6Ptn5lIQZoQULSKQG11FsCh0XKNTxQQfirMH08Wb6eClNKLhO5jL4rPoze+ lwI81yCF3JO9T7in4I55FrB2GQhNqRVb9s2aWlpVNriYhhDS/9LZVsvxGjYAcf0m 7qB/N2/eYEqpLH8TJYWFva2pTA/lqVIhyJU9G6lqqOwKSd4t/H1+nWsmlKdVqFac cxmHurVq+X1A6yK3shHcUibNDZYRFL1Cq9SfUNUQrNC/n7MioaNwZRnURQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM2hq5Km7vBpZdPFVRYTnTQFQaHUMB8GA1UdIwQY MBaAFKSCQwi8g7TuVvHAwbn7/DEbDNRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1Yzkt MTk2ZTZmMzc1ZmQ2LzEvemFHcmtxYnU4R2xsMDhWVkZoT2ROQVZCb2RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1YzktMTk2ZTZmMzc1ZmQ2 LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEVCYQAwQA wVsFMA0GCSqGSIb3DQEBCwUAA4IBAQBmWmtKgsMEA1EwI208gvEHu6O/Xp87UWa6 FT690FQnc9JZerYCzza7pdjFv2ksDjhYKhuejzqEZsSAhgiMF1aTOYp1ky/FN9b5 l0wtBd+2HXZWOwP7TGqDUNVay0AVUxSIyIIdxjnxYxQKiNx12yzyyipIdtUnRAEh IrVJ2uPCNhOeu0UbEyDDCzUkpaRhEcWCrl1bUfcjkNcW1D00TF7duTBfihqzxWvB gW6AyDsSm+ZgZELqepxc1RWhpmTI3AYl0P1j0NEbj0fKGF4KXj5vMxG9Dkq4YyTH 9/An0l6Q4zLVkLNQSVe5RbTmptMuJ+FL9ZtxmOsEOI391n/22wKf -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:16 2026 by rpki-client