This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa File: Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa (raw, json) Hash identifier: hD8ccW/eExEEu884n50rJo3yzNCGT14iO1hQALLbqVY= Subject key identifier: 67:E1:FB:C7:0E:D2:C7:DB:3E:50:70:DB:06:D3:A1:83:20:7B:91:2A Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90 Certificate serial: 019B7FF228BEBA396AD24740A0F4EF67F961 Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa Signing time: Fri 02 Jan 2026 18:22:15 +0000 ROA not before: Fri 02 Jan 2026 18:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 193.110.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:28:be:ba:39:6a:d2:47:40:a0:f4:ef:67:f9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90 Validity Not Before: Jan 2 18:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67e1fbc70ed2c7db3e5070db06d3a183207b912a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:87:b9:5f:39:ca:79:bb:fb:a5:83:3c:ee: 7a:7e:16:67:cb:4f:11:dc:ad:4c:7f:df:bd:ad:0b: e3:36:b9:f3:ec:9c:48:b1:5f:52:4c:cf:e1:28:40: b1:69:bf:a7:9a:bb:89:69:da:8c:d1:95:b6:2c:60: 3f:5f:68:2b:d0:0a:76:d7:a7:85:66:30:2b:62:55: 0d:96:7a:4f:8a:28:a9:5d:84:87:71:19:aa:81:be: 17:61:9c:e2:43:70:e0:c5:aa:d7:5e:8c:76:5b:e1: ab:8d:b6:93:5f:c6:3f:40:ce:66:2e:d4:f9:5f:02: 06:0c:f4:67:31:4b:4f:9a:1f:1f:0a:e8:80:65:93: 9a:65:a6:58:aa:9b:e9:bd:db:c8:8c:1f:95:23:82: 54:26:92:fc:d9:9e:7b:29:e9:1f:52:1d:43:06:34: ab:bc:cd:57:9c:29:37:7f:cd:e4:91:1d:16:fa:30: 3a:be:64:af:0a:e2:4f:45:0e:74:a2:4a:70:4c:f2: 3c:31:af:a3:64:a7:18:96:c0:28:06:3c:d8:75:74: 6b:cf:95:79:02:2f:9e:8a:eb:d3:ea:d1:3a:ff:6a: 47:48:ad:53:00:18:f6:39:2e:72:c8:b1:16:80:83: 4a:2a:1f:af:0a:da:ac:0d:5f:bb:5c:f1:25:81:98: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E1:FB:C7:0E:D2:C7:DB:3E:50:70:DB:06:D3:A1:83:20:7B:91:2A X509v3 Authority Key Identifier: keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.34.0/24 Signature Algorithm: sha256WithRSAEncryption 43:37:50:23:90:27:35:12:71:b8:64:c1:0c:10:e7:b6:d3:de: c5:88:1f:f7:00:9b:b5:da:33:d7:80:a2:58:4a:6f:e6:e5:b2: 5d:c4:43:07:69:ec:31:e9:5b:fa:4b:e8:1d:bc:17:97:ae:35: 8d:44:61:c6:97:6d:7b:39:d8:44:44:6b:d4:66:24:2d:53:25: 38:ae:25:6b:65:a0:02:14:af:20:8d:fe:b2:5b:34:36:ee:54: 1c:4e:77:d3:03:ee:b1:01:92:0c:ab:70:03:f6:83:58:19:c8: b3:a7:86:e3:09:92:4f:7f:c4:a6:8c:1c:25:d1:4b:88:f0:f8: 84:51:b4:57:82:b7:df:65:3b:c5:53:06:8b:0d:c6:44:f4:e6: e1:d1:f8:c9:da:48:03:f7:f3:ce:ee:16:64:99:36:29:2b:b7: ab:bc:81:c2:74:69:12:d6:03:08:05:cd:8c:07:a7:f0:ae:66: 95:4a:08:4f:7f:81:b7:fe:1b:8d:fb:b6:dd:c6:ff:5a:ab:44: 36:89:ec:bc:c1:e9:62:2d:93:e1:d7:1c:b1:94:76:4e:4a:79: b8:6b:b5:17:78:e7:32:af:b4:a9:94:75:2e:22:b7:cd:32:57: d9:d9:ad:d0:9f:d5:47:53:c1:dc:9f:54:ac:83:64:45:8d:17: 46:8d:fb:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8ii+ujlq0kdAoPTvZ/lhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiY2Y3MjFjNzFjOGFlN2NhZjcwNmQ5ZGYzMzU4YjEyZDU0 YjRkOTAwHhcNMjYwMTAyMTgyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2UxZmJjNzBlZDJjN2RiM2U1MDcwZGIwNmQzYTE4MzIwN2I5MTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRaHuV85ynm7+6WDPO56fhZny08R 3K1Mf9+9rQvjNrnz7JxIsV9STM/hKECxab+nmruJadqM0ZW2LGA/X2gr0Ap216eF ZjArYlUNlnpPiiipXYSHcRmqgb4XYZziQ3DgxarXXox2W+GrjbaTX8Y/QM5mLtT5 XwIGDPRnMUtPmh8fCuiAZZOaZaZYqpvpvdvIjB+VI4JUJpL82Z57KekfUh1DBjSr vM1XnCk3f83kkR0W+jA6vmSvCuJPRQ50okpwTPI8Ma+jZKcYlsAoBjzYdXRrz5V5 Ai+eiuvT6tE6/2pHSK1TABj2OS5yyLEWgINKKh+vCtqsDV+7XPElgZi7cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfh+8cO0sfbPlBw2wbToYMge5EqMB8GA1UdIwQY MBaAFAvPchxxyK58r3BtnfM1ixLVS02QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYt ZDllYjhkNTczNjZjLzEvWi1IN3h3N1N4OXMtVUhEYkJ0T2hneUI3a1NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYtZDllYjhkNTczNjZj LzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW4iMA0G CSqGSIb3DQEBCwUAA4IBAQBDN1AjkCc1EnG4ZMEMEOe2097FiB/3AJu12jPXgKJY Sm/m5bJdxEMHaewx6Vv6S+gdvBeXrjWNRGHGl217OdhERGvUZiQtUyU4riVrZaAC FK8gjf6yWzQ27lQcTnfTA+6xAZIMq3AD9oNYGcizp4bjCZJPf8SmjBwl0UuI8PiE UbRXgrffZTvFUwaLDcZE9Obh0fjJ2kgD9/PO7hZkmTYpK7ervIHCdGkS1gMIBc2M B6fwrmaVSghPf4G3/huN+7bdxv9aq0Q2iey8weliLZPh1xyxlHZOSnm4a7UXeOcy r7SplHUuIrfNMlfZ2a3Qn9VHU8Hcn1Ssg2RFjRdGjfuv -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:32 2026 by rpki-client