This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/z-c9Pey3216LPC0KHV3ix--by3k.roa File: z-c9Pey3216LPC0KHV3ix--by3k.roa (raw, json) Hash identifier: 3wJbwPppaRKKbJHcpNB2CmCnMT+2mo4g0n5EWgLuCaU= Subject key identifier: CF:E7:3D:3D:EC:B7:DB:5E:8B:3C:2D:0A:1D:5D:E2:C7:EF:9B:CB:79 Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832 Certificate serial: 019B79ECB491136AAC5063C8FC73499FFD7D Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/z-c9Pey3216LPC0KHV3ix--by3k.roa Signing time: Thu 01 Jan 2026 14:18:34 +0000 ROA not before: Thu 01 Jan 2026 14:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50346 IP address blocks: 193.104.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b4:91:13:6a:ac:50:63:c8:fc:73:49:9f:fd:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfe73d3decb7db5e8b3c2d0a1d5de2c7ef9bcb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:3a:28:3d:9b:d6:93:5f:58:b1:f2:dc:c6: 3a:4e:07:25:b8:3a:e2:0c:1a:9b:f3:90:5e:a6:ca: a0:d6:f4:ce:7c:11:83:ff:f6:19:dd:fe:e7:5e:49: 5f:53:bc:e3:db:93:d3:77:3d:ae:b1:7d:96:a2:52: 7e:0b:16:5d:15:19:5a:60:aa:81:da:57:ee:87:19: 35:3b:10:db:b0:68:5d:a0:42:1b:a6:b3:0b:ea:a6: 89:4b:d4:62:b9:8d:38:c4:9b:75:48:c1:b6:96:9b: 96:d5:f9:ed:87:ac:f7:56:fb:36:29:0a:5c:0d:a2: 14:58:31:5f:ba:c3:a9:e5:84:b8:3d:98:b0:e9:45: 01:97:4c:64:47:09:19:89:52:35:97:79:38:eb:de: b4:f3:a8:ee:48:99:04:0d:05:e7:62:18:d9:c0:60: 9b:3a:4b:43:22:e7:71:e0:bd:17:69:40:61:f5:c5: fc:bc:30:67:49:8d:28:d1:f8:a8:f5:a7:b1:d3:7f: 77:78:b8:ce:63:d5:38:c9:50:a9:36:16:41:bc:7a: f3:e0:a0:0a:2a:b0:be:8d:55:95:15:48:0b:45:27: 18:51:1e:1d:13:a1:e4:6e:82:18:c6:13:7b:e5:4f: 03:da:f0:16:1c:07:02:d3:d7:7c:ca:77:48:ae:ac: 81:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E7:3D:3D:EC:B7:DB:5E:8B:3C:2D:0A:1D:5D:E2:C7:EF:9B:CB:79 X509v3 Authority Key Identifier: keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/z-c9Pey3216LPC0KHV3ix--by3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.202.0/24 Signature Algorithm: sha256WithRSAEncryption bf:8d:dc:20:26:7c:47:6b:53:d6:dd:b9:72:31:79:0d:92:61: 45:af:db:1c:8a:48:39:d6:21:f2:c5:ef:1e:29:0d:7d:1f:d5: 13:4f:8e:c6:83:41:31:44:d3:ba:dc:82:f0:90:dc:31:0d:20: 3f:3f:49:5c:ce:52:f8:83:6d:6d:39:f2:46:ab:99:6e:89:08: b7:88:87:ce:70:e6:0e:56:f6:f1:1a:a0:a5:5f:5f:37:2e:0f: 5e:77:be:20:12:7b:56:bb:f9:7c:76:68:7c:3c:5e:e2:01:2a: e1:06:7a:5b:de:16:f9:96:c2:9a:0c:a3:bc:e3:ac:ae:5b:db: d4:cf:70:98:9e:13:fb:35:6a:f5:b3:45:18:06:c6:d6:8b:15: e7:9c:cd:95:07:cc:ac:88:9a:91:2b:60:84:00:2f:dd:3d:5d: 68:58:a4:ca:a4:12:65:ed:8c:5e:f4:6d:9a:17:74:33:9c:76: 84:d2:fe:8b:84:54:39:be:61:73:9b:39:5e:bd:f9:ea:46:4d: b7:0b:71:0c:7c:d9:22:52:82:1f:22:8d:cd:b5:9d:46:1a:e8: 9f:59:07:71:1a:33:49:18:fc:a4:10:78:1a:92:20:43:c0:18: 2a:d5:60:64:6f:cf:0b:55:c1:36:45:7f:d8:3f:8d:6f:24:f1: c4:87:1d:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LSRE2qsUGPI/HNJn/19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YWE2MDY3NmMxMzBjNjQzOGU0NWI1YTYwNzIxMGU5NTY2 YjY4MzIwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmU3M2QzZGVjYjdkYjVlOGIzYzJkMGExZDVkZTJjN2VmOWJjYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomY6KD2b1pNfWLHy3MY6TgcluDri DBqb85Bepsqg1vTOfBGD//YZ3f7nXklfU7zj25PTdz2usX2WolJ+CxZdFRlaYKqB 2lfuhxk1OxDbsGhdoEIbprML6qaJS9RiuY04xJt1SMG2lpuW1fnth6z3Vvs2KQpc DaIUWDFfusOp5YS4PZiw6UUBl0xkRwkZiVI1l3k4696086juSJkEDQXnYhjZwGCb OktDIudx4L0XaUBh9cX8vDBnSY0o0fio9aex0393eLjOY9U4yVCpNhZBvHrz4KAK KrC+jVWVFUgLRScYUR4dE6HkboIYxhN75U8D2vAWHAcC09d8yndIrqyBGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/nPT3st9teizwtCh1d4sfvm8t5MB8GA1UdIwQY MBaAFEaqYGdsEwxkOORbWmByEOlWa2gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnFwZ1oyd1RER1E0NUZ0YVlISVE2VlpyYURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xNzIxZDgtYWE0Ni00ZmFhLWFlMTUt YzVlMzJjODI3MmQ3LzEvei1jOVBleTMyMTZMUEMwS0hWM2l4LS1ieTNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xNzIxZDgtYWE0Ni00ZmFhLWFlMTUtYzVlMzJjODI3MmQ3 LzEvUnFwZ1oyd1RER1E0NUZ0YVlISVE2VlpyYURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWjKMA0G CSqGSIb3DQEBCwUAA4IBAQC/jdwgJnxHa1PW3blyMXkNkmFFr9scikg51iHyxe8e KQ19H9UTT47Gg0ExRNO63ILwkNwxDSA/P0lczlL4g21tOfJGq5luiQi3iIfOcOYO VvbxGqClX183Lg9ed74gEntWu/l8dmh8PF7iASrhBnpb3hb5lsKaDKO846yuW9vU z3CYnhP7NWr1s0UYBsbWixXnnM2VB8ysiJqRK2CEAC/dPV1oWKTKpBJl7Yxe9G2a F3QznHaE0v6LhFQ5vmFzmzlevfnqRk23C3EMfNkiUoIfIo3NtZ1GGuifWQdxGjNJ GPykEHgakiBDwBgq1WBkb88LVcE2RX/YP41vJPHEhx1l -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:58 2026 by rpki-client