This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/z-3zk1_OQa6LocQjIWc_jBiDQPs.roa File: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (raw, json) Hash identifier: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY= Subject key identifier: CF:ED:F3:93:5F:CE:41:AE:8B:A1:C4:23:21:67:3F:8C:18:83:40:FB Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c Certificate serial: 019B7B354FF2B0F929077DECCFEAD9F9F340 Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/z-3zk1_OQa6LocQjIWc_jBiDQPs.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 31.193.240.0/22 maxlen: 24 31.193.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:4f:f2:b0:f9:29:07:7d:ec:cf:ea:d9:f9:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfedf3935fce41ae8ba1c42321673f8c188340fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:81:b8:36:14:14:02:7d:f5:74:5f:15:86: 03:20:dd:44:8e:fd:aa:c9:bc:d9:ab:0c:71:cd:d6: 0e:8f:84:9b:06:de:19:30:b4:31:24:3b:f9:da:2f: 04:2c:83:41:a4:0a:c1:88:a8:52:4f:fe:dc:74:ef: 79:92:f9:79:e0:1f:1e:4c:5f:99:5b:49:e8:fe:89: 42:8a:05:02:6d:1d:e7:3d:cb:39:5f:b7:eb:55:8e: a6:e2:6e:dd:46:ab:66:3f:e0:76:53:97:a4:24:8b: 1a:0f:3d:47:c3:bd:d8:77:54:00:a9:8d:3f:90:0e: e8:59:dd:f8:bd:05:33:63:3b:27:c5:35:5a:92:27: 4d:ba:21:f9:06:84:1d:94:85:ef:76:c1:b7:b4:b5: b9:88:ad:8b:35:d6:a6:6f:6f:fc:99:a3:a4:19:33: 7d:75:9b:54:8c:b6:4d:b3:51:e5:30:c5:c0:6b:e0: 46:db:27:69:6e:7b:96:b3:98:87:ca:76:cf:10:20: 6f:94:91:51:1a:f0:5d:ee:16:b3:35:90:ed:75:f4: be:d9:3d:7c:79:47:c7:ac:1b:f6:2a:45:79:f3:cf: 3f:f7:75:18:c9:92:fb:fc:c0:6f:2f:e1:52:fd:f9: 60:1e:bd:35:59:f5:9d:90:e5:44:80:55:45:c2:f5: 17:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:ED:F3:93:5F:CE:41:AE:8B:A1:C4:23:21:67:3F:8C:18:83:40:FB X509v3 Authority Key Identifier: keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/z-3zk1_OQa6LocQjIWc_jBiDQPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.240.0/21 Signature Algorithm: sha256WithRSAEncryption 2a:61:29:a9:fe:7f:76:40:2d:71:38:2b:d6:74:48:ac:ab:9b: 74:07:4f:14:2a:2c:49:73:9d:80:ec:d6:42:dd:89:c5:c3:b4: 3f:ff:8b:15:df:1d:f1:bf:9f:0d:04:08:bb:5c:ce:30:55:17: 7c:68:c6:85:14:58:8b:25:1b:58:2c:73:9e:69:34:6f:09:23: 8e:03:6f:65:d7:5e:57:1f:95:23:dd:27:26:ce:b6:85:e9:28: 4b:fc:27:71:92:78:de:dd:d8:7b:a4:ce:93:0e:bc:fe:a7:70: 7e:46:c4:ff:a8:2f:b2:30:b0:a0:5d:a3:67:4b:18:bc:52:3e: ff:1f:43:52:28:bd:c9:7d:81:b1:11:20:73:3b:1f:d7:6b:f7: e2:be:0d:a5:24:e6:69:2e:cf:83:4c:af:ac:ce:e5:1d:36:96: 1d:92:23:38:c7:51:eb:d6:95:29:da:18:1c:73:35:9b:68:c5: bf:ad:e8:26:eb:70:2e:7a:a2:29:ef:d5:5b:c5:8a:48:25:86: 52:8a:fc:93:bc:9f:a5:3a:91:cb:3f:aa:1c:a2:22:0d:7d:92: 23:2e:1d:d9:73:bb:a6:31:e9:da:b9:9b:66:b9:8f:a5:b7:f9: da:6c:d7:43:0e:4c:53:f5:4c:db:b0:f4:7b:a0:24:26:3f:e6: 53:48:6c:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NU/ysPkpB33sz+rZ+fNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj MGYyNGMwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmVkZjM5MzVmY2U0MWFlOGJhMWM0MjMyMTY3M2Y4YzE4ODM0MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu6BuDYUFAJ99XRfFYYDIN1Ejv2q ybzZqwxxzdYOj4SbBt4ZMLQxJDv52i8ELINBpArBiKhST/7cdO95kvl54B8eTF+Z W0no/olCigUCbR3nPcs5X7frVY6m4m7dRqtmP+B2U5ekJIsaDz1Hw73Yd1QAqY0/ kA7oWd34vQUzYzsnxTVakidNuiH5BoQdlIXvdsG3tLW5iK2LNdamb2/8maOkGTN9 dZtUjLZNs1HlMMXAa+BG2ydpbnuWs5iHynbPECBvlJFRGvBd7hazNZDtdfS+2T18 eUfHrBv2KkV5888/93UYyZL7/MBvL+FS/flgHr01WfWdkOVEgFVFwvUXqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/t85NfzkGui6HEIyFnP4wYg0D7MB8GA1UdIwQY MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt ZTNmY2IyM2UzNDM4LzEvei0zemsxX09RYTZMb2NRaklXY19qQmlEUVBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4 LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH8HwMA0G CSqGSIb3DQEBCwUAA4IBAQAqYSmp/n92QC1xOCvWdEisq5t0B08UKixJc52A7NZC 3YnFw7Q//4sV3x3xv58NBAi7XM4wVRd8aMaFFFiLJRtYLHOeaTRvCSOOA29l115X H5Uj3ScmzraF6ShL/Cdxknje3dh7pM6TDrz+p3B+RsT/qC+yMLCgXaNnSxi8Uj7/ H0NSKL3JfYGxESBzOx/Xa/fivg2lJOZpLs+DTK+szuUdNpYdkiM4x1Hr1pUp2hgc czWbaMW/regm63AueqIp79VbxYpIJYZSivyTvJ+lOpHLP6ocoiINfZIjLh3Zc7um MenauZtmuY+lt/nabNdDDkxT9UzbsPR7oCQmP+ZTSGyM -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:39 2026 by rpki-client