This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/zOqpyrA-mf4nkA9uzKu6WERUh9M.roa File: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (raw, json) Hash identifier: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU= Subject key identifier: CC:EA:A9:CA:B0:3E:99:FE:27:90:0F:6E:CC:AB:BA:58:44:54:87:D3 Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316 Certificate serial: 019B7D5C7876A6FA6CEAA10634865E3C0FAF Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/zOqpyrA-mf4nkA9uzKu6WERUh9M.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197326 IP address blocks: 193.77.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:78:76:a6:fa:6c:ea:a1:06:34:86:5e:3c:0f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cceaa9cab03e99fe27900f6eccabba58445487d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:f5:d2:19:ba:e2:c4:d5:fd:39:a4:aa:41: 7f:e1:cb:87:2d:26:1f:42:6d:dd:6f:50:ee:a2:8e: e9:6e:02:b7:d6:4a:22:09:cc:cc:fe:03:8f:22:d7: e2:26:22:97:3d:72:df:94:fd:ad:c7:b1:5c:c7:ec: 44:2a:df:34:e0:cd:5d:38:3b:a5:e3:d3:ed:20:37: f5:99:80:5a:26:b2:b3:d6:0c:5c:af:7c:9d:59:1c: 6e:ae:19:80:c5:dd:a6:86:c9:56:3c:ac:20:63:eb: c1:96:08:b0:7b:50:e9:2e:96:55:82:85:ce:0c:78: 00:ba:44:10:9e:f9:bc:c4:e2:cb:a4:9d:2a:a3:87: 01:4d:28:7c:6f:29:a5:ff:47:45:98:12:80:ee:8a: e3:cb:3a:a1:3c:9d:a8:99:ff:b3:2a:e3:b7:78:e6: 83:53:dc:73:bd:3b:30:e9:2a:d5:20:ad:48:c8:01: 8c:78:2c:1a:2f:a3:bb:31:2a:00:40:21:7d:6b:20: 42:90:3e:30:cf:0d:5d:18:7e:12:74:ed:bd:5e:b4: 0e:8a:fb:39:d9:b1:00:d3:71:63:9b:f5:f0:e5:24: f4:14:f6:53:44:3a:f8:9c:a1:ac:9b:7d:a8:b8:f3: e2:45:24:4a:8a:c5:d9:1a:cc:95:a7:14:b9:4b:11: 5f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EA:A9:CA:B0:3E:99:FE:27:90:0F:6E:CC:AB:BA:58:44:54:87:D3 X509v3 Authority Key Identifier: keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/zOqpyrA-mf4nkA9uzKu6WERUh9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.77.42.0/24 Signature Algorithm: sha256WithRSAEncryption 41:d7:aa:d1:a0:d6:a9:01:fe:6e:38:5d:11:48:bd:b0:da:a3: 0c:f7:2a:cd:32:91:7a:8b:67:d9:b0:72:b3:52:6b:d8:b1:ec: d3:12:4a:42:da:ce:d8:11:1b:8a:2b:cc:02:1d:54:3b:ea:42: 86:90:da:6a:07:f6:c6:fb:ab:b2:f3:d9:91:9b:07:16:92:3e: 50:c7:0e:b8:3f:ef:1f:f0:dc:72:9f:e5:93:b9:c9:43:49:4c: ff:74:0e:7f:bd:ef:59:6c:30:b1:53:de:3a:c9:a3:23:9f:43: 2c:89:ce:e1:c3:cf:5c:70:56:0a:9f:c4:cf:1c:28:53:4e:99: 3f:e9:68:3a:44:51:1e:55:77:72:05:d7:11:cc:95:ba:fa:3d: b2:5d:f1:6b:1e:47:30:de:ea:48:73:b3:d9:f5:19:fb:af:d9: f4:65:9a:ea:61:30:2b:65:73:ac:83:4c:c9:b4:c6:65:9d:58: 18:68:76:f8:84:20:24:6c:08:38:d3:0f:6e:dc:37:5a:d3:51: 8f:df:5d:28:d1:5e:67:7e:72:ca:55:80:4b:ec:00:c0:d6:c2: 12:8b:c1:e1:00:25:d0:8c:72:96:18:d9:9b:6c:0b:28:a3:58: 25:f5:43:00:7f:26:a3:f2:ea:fc:63:1d:c3:6b:ac:2c:e6:07: b6:e7:96:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XHh2pvps6qEGNIZePA+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw NGIzMTYwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2VhYTljYWIwM2U5OWZlMjc5MDBmNmVjY2FiYmE1ODQ0NTQ4N2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlX10hm64sTV/TmkqkF/4cuHLSYf Qm3db1Duoo7pbgK31koiCczM/gOPItfiJiKXPXLflP2tx7Fcx+xEKt804M1dODul 49PtIDf1mYBaJrKz1gxcr3ydWRxurhmAxd2mhslWPKwgY+vBlgiwe1DpLpZVgoXO DHgAukQQnvm8xOLLpJ0qo4cBTSh8byml/0dFmBKA7orjyzqhPJ2omf+zKuO3eOaD U9xzvTsw6SrVIK1IyAGMeCwaL6O7MSoAQCF9ayBCkD4wzw1dGH4SdO29XrQOivs5 2bEA03Fjm/Xw5ST0FPZTRDr4nKGsm32ouPPiRSRKisXZGsyVpxS5SxFfpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMzqqcqwPpn+J5APbsyrulhEVIfTMB8GA1UdIwQY MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt YjQyNTIyZDA1ODk1LzEvek9xcHlyQS1tZjRua0E5dXpLdTZXRVJVaDlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1 LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwU0qMA0G CSqGSIb3DQEBCwUAA4IBAQBB16rRoNapAf5uOF0RSL2w2qMM9yrNMpF6i2fZsHKz UmvYsezTEkpC2s7YERuKK8wCHVQ76kKGkNpqB/bG+6uy89mRmwcWkj5Qxw64P+8f 8Nxyn+WTuclDSUz/dA5/ve9ZbDCxU946yaMjn0Msic7hw89ccFYKn8TPHChTTpk/ 6Wg6RFEeVXdyBdcRzJW6+j2yXfFrHkcw3upIc7PZ9Rn7r9n0ZZrqYTArZXOsg0zJ tMZlnVgYaHb4hCAkbAg40w9u3Dda01GP310o0V5nfnLKVYBL7ADA1sISi8HhACXQ jHKWGNmbbAsoo1gl9UMAfyaj8ur8Yx3Da6ws5ge255aH -----END CERTIFICATE-----Generated at Tue Jan 27 07:35:43 2026 by rpki-client