This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/zilAvi0gPY9JFc-GVd3-_608WgE.roa File: zilAvi0gPY9JFc-GVd3-_608WgE.roa (raw, json) Hash identifier: ZyVYNr8SF0SGWYnff8EK2MHWbU5TL3VAzX0qJ7R6ce0= Subject key identifier: CE:29:40:BE:2D:20:3D:8F:49:15:CF:86:55:DD:FE:FF:AD:3C:5A:01 Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830 Certificate serial: 019B7759723A4215351AF8AB737BBE840305 Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/zilAvi0gPY9JFc-GVd3-_608WgE.roa Signing time: Thu 01 Jan 2026 02:18:29 +0000 ROA not before: Thu 01 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 193.26.9.0/24 maxlen: 24 2001:678:d24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:72:3a:42:15:35:1a:f8:ab:73:7b:be:84:03:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830 Validity Not Before: Jan 1 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce2940be2d203d8f4915cf8655ddfeffad3c5a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d1:c6:d4:bd:7b:69:3a:cd:e5:98:e6:04:11: 56:f3:00:64:d7:0a:7e:98:54:4c:72:4d:f6:1a:1a: 32:9f:3c:48:c5:93:9f:a0:89:23:20:71:3d:d8:c8: 1d:48:e8:30:fd:32:c7:5b:5d:9f:31:a4:49:05:62: f8:80:af:5b:16:cb:1a:51:5b:3f:b0:6c:03:c0:9a: 89:08:26:26:be:d5:44:bf:95:82:f0:3f:28:9a:96: 5e:22:fe:e3:87:c4:26:ca:7c:0b:82:a4:c3:24:97: 27:2d:21:38:71:8e:d0:e9:e3:3a:09:05:ad:86:59: df:b2:0a:74:a0:0d:3c:45:89:51:e7:07:45:d2:a1: 8e:57:9f:a6:3e:c6:cc:a5:fb:ca:84:e6:e9:a9:a2: cd:c6:76:2a:5c:8d:6b:01:c2:cf:a5:4e:8e:d7:2a: 89:8a:20:d8:30:70:63:e5:f7:56:49:3f:e4:67:5f: 7e:4c:34:ca:7a:4e:1f:fa:e6:f6:95:31:91:f2:d6: a4:ad:e0:26:70:44:af:ed:f4:e1:98:c9:71:c7:94: d1:18:43:62:f2:d6:30:00:98:95:92:a8:d2:c4:8b: b2:35:0d:da:83:0a:f0:63:64:ac:8c:fc:c5:b6:2d: b7:0e:7a:54:e4:1b:26:0b:f6:57:0f:18:66:3b:c3: fb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:29:40:BE:2D:20:3D:8F:49:15:CF:86:55:DD:FE:FF:AD:3C:5A:01 X509v3 Authority Key Identifier: keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/zilAvi0gPY9JFc-GVd3-_608WgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.9.0/24 IPv6: 2001:678:d24::/48 Signature Algorithm: sha256WithRSAEncryption 09:3c:3b:69:f5:12:85:4e:2c:6b:1e:91:41:ba:87:a7:ce:e6: fc:87:61:2d:ae:97:d1:95:83:ff:d2:63:b4:62:1f:27:a6:64: cd:6c:de:c6:75:6f:5f:b3:21:55:7e:ae:bc:e8:a6:4b:84:d5: 1b:5c:2c:5e:71:db:21:a8:5e:60:48:14:dc:d7:8b:de:1d:cb: 31:ae:12:d9:b4:3e:bc:6e:6b:de:35:03:48:35:f7:a4:a1:32: 17:98:26:cb:b1:1c:d5:70:d3:fe:b2:d2:8a:45:6c:76:08:86: 4a:2d:2c:a7:b0:6b:47:33:b1:b3:ac:b8:26:c5:bd:42:ff:40: 09:54:26:40:e1:8a:94:dc:cf:5f:a2:db:18:a4:0a:62:9a:fe: c2:c4:f7:6e:e5:02:5f:40:78:0b:79:fd:79:00:e5:4d:73:7f: da:1a:81:9b:d0:f5:ea:2e:8e:b3:e4:e3:b7:e7:49:58:ba:45: 1a:90:61:c2:cb:14:40:70:76:00:c1:c0:ec:35:d5:42:bf:14: cc:7a:01:d5:dc:58:d3:5f:51:39:90:20:67:8b:b2:de:9d:37: fc:ed:08:de:54:a0:c4:f9:b5:5c:03:13:c9:05:dd:0c:35:ac: 10:36:e4:e4:25:14:e3:f3:5f:4b:8b:31:45:3c:aa:49:6a:aa: 6d:32:b6:c2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WXI6QhU1Gvirc3u+hAMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZmQ5MGNiMzU3NDJmOWU1ODFlOGNiZGYwZTNlMTIzYTg0 OWM4MzAwHhcNMjYwMTAxMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTI5NDBiZTJkMjAzZDhmNDkxNWNmODY1NWRkZmVmZmFkM2M1YTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldHG1L17aTrN5ZjmBBFW8wBk1wp+ mFRMck32GhoynzxIxZOfoIkjIHE92MgdSOgw/TLHW12fMaRJBWL4gK9bFssaUVs/ sGwDwJqJCCYmvtVEv5WC8D8ompZeIv7jh8QmynwLgqTDJJcnLSE4cY7Q6eM6CQWt hlnfsgp0oA08RYlR5wdF0qGOV5+mPsbMpfvKhObpqaLNxnYqXI1rAcLPpU6O1yqJ iiDYMHBj5fdWST/kZ19+TDTKek4f+ub2lTGR8takreAmcESv7fThmMlxx5TRGENi 8tYwAJiVkqjSxIuyNQ3agwrwY2SsjPzFti23DnpU5BsmC/ZXDxhmO8P7MQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFM4pQL4tID2PSRXPhlXd/v+tPFoBMB8GA1UdIwQY MBaAFK39kMs1dC+eWB6MvfDj4SOoScgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmYyUXl6VjBMNTVZSG95OThPUGhJNmhKeURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83ZTIyNGQtZjE1NC00Zjc1LWEyYTgt ZWI3ZWM0ZDdkY2E4LzEvemlsQXZpMGdQWTlKRmMtR1ZkMy1fNjA4V2dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83ZTIyNGQtZjE1NC00Zjc1LWEyYTgtZWI3ZWM0ZDdkY2E4 LzEvcmYyUXl6VjBMNTVZSG95OThPUGhJNmhKeURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwRoJMA8E AgACMAkDBwAgAQZ4DSQwDQYJKoZIhvcNAQELBQADggEBAAk8O2n1EoVOLGsekUG6 h6fO5vyHYS2ul9GVg//SY7RiHyemZM1s3sZ1b1+zIVV+rrzopkuE1RtcLF5x2yGo XmBIFNzXi94dyzGuEtm0Prxua941A0g196ShMheYJsuxHNVw0/6y0opFbHYIhkot LKewa0czsbOsuCbFvUL/QAlUJkDhipTcz1+i2xikCmKa/sLE927lAl9AeAt5/XkA 5U1zf9oagZvQ9eoujrPk47fnSVi6RRqQYcLLFEBwdgDBwOw11UK/FMx6AdXcWNNf UTmQIGeLst6dN/ztCN5UoMT5tVwDE8kF3Qw1rBA25OQlFOPzX0uLMUU8qklqqm0y tsI= -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:26 2026 by rpki-client