This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/jzMXxS2jlpqCit2HCTxuk8M9Mcg.roa File: jzMXxS2jlpqCit2HCTxuk8M9Mcg.roa (raw, json) Hash identifier: CVU3cGMeqVTpk9Sa0TKIeRuBjXSXQzYNiMapztDyxoQ= Subject key identifier: 8F:33:17:C5:2D:A3:96:9A:82:8A:DD:87:09:3C:6E:93:C3:3D:31:C8 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019C15ABDCCE9C2FA5FB25002783276E44F6 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/jzMXxS2jlpqCit2HCTxuk8M9Mcg.roa Signing time: Sat 31 Jan 2026 20:08:30 +0000 ROA not before: Sat 31 Jan 2026 20:08:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58232 IP address blocks: 185.113.10.0/24 maxlen: 24 195.254.165.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:15:ab:dc:ce:9c:2f:a5:fb:25:00:27:83:27:6e:44:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 31 20:08:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f3317c52da3969a828add87093c6e93c33d31c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:3c:e5:4e:66:57:5a:26:60:34:3b:74:61: 71:f5:14:ab:62:20:17:b5:a3:f8:b1:b3:da:52:50: 87:5e:d6:ba:32:29:7d:fa:0a:d3:ea:9a:00:a3:d4: f6:4a:c1:cb:8e:67:f8:95:58:47:34:5f:19:7c:84: fe:10:cf:99:06:cc:15:ac:f1:0e:4c:fe:b1:55:28: 20:77:85:d5:df:82:bb:e6:ec:9f:c0:fa:a1:43:17: bb:d1:9f:aa:af:ee:89:0f:61:3e:d5:53:c9:07:d0: e2:ca:4d:ae:21:a2:4a:18:1f:ef:02:c3:d0:06:80: ff:6a:47:9e:ed:73:c4:c3:cd:ba:ce:b3:51:0e:21: bf:c2:87:ce:f1:0d:8a:73:14:2d:59:7a:44:1e:10: 96:72:3e:04:5e:4a:71:7c:4f:ac:76:b7:66:77:b2: b4:c3:ab:ac:4f:81:a2:e6:9b:1f:34:7d:5b:30:56: 5b:a6:41:97:cc:40:5b:38:52:ec:11:94:88:4e:bc: f4:7c:67:11:a3:b2:06:60:6a:67:6b:fb:2f:3b:24: 5a:41:7a:4e:0d:e5:bb:fb:6d:d1:74:de:db:bb:c5: b5:15:3a:c3:84:e1:7f:b5:df:7e:61:c6:ff:70:07: 8f:b7:3a:67:c6:19:d3:87:26:12:18:d0:b3:09:81: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:33:17:C5:2D:A3:96:9A:82:8A:DD:87:09:3C:6E:93:C3:3D:31:C8 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/jzMXxS2jlpqCit2HCTxuk8M9Mcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.10.0/24 195.254.165.0/24 IPv6: 2a05:9080:5::/48 Signature Algorithm: sha256WithRSAEncryption 06:fa:e5:13:ce:ed:72:e9:72:7a:24:1a:b7:e6:b7:f2:1e:4d: 4a:47:11:6b:8c:6a:78:29:61:10:5c:d2:63:7d:17:44:eb:07: ee:53:f3:a7:a3:79:a9:80:b6:e8:2e:fb:20:c1:7b:64:bb:47: 77:a7:17:1e:ce:78:13:de:ef:65:c7:91:09:8b:74:f8:27:bc: ef:83:a0:9a:71:69:0e:c0:65:77:f9:1b:79:cb:d3:6f:56:ff: 4e:6d:9c:ac:5f:70:e9:ce:5d:2c:0b:57:58:fe:33:45:ba:ad: 01:18:8e:7f:b3:44:ab:b1:fa:a3:ae:ef:a5:5a:63:3e:7d:97: 70:88:86:8f:bf:02:20:63:25:e0:fe:a2:59:33:bc:15:a8:c9: 9f:f2:ed:e7:e0:4e:28:d8:a2:90:0c:bf:c5:31:00:38:d2:58: 86:dc:9d:0b:c9:b4:ca:0f:f7:4b:e8:3c:64:04:ec:c8:fc:55: 01:a7:80:bf:2f:ea:18:59:76:a4:82:db:f7:1c:7d:c4:af:df: 51:e2:56:17:e4:c2:95:73:ab:4f:a8:be:ed:84:a7:4f:48:cd: a4:2e:ab:04:b9:1a:dc:6b:35:08:c8:35:2e:6e:40:01:32:0c: e5:3a:f9:67:10:8c:53:36:c4:82:32:fd:e5:b5:ac:9b:ae:2e: e8:15:9e:d3 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZwVq9zOnC+l+yUAJ4MnbkT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTMxMjAwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjMzMTdjNTJkYTM5NjlhODI4YWRkODcwOTNjNmU5M2MzM2QzMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxE85U5mV1omYDQ7dGFx9RSrYiAX taP4sbPaUlCHXta6Mil9+grT6poAo9T2SsHLjmf4lVhHNF8ZfIT+EM+ZBswVrPEO TP6xVSggd4XV34K75uyfwPqhQxe70Z+qr+6JD2E+1VPJB9Diyk2uIaJKGB/vAsPQ BoD/akee7XPEw826zrNRDiG/wofO8Q2KcxQtWXpEHhCWcj4EXkpxfE+sdrdmd7K0 w6usT4Gi5psfNH1bMFZbpkGXzEBbOFLsEZSITrz0fGcRo7IGYGpna/svOyRaQXpO DeW7+23RdN7bu8W1FTrDhOF/td9+Ycb/cAePtzpnxhnThyYSGNCzCYGXYwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFI8zF8Uto5aagordhwk8bpPDPTHIMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvanpNWHhTMmpscHFDaXQySENUeHVrOE05TWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuXEKAwQA w/6lMA8EAgACMAkDBwAqBZCAAAUwDQYJKoZIhvcNAQELBQADggEBAAb65RPO7XLp cnokGrfmt/IeTUpHEWuMangpYRBc0mN9F0TrB+5T86ejeamAtugu+yDBe2S7R3en Fx7OeBPe72XHkQmLdPgnvO+DoJpxaQ7AZXf5G3nL029W/05tnKxfcOnOXSwLV1j+ M0W6rQEYjn+zRKux+qOu76VaYz59l3CIho+/AiBjJeD+olkzvBWoyZ/y7efgTijY opAMv8UxADjSWIbcnQvJtMoP90voPGQE7Mj8VQGngL8v6hhZdqSC2/ccfcSv31Hi VhfkwpVzq0+ovu2Ep09IzaQuqwS5GtxrNQjINS5uQAEyDOU6+WcQjFM2xIIy/eW1 rJuuLugVntM= -----END CERTIFICATE-----Generated at Sun Feb 1 07:46:43 2026 by rpki-client