This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/Zav8Gx3Ftvlbct-oXOibrBGZ2JM.roa File: Zav8Gx3Ftvlbct-oXOibrBGZ2JM.roa (raw, json) Hash identifier: 1ZAL+JjSReBWWnXXw88dwvfgMDtRJ2A88/nL1Id7fMA= Subject key identifier: 65:AB:FC:1B:1D:C5:B6:F9:5B:72:DF:A8:5C:E8:9B:AC:11:99:D8:93 Certificate issuer: /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f Certificate serial: 019B77592FCAE41C9C42E55311FCDE449785 Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/Zav8Gx3Ftvlbct-oXOibrBGZ2JM.roa Signing time: Thu 01 Jan 2026 02:18:12 +0000 ROA not before: Thu 01 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50305 IP address blocks: 193.104.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2f:ca:e4:1c:9c:42:e5:53:11:fc:de:44:97:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65abfc1b1dc5b6f95b72dfa85ce89bac1199d893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:6e:9f:44:c4:3a:07:75:e3:22:de:07:c6: e1:0e:fc:a5:37:c7:7b:a3:ff:87:aa:db:af:37:18: f7:15:fc:58:78:49:1f:ac:a2:bc:bd:77:aa:cc:b6: 8f:f1:44:f5:2b:c7:03:38:77:38:8c:a4:1f:be:e8: 03:c1:b6:73:67:89:89:01:fe:d6:2d:a6:ce:30:da: 1c:b3:f9:9b:13:f8:31:4a:ae:e8:4c:d7:99:14:ec: 86:0d:67:fa:6c:5f:c8:20:87:c0:06:fd:96:db:be: 5a:f5:45:e0:cd:db:3e:99:c7:0d:1f:55:da:bd:e6: c8:d1:d0:56:7d:7e:02:31:35:ac:26:04:01:be:cc: a4:16:2f:e5:63:d7:eb:83:05:13:67:e4:af:d2:4f: 69:31:01:1b:33:18:40:bd:cc:1d:b4:cf:b5:8e:bf: 4f:c3:c5:4f:39:8f:45:4a:49:b5:98:0d:d5:de:5c: 06:fd:26:31:49:0d:f3:d4:c7:1e:c3:85:21:ed:01: 7b:78:d6:ae:b7:3a:d0:2a:02:aa:b4:ec:66:44:53: 85:43:b4:84:66:09:8f:7e:15:91:87:34:e2:e2:e2: 73:56:dd:5f:dc:7d:6b:9a:2e:78:d2:3a:df:0b:89: cf:c2:c1:fb:72:65:de:c0:20:84:95:83:8a:b0:ac: 20:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AB:FC:1B:1D:C5:B6:F9:5B:72:DF:A8:5C:E8:9B:AC:11:99:D8:93 X509v3 Authority Key Identifier: keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/Zav8Gx3Ftvlbct-oXOibrBGZ2JM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.208.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:8b:c3:bd:a5:0e:bf:16:ab:8d:e6:c0:ff:29:08:b0:7c:72: da:6f:f9:cd:16:65:c7:3e:70:ec:91:86:9f:71:c1:83:dd:63: 6a:0a:c6:ed:5f:b8:78:e6:27:b1:02:81:85:73:5e:be:3b:31: 23:cd:f3:04:d2:80:41:ab:00:d8:c5:32:e0:29:35:67:d8:78: ef:86:83:f9:57:98:8b:36:1f:aa:26:14:77:ef:59:fc:11:2b: f5:2a:5a:f3:6d:49:93:af:81:a7:73:9a:03:23:c2:6f:c1:a6: ae:f0:9f:d2:30:9d:b3:4f:8a:c5:cc:c8:06:35:3c:7b:6d:7a: ae:07:31:1e:ee:0c:8f:2d:ba:a1:10:5b:3e:d0:c0:c6:e2:56: 10:11:6e:c2:75:a8:26:cb:f6:0d:96:df:9e:3c:3c:5a:42:89: b2:31:44:a3:29:1e:73:e7:c4:26:30:15:37:bd:27:d6:da:f7: ed:3c:aa:fb:45:67:64:4a:83:06:05:13:24:44:15:56:98:78: 39:a4:5d:29:e5:8d:0b:3e:2c:29:75:9e:e4:31:5d:57:da:49: fb:9a:de:62:00:23:08:26:cd:8c:df:d9:72:48:64:d6:39:a3: 07:87:66:3c:8b:09:0c:1b:5b:1e:e2:92:39:c5:39:de:5f:09: 1d:59:9c:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WS/K5BycQuVTEfzeRJeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzU5OGViYjVkMWQwOGViMGRhNDM4ZDA1MmNlYmFhNGZk Yzc2OGYwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWFiZmMxYjFkYzViNmY5NWI3MmRmYTg1Y2U4OWJhYzExOTlkODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu15un0TEOgd14yLeB8bhDvylN8d7 o/+HqtuvNxj3FfxYeEkfrKK8vXeqzLaP8UT1K8cDOHc4jKQfvugDwbZzZ4mJAf7W LabOMNocs/mbE/gxSq7oTNeZFOyGDWf6bF/IIIfABv2W275a9UXgzds+mccNH1Xa vebI0dBWfX4CMTWsJgQBvsykFi/lY9frgwUTZ+Sv0k9pMQEbMxhAvcwdtM+1jr9P w8VPOY9FSkm1mA3V3lwG/SYxSQ3z1Mcew4Uh7QF7eNautzrQKgKqtOxmRFOFQ7SE ZgmPfhWRhzTi4uJzVt1f3H1rmi540jrfC4nPwsH7cmXewCCElYOKsKwg+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGWr/Bsdxbb5W3LfqFzom6wRmdiTMB8GA1UdIwQY MBaAFBs1mOu10dCOsNpDjQUs66pP3HaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3pXWTY3WFIwSTZ3MmtPTkJTenJxa19jZG84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wNTYyZjgtMjY3MC00NDBmLTg1MDIt MWJhMGViYWE4YTg2LzEvWmF2OEd4M0Z0dmxiY3Qtb1hPaWJyQkdaMkpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wNTYyZjgtMjY3MC00NDBmLTg1MDItMWJhMGViYWE4YTg2 LzEvR3pXWTY3WFIwSTZ3MmtPTkJTenJxa19jZG84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWjQMA0G CSqGSIb3DQEBCwUAA4IBAQAci8O9pQ6/FquN5sD/KQiwfHLab/nNFmXHPnDskYaf ccGD3WNqCsbtX7h45iexAoGFc16+OzEjzfME0oBBqwDYxTLgKTVn2HjvhoP5V5iL Nh+qJhR371n8ESv1KlrzbUmTr4Gnc5oDI8Jvwaau8J/SMJ2zT4rFzMgGNTx7bXqu BzEe7gyPLbqhEFs+0MDG4lYQEW7Cdagmy/YNlt+ePDxaQomyMUSjKR5z58QmMBU3 vSfW2vftPKr7RWdkSoMGBRMkRBVWmHg5pF0p5Y0LPiwpdZ7kMV1X2kn7mt5iACMI Js2M39lySGTWOaMHh2Y8iwkMG1se4pI5xTneXwkdWZxQ -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:56 2026 by rpki-client