This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/z3h7NH6N5wijAwMYVRinzlp5MD8.roa File: z3h7NH6N5wijAwMYVRinzlp5MD8.roa (raw, json) Hash identifier: FU3UxZOkfnfaPhBOfubHG6bYn2mXYkfBh0IbGxObMkQ= Subject key identifier: CF:78:7B:34:7E:8D:E7:08:A3:03:03:18:55:18:A7:CE:5A:79:30:3F Certificate issuer: /CN=67cc77931dbb0e9e229c7217652b76aef4002721 Certificate serial: 019B797F3E229F3E2B338637466A915519A0 Authority key identifier: 67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/z3h7NH6N5wijAwMYVRinzlp5MD8.roa Signing time: Thu 01 Jan 2026 12:19:00 +0000 ROA not before: Thu 01 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38991 IP address blocks: 195.14.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3e:22:9f:3e:2b:33:86:37:46:6a:91:55:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67cc77931dbb0e9e229c7217652b76aef4002721 Validity Not Before: Jan 1 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf787b347e8de708a30303185518a7ce5a79303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:92:13:f6:fe:78:f0:ad:e8:7a:e3:c0:34: 50:98:43:b3:92:6c:e6:d0:90:2f:52:36:9e:47:e6: a1:46:85:e5:2d:68:f9:d6:a0:45:50:31:c8:79:06: 74:09:54:e1:e2:bd:80:06:85:fc:9e:e9:07:86:85: 19:2c:b7:98:1d:a0:23:e0:c9:ab:5e:15:38:16:81: 06:d6:f6:af:f6:dc:1f:50:2b:fd:b8:04:58:6e:b9: 2a:06:03:9e:54:4f:11:eb:72:ad:9e:3b:f1:0b:16: 4e:22:54:2a:3c:6b:1a:48:78:a5:a3:3f:5c:84:8b: 4f:ef:1e:c4:1f:ee:98:67:0d:33:e8:19:d5:50:8b: 2e:42:c6:43:85:65:bc:b2:cf:29:93:0a:54:94:fc: 49:09:53:02:4e:4c:cf:50:2a:26:9d:e0:8d:ae:78: 6b:46:52:c1:75:8e:8a:e4:b0:87:57:ad:54:0f:b5: 04:88:0c:45:06:59:7a:de:8a:ac:16:9d:96:28:e7: 95:48:c8:78:41:7b:3a:b7:b0:0e:a7:6d:72:f0:3a: ac:c5:a3:e3:b2:eb:87:87:de:d5:b7:d1:5d:17:9a: d6:90:2b:2c:34:38:16:e3:9a:5d:20:cf:d6:e3:5b: 22:94:28:83:97:ec:b7:2d:da:26:26:c7:5b:34:d2: 18:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:78:7B:34:7E:8D:E7:08:A3:03:03:18:55:18:A7:CE:5A:79:30:3F X509v3 Authority Key Identifier: keyid:67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/z3h7NH6N5wijAwMYVRinzlp5MD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.14.3.0/24 Signature Algorithm: sha256WithRSAEncryption 64:88:47:5a:de:d7:c7:9f:b9:2c:a9:00:17:e4:35:c4:49:be: 67:6a:cb:95:bc:f5:7a:6d:1d:92:5e:1b:92:8b:2b:24:05:fe: b4:ec:bd:8f:eb:8e:a5:34:a0:cc:29:d2:46:60:cf:b9:0a:58: 23:b3:66:01:13:44:2d:13:0d:01:2e:29:49:cc:e8:98:85:ef: aa:a7:f2:5a:6d:7a:58:ae:ed:ad:0d:7b:37:0b:fb:06:da:f1: 88:42:50:ce:81:c7:57:5c:d1:84:f9:a4:2b:a7:75:d9:1f:12: d1:76:fb:f8:f4:01:2a:41:71:9a:61:9b:b6:a8:33:26:7f:33: 70:39:1d:ca:71:52:62:b2:c0:49:22:a1:a5:11:68:5a:27:b0: 8f:0a:e3:18:91:c6:9d:84:b7:9b:fa:8d:33:06:fe:0f:de:7a: 6d:34:1f:98:1f:a7:38:43:2b:2c:ca:d5:9c:c2:da:21:70:82: f1:86:81:68:93:60:b8:ec:2e:59:cb:ca:74:18:4e:4c:73:cc: 15:06:f7:0d:ca:be:18:83:d5:b1:33:09:d0:93:23:50:51:46: 71:3d:22:a3:2b:70:9b:ed:36:16:dc:58:62:95:9a:93:ee:41: 58:09:2e:49:f3:05:f4:e6:ad:9d:ec:df:a2:a3:a0:8c:96:e8: b5:4b:74:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fz4inz4rM4Y3RmqRVRmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2M3NzkzMWRiYjBlOWUyMjljNzIxNzY1MmI3NmFlZjQw MDI3MjEwHhcNMjYwMTAxMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjc4N2IzNDdlOGRlNzA4YTMwMzAzMTg1NTE4YTdjZTVhNzkzMDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/uSE/b+ePCt6HrjwDRQmEOzkmzm 0JAvUjaeR+ahRoXlLWj51qBFUDHIeQZ0CVTh4r2ABoX8nukHhoUZLLeYHaAj4Mmr XhU4FoEG1vav9twfUCv9uARYbrkqBgOeVE8R63KtnjvxCxZOIlQqPGsaSHiloz9c hItP7x7EH+6YZw0z6BnVUIsuQsZDhWW8ss8pkwpUlPxJCVMCTkzPUComneCNrnhr RlLBdY6K5LCHV61UD7UEiAxFBll63oqsFp2WKOeVSMh4QXs6t7AOp21y8DqsxaPj suuHh97Vt9FdF5rWkCssNDgW45pdIM/W41silCiDl+y3LdomJsdbNNIY7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM94ezR+jecIowMDGFUYp85aeTA/MB8GA1UdIwQY MBaAFGfMd5Mduw6eIpxyF2Urdq70ACchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQt NGI0NmYzZDMzNzNmLzEvejNoN05INk41d2lqQXdNWVZSaW56bHA1TUQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQtNGI0NmYzZDMzNzNm LzEvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAww4DMA0G CSqGSIb3DQEBCwUAA4IBAQBkiEda3tfHn7ksqQAX5DXESb5nasuVvPV6bR2SXhuS iyskBf607L2P646lNKDMKdJGYM+5Clgjs2YBE0QtEw0BLilJzOiYhe+qp/JabXpY ru2tDXs3C/sG2vGIQlDOgcdXXNGE+aQrp3XZHxLRdvv49AEqQXGaYZu2qDMmfzNw OR3KcVJissBJIqGlEWhaJ7CPCuMYkcadhLeb+o0zBv4P3nptNB+YH6c4QyssytWc wtohcILxhoFok2C47C5Zy8p0GE5Mc8wVBvcNyr4Yg9WxMwnQkyNQUUZxPSKjK3Cb 7TYW3FhilZqT7kFYCS5J8wX05q2d7N+io6CMlui1S3SJ -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:34 2026 by rpki-client