This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/zY7N7I-0j2wyToIYtsy8gjVgKFc.roa File: zY7N7I-0j2wyToIYtsy8gjVgKFc.roa (raw, json) Hash identifier: eG6Aql8AjY8k7IpGUPh2hREkMKRNs6mKuXLIFh3G5Wk= Subject key identifier: CD:8E:CD:EC:8F:B4:8F:6C:32:4E:82:18:B6:CC:BC:82:35:60:28:57 Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Certificate serial: 019B77C6A4D93F176F880EBEBDC80A9120F7 Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/zY7N7I-0j2wyToIYtsy8gjVgKFc.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 193.16.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a4:d9:3f:17:6f:88:0e:be:bd:c8:0a:91:20:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd8ecdec8fb48f6c324e8218b6ccbc8235602857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:2e:dd:4d:0c:25:cc:ea:1d:3c:f3:4d:d5: 64:a2:d1:1a:87:be:39:22:61:b4:7c:d2:65:56:25: d9:60:56:bf:2f:0a:e8:46:29:51:75:a1:df:cd:42: 83:14:f8:9e:11:3d:91:83:6b:5b:7f:8d:13:87:1f: d0:3f:37:e8:e9:2e:70:e8:09:ce:4b:88:ec:7b:ec: b3:4e:b6:7c:7c:5d:59:29:57:01:5a:ff:7a:72:74: 14:9c:d3:86:81:6b:64:25:3f:6a:e2:71:cc:69:9c: 34:c6:98:d6:56:1c:f2:33:11:c9:f6:2e:21:a9:00: 22:c7:3f:24:86:e7:22:9c:7b:14:6a:f7:25:be:f3: 09:04:2a:d6:25:80:48:f0:d8:73:ac:38:f4:64:0c: aa:4d:9b:43:5f:9e:d9:e6:d6:a3:9b:ab:5b:75:67: 86:f6:ca:81:83:f6:21:b8:ab:fa:32:2e:e5:6b:cb: ec:35:4e:5c:1f:66:41:96:c6:58:2b:0c:58:18:13: bc:c0:cf:48:62:c7:d6:6a:9f:1c:d5:ae:5f:89:dd: 7d:b4:f6:15:7c:c3:04:2e:12:a6:c1:94:c2:0e:8d: f0:3e:67:90:83:f5:c2:20:b6:b2:7a:f7:37:68:5f: 42:ef:31:43:b5:7d:c4:58:7b:3f:8c:e8:de:39:f1: 27:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8E:CD:EC:8F:B4:8F:6C:32:4E:82:18:B6:CC:BC:82:35:60:28:57 X509v3 Authority Key Identifier: keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/zY7N7I-0j2wyToIYtsy8gjVgKFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.155.0/24 Signature Algorithm: sha256WithRSAEncryption a4:1a:e2:5a:c0:15:41:cf:0d:53:8d:14:3a:2b:04:31:d6:b6: fc:79:f3:ce:e2:45:f5:89:57:f5:78:9f:40:db:73:8b:33:2e: ea:bf:52:8f:e7:d2:7c:fb:86:c8:fb:29:fb:4f:11:b0:17:a1: e8:51:2a:ae:aa:0b:ac:53:01:1e:72:fb:86:b5:81:d3:fe:0e: 2c:4c:24:85:ed:12:dd:7a:20:0e:1c:99:cb:a6:8c:f0:e9:e8: d3:d7:3b:0e:a7:b0:d8:17:c3:02:bb:6e:ac:47:d9:ae:dd:18: 3e:78:36:cc:36:4d:81:7c:a0:d8:89:06:6d:ee:c2:0f:25:d1: 0e:be:25:1e:d0:1a:8f:4d:3d:6d:24:af:a5:64:e1:f3:c0:e8: b2:20:93:c9:1d:57:4a:24:3f:30:8d:a2:02:d4:4d:5f:39:49: 52:58:38:cf:50:e5:d9:29:50:69:7f:f5:cc:2c:08:62:78:41: 4c:dd:05:f5:ed:6b:8b:8b:28:cf:f2:69:0d:34:19:d9:2d:b9: ff:03:b6:36:f8:5e:97:81:38:91:e0:0c:c8:00:4f:98:52:08: 50:34:85:2b:3e:f0:5c:70:db:dc:fd:a4:47:fd:7c:80:fa:78: 8a:91:bc:7a:2e:05:f9:f3:d9:fe:c2:77:39:2e:2f:30:cb:72: 4b:1e:5c:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqTZPxdviA6+vcgKkSD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmIwMzI4Y2JmMGIyNTRhZjdjOTlkM2I2OWZjNjM0Y2Zk OGY2MDAwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDhlY2RlYzhmYjQ4ZjZjMzI0ZTgyMThiNmNjYmM4MjM1NjAyODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIou3U0MJczqHTzzTdVkotEah745 ImG0fNJlViXZYFa/LwroRilRdaHfzUKDFPieET2Rg2tbf40Thx/QPzfo6S5w6AnO S4jse+yzTrZ8fF1ZKVcBWv96cnQUnNOGgWtkJT9q4nHMaZw0xpjWVhzyMxHJ9i4h qQAixz8khucinHsUavclvvMJBCrWJYBI8NhzrDj0ZAyqTZtDX57Z5tajm6tbdWeG 9sqBg/YhuKv6Mi7la8vsNU5cH2ZBlsZYKwxYGBO8wM9IYsfWap8c1a5fid19tPYV fMMELhKmwZTCDo3wPmeQg/XCILayevc3aF9C7zFDtX3EWHs/jOjeOfEnZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2OzeyPtI9sMk6CGLbMvII1YChXMB8GA1UdIwQY MBaAFGf7AyjL8LJUr3yZ07afxjTP2PYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTct YWE5MWM5MmQ1YzQ4LzEvelk3TjdJLTBqMnd5VG9JWXRzeThnalZnS0ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTctYWE5MWM5MmQ1YzQ4 LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRCbMA0G CSqGSIb3DQEBCwUAA4IBAQCkGuJawBVBzw1TjRQ6KwQx1rb8efPO4kX1iVf1eJ9A 23OLMy7qv1KP59J8+4bI+yn7TxGwF6HoUSquqgusUwEecvuGtYHT/g4sTCSF7RLd eiAOHJnLpozw6ejT1zsOp7DYF8MCu26sR9mu3Rg+eDbMNk2BfKDYiQZt7sIPJdEO viUe0BqPTT1tJK+lZOHzwOiyIJPJHVdKJD8wjaIC1E1fOUlSWDjPUOXZKVBpf/XM LAhieEFM3QX17WuLiyjP8mkNNBnZLbn/A7Y2+F6XgTiR4AzIAE+YUghQNIUrPvBc cNvc/aRH/XyA+niKkbx6LgX589n+wnc5Li8wy3JLHlx4 -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:51 2026 by rpki-client