This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa File: zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa (raw, json) Hash identifier: KhztEjdKKCUwFxaKlQfytzrfu+bmSSNX/+mFfUrHfZE= Subject key identifier: CD:2C:10:19:BC:39:79:4A:D2:FD:59:B2:4B:47:8D:72:E6:20:59:03 Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829 Certificate serial: 019B7EA52D5F16DE385A088C6BD64D01D731 Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa Signing time: Fri 02 Jan 2026 12:18:32 +0000 ROA not before: Fri 02 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199155 IP address blocks: 193.236.32.0/19 maxlen: 20 193.236.64.0/19 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2d:5f:16:de:38:5a:08:8c:6b:d6:4d:01:d7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829 Validity Not Before: Jan 2 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd2c1019bc39794ad2fd59b24b478d72e6205903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:82:3c:83:de:7c:d6:18:f5:df:1c:9f:e1: 34:9d:d7:41:9e:fc:3a:84:09:15:35:bd:aa:ef:c3: 9c:de:fc:8c:c6:d6:63:b1:98:2d:ea:14:54:48:fe: 99:3e:03:0e:b0:d2:54:1b:0c:56:c7:9b:29:c9:2c: 75:11:4f:00:b8:fa:e6:ed:1e:63:4a:70:17:30:8a: 98:fd:b7:eb:a4:f7:56:ab:61:b6:94:b4:be:fa:5e: 66:64:4f:27:18:66:d0:3d:c0:b2:e3:8a:a2:d0:5d: 93:7a:72:76:20:a6:aa:9f:ff:6b:8e:33:07:ff:bf: 34:e0:2a:07:d0:9d:58:2b:95:46:91:af:b6:3a:ee: 37:84:21:fc:31:9b:95:36:0a:e4:fb:8d:21:f1:27: 59:29:49:af:2f:0e:a2:6c:43:1b:8a:e2:86:f3:73: 32:e2:c6:84:b8:69:db:44:46:88:dc:b8:07:a3:1d: 9a:46:10:49:c7:40:ae:54:f8:e4:da:06:4d:49:f4: 1e:e5:09:54:88:20:67:ce:9e:d4:2b:08:89:4f:24: 7d:2b:90:4d:d2:ce:23:71:e8:b0:cf:42:51:e8:cf: f5:0f:89:b2:04:12:0b:9b:0f:03:23:e2:18:43:1e: 5c:cb:4a:da:d0:ac:7c:42:86:d1:c7:8e:6d:01:0a: 77:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2C:10:19:BC:39:79:4A:D2:FD:59:B2:4B:47:8D:72:E6:20:59:03 X509v3 Authority Key Identifier: keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.236.32.0-193.236.95.255 Signature Algorithm: sha256WithRSAEncryption 64:2f:69:39:99:f9:4b:ea:f6:01:c6:f1:ff:52:b0:32:b8:c6: 20:11:e3:eb:96:0e:80:fa:7a:80:25:6e:a0:2d:51:64:61:09: cd:2c:78:40:b3:f0:39:c0:da:62:35:28:e9:50:33:39:d7:7a: 5d:fa:14:95:0e:7a:3a:ea:1e:34:c4:14:fe:e7:bf:cd:40:79: 61:49:ed:ae:de:56:12:aa:61:a3:50:9f:c8:56:9e:24:b2:c3: f0:36:cc:96:9d:d1:0e:b1:d7:d7:1c:e3:76:dd:43:89:fb:2c: 10:20:ad:ed:34:9e:18:f5:dc:c8:f9:ac:50:5c:7b:fe:c0:aa: af:3e:8b:46:83:d7:92:10:43:fb:7e:f4:02:f2:ed:a5:eb:0f: 0e:5e:bc:16:38:23:cb:98:95:ec:10:ee:e0:ce:27:2f:ed:ff: 43:93:99:c9:82:cd:15:2a:c3:84:29:a5:ca:06:c4:3e:e9:60: ab:07:9c:fd:b1:70:09:59:d1:e9:8e:ee:c2:e4:5d:37:c1:f7: 93:7d:a7:7b:ce:a5:11:b1:37:7c:e5:12:68:ca:17:70:30:51: b7:8e:5d:9b:61:c0:f2:db:7f:a2:4c:09:ac:bd:bd:4a:af:69: 68:8f:43:45:4c:fc:ba:1c:27:45:41:4f:da:47:a9:36:a4:33: 49:66:96:6d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pS1fFt44WgiMa9ZNAdcxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjNkZjk3MWFhN2NiMjVkZmI3Y2I1NWIyOWM4N2JjYmUz MjA4MjkwHhcNMjYwMTAyMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDJjMTAxOWJjMzk3OTRhZDJmZDU5YjI0YjQ3OGQ3MmU2MjA1OTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7aCPIPefNYY9d8cn+E0nddBnvw6 hAkVNb2q78Oc3vyMxtZjsZgt6hRUSP6ZPgMOsNJUGwxWx5spySx1EU8AuPrm7R5j SnAXMIqY/bfrpPdWq2G2lLS++l5mZE8nGGbQPcCy44qi0F2TenJ2IKaqn/9rjjMH /7804CoH0J1YK5VGka+2Ou43hCH8MZuVNgrk+40h8SdZKUmvLw6ibEMbiuKG83My 4saEuGnbREaI3LgHox2aRhBJx0CuVPjk2gZNSfQe5QlUiCBnzp7UKwiJTyR9K5BN 0s4jceiwz0JR6M/1D4myBBILmw8DI+IYQx5cy0ra0Kx8QobRx45tAQp3zwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM0sEBm8OXlK0v1ZsktHjXLmIFkDMB8GA1UdIwQY MBaAFI3z35cap8sl37fLVbKch7y+MggpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2Ut Yzc5NGI1Zjg3ODA0LzEvelN3UUdidzVlVXJTX1ZteVMwZU5jdVlnV1FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2UtYzc5NGI1Zjg3ODA0 LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXB7CAD BAXB7EAwDQYJKoZIhvcNAQELBQADggEBAGQvaTmZ+Uvq9gHG8f9SsDK4xiAR4+uW DoD6eoAlbqAtUWRhCc0seECz8DnA2mI1KOlQMznXel36FJUOejrqHjTEFP7nv81A eWFJ7a7eVhKqYaNQn8hWniSyw/A2zJad0Q6x19cc43bdQ4n7LBAgre00nhj13Mj5 rFBce/7Aqq8+i0aD15IQQ/t+9ALy7aXrDw5evBY4I8uYlewQ7uDOJy/t/0OTmcmC zRUqw4QppcoGxD7pYKsHnP2xcAlZ0emO7sLkXTfB95N9p3vOpRGxN3zlEmjKF3Aw UbeOXZthwPLbf6JMCay9vUqvaWiPQ0VM/LocJ0VBT9pHqTakM0lmlm0= -----END CERTIFICATE-----Generated at Tue Jan 27 04:58:34 2026 by rpki-client