This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/ZoA4ZVqC0ZLffn6V-FB9F10l7pU.roa File: ZoA4ZVqC0ZLffn6V-FB9F10l7pU.roa (raw, json) Hash identifier: aHUNwJ+YvxKRTJDaD0sMuoyAC4QGr+TPQfR1XTwxQGw= Subject key identifier: 66:80:38:65:5A:82:D1:92:DF:7E:7E:95:F8:50:7D:17:5D:25:EE:95 Certificate issuer: /CN=b2af3d658b494cb1715206c5cd76e792e7247ef7 Certificate serial: 019B7EA695DDB2AB62CB64271C7161FA4BF1 Authority key identifier: B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/ZoA4ZVqC0ZLffn6V-FB9F10l7pU.roa Signing time: Fri 02 Jan 2026 12:20:05 +0000 ROA not before: Fri 02 Jan 2026 12:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43392 IP address blocks: 193.186.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:95:dd:b2:ab:62:cb:64:27:1c:71:61:fa:4b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2af3d658b494cb1715206c5cd76e792e7247ef7 Validity Not Before: Jan 2 12:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=668038655a82d192df7e7e95f8507d175d25ee95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:2b:b9:f5:45:24:f7:c9:c3:77:8b:28:8e: 75:1b:a5:9b:f5:de:a3:65:f3:32:2b:cf:6b:49:78: 2a:be:9f:36:7e:1d:0c:53:76:06:23:09:d0:c6:c5: 1c:3f:7a:27:c5:40:b1:ad:99:dc:e5:92:a4:31:53: a2:12:2f:9f:f0:dd:e5:1e:cc:63:37:36:ab:a0:a8: b4:ae:e7:ab:d1:03:0b:93:f6:59:b3:6e:76:c3:a9: df:ca:bd:61:b4:27:85:7f:67:34:c5:ad:dc:ec:f9: 93:e0:bc:a3:75:0b:7f:43:81:17:6b:8c:3d:f4:55: 19:d1:eb:0c:2a:ef:d2:14:eb:7d:11:48:bd:b8:89: 7c:ea:52:e2:16:4a:be:c0:78:22:18:76:15:4e:47: bf:7a:69:c9:26:fe:b7:85:cf:28:13:64:84:74:f1: bc:30:5e:c9:a5:4f:93:dc:d3:c9:8a:a0:f9:99:b9: e6:a4:e0:1f:e9:cd:7e:f5:0a:18:0c:8e:59:a3:d1: 56:34:7d:4e:fa:a3:9b:5d:f7:01:68:cf:05:ca:17: da:84:4e:f4:1f:3a:44:74:8f:fe:3d:50:0f:20:f6: 73:92:fd:00:f4:d1:5a:a2:ea:7e:3f:42:47:e8:bb: fc:a5:61:58:22:88:86:da:22:40:89:ea:28:fc:cb: 35:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:80:38:65:5A:82:D1:92:DF:7E:7E:95:F8:50:7D:17:5D:25:EE:95 X509v3 Authority Key Identifier: keyid:B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/ZoA4ZVqC0ZLffn6V-FB9F10l7pU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.13.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:65:08:b4:33:da:ca:20:6f:4c:3b:0f:dd:c2:18:28:3a:21: 2f:d0:16:db:e3:d8:9a:4b:bb:ed:36:96:1b:51:8c:86:54:18: f6:c5:a3:1e:fb:b0:e8:e9:8b:fe:ac:9a:8f:33:28:58:70:15: fd:72:0d:d6:75:d1:37:98:9a:40:7a:7d:1f:df:b1:8d:9a:12: b0:e0:37:74:4c:fc:13:35:1b:46:b0:db:85:e7:71:05:02:1b: 0b:96:21:bf:5a:06:b2:44:45:30:5d:98:a4:06:29:69:07:a8: ff:af:00:01:88:b2:32:14:ed:2d:c3:86:1a:94:c4:cc:7e:54: 42:ce:4d:56:e1:d1:3a:9c:10:29:ef:02:51:ca:b1:74:2e:4d: 18:81:a2:70:81:c3:20:26:d6:9c:45:26:c6:39:de:57:f6:c0: a4:d0:8e:11:72:af:fc:c3:5e:73:cf:ca:dd:d2:2b:49:d5:aa: ad:5d:c2:2e:61:5c:ec:94:fd:e1:73:9b:20:58:6d:42:d2:8f: 6e:c8:23:64:c1:5e:fa:d7:e9:4e:44:70:6f:82:3d:b2:c3:47: 67:43:6b:1e:70:b1:a4:46:14:bf:10:23:d2:0e:bf:5f:1a:6b: e2:ce:75:eb:99:e6:32:69:9f:a8:ea:59:9a:26:cd:65:8b:e0: a3:10:e3:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppXdsqtiy2QnHHFh+kvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYWYzZDY1OGI0OTRjYjE3MTUyMDZjNWNkNzZlNzkyZTcy NDdlZjcwHhcNMjYwMTAyMTIyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjgwMzg2NTVhODJkMTkyZGY3ZTdlOTVmODUwN2QxNzVkMjVlZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTMrufVFJPfJw3eLKI51G6Wb9d6j ZfMyK89rSXgqvp82fh0MU3YGIwnQxsUcP3onxUCxrZnc5ZKkMVOiEi+f8N3lHsxj NzaroKi0ruer0QMLk/ZZs252w6nfyr1htCeFf2c0xa3c7PmT4LyjdQt/Q4EXa4w9 9FUZ0esMKu/SFOt9EUi9uIl86lLiFkq+wHgiGHYVTke/emnJJv63hc8oE2SEdPG8 MF7JpU+T3NPJiqD5mbnmpOAf6c1+9QoYDI5Zo9FWNH1O+qObXfcBaM8FyhfahE70 HzpEdI/+PVAPIPZzkv0A9NFaoup+P0JH6Lv8pWFYIoiG2iJAieoo/Ms1aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGaAOGVagtGS335+lfhQfRddJe6VMB8GA1UdIwQY MBaAFLKvPWWLSUyxcVIGxc1255LnJH73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQt YTJlZWJiMTY2ZmM4LzEvWm9BNFpWcUMwWkxmZm42Vi1GQjlGMTBsN3BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQtYTJlZWJiMTY2ZmM4 LzEvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwboNMA0G CSqGSIb3DQEBCwUAA4IBAQA+ZQi0M9rKIG9MOw/dwhgoOiEv0Bbb49iaS7vtNpYb UYyGVBj2xaMe+7Do6Yv+rJqPMyhYcBX9cg3WddE3mJpAen0f37GNmhKw4Dd0TPwT NRtGsNuF53EFAhsLliG/WgayREUwXZikBilpB6j/rwABiLIyFO0tw4YalMTMflRC zk1W4dE6nBAp7wJRyrF0Lk0YgaJwgcMgJtacRSbGOd5X9sCk0I4Rcq/8w15zz8rd 0itJ1aqtXcIuYVzslP3hc5sgWG1C0o9uyCNkwV761+lORHBvgj2yw0dnQ2secLGk RhS/ECPSDr9fGmviznXrmeYyaZ+o6lmaJs1li+CjEOPT -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:12 2026 by rpki-client