This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/kZTziAa0DgXcVz_jjt8ocyWshEA.roa File: kZTziAa0DgXcVz_jjt8ocyWshEA.roa (raw, json) Hash identifier: k50z4fUJByZtjEgPsuwfKj4Iy/ObhXOJlHABsB/DwCs= Subject key identifier: 91:94:F3:88:06:B4:0E:05:DC:57:3F:E3:8E:DF:28:73:25:AC:84:40 Certificate issuer: /CN=edd482c2bee8460048d82902cec9867205222997 Certificate serial: 019B77C75EF30A908C8F0F282F0057428BB6 Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/kZTziAa0DgXcVz_jjt8ocyWshEA.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31052 IP address blocks: 193.0.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5e:f3:0a:90:8c:8f:0f:28:2f:00:57:42:8b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edd482c2bee8460048d82902cec9867205222997 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9194f38806b40e05dc573fe38edf287325ac8440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:0c:1c:3a:cb:94:9a:ed:23:e4:9d:1e:70: 09:69:a4:ca:f4:48:ae:ee:a9:5f:83:54:66:b8:88: cd:1f:a3:18:6f:14:a9:59:ce:2b:47:0c:e2:ca:6c: 40:64:29:05:40:ec:e0:c4:5d:69:e7:f3:d6:8a:08: de:b5:fa:09:6c:26:92:ef:08:9f:e2:23:54:f6:bd: 04:0f:d6:db:42:95:be:ff:d4:b5:15:d2:ad:e8:58: ee:27:9b:2f:66:f1:20:4c:b9:66:f6:11:1a:7f:92: 84:77:6e:a1:3a:e0:5a:72:be:a7:cb:bc:76:33:0c: 94:c9:d9:f8:81:e5:17:f8:38:d3:a5:c1:0d:bd:af: 87:9b:2a:08:47:a5:68:4d:ed:ed:3c:b1:d6:2d:14: 01:00:99:65:bb:91:de:82:1c:03:e8:bb:6a:92:a2: 47:62:4e:7e:07:4e:92:d3:24:c1:55:d4:63:b2:8e: d8:29:58:f7:fa:18:a6:0d:81:88:d0:b1:a0:cf:c7: c4:5d:77:2d:1c:c7:b3:84:7f:eb:5e:ca:05:21:f4: 60:68:d5:3f:a0:fc:74:eb:00:28:fb:af:87:b1:8b: 8c:b2:40:61:b5:80:59:f0:aa:a8:4c:bf:66:71:14: a8:7b:7e:df:c4:51:fb:43:cd:ca:fa:bc:6f:e7:e1: 56:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:94:F3:88:06:B4:0E:05:DC:57:3F:E3:8E:DF:28:73:25:AC:84:40 X509v3 Authority Key Identifier: keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/kZTziAa0DgXcVz_jjt8ocyWshEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.224.0/24 Signature Algorithm: sha256WithRSAEncryption 67:77:25:63:98:0d:d7:9d:02:a3:9b:f2:50:86:9f:0d:d0:7c: 96:dc:b1:eb:b3:03:35:7a:44:2f:9b:ec:29:56:f2:56:8e:1e: 53:90:fc:b4:1a:9c:ff:f2:1c:58:c9:e8:b1:0e:b7:44:02:35: 91:9e:66:0a:8b:48:cf:2e:79:05:2c:0a:81:f6:6c:0b:8f:9b: be:a9:52:bf:1f:99:69:8a:23:08:b2:8a:2f:dd:ed:1f:69:c5: bb:fc:f9:e4:19:a1:cc:8b:ef:5f:ba:f0:c5:b9:dc:b6:d4:a4: b5:b5:2d:7d:58:6b:b9:64:23:99:b2:62:66:d3:3d:be:68:f0: 4d:49:68:bd:34:9f:7e:1c:c7:b2:df:96:7f:ad:b3:7b:85:81: 7a:29:e6:00:6e:27:4a:20:4c:7d:dc:49:e3:18:8d:85:83:50: d8:37:c1:4a:7f:3a:de:4c:be:4d:9c:63:7d:05:45:c2:9f:41: f7:da:9f:89:3a:96:c5:70:b1:a0:76:73:69:0e:63:de:c7:ba: 9c:1b:16:55:a3:d1:05:21:c9:35:57:f6:42:ab:e8:64:e4:e3: eb:c9:c2:27:c1:95:41:64:c9:92:9d:7d:e0:d5:15:3d:46:c9: 80:b0:1a:8a:0d:8a:26:31:e8:19:37:72:7c:4a:43:17:58:de: 3f:63:9d:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x17zCpCMjw8oLwBXQou2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZDQ4MmMyYmVlODQ2MDA0OGQ4MjkwMmNlYzk4NjcyMDUy MjI5OTcwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTk0ZjM4ODA2YjQwZTA1ZGM1NzNmZTM4ZWRmMjg3MzI1YWM4NDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRIMHDrLlJrtI+SdHnAJaaTK9Eiu 7qlfg1RmuIjNH6MYbxSpWc4rRwziymxAZCkFQOzgxF1p5/PWigjetfoJbCaS7wif 4iNU9r0ED9bbQpW+/9S1FdKt6FjuJ5svZvEgTLlm9hEaf5KEd26hOuBacr6ny7x2 MwyUydn4geUX+DjTpcENva+HmyoIR6VoTe3tPLHWLRQBAJllu5HeghwD6LtqkqJH Yk5+B06S0yTBVdRjso7YKVj3+himDYGI0LGgz8fEXXctHMezhH/rXsoFIfRgaNU/ oPx06wAo+6+HsYuMskBhtYBZ8KqoTL9mcRSoe37fxFH7Q83K+rxv5+FW0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJGU84gGtA4F3Fc/447fKHMlrIRAMB8GA1UdIwQY MBaAFO3UgsK+6EYASNgpAs7JhnIFIimXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNWZkOTUtZDJmMC00Mjk1LTk2Y2Ut OWQ5MDkxYmVkOGQ3LzEva1pUemlBYTBEZ1hjVnpfamp0OG9jeVdzaEVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mNWZkOTUtZDJmMC00Mjk1LTk2Y2UtOWQ5MDkxYmVkOGQ3 LzEvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQDgMA0G CSqGSIb3DQEBCwUAA4IBAQBndyVjmA3XnQKjm/JQhp8N0HyW3LHrswM1ekQvm+wp VvJWjh5TkPy0Gpz/8hxYyeixDrdEAjWRnmYKi0jPLnkFLAqB9mwLj5u+qVK/H5lp iiMIsoov3e0facW7/PnkGaHMi+9fuvDFudy21KS1tS19WGu5ZCOZsmJm0z2+aPBN SWi9NJ9+HMey35Z/rbN7hYF6KeYAbidKIEx93EnjGI2Fg1DYN8FKfzreTL5NnGN9 BUXCn0H32p+JOpbFcLGgdnNpDmPex7qcGxZVo9EFIck1V/ZCq+hk5OPrycInwZVB ZMmSnX3g1RU9RsmAsBqKDYomMegZN3J8SkMXWN4/Y50W -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:07 2026 by rpki-client