This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/zjWe9JXvYeiWK1DJ_0aHJR61K2o.roa File: zjWe9JXvYeiWK1DJ_0aHJR61K2o.roa (raw, json) Hash identifier: IrlQd0d+Fguubk4wbis1+hKRc8zFTkF2CICSp+JnthA= Subject key identifier: CE:35:9E:F4:95:EF:61:E8:96:2B:50:C9:FF:46:87:25:1E:B5:2B:6A Certificate issuer: /CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea Certificate serial: 019B797E8A2BDE3E81116D9E1AD19596D924 Authority key identifier: E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/zjWe9JXvYeiWK1DJ_0aHJR61K2o.roa Signing time: Thu 01 Jan 2026 12:18:14 +0000 ROA not before: Thu 01 Jan 2026 12:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21063 IP address blocks: 193.100.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8a:2b:de:3e:81:11:6d:9e:1a:d1:95:96:d9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea Validity Not Before: Jan 1 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce359ef495ef61e8962b50c9ff4687251eb52b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6a:f9:88:c7:f0:1e:09:03:9e:e8:25:aa:50: 95:e9:cf:d0:9e:be:e8:36:73:94:1a:8c:8a:cd:d9: ba:93:6b:eb:17:7d:c3:47:5d:b1:9a:92:a1:79:26: ef:2d:9a:51:41:65:41:2f:f2:93:8d:d0:d8:d3:55: e4:9c:de:87:53:37:c3:fc:f3:48:10:b9:e5:4e:17: 76:65:8d:3a:13:e4:bf:43:75:86:28:a9:07:65:a8: 90:d8:72:5d:4f:95:1d:4a:91:b3:f6:9f:cb:fd:26: 87:f8:74:59:9d:38:f4:66:c4:ff:80:ed:62:7b:df: 83:83:66:10:54:fb:65:ec:ca:6c:57:05:8f:1f:a8: 9b:d6:1f:84:c6:19:85:93:f5:57:9f:29:fd:2d:34: 33:d7:21:62:dd:66:a8:e9:ac:ee:eb:3c:a4:5a:71: ac:a4:19:28:02:e6:f7:17:53:ef:d3:0b:4c:3f:87: 95:74:8f:c7:ec:17:31:ee:66:bd:74:81:79:57:a8: 90:3e:f4:8a:ad:05:72:5b:22:ae:a8:35:63:c3:d7: 8a:ce:10:63:f7:ef:61:fa:c8:fc:8e:32:91:53:c6: fe:d8:b4:4f:d1:3b:cc:3e:ac:d8:61:5b:d0:33:97: c2:b8:be:53:7a:ec:10:10:e3:0c:5d:74:c8:5e:eb: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:35:9E:F4:95:EF:61:E8:96:2B:50:C9:FF:46:87:25:1E:B5:2B:6A X509v3 Authority Key Identifier: keyid:E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/zjWe9JXvYeiWK1DJ_0aHJR61K2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.100.124.0/23 Signature Algorithm: sha256WithRSAEncryption 11:89:67:35:7f:10:2b:e7:ba:c0:2e:f9:56:79:e5:24:b2:a8: e6:c7:5d:7c:27:fd:85:46:ed:37:8d:ed:c4:19:2d:41:6a:45: 32:c0:40:43:1e:96:93:24:13:5f:d9:0a:fc:57:c6:ed:f5:60: 28:80:4c:1d:19:7c:ee:7e:a3:4f:19:71:b9:6b:73:49:d7:1b: 8f:39:b0:a5:f8:0b:73:d4:a2:7b:06:91:74:f0:2f:2b:e7:47: 41:56:a1:b3:95:f8:12:16:f5:1a:f9:dc:b3:7a:ba:29:bd:34: 9d:50:1e:81:3b:10:68:56:2c:2f:d7:e6:37:9d:19:b6:d9:6d: aa:b8:7b:0a:05:1b:8d:c1:2c:ae:41:43:85:82:23:e9:bb:83: c5:74:13:a8:27:0f:5c:48:5e:08:22:9f:eb:2b:52:7f:96:0e: 00:5e:fc:ef:43:0e:f9:61:56:de:ab:12:e0:8f:7e:75:65:07: 99:63:53:07:11:db:d9:13:83:65:a7:85:0b:e8:43:79:ed:ae: 75:1f:05:4b:50:44:fd:80:c0:eb:73:b9:f9:5f:9b:16:d1:30: 30:1c:4f:83:d2:04:52:e6:05:a1:2d:6b:cc:05:48:d0:05:00: e7:08:cf:71:b8:54:58:7c:8f:39:53:f9:4d:e4:7b:16:98:5a: c3:16:75:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5foor3j6BEW2eGtGVltkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ODI5M2FjMTY3MGNmMmUzYTRiM2RhNmM3NzcxZjhiMWU4 NGNmZWEwHhcNMjYwMTAxMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTM1OWVmNDk1ZWY2MWU4OTYyYjUwYzlmZjQ2ODcyNTFlYjUyYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2r5iMfwHgkDnuglqlCV6c/Qnr7o NnOUGoyKzdm6k2vrF33DR12xmpKheSbvLZpRQWVBL/KTjdDY01XknN6HUzfD/PNI ELnlThd2ZY06E+S/Q3WGKKkHZaiQ2HJdT5UdSpGz9p/L/SaH+HRZnTj0ZsT/gO1i e9+Dg2YQVPtl7MpsVwWPH6ib1h+ExhmFk/VXnyn9LTQz1yFi3Wao6azu6zykWnGs pBkoAub3F1Pv0wtMP4eVdI/H7Bcx7ma9dIF5V6iQPvSKrQVyWyKuqDVjw9eKzhBj 9+9h+sj8jjKRU8b+2LRP0TvMPqzYYVvQM5fCuL5TeuwQEOMMXXTIXuu5pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM41nvSV72HolitQyf9GhyUetStqMB8GA1UdIwQY MBaAFOiCk6wWcM8uOks9psd3H4sehM/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEt NTExMGY2YjU3OWJmLzEvempXZTlKWHZZZWlXSzFESl8wYUhKUjYxSzJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEtNTExMGY2YjU3OWJm LzEvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwWR8MA0G CSqGSIb3DQEBCwUAA4IBAQARiWc1fxAr57rALvlWeeUksqjmx118J/2FRu03je3E GS1BakUywEBDHpaTJBNf2Qr8V8bt9WAogEwdGXzufqNPGXG5a3NJ1xuPObCl+Atz 1KJ7BpF08C8r50dBVqGzlfgSFvUa+dyzeropvTSdUB6BOxBoViwv1+Y3nRm22W2q uHsKBRuNwSyuQUOFgiPpu4PFdBOoJw9cSF4IIp/rK1J/lg4AXvzvQw75YVbeqxLg j351ZQeZY1MHEdvZE4Nlp4UL6EN57a51HwVLUET9gMDrc7n5X5sW0TAwHE+D0gRS 5gWhLWvMBUjQBQDnCM9xuFRYfI85U/lN5HsWmFrDFnUr -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:11 2026 by rpki-client