This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa File: ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa (raw, json) Hash identifier: F/KMJPmsP3cXeV6hR2o7i96s5m6Ldck+0oyUPjMxPwI= Subject key identifier: 65:D9:87:91:42:7D:3D:12:A1:9A:87:3C:8E:FE:CB:51:48:FF:59:DE Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E38A44A3C42F3DBA0AA69D58B185E03 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 195.114.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a4:4a:3c:42:f3:db:a0:aa:69:d5:8b:18:5e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65d98791427d3d12a19a873c8efecb5148ff59de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:2b:da:5e:31:c6:35:0b:f0:91:3f:c8:b7: 00:f0:da:51:01:1f:a6:6a:e9:d6:d1:d3:1b:fb:9e: 48:b9:59:69:98:28:6b:63:57:da:4c:45:cf:ec:bb: 96:ae:eb:0b:8d:d6:19:25:62:80:2d:78:47:62:bc: be:f5:f0:b4:0c:5a:08:52:8a:a3:ad:67:d8:9a:aa: 46:4d:bf:5b:bb:b9:f1:77:20:9f:85:76:6e:c4:7d: 5e:a9:8e:a1:71:5f:71:de:1b:d1:2b:1d:c0:41:c2: c0:5e:c5:70:ec:ec:84:b7:2e:8a:f6:cd:11:96:01: 27:8c:04:c1:ec:57:18:53:87:03:1e:39:fb:0a:03: 58:df:c3:a0:cb:f0:e0:c1:c4:11:81:46:93:3d:67: 27:3f:4c:6f:62:56:95:c9:06:8f:47:97:e7:e8:1d: 69:d9:c2:31:3a:b6:33:84:b0:90:fe:9a:33:27:02: 31:0c:ac:9d:7c:5c:e9:09:75:27:f5:2c:14:ff:45: cb:1e:12:46:b9:19:aa:17:e5:20:a4:2e:94:f6:f3: 43:c3:cd:60:f0:05:cb:ba:3c:a3:6e:44:a6:db:2c: 94:14:29:bb:7d:73:8f:01:77:b9:15:c6:50:10:f3: 06:f5:a2:ed:a8:e2:67:b8:88:fb:e5:a8:a6:c6:1f: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D9:87:91:42:7D:3D:12:A1:9A:87:3C:8E:FE:CB:51:48:FF:59:DE X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZdmHkUJ9PRKhmoc8jv7LUUj_Wd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.199.0/24 Signature Algorithm: sha256WithRSAEncryption b5:83:d0:9a:c3:96:b3:89:a2:6a:db:85:ac:17:ce:93:0f:73: 87:ee:ed:26:f4:b1:ee:5e:e4:0c:ad:15:96:fd:f5:15:c4:44: 0d:68:66:ac:25:5a:8d:d1:0f:1d:b6:65:cd:5e:15:6e:6a:02: 3e:43:0e:22:58:d6:de:c6:0c:eb:b1:9f:47:ca:af:3e:7a:ef: 65:23:21:e9:a5:d9:53:a3:cd:04:9e:2f:34:48:29:e6:f9:29: 49:63:9d:0e:3c:58:30:22:78:44:b5:f6:0c:57:c3:3d:20:3c: d8:0f:b8:a4:b9:a5:fa:f9:30:10:0f:f7:36:90:a0:a1:59:c2: 78:11:2f:f2:26:0f:b4:28:b0:71:00:fb:69:74:b7:f7:e6:ca: 99:24:f2:8b:b4:e6:b5:ad:8b:83:db:68:9c:cb:1a:fa:7d:7a: ef:2d:23:d4:f4:30:e0:16:4b:97:75:46:a6:d5:99:5c:f9:82: 8b:a7:b6:00:25:30:2f:fc:26:9a:dd:ed:57:42:6a:82:36:7f: ac:4a:fa:ce:6c:d9:fe:cd:05:03:62:cd:24:26:1b:9e:d2:1d: d2:f8:c3:14:43:45:5d:dd:53:20:bf:9d:c8:57:84:40:1c:08: 8b:37:2a:e0:25:e1:7b:0e:63:1f:17:94:f3:fb:7e:b8:3d:be: 7c:a1:12:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKRKPELz26CqadWLGF4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWQ5ODc5MTQyN2QzZDEyYTE5YTg3M2M4ZWZlY2I1MTQ4ZmY1OWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoYr2l4xxjUL8JE/yLcA8NpRAR+m aunW0dMb+55IuVlpmChrY1faTEXP7LuWrusLjdYZJWKALXhHYry+9fC0DFoIUoqj rWfYmqpGTb9bu7nxdyCfhXZuxH1eqY6hcV9x3hvRKx3AQcLAXsVw7OyEty6K9s0R lgEnjATB7FcYU4cDHjn7CgNY38Ogy/DgwcQRgUaTPWcnP0xvYlaVyQaPR5fn6B1p 2cIxOrYzhLCQ/pozJwIxDKydfFzpCXUn9SwU/0XLHhJGuRmqF+UgpC6U9vNDw81g 8AXLujyjbkSm2yyUFCm7fXOPAXe5FcZQEPMG9aLtqOJnuIj75aimxh+UaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGXZh5FCfT0SoZqHPI7+y1FI/1neMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvWmRtSGtVSjlQUktobW9jOGp2N0xVVWpfV2Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3LHMA0G CSqGSIb3DQEBCwUAA4IBAQC1g9Caw5aziaJq24WsF86TD3OH7u0m9LHuXuQMrRWW /fUVxEQNaGasJVqN0Q8dtmXNXhVuagI+Qw4iWNbexgzrsZ9Hyq8+eu9lIyHppdlT o80Eni80SCnm+SlJY50OPFgwInhEtfYMV8M9IDzYD7ikuaX6+TAQD/c2kKChWcJ4 ES/yJg+0KLBxAPtpdLf35sqZJPKLtOa1rYuD22icyxr6fXrvLSPU9DDgFkuXdUam 1Zlc+YKLp7YAJTAv/Caa3e1XQmqCNn+sSvrObNn+zQUDYs0kJhue0h3S+MMUQ0Vd 3VMgv53IV4RAHAiLNyrgJeF7DmMfF5Tz+364Pb58oRKz -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:44 2026 by rpki-client