This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/sZn_8RaubZPigyXGXO2IjK2MOTM.roa File: sZn_8RaubZPigyXGXO2IjK2MOTM.roa (raw, json) Hash identifier: bEBPF8tv/kM4E97KTe1cHoW9Ts80r9Q2pr3xoQ63Ogc= Subject key identifier: B1:99:FF:F1:16:AE:6D:93:E2:83:25:C6:5C:ED:88:8C:AD:8C:39:33 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E38A0DBE99C146C234249B98CCAA567 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/sZn_8RaubZPigyXGXO2IjK2MOTM.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 195.114.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a0:db:e9:9c:14:6c:23:42:49:b9:8c:ca:a5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b199fff116ae6d93e28325c65ced888cad8c3933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fb:55:74:fa:4c:65:61:25:d9:48:2b:ca:50: 21:66:47:30:6a:9b:82:7b:84:5c:b6:65:6c:32:f5: da:30:30:20:5a:a6:b6:41:e1:d8:cc:8e:2c:f1:57: 7e:52:f0:9d:d1:59:13:9e:09:c0:f5:4d:40:e5:b8: e8:ac:b8:8e:9d:7f:d1:8d:fc:52:51:ad:23:d2:30: 28:87:c6:ce:f7:dd:dd:ef:af:8c:ab:e2:e3:35:0f: c3:b0:e8:36:cf:0c:ef:56:f0:e8:62:fa:c9:2a:db: 76:15:ae:1d:57:29:5e:f7:9b:80:8a:a9:c5:25:5f: 98:f2:29:82:73:74:2b:1f:88:cc:86:86:2e:98:ec: 1e:51:f1:e6:65:0b:59:2f:16:a4:cf:d8:26:b9:1e: d1:0e:16:83:c7:0e:84:23:f0:53:29:e9:62:b7:4e: 95:16:d2:93:bf:8c:8b:de:f8:d2:2e:77:a3:2d:2c: ec:af:84:20:72:48:3a:bb:e0:9b:25:9e:07:8d:21: 3d:80:58:5b:62:68:0d:f2:39:1e:18:f9:78:33:d3: 9c:bb:50:ed:17:a2:da:dc:33:50:a4:51:a2:cb:77: 25:97:2a:51:84:5d:c0:4d:0d:6f:50:18:19:82:63: 77:ae:3c:b0:39:03:d0:de:79:29:90:e4:6b:63:cf: 42:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:99:FF:F1:16:AE:6D:93:E2:83:25:C6:5C:ED:88:8C:AD:8C:39:33 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/sZn_8RaubZPigyXGXO2IjK2MOTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.194.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:e1:b5:a3:41:5e:66:d0:0c:f5:e9:a7:01:fa:2d:11:91:8a: f2:41:2b:0e:f4:d9:0c:58:ec:22:b5:3d:87:fd:09:5a:82:7a: 2a:29:98:8e:ee:4d:3b:0d:dc:8c:e1:22:b4:fb:be:71:39:3b: 43:5c:d9:09:49:6f:40:cc:16:9d:80:ac:a7:aa:6e:19:d5:ed: 85:fd:23:cb:63:35:1a:cb:bc:28:80:3e:99:16:dd:5a:12:ef: e9:a6:ae:7a:dd:90:72:2c:43:74:32:66:0c:23:11:28:cb:3c: 9d:ae:cd:f9:b6:89:9d:55:0b:ef:fb:1f:ca:4a:37:24:7f:cc: 9a:e1:fd:c8:4d:1a:80:30:40:b1:95:49:73:ec:e5:21:8b:6f: 52:50:4d:11:1d:38:89:d7:c6:fe:49:7a:f9:3e:08:f8:cb:6c: df:16:5b:5b:5e:c9:7a:fd:91:4b:b1:83:37:64:c4:bd:29:38: 77:30:d7:84:a2:0b:e4:56:0a:3e:13:e4:ad:11:9d:0d:ae:59: 20:b5:c3:30:4c:48:23:ba:49:a9:56:a0:c5:f2:77:74:07:ef: 2d:1d:a8:d0:a0:14:3a:e6:8b:41:9a:72:ab:ec:e4:da:7b:76: 9b:87:a7:f8:e9:47:17:de:db:2a:fe:d9:29:47:c9:31:1b:5c: 49:8a:34:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKDb6ZwUbCNCSbmMyqVnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTk5ZmZmMTE2YWU2ZDkzZTI4MzI1YzY1Y2VkODg4Y2FkOGMzOTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvtVdPpMZWEl2UgrylAhZkcwapuC e4RctmVsMvXaMDAgWqa2QeHYzI4s8Vd+UvCd0VkTngnA9U1A5bjorLiOnX/RjfxS Ua0j0jAoh8bO993d76+Mq+LjNQ/DsOg2zwzvVvDoYvrJKtt2Fa4dVyle95uAiqnF JV+Y8imCc3QrH4jMhoYumOweUfHmZQtZLxakz9gmuR7RDhaDxw6EI/BTKelit06V FtKTv4yL3vjSLnejLSzsr4Qgckg6u+CbJZ4HjSE9gFhbYmgN8jkeGPl4M9Ocu1Dt F6La3DNQpFGiy3cllypRhF3ATQ1vUBgZgmN3rjywOQPQ3nkpkORrY89CdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGZ//EWrm2T4oMlxlztiIytjDkzMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvc1puXzhSYXViWlBpZ3lYR1hPMklqSzJNT1RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3LCMA0G CSqGSIb3DQEBCwUAA4IBAQAs4bWjQV5m0Az16acB+i0RkYryQSsO9NkMWOwitT2H /QlagnoqKZiO7k07DdyM4SK0+75xOTtDXNkJSW9AzBadgKynqm4Z1e2F/SPLYzUa y7wogD6ZFt1aEu/ppq563ZByLEN0MmYMIxEoyzydrs35tomdVQvv+x/KSjckf8ya 4f3ITRqAMECxlUlz7OUhi29SUE0RHTiJ18b+SXr5Pgj4y2zfFltbXsl6/ZFLsYM3 ZMS9KTh3MNeEogvkVgo+E+StEZ0NrlkgtcMwTEgjukmpVqDF8nd0B+8tHajQoBQ6 5otBmnKr7OTae3abh6f46UcX3tsq/tkpR8kxG1xJijQN -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:37 2026 by rpki-client