This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/_zlIXE7-h25_ow4E9RjKnNQhPj8.roa File: _zlIXE7-h25_ow4E9RjKnNQhPj8.roa (raw, json) Hash identifier: hpvg+CFOE1drWZR6fUE97UGt95Uv377gPrIZqvoM3kw= Subject key identifier: FF:39:48:5C:4E:FE:87:6E:7F:A3:0E:04:F5:18:CA:9C:D4:21:3E:3F Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce Certificate serial: 019B7E38E4EAF5E214FB14487726B9551264 Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/_zlIXE7-h25_ow4E9RjKnNQhPj8.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196876 IP address blocks: 193.105.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e4:ea:f5:e2:14:fb:14:48:77:26:b9:55:12:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff39485c4efe876e7fa30e04f518ca9cd4213e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:9c:45:2f:39:6b:9a:1f:3b:b5:14:fa:be: a1:f7:ec:f6:f4:4e:c8:08:dc:83:74:57:62:48:57: 72:3f:84:eb:66:c5:45:cc:51:00:f6:41:9c:8a:55: ed:65:94:9d:a6:fc:eb:13:e2:f2:c8:ee:e6:3f:9a: 2a:c8:d3:d3:14:33:29:f8:ea:c5:60:80:d4:a3:b7: e1:57:43:91:f9:bd:cc:b1:1f:29:2d:1c:97:c9:63: 69:24:d4:7e:51:5b:9a:f6:1e:63:14:10:35:36:d0: 20:ee:75:a1:b3:30:d6:e9:20:cc:ea:75:9f:62:85: 3a:64:b4:8d:29:32:62:06:e0:33:0b:ba:79:80:95: 16:fe:e9:59:1b:8e:49:2a:16:41:c4:c2:fc:02:f0: ee:33:4d:77:8e:20:87:80:dd:31:c4:2a:a2:c6:64: 3b:be:b2:e6:06:11:df:2f:8c:6a:9b:55:43:6f:29: 5b:5a:b3:8b:f5:bf:10:f9:62:e8:b1:ed:a0:9c:83: 43:4b:f8:28:13:fa:49:fe:e1:29:27:e5:6f:d9:ac: dd:39:9a:3d:3f:87:01:bc:c1:2a:21:dd:cb:b4:0a: 32:a0:3a:41:b9:e1:4e:4e:fc:7b:7c:a0:cb:45:80: 2e:43:72:7f:39:65:f3:17:97:26:e5:c0:64:ce:8e: f1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:39:48:5C:4E:FE:87:6E:7F:A3:0E:04:F5:18:CA:9C:D4:21:3E:3F X509v3 Authority Key Identifier: keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/_zlIXE7-h25_ow4E9RjKnNQhPj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.148.0/24 Signature Algorithm: sha256WithRSAEncryption 26:22:78:bb:52:6d:a8:86:2d:bb:af:41:da:03:ab:7e:25:ef: 93:36:07:ed:4a:ea:fd:ca:38:d5:fc:5f:12:f4:96:b4:02:ee: 6d:73:c2:f1:2c:55:28:3b:c5:52:c4:2d:b8:cf:fc:8a:87:9d: 68:fc:a9:fa:a8:cc:71:45:96:ab:cc:22:85:dd:89:5d:57:67: b8:59:ff:db:2d:97:bf:05:0c:a5:bc:05:3e:7d:4e:79:e2:39: 88:68:56:e2:68:5f:4f:03:ef:9c:93:6b:1f:59:9e:6b:b4:23: 8c:85:f4:45:c0:a2:03:5d:05:7b:d7:3b:4a:f5:2a:90:d2:17: 65:4b:15:c7:41:ea:ee:40:32:08:df:58:b5:01:98:51:44:84: a8:6c:17:fa:9e:b6:ad:9d:50:47:0d:82:e5:5a:0e:cf:49:81: 5d:ac:33:f7:46:b8:b2:c4:2a:f2:c8:29:cc:ef:92:46:da:09: 49:bf:ca:3a:f1:a3:e2:0a:12:64:6a:d5:a0:51:38:f1:8b:36: df:33:4a:41:d1:3d:5b:3e:0b:16:1b:09:9e:7c:c5:7c:10:d6: 99:d8:bd:01:a6:fd:6e:f6:d7:ca:db:d9:69:99:d2:89:23:8a: 13:37:e8:a9:70:0d:0e:91:37:2b:f9:fe:a1:47:59:f5:92:1e: ca:b9:1c:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOTq9eIU+xRIdya5VRJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2E0ZTVjNDMxZmY2Yzc5ZTRmNWJkMWI0NmIwNWY5ZjQ0 MTEwY2UwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjM5NDg1YzRlZmU4NzZlN2ZhMzBlMDRmNTE4Y2E5Y2Q0MjEzZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG+cRS85a5ofO7UU+r6h9+z29E7I CNyDdFdiSFdyP4TrZsVFzFEA9kGcilXtZZSdpvzrE+LyyO7mP5oqyNPTFDMp+OrF YIDUo7fhV0OR+b3MsR8pLRyXyWNpJNR+UVua9h5jFBA1NtAg7nWhszDW6SDM6nWf YoU6ZLSNKTJiBuAzC7p5gJUW/ulZG45JKhZBxML8AvDuM013jiCHgN0xxCqixmQ7 vrLmBhHfL4xqm1VDbylbWrOL9b8Q+WLose2gnINDS/goE/pJ/uEpJ+Vv2azdOZo9 P4cBvMEqId3LtAoyoDpBueFOTvx7fKDLRYAuQ3J/OWXzF5cm5cBkzo7x3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP85SFxO/oduf6MOBPUYypzUIT4/MB8GA1UdIwQY MBaAFKx6TlxDH/bHnk9b0bRrBfn0QRDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMt ZjRlZmQxNzdlOWQwLzEvX3psSVhFNy1oMjVfb3c0RTlSaktuTlFoUGo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMtZjRlZmQxNzdlOWQw LzEvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWmUMA0G CSqGSIb3DQEBCwUAA4IBAQAmIni7Um2ohi27r0HaA6t+Je+TNgftSur9yjjV/F8S 9Ja0Au5tc8LxLFUoO8VSxC24z/yKh51o/Kn6qMxxRZarzCKF3YldV2e4Wf/bLZe/ BQylvAU+fU554jmIaFbiaF9PA++ck2sfWZ5rtCOMhfRFwKIDXQV71ztK9SqQ0hdl SxXHQeruQDII31i1AZhRRISobBf6nratnVBHDYLlWg7PSYFdrDP3RriyxCryyCnM 75JG2glJv8o68aPiChJkatWgUTjxizbfM0pB0T1bPgsWGwmefMV8ENaZ2L0Bpv1u 9tfK29lpmdKJI4oTN+ipcA0OkTcr+f6hR1n1kh7KuRxr -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:56 2026 by rpki-client